diff --git a/0001-Do-not-intall-html-docs.patch b/0001-Do-not-intall-html-docs.patch
new file mode 100644
index 0000000000000000000000000000000000000000..e91bc36570091395307d0671441a1c72a666a91c
--- /dev/null
+++ b/0001-Do-not-intall-html-docs.patch
@@ -0,0 +1,26 @@
+From 6185ace1322451b4fffbaa6d4132b31493f357d7 Mon Sep 17 00:00:00 2001
+From: Bo Ren <rb01097748@alibaba-inc.com>
+Date: Tue, 3 Jun 2025 02:59:46 +0000
+Subject: [PATCH] Do not intall html docs
+
+Signed-off-by: Bo Ren <rb01097748@alibaba-inc.com>
+---
+ Configurations/unix-Makefile.tmpl | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/Configurations/unix-Makefile.tmpl b/Configurations/unix-Makefile.tmpl
+index 09303c4..2de0ca1 100644
+--- a/Configurations/unix-Makefile.tmpl
++++ b/Configurations/unix-Makefile.tmpl
+@@ -658,7 +658,7 @@ install_sw: install_dev install_engines install_modules install_runtime ## Insta
+ 
+ uninstall_sw: uninstall_runtime uninstall_modules uninstall_engines uninstall_dev ## Uninstall the software and libraries
+ 
+-install_docs: install_man_docs install_html_docs ## Install manpages and HTML documentation
++install_docs: install_man_docs ## Install manpages and HTML documentation
+ 
+ uninstall_docs: uninstall_man_docs uninstall_html_docs ## Uninstall manpages and HTML documentation
+ 	$(RM) -r "$(DESTDIR)$(DOCDIR)"
+-- 
+2.47.1
+
diff --git a/openssl-3.4.1.tar.gz b/openssl-3.4.1.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..a4ad91636a534c4cb142a36eaeb93e395f524ae7
Binary files /dev/null and b/openssl-3.4.1.tar.gz differ
diff --git a/openssl.spec b/openssl.spec
index 4845e1ab0e323647528810568e6b81d508ce8a5f..6e0d6ebe1b9b3d788d4b21be4824e40728f94239 100644
--- a/openssl.spec
+++ b/openssl.spec
@@ -1,5 +1,6 @@
-%define anolis_release 13
+%define anolis_release 1
 %global soversion 3
+%global check 0
 
 %define srpmhash() %{lua:
 local files = rpm.expand("%_specdir/openssl.spec")
@@ -19,10 +20,11 @@ print(string.sub(hash, 0, 16))
 %define __provides_exclude_from %{_libdir}/openssl
 
 Name:           openssl
-Version:        3.0.12
+Version:        3.4.1
 Release:        %{anolis_release}%{?dist}
 Epoch:          1
 Summary:        Utilities from the general purpose cryptography library with TLS implementation
+ExclusiveArch:  x86_64
 
 License:        ASL 2.0
 URL:            http://www.openssl.org/
@@ -113,6 +115,7 @@ Patch57: 1007-fix-CVE-2024-4741.patch
 Patch58: 1008-fix-CVE-2024-9143.patch
 
 Patch100: add-sw_64-support.patch
+Patch101: 0001-Do-not-intall-html-docs.patch
 
 BuildRequires:  gcc git coreutils perl-interpreter sed zlib-devel /usr/bin/cmp
 BuildRequires:  lksctp-tools-devel
@@ -172,7 +175,8 @@ BuildArch:      noarch
 Doc files for OpenSSL
 
 %prep
-%autosetup -S git
+%setup
+%patch101 -p1
 
 %build
 sslarch=%{_os}-%{_target_cpu}
@@ -197,7 +201,6 @@ export HASHBANGPERL=/usr/bin/perl
         %ifarch riscv64
         --libdir=%{_lib} \
         %endif
-        --system-ciphers-file=%{_sysconfdir}/crypto-policies/back-ends/openssl.config \
         zlib enable-camellia enable-seed enable-rfc3779 enable-sctp \
         enable-cms enable-md2 enable-rc5 enable-ktls enable-fips\
         no-mdc2 no-ec2m enable-sm2 enable-sm4 enable-buildtest-c++\
@@ -210,6 +213,7 @@ for i in libcrypto.pc libssl.pc openssl.pc ; do
   sed -i '/^Libs.private:/{s/-L[^ ]* //;s/-Wl[^ ]* //}' $i
 done
 
+%if 0%{check}
 %check
 # Verify that what was compiled actually works.
 
@@ -237,6 +241,7 @@ objcopy --update-section .rodata1=providers/fips.so.hmac providers/fips.so provi
 mv providers/fips.so.mac providers/fips.so
 #run tests itself
 make test HARNESS_JOBS=8
+%endif
 
 %install
 install -d $RPM_BUILD_ROOT{%{_bindir},%{_includedir},%{_libdir},%{_mandir},%{_libdir}/openssl,%{_pkgdocdir}}
@@ -300,6 +305,9 @@ rm -f $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/{openssl.cnf.dist,ct_log_list.cnf.di
 %{_libdir}/*.so
 %{_mandir}/man3/*
 %{_libdir}/pkgconfig/*.pc
+%{_libdir}/cmake/OpenSSL/OpenSSLConfig.cmake
+%{_libdir}/cmake/OpenSSL/OpenSSLConfigVersion.cmake
+
 
 %files perl
 %{_bindir}/c_rehash
@@ -317,6 +325,9 @@ rm -f $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/{openssl.cnf.dist,ct_log_list.cnf.di
 %doc NEWS.md README.md
 
 %changelog
+* Tue Jun 03 2025 BoRen <rb01097748@alibaba-inc.com> - 1:3.4.1-1
+- update to 3.4.1
+
 * Fri May 23 2025 Ali <shenzhongli@inspur.com> - 1:3.0.12-13
 - fix CVE-2024-9143