diff --git a/deps/Makefile b/deps/Makefile
index 1d39d8c50..7bd397ce7 100644
--- a/deps/Makefile
+++ b/deps/Makefile
@@ -20,8 +20,8 @@ endif
 libssl/openssl/libssl.a:
 #	cd libssl && rm -rf openssl-1.1.0h || true
 #	cd libssl && tar -zxf openssl-1.1.0h.tar.gz
-	cd libssl && rm -rf openssl-1.1.1b || true
-	cd libssl && tar -zxf openssl-1.1.1b.tar.gz
+	cd libssl && rm -rf openssl-1.1.0h || true
+	cd libssl && tar -zxf openssl-1.1.0h.tar.gz
 	cd libssl/openssl  && ./config no-ssl3
 	cd libssl/openssl && CC=${CC} CXX=${CXX} ${MAKE}
 libssl: libssl/openssl/libssl.a
diff --git a/deps/libssl/README.md b/deps/libssl/README.md
new file mode 100644
index 000000000..89034858b
--- /dev/null
+++ b/deps/libssl/README.md
@@ -0,0 +1,5 @@
+In ProxySQL 2.0.4 , libssl was upgrade from 1.1.0h to 1.1.1b .
+
+In ProxySQL 2.0.7 , libssl was downgraded back to 1.1.0h . See [bug 2244](https://github.com/sysown/proxysql/issues/2244) .
+
+Do not upgrade without extensive testing.
diff --git a/deps/libssl/openssl b/deps/libssl/openssl
index cf9e00c41..7d0689fa9 120000
--- a/deps/libssl/openssl
+++ b/deps/libssl/openssl
@@ -1 +1 @@
-openssl-1.1.1b
\ No newline at end of file
+openssl-1.1.0h
\ No newline at end of file
diff --git a/deps/libssl/openssl-1.1.0h.tar.gz b/deps/libssl/openssl-1.1.0h.tar.gz
new file mode 100644
index 000000000..8fb67f862
Binary files /dev/null and b/deps/libssl/openssl-1.1.0h.tar.gz differ
diff --git a/deps/libssl/openssl-1.1.1b.tar.gz b/deps/libssl/openssl-1.1.1b.tar.gz
deleted file mode 100644
index cdcb6cefa..000000000
Binary files a/deps/libssl/openssl-1.1.1b.tar.gz and /dev/null differ