diff --git a/dev-vcs/pkgcruft-git/Manifest b/dev-vcs/pkgcruft-git/Manifest
index 8cc40e0084ad4..3f6be2002d6ab 100644
--- a/dev-vcs/pkgcruft-git/Manifest
+++ b/dev-vcs/pkgcruft-git/Manifest
@@ -1 +1,2 @@
+DIST openssl-sys-0.9.117.crate 76045 BLAKE2B 074b44386a0a0833db961f8f8a249abdbacbc43a5428f8957e2284263206f4c2513c3eb7b38c96975f11ae75654656eb5d6d7d438c31bb5336835d9ed067e9b6 SHA512 89eeb0bfaa2c1ac3e0a8d268a46f8bfaa9942b0f840b0403faa15474961066559b3a1d24f672b445e1029301e6a99c7e2d84dec27528183523a409e9fb57b242
 DIST pkgcruft-git-0.0.5.tar.xz 38901676 BLAKE2B 3dab11b2638b1f14b9c99181a24eaac062e740b6ee69808b08bc7af67a021db9a832475de433a6dc6b5aceb3f39f1d524ab04a6cd0461327885467535d6c9461 SHA512 1511bff8658944792d4810fba203cb3408289dc814707d06d01e2ac0229083c67bbc02f5caec53fbd27589cdff68cc3efba4c7938b827770928a2745d67dfb78
diff --git a/dev-vcs/pkgcruft-git/pkgcruft-git-0.0.5-r2.ebuild b/dev-vcs/pkgcruft-git/pkgcruft-git-0.0.5-r2.ebuild
index 2717a98485400..af5d9260ee4e0 100644
--- a/dev-vcs/pkgcruft-git/pkgcruft-git-0.0.5-r2.ebuild
+++ b/dev-vcs/pkgcruft-git/pkgcruft-git-0.0.5-r2.ebuild
@@ -6,6 +6,9 @@ EAPI=8
 LLVM_COMPAT=( {19..21} )
 RUST_MIN_VER="1.90.0"
 
+# vendored openssl-sys-0.9.111 doesn't support openssl-4
+CRATES="openssl-sys@0.9.117"
+
 inherit cargo edo llvm-r2 multiprocessing
 
 DESCRIPTION="QA support for verifying git commits via pkgcruft"
@@ -23,7 +26,10 @@ else
 	# To get the value from the repo use the following command:
 	# sed -rn "/^PACKAGE_VERSION=/ s/^.*='(.*)'/\1/p" **/scallop/bash/configure
 	SCALLOP_VERSION="5.3.9.20251212"
-	SRC_URI="https://github.com/pkgcraft/pkgcraft/releases/download/${P}/${P}.tar.xz"
+	SRC_URI="
+		https://github.com/pkgcraft/pkgcraft/releases/download/${P}/${P}.tar.xz
+		${CARGO_CRATE_URIS}
+	"
 	KEYWORDS="amd64 arm64"
 fi
 
@@ -75,6 +81,19 @@ src_unpack() {
 	fi
 }
 
+src_prepare() {
+	default
+
+	local crate=openssl-sys-0.9.117
+	rm -r vendor/openssl-sys || die
+	mv "${ECARGO_VENDOR}"/${crate} vendor/openssl-sys || die
+	local sum=$(sha256sum "${DISTDIR}"/${crate}.crate | cut -d' ' -f1)
+	sed -i -e "/^name = \"openssl-sys\"$/,/^checksum/{" \
+		-e "s/^version = .*/version = \"0.9.117\"/" \
+		-e "s/^checksum = .*/checksum = \"${sum}\"/" \
+		-e "}" Cargo.lock || die
+}
+
 src_test() {
 	local -x NEXTEST_TEST_THREADS="$(makeopts_jobs)"
 	edo cargo nextest run $(usev !debug '--release') --color always --tests --no-fail-fast