diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5afde5e2..3630d339 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,12 @@
 ## [Unreleased]
 
 
+<a name="1.2.1"></a>
+## [1.2.1] - 2024-02-27
+### bug fixes
+- **aux/nginx:** support openresty 1.25.3 in FFI path [90b0a47](https://github.com/fffonion/lua-resty-openssl/commit/90b0a47df499b1def08a07a5183ebf6bad8c6095)
+
+
 <a name="1.2.0"></a>
 ## [1.2.0] - 2023-12-28
 ### bug fixes
@@ -482,8 +488,8 @@
 - **autogen:** generate tests for x509, csr and crl [1392428](https://github.com/fffonion/lua-resty-openssl/commit/1392428352164d2a1a6e0c03075ff65b55aecdee)
 - **objects:** add helper function for ASN1_OBJECT [d037706](https://github.com/fffonion/lua-resty-openssl/commit/d037706c11d716afe3616bdaf4658afc1763081d)
 - **pkey:** asymmetric encryption and decryption [6d60451](https://github.com/fffonion/lua-resty-openssl/commit/6d60451157edbf9cefb634f888dfa3e6d9be302f)
-- **x509:** add get_ocsp_url and get_crl_url [6141b6f](https://github.com/fffonion/lua-resty-openssl/commit/6141b6f5aed38706b477a71d8c4383bf55da7eee)
 - **x509:** getter/setters for extensions [243f40d](https://github.com/fffonion/lua-resty-openssl/commit/243f40d35562a516f404188a5c7eb8f5134d9b30)
+- **x509:** add get_ocsp_url and get_crl_url [6141b6f](https://github.com/fffonion/lua-resty-openssl/commit/6141b6f5aed38706b477a71d8c4383bf55da7eee)
 - **x509.altname:** support iterate and decode over the stack [083a201](https://github.com/fffonion/lua-resty-openssl/commit/083a201746e02d51f6c5c640ad9bf8c6730ebe0b)
 - **x509.crl:** add crl module [242f8cb](https://github.com/fffonion/lua-resty-openssl/commit/242f8cb45d6c2df5918f26540c92a430d42feb5d)
 - **x509.csr:** autogen some csr functions as well [9800e36](https://github.com/fffonion/lua-resty-openssl/commit/9800e36c2ff8a299b88f24091cc722940a8652bb)
@@ -571,7 +577,8 @@
 - **x509:** export pubkey [ede4f81](https://github.com/fffonion/lua-resty-openssl/commit/ede4f817cb0fe092ad6f9ab5d6ecdcde864a9fd8)
 
 
-[Unreleased]: https://github.com/fffonion/lua-resty-openssl/compare/1.2.0...HEAD
+[Unreleased]: https://github.com/fffonion/lua-resty-openssl/compare/1.2.1...HEAD
+[1.2.1]: https://github.com/fffonion/lua-resty-openssl/compare/1.2.0...1.2.1
 [1.2.0]: https://github.com/fffonion/lua-resty-openssl/compare/1.1.0...1.2.0
 [1.1.0]: https://github.com/fffonion/lua-resty-openssl/compare/1.0.2...1.1.0
 [1.0.2]: https://github.com/fffonion/lua-resty-openssl/compare/1.0.1...1.0.2
diff --git a/lib/resty/openssl.lua b/lib/resty/openssl.lua
index fba8ae6b..99748812 100644
--- a/lib/resty/openssl.lua
+++ b/lib/resty/openssl.lua
@@ -24,7 +24,7 @@ try_require_modules()
 
 
 local _M = {
-  _VERSION = '1.2.0',
+  _VERSION = '1.2.1',
 }
 
 function _M.load_modules()
diff --git a/lua-resty-openssl-1.2.0-1.rockspec b/lua-resty-openssl-1.2.1-1.rockspec
similarity index 99%
rename from lua-resty-openssl-1.2.0-1.rockspec
rename to lua-resty-openssl-1.2.1-1.rockspec
index ade507dd..37a67cea 100644
--- a/lua-resty-openssl-1.2.0-1.rockspec
+++ b/lua-resty-openssl-1.2.1-1.rockspec
@@ -1,8 +1,8 @@
 package = "lua-resty-openssl"
-version = "1.2.0-1"
+version = "1.2.1-1"
 source = {
    url = "git+https://github.com/fffonion/lua-resty-openssl.git",
-   tag = "1.2.0"
+   tag = "1.2.1"
 }
 description = {
    detailed = "FFI-based OpenSSL binding for LuaJIT.",