diff --git a/Gemfile.lock.orig b/Gemfile.lock
index 2940d61..ee81009 100644
--- a/Gemfile.lock.orig
+++ b/Gemfile.lock
@@ -1093,8 +1093,7 @@ GEM
       validate_email
       validate_url
       webfinger (>= 1.0.1)
-    openssl (2.2.2)
-      ipaddr
+    openssl (3.1.0)
     openssl-signature_algorithm (1.3.0)
       openssl (> 2.0)
     opentracing (0.5.0)
@@ -1855,7 +1854,7 @@ DEPENDENCIES
   omniauth_crowd (~> 2.4.0)!
   omniauth_openid_connect (~> 0.6.1)
   openid_connect (= 1.3.0)
-  openssl (= 2.2.2)
+  openssl (~> 3.0)
   org-ruby (~> 0.9.12)
   pact (~> 1.63)
   parallel (~> 1.19)
@@ -1967,4 +1966,4 @@ DEPENDENCIES
   yajl-ruby (~> 1.4.3)
 
 BUNDLED WITH
-   2.4.12
+   2.3.26
diff --git a/Gemfile.orig b/Gemfile
index 5c2d39a..c0688f9 100644
--- a/Gemfile.orig
+++ b/Gemfile
@@ -17,9 +17,8 @@ gem 'rails', '~> 6.1.7.2'
 
 gem 'bootsnap', '~> 1.16.0', require: false
 
-# Pin openssl to match the version bundled with our supported Rubies.
-# See https://stdgems.org/openssl/#gem-version.
-gem 'openssl', '2.2.2'
+gem 'openssl', '~> 3.0'
+
 gem 'ipaddr', '~> 1.2.5'
 
 # Responders respond_to and respond_with