diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 33a5950c1483a2..fd75961a31c665 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -283,6 +283,7 @@ jobs:
           - { name: openssl, version: 3.4.4 }
           - { name: openssl, version: 3.5.5 }
           - { name: openssl, version: 3.6.1 }
+          - { name: openssl, version: 4.0.0 }
           ## AWS-LC
           - { name: aws-lc, version: 1.68.0 }
     env:
diff --git a/Misc/NEWS.d/next/Tests/2026-04-21-12-33-14.gh-issue-148600.vnTb3t.rst b/Misc/NEWS.d/next/Tests/2026-04-21-12-33-14.gh-issue-148600.vnTb3t.rst
new file mode 100644
index 00000000000000..38ca0add2f6d9b
--- /dev/null
+++ b/Misc/NEWS.d/next/Tests/2026-04-21-12-33-14.gh-issue-148600.vnTb3t.rst
@@ -0,0 +1 @@
+Add OpenSSL 4.0.0 support to test configurations
diff --git a/Modules/_ssl.c b/Modules/_ssl.c
index ea8a6d3fc1daca..428859a9aaacd9 100644
--- a/Modules/_ssl.c
+++ b/Modules/_ssl.c
@@ -171,11 +171,11 @@ static void _PySSLFixErrno(void) {
 #  define OPENSSL_NO_SSL3
 #  define OPENSSL_NO_TLS1
 #  define OPENSSL_NO_TLS1_1
-#  define OPENSSL_NO_TLS1_2
+// #  define OPENSSL_NO_TLS1_2
 #  define OPENSSL_NO_SSL3_METHOD
 #  define OPENSSL_NO_TLS1_METHOD
 #  define OPENSSL_NO_TLS1_1_METHOD
-#  define OPENSSL_NO_TLS1_2_METHOD
+// #  define OPENSSL_NO_TLS1_2_METHOD
 #endif
 
 /* OpenSSL API 1.1.0+ does not include version methods */
diff --git a/Tools/ssl/multissltests.py b/Tools/ssl/multissltests.py
index 48207e5330fa90..f6e354bb257c21 100755
--- a/Tools/ssl/multissltests.py
+++ b/Tools/ssl/multissltests.py
@@ -54,6 +54,7 @@
     "3.4.4",
     "3.5.5",
     "3.6.1",
+    "4.0.0",
     # See make_ssl_data.py for notes on adding a new version.
 ]