diff --git a/tools/build-openssl.sh b/tools/build-openssl.sh
index 64c5ae1d3..56efea610 100755
--- a/tools/build-openssl.sh
+++ b/tools/build-openssl.sh
@@ -6,7 +6,7 @@
 
 # NOTE: Keep this updated to make sure we always build the latest
 #       version of OpenSSL in the 1.0 release train.
-OPENSSL_VERSION=1.0.2t
+OPENSSL_VERSION=1.0.2u
 
 PREFIX=$1
 if [[ -z $PREFIX ]]; then
@@ -23,7 +23,7 @@ if ! grep -q "^VERSION=${OPENSSL_VERSION}$" build-openssl/Makefile ; then
     rm -rf build-openssl
     mkdir -p build-openssl
     pushd build-openssl
-    curl -s -l https://www.openssl.org/source/openssl-${OPENSSL_VERSION}.tar.gz | \
+    curl -fL https://www.openssl.org/source/old/1.0.2/openssl-${OPENSSL_VERSION}.tar.gz | \
         tar -xz --strip-components=1 -f -
 else
     echo "Reusing existing build-openssl directory"
diff --git a/tools/install-interceptors.sh b/tools/install-interceptors.sh
index 5dca299a6..dac8f73d2 100755
--- a/tools/install-interceptors.sh
+++ b/tools/install-interceptors.sh
@@ -16,10 +16,10 @@ set -e
 pkgtype=$1
 
 # Confluent Platform release version
-CPVER=5.2
+CPVER=5.4
 
 # confluent-librdkafka-plugins version
-PLUGINVER=0.11.1
+PLUGINVER=v0.11.3
 
 # Stage directory for wheels
 stagedir=staging/libs