diff --git a/script/update-openssl b/script/update-openssl
index 29f7aad62b..b7bb6d68e0 100755
--- a/script/update-openssl
+++ b/script/update-openssl
@@ -1,10 +1,26 @@
 #!/usr/bin/env ruby
 
-raise "Usage: #{$0} NEW_VERSION SHA" unless ARGV.size == 2
-new_version, sha = ARGV
+require 'open-uri'
+require 'digest/sha2'
+require 'tempfile'
+
+raise "Usage: #{$0} NEW_VERSION" unless ARGV.size == 1
+new_version = ARGV[0]
 
 major_minor = new_version.split('.')[0..1].join('.')
 
+url = "https://github.com/openssl/openssl/releases/download/openssl-#{new_version}/openssl-#{new_version}.tar.gz"
+sha = nil
+
+Tempfile.create(['openssl', '.tar.gz']) do |tmpfile|
+  URI.open(url) do |remote_file|
+    IO.copy_stream(remote_file, tmpfile)
+  end
+  tmpfile.rewind
+
+  sha = Digest::SHA256.file(tmpfile.path).hexdigest
+end
+
 Dir.glob('share/ruby-build/*') do |file|
   contents = File.read(file)
 
diff --git a/share/ruby-build/4.1-dev b/share/ruby-build/4.1-dev
index c0ce4856ea..8e4d915228 100644
--- a/share/ruby-build/4.1-dev
+++ b/share/ruby-build/4.1-dev
@@ -1,2 +1,2 @@
-install_package "openssl-3.0.18" "https://github.com/openssl/openssl/releases/download/openssl-3.0.18/openssl-3.0.18.tar.gz#d80c34f5cf902dccf1f1b5df5ebb86d0392e37049e5d73df1b3abae72e4ffe8b" openssl --if needs_openssl:1.0.2-3.x.x
+install_package "openssl-3.5.4" "https://github.com/openssl/openssl/releases/download/openssl-3.5.4/openssl-3.5.4.tar.gz#967311f84955316969bdb1d8d4b983718ef42338639c621ec4c34fddef355e99" openssl --if needs_openssl:1.0.2-3.x.x
 install_git "ruby-master" "https://github.com/ruby/ruby.git" "master" autoconf enable_shared standard_install_with_bundled_gems
diff --git a/share/ruby-build/ruby-dev b/share/ruby-build/ruby-dev
index c0ce4856ea..8e4d915228 100644
--- a/share/ruby-build/ruby-dev
+++ b/share/ruby-build/ruby-dev
@@ -1,2 +1,2 @@
-install_package "openssl-3.0.18" "https://github.com/openssl/openssl/releases/download/openssl-3.0.18/openssl-3.0.18.tar.gz#d80c34f5cf902dccf1f1b5df5ebb86d0392e37049e5d73df1b3abae72e4ffe8b" openssl --if needs_openssl:1.0.2-3.x.x
+install_package "openssl-3.5.4" "https://github.com/openssl/openssl/releases/download/openssl-3.5.4/openssl-3.5.4.tar.gz#967311f84955316969bdb1d8d4b983718ef42338639c621ec4c34fddef355e99" openssl --if needs_openssl:1.0.2-3.x.x
 install_git "ruby-master" "https://github.com/ruby/ruby.git" "master" autoconf enable_shared standard_install_with_bundled_gems