diff --git a/security/pkcs11-helper/Makefile b/security/pkcs11-helper/Makefile
index d2953236cc7e..fdc209f4f026 100644
--- a/security/pkcs11-helper/Makefile
+++ b/security/pkcs11-helper/Makefile
@@ -1,50 +1,46 @@
 PORTNAME=	pkcs11-helper
-PORTVERSION=	1.29.0
-PORTREVISION=	3
+PORTVERSION=	1.31.0
 CATEGORIES=	security devel
 MASTER_SITES=	https://github.com/OpenSC/pkcs11-helper/releases/download/pkcs11-helper-${PORTVERSION}/
 
-PATCH_SITES=	https://github.com/OpenSC/pkcs11-helper/commit/
-PATCHFILES=	98b16208d5c7d27e1f15835f3d4961349f425351.diff:-p1
-
 MAINTAINER=	ale@FreeBSD.org
 COMMENT=	Helper library for multiple PKCS\#11 providers
 WWW=		https://github.com/OpenSC/pkcs11-helper
 
 LICENSE=	BSD3CLAUSE GPLv2
 LICENSE_COMB=	dual
 LICENSE_FILE=	${WRKSRC}/COPYING
 LICENSE_FILE_BSD3CLAUSE=${WRKSRC}/COPYING.BSD
 LICENSE_FILE_GPLv2=	${WRKSRC}/COPYING.GPL
 
 GNU_CONFIGURE=	yes
 USES=		libtool:keepla pathfix pkgconfig tar:bzip2 ssl
 USE_LDCONFIG=	yes
 
 CONFIGURE_ENV=	OPENSSL_CFLAGS="-I${OPENSSLINC}" \
 		OPENSSL_LIBS="-L${OPENSSLLIB} -lcrypto"
 
 CONFIGURE_ARGS=	--disable-crypto-engine-gnutls \
 		--disable-crypto-engine-nss \
 		--disable-crypto-engine-polarssl \
 		--disable-crypto-engine-mbedtls \
 		--disable-crypto-engine-cryptoapi
 
 GNU_CONFIGURE_MANPREFIX=	${PREFIX}/share
 
 INSTALL_TARGET=	install-strip
 
 OPTIONS_DEFINE=	DOCS DOXYGEN
 
 DOXYGEN_CONFIGURE_ENABLE=	doc
 DOXYGEN_BUILD_DEPENDS=	doxygen:devel/doxygen
 DOXYGEN_USES=		gmake
 DOXYGEN_IMPLIES=	DOCS
 
 PORTDOCS=	*
 
 post-patch:
 	@${REINPLACE_CMD} 's|[(]libdir[)]/pkgconfig|(prefix)/libdata/pkgconfig|' \
 		${WRKSRC}/configure
 
 .include <bsd.port.mk>
diff --git a/security/pkcs11-helper/distinfo b/security/pkcs11-helper/distinfo
index 7e77191c3abd..d135b537b86d 100644
--- a/security/pkcs11-helper/distinfo
+++ b/security/pkcs11-helper/distinfo
@@ -1,5 +1,3 @@
-TIMESTAMP = 1706083226
-SHA256 (pkcs11-helper-1.29.0.tar.bz2) = 996846a3c8395e03d8c0515111dc84d82e6e3648d44ba28cb2dbbbca2d4db7d6
-SIZE (pkcs11-helper-1.29.0.tar.bz2) = 422549
-SHA256 (98b16208d5c7d27e1f15835f3d4961349f425351.diff) = f650a1869658f0018e90177ef45348e22f1c8bff3b41fc84c68d5396736c3681
-SIZE (98b16208d5c7d27e1f15835f3d4961349f425351.diff) = 955
+TIMESTAMP = 1762856051
+SHA256 (pkcs11-helper-1.31.0.tar.bz2) = 46f0067bccd7be2c28f88b8bca775172b9e52fb6fc1280b44ca8bb831433fef9
+SIZE (pkcs11-helper-1.31.0.tar.bz2) = 424487
diff --git a/security/pkcs11-helper/files/patch-lib_pkcs11h-openssl.c b/security/pkcs11-helper/files/patch-lib_pkcs11h-openssl.c
deleted file mode 100644
index 99db16701bc0..000000000000
--- a/security/pkcs11-helper/files/patch-lib_pkcs11h-openssl.c
+++ /dev/null
@@ -1,49 +0,0 @@
---- lib/pkcs11h-openssl.c.orig	2022-04-07 17:01:01 UTC
-+++ lib/pkcs11h-openssl.c
-@@ -235,9 +235,13 @@ DSA_meth_free (DSA_METHOD *meth)
- static int
- DSA_meth_set1_name (DSA_METHOD *meth, const char *name)
- {
-+#if (defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER >= 0x30500000L)
-+	return 0;
-+#else
- 	CK_RV rv;
- 	rv = _pkcs11h_mem_strdup ((void *)&meth->name, name);
- 	return rv == CKR_OK ? 1 : 0;
-+#endif
- }
- #endif
- 
-@@ -330,7 +334,7 @@ static struct {
- #endif
- } __openssl_methods;
- 
--#if OPENSSL_VERSION_NUMBER < 0x10100001L
-+#if OPENSSL_VERSION_NUMBER < 0x10100001L || defined(LIBRESSL_VERSION_NUMBER)
- static
- int
- __pkcs11h_openssl_ex_data_dup (
-@@ -341,12 +345,22 @@ __pkcs11h_openssl_ex_data_dup (
- 	long argl,
- 	void *argp
- ) {
--#else
-+#elif OPENSSL_VERSION_NUMBER < 0x30000000L
- int
- __pkcs11h_openssl_ex_data_dup (
- 	CRYPTO_EX_DATA *to,
- 	const CRYPTO_EX_DATA *from,
- 	void *from_d,
-+	int idx,
-+	long argl,
-+	void *argp
-+) {
-+#else
-+int
-+__pkcs11h_openssl_ex_data_dup (
-+	CRYPTO_EX_DATA *to,
-+	const CRYPTO_EX_DATA *from,
-+	void **from_d,
- 	int idx,
- 	long argl,
- 	void *argp