diff --git a/CHANGELOG.md b/CHANGELOG.md
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,7 @@
+# log-elasticsearch-0.13.0.2 (2025-06-26)
+* Switch back to `http-client-tls` by default since `HsOpenSSL` is based on a
+  deprecated `openssl` API (soon to be removed).
+
 # log-elasticsearch-0.13.0.1 (2023-01-31)
 * Add support for OpenSearch.
 
diff --git a/log-elasticsearch.cabal b/log-elasticsearch.cabal
--- a/log-elasticsearch.cabal
+++ b/log-elasticsearch.cabal
@@ -1,12 +1,13 @@
+cabal-version:       3.0
 name:                log-elasticsearch
-version:             0.13.0.1
+version:             0.13.0.2
 synopsis:            Structured logging solution (Elasticsearch back end)
 
 description:         Elasticsearch back end for the 'log' library suite.
                      Depends on 'log-base'.
 
 homepage:            https://github.com/scrive/log
-license:             BSD3
+license:             BSD-3-Clause
 license-file:        LICENSE
 author:              Scrive AB
 maintainer:          Andrzej Rybczak <andrzej@rybczak.net>,
@@ -16,17 +17,16 @@
 copyright:           Scrive AB
 category:            System
 build-type:          Simple
-cabal-version:       >=1.10
 extra-source-files:  CHANGELOG.md, README.md
-tested-with:         GHC ==8.8.4 || ==8.10.7 || ==9.0.2 || ==9.2.5 || ==9.4.4
+tested-with:         GHC == { 8.10.7, 9.0.2, 9.2.8, 9.4.8, 9.6.7, 9.8.4, 9.10.2, 9.12.2 }
 
-Source-repository head
-  Type:     git
-  Location: https://github.com/scrive/log.git
+source-repository head
+  type:     git
+  location: https://github.com/scrive/log.git
 
 flag openssl
-  Description:   Use http-client-openssl instead of http-client-tls
-  Default:       True
+  description:   Use http-client-openssl instead of http-client-tls
+  default:       False
 
 library
   exposed-modules:     Log.Backend.ElasticSearch
@@ -73,4 +73,4 @@
     cpp-options: -DOPENSSL
     build-depends: http-client-openssl >= 0.3.2
   else
-    build-depends: http-client-tls
+    build-depends: http-client-tls >= 0.3.6.3