diff --git a/config/patches/openssl/openssl-3-0-11-enable-legacy-provider.patch b/config/patches/openssl/openssl-3-0-9-enable-legacy-provider.patch
similarity index 100%
rename from config/patches/openssl/openssl-3-0-11-enable-legacy-provider.patch
rename to config/patches/openssl/openssl-3-0-9-enable-legacy-provider.patch
diff --git a/config/software/openssl.rb b/config/software/openssl.rb
index 93f3b6552..f3f07ff50 100644
--- a/config/software/openssl.rb
+++ b/config/software/openssl.rb
@@ -167,9 +167,9 @@
     # We need those algorithms for the working of chef-workstation and other packages.
     # This patch will enable the legacy providers!
     if windows?
-      if version.start_with? "= 3.0.11"
+      if version.start_with? "= 3.0.9"
         configure_args << "enable-legacy"
-        patch source: "openssl-3-0-11-enable-legacy-provider.patch", env: patch_env
+        patch source: "openssl-3-0-9-enable-legacy-provider.patch", env: patch_env
       end
     else
       configure_args << "enable-legacy"
@@ -196,6 +196,8 @@
 
   if version.start_with?("1.0.2") && windows?
     patch source: "openssl-1.0.1j-windows-relocate-dll.patch", env: env
+  elsif version.start_with?("3.0.9") && windows?
+    patch source: "openssl-3-0-9-enable-legacy-provider.patch", env: env  
   end
 
   make "depend", env: env