diff --git a/security/cfssl/Makefile b/security/cfssl/Makefile
index 53d5a189cb8b..543352fd62b3 100644
--- a/security/cfssl/Makefile
+++ b/security/cfssl/Makefile
@@ -1,54 +1,53 @@
 PORTNAME=	cfssl
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.6.1
-PORTREVISION=	5
+DISTVERSION=	1.6.2
 CATEGORIES=	security
 
 MAINTAINER=	yuri@FreeBSD.org
 COMMENT=	Cloudflare's PKI and TLS toolkit
 
 LICENSE=	BSD2CLAUSE
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 LIB_DEPENDS=	libltdl.so:devel/libltdl
 
 USES=		go:modules gmake
 
 GO_MODULE=	github.com/cloudflare/cfssl
 
 EXES=		cfssl cfssl-bundle cfssl-certinfo cfssl-newkey cfssl-scan cfssljson mkbundle multirootca
 
 PLIST_FILES=	${EXES:S/^/bin\//}
 
 CFSSL_EXTRA_TARGETS=	bin/goose
 PLIST_FILES+=	${CFSSL_EXTRA_TARGETS}
 USE_RC_SUBR=	${PORTNAME}
 USERS=	cfssl
 GROUPS=	cfssl
 # installs a file to the same path
 CONFLICTS=	goose
 
 pre-configure:
 	${REINPLACE_CMD} -e 's|%%DISTVERSION%%|${DISTVERSION}|g' ${WRKSRC}/cli/version/version.go
 
 # the project uses Makefile for build and installation
 do-build:
 	@cd ${WRKSRC} && ${SETENV} ${MAKE_ENV} ${GO_ENV} ${MAKE_CMD} ${MAKE_FLAGS} ${MAKEFILE} ${_MAKE_JOBS} all ${CFSSL_EXTRA_TARGETS}
 
 do-install:
 	# Makefile is used but the install target uses go install.
 	cd ${WRKSRC} && ${SETENV} ${MAKE_ENV} ${GO_ENV} GOBIN=${STAGEDIR}${PREFIX}/bin ${MAKE_CMD} ${MAKE_FLAGS} ${MAKEFILE} ${_MAKE_JOBS} install
 .for F in cfssl cfssl-certinfo multirootca
 	${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/${F}
 .endfor
 
 	${INSTALL} -d ${STAGEDIR}${DATADIR}
 .for D in certdb/sqlite certdb/pg certdb/mysql
 	cd ${WRKSRC} && ${COPYTREE_SHARE} ${D} ${STAGEDIR}${DATADIR}
 .endfor
 
 .for F in ${CFSSL_EXTRA_TARGETS}
 	${INSTALL_PROGRAM} ${WRKSRC}/${F} ${STAGEDIR}/${PREFIX}/${F}
 .endfor
 
 .include <bsd.port.mk>
diff --git a/security/cfssl/distinfo b/security/cfssl/distinfo
index 8b6b5f940a71..4943771a6293 100644
--- a/security/cfssl/distinfo
+++ b/security/cfssl/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1630812092
-SHA256 (go/security_cfssl/cfssl-v1.6.1/v1.6.1.mod) = a1ff14874ff60275deb254d52af60d83df15790c0fe9d04e8e08dd3f1d526cf2
-SIZE (go/security_cfssl/cfssl-v1.6.1/v1.6.1.mod) = 2828
-SHA256 (go/security_cfssl/cfssl-v1.6.1/v1.6.1.zip) = a7c3a29cd6af216f33ba76a48ffbbd54d288a1453ec94bd958265ede227aaa7b
-SIZE (go/security_cfssl/cfssl-v1.6.1/v1.6.1.zip) = 2112856
+TIMESTAMP = 1661706656
+SHA256 (go/security_cfssl/cfssl-v1.6.2/v1.6.2.mod) = 7fbf3189b2d138edebdbd230701db789c004976071e7d1e3bb98244c8c522bc8
+SIZE (go/security_cfssl/cfssl-v1.6.2/v1.6.2.mod) = 2678
+SHA256 (go/security_cfssl/cfssl-v1.6.2/v1.6.2.zip) = 2976a8e2c92ebfdc9bdebc54190fcfc57e54c276dad99919d29f45ea865700cd
+SIZE (go/security_cfssl/cfssl-v1.6.2/v1.6.2.zip) = 2111618