diff --git a/src/shared/ssl-util.c b/src/shared/ssl-util.c
index 226120c70e..4b7ab2ec29 100644
--- a/src/shared/ssl-util.c
+++ b/src/shared/ssl-util.c
@@ -40,8 +40,7 @@ int dlopen_libssl(int log_level) {
 
         LIBSSL_NOTE(SD_ELF_NOTE_DLOPEN_PRIORITY_SUGGESTED);
 
-        // FIXME: switch order to prefer libssl.so.4 in a future version once it has stabilized
-        FOREACH_STRING(soname, "libssl.so.3", "libssl.so.4") {
+        FOREACH_STRING(soname, "libssl.so.4", "libssl.so.3") {
                 r = dlopen_many_sym_or_warn(
                                 &libssl_dl,
                                 soname,
diff --git a/src/shared/ssl-util.h b/src/shared/ssl-util.h
index aa3b830866..77b5c049f9 100644
--- a/src/shared/ssl-util.h
+++ b/src/shared/ssl-util.h
@@ -12,7 +12,7 @@ int dlopen_libssl(int log_level);
         SD_ELF_NOTE_DLOPEN("libssl",                                    \
                            "Support for TLS",                           \
                            priority,                                    \
-                           "libssl.so.3", "libssl.so.4")
+                           "libssl.so.4", "libssl.so.3")
 
 #define DLOPEN_LIBSSL(log_level, priority)                              \
         ({                                                              \