diff --git a/security/easy-rsa/Makefile b/security/easy-rsa/Makefile
index 33aedcf09fd4..e9599b1438cd 100644
--- a/security/easy-rsa/Makefile
+++ b/security/easy-rsa/Makefile
@@ -1,53 +1,56 @@
 PORTNAME=	easy-rsa
 DISTVERSION=	3.2.1
-PORTREVISION=	0
+PORTREVISION=	1
 PORTEPOCH=	1
 CATEGORIES=	security net-mgmt
 MASTER_SITES=	https://github.com/OpenVPN/easy-rsa/releases/download/v${DISTVERSION}/ \
-		LOCAL/mandree/
-DISTNAME=	EasyRSA-${DISTVERSION}
+		LOCAL/mandree/ \
+		https://github.com/OpenVPN/easy-rsa/raw/refs/tags/v${DISTVERSION}/dev/:lib
+DISTFILES=	${EXTRACT_ONLY} easyrsa-tools.lib:lib
+EXTRACT_ONLY=	EasyRSA-${DISTVERSION}${EXTRACT_SUFX}
 
 MAINTAINER=	mandree@FreeBSD.org
 COMMENT=	Small RSA key management package based on openssl
 WWW=		https://github.com/OpenVPN/easy-rsa
 
 LICENSE=	GPLv2
 
 USES=		tar:tgz
 
 PATCH_STRIP=	-p1
 
 NO_ARCH=	yes
 NO_BUILD=	yes
 
 SUB_FILES=	pkg-message
 
 WRKSRC=		${WRKDIR}/EasyRSA-${DISTVERSION}
 
 PORTDATA=	x509-types/
 _pd_files=	ChangeLog COPYING.md README.md README.quickstart.md mktemp.txt
 _pd_dirs=	doc/
 PORTDOCS=	${_pd_dirs} ${_pd_files}
 
 OPTIONS_DEFINE=	DOCS EXAMPLES
 
 do-install:
 		${MKDIR} ${STAGEDIR}${PREFIX}/bin
 		${MKDIR} ${STAGEDIR}${DATADIR}/x509-types/
 		${INSTALL_SCRIPT} ${WRKSRC}/easyrsa ${STAGEDIR}${PREFIX}/bin/
+		${INSTALL_SCRIPT} ${DISTDIR}/easyrsa-tools.lib ${STAGEDIR}${PREFIX}/bin/
 		${LN} -fh ${STAGEDIR}${PREFIX}/bin/easyrsa ${STAGEDIR}${PREFIX}/bin/easy-rsa
 		${INSTALL_DATA} ${WRKSRC}/vars.example ${STAGEDIR}${DATADIR}/
 		${INSTALL_DATA} ${WRKSRC}/openssl-easyrsa.cnf ${STAGEDIR}${DATADIR}/openssl-easyrsa.cnf.example
 		(cd ${WRKSRC}/x509-types/ && ${COPYTREE_SHARE} . ${STAGEDIR}${DATADIR}/x509-types/)
 
 do-install-DOCS-on:
 		${MKDIR} ${STAGEDIR}${DOCSDIR}
 .for i in ${_pd_files}
 		${INSTALL_DATA} ${WRKSRC}/${i} ${STAGEDIR}${DOCSDIR}
 .endfor
 .for i in ${_pd_dirs}
 		${MKDIR} ${STAGEDIR}${DOCSDIR}/${i}
 		(cd ${WRKSRC}/${i} && ${COPYTREE_SHARE} . ${STAGEDIR}${DOCSDIR}/${i})
 .endfor
 
 .include <bsd.port.mk>
diff --git a/security/easy-rsa/distinfo b/security/easy-rsa/distinfo
index ecde3c007010..498e541e5377 100644
--- a/security/easy-rsa/distinfo
+++ b/security/easy-rsa/distinfo
@@ -1,3 +1,5 @@
-TIMESTAMP = 1726777433
+TIMESTAMP = 1727863160
 SHA256 (EasyRSA-3.2.1.tgz) = ec0fdca46c07afef341e0e0eeb2bf0cfe74a11322b77163e5d764d28cb4eec89
 SIZE (EasyRSA-3.2.1.tgz) = 79917
+SHA256 (easyrsa-tools.lib) = eea232959d41f49330e032bf94a49b4b6b0574d75e199dd219096f1739077b3e
+SIZE (easyrsa-tools.lib) = 24329
diff --git a/security/easy-rsa/pkg-plist b/security/easy-rsa/pkg-plist
index ac7f3222a0b9..bf0c628cb0c2 100644
--- a/security/easy-rsa/pkg-plist
+++ b/security/easy-rsa/pkg-plist
@@ -1,4 +1,5 @@
 bin/easyrsa
+bin/easyrsa-tools.lib
 bin/easy-rsa
 @sample %%DATADIR%%/openssl-easyrsa.cnf.example %%DATADIR%%/openssl-easyrsa.cnf
 %%DATADIR%%/vars.example