diff --git a/Doc/using/configure.rst b/Doc/using/configure.rst
index 88b5f35a796796..5b1676e504a628 100644
--- a/Doc/using/configure.rst
+++ b/Doc/using/configure.rst
@@ -95,8 +95,7 @@ Dependencies to build optional modules are:
      -
      - :mod:`curses`
    * - `OpenSSL <https://openssl-library.org/>`_
-     - | 3.0.18 recommended
-       | (1.1.1 minimum)
+     - [8]_
      - :mod:`ssl`, :mod:`hashlib` [6]_
    * - `SQLite <https://sqlite.org/>`_
      - 3.15.2
@@ -131,6 +130,14 @@ Dependencies to build optional modules are:
    See :option:`--with-builtin-hashlib-hashes` for *forcing* usage of OpenSSL.
 .. [7] See :option:`--with-zlib` for choosing the backend for the
    :mod:`zlib` module.
+.. [8] OpenSSL 1.1.1 is the minimum possible version to build against,
+   but the series is end-of-life and no longer receives public security
+   fixes.  Use the latest patch release of a currently supported LTS
+   release series (see the `OpenSSL Roadmap
+   <https://openssl-library.org/roadmap/index.html>`__), or the package
+   provided by your operating system if available.  Other libraries that
+   offer an API compatible with OpenSSL 1.1.1 or later may work, but are
+   not officially supported.
 
 Note that the table does not include all optional modules; in particular,
 platform-specific modules like :mod:`winreg` are not listed here.