diff --git a/www/srt/Makefile b/www/srt/Makefile
index 8083e0c2a904..eb70bd66c73a 100644
--- a/www/srt/Makefile
+++ b/www/srt/Makefile
@@ -1,54 +1,53 @@
 PORTNAME=	srt
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.5.3
+DISTVERSION=	1.5.4
 CATEGORIES=	www
 
 MAINTAINER=	yuri@FreeBSD.org
 COMMENT=	Secure Reliable Transport (SRT) Protocol
 WWW=		https://www.srtalliance.org/
 
 LICENSE=	LGPL21
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 RUN_DEPENDS=	bash:shells/bash
 
-USES=		cmake:testing compiler:c++11-lang shebangfix
+USES=		cmake compiler:c++11-lang pathfix shebangfix
 
 USE_GITHUB=	yes
 GH_ACCOUNT=	Haivision
 
 SHEBANG_FILES=	scripts/srt-ffplay
 
-CMAKE_TESTING_ON=	ENABLE_TESTING ENABLE_UNITTESTS # 1 test fails when net.inet6.ip6.v6only=1: https://github.com/Haivision/srt/issues/2389
-# tests fail to compile, see https://github.com/Haivision/srt/issues/2796
+# CMAKE_TESTING_ON=	ENABLE_TESTING \
+#			ENABLE_UNITTESTS
+# 1 test fails when net.inet6.ip6.v6only=1
+# https://github.com/Haivision/srt/issues/2389
+# tests fail to compile,
+# https://github.com/Haivision/srt/issues/2796
+# https://github.com/Haivision/srt/issues/2758
 
-OPTIONS_DEFINE=			HEAVY_LOGGING
-OPTIONS_RADIO=			ENCRYPTION
-OPTIONS_RADIO_ENCRYPTION=	NO_ENCRYPTION OPENSSL GNUTLS MBEDTLS
-OPTIONS_DEFAULT=		OPENSSL
+CMAKE_OFF=		CMAKE_CXX_EXTENSIONS \
+			ENABLE_STATIC
+CMAKE_ON=		ENABLE_SHOW_PROJECT_CONFIG
 
-HEAVY_LOGGING_DESC=		Enable heavy logging (only for debugging)
-HEAVY_LOGGING_CMAKE_BOOL=	ENABLE_HEAVY_LOGGING # may also need srt_setloglevel(LOG_DEBUG) in/after srt_startup() call
-
-NO_ENCRYPTION_DESC=		No encryption
-NO_ENCRYPTION_CMAKE_ON=		-DENABLE_ENCRYPTION=OFF
+OPTIONS_DEFINE=		HEAVY_LOGGING
+OPTIONS_RADIO=		CRYPTO
+OPTIONS_RADIO_CRYPTO=	GNUTLS NONE OPENSSL
+OPTIONS_DEFAULT=	OPENSSL
 
-OPENSSL_CMAKE_ON=		-DUSE_ENCLIB=openssl
-OPENSSL_USES=			ssl
+HEAVY_LOGGING_DESC=	Enable heavy logging (only for debugging)
+NONE_DESC=		No encryption support
 
-GNUTLS_CMAKE_ON=		-DUSE_ENCLIB=gnutls
-GNUTLS_LIB_DEPENDS=		libgnutls.so:security/gnutls \
-				libnettle.so:security/nettle
+GNUTLS_LIB_DEPENDS=	libgnutls.so:security/gnutls \
+			libnettle.so:security/nettle
+GNUTLS_CMAKE_ON=	-DUSE_ENCLIB=gnutls
 
-MBEDTLS_CMAKE_ON=		-DUSE_ENCLIB=mbedtls
-MBEDTLS_LIB_DEPENDS=		libmbedtls.so:security/mbedtls
+HEAVY_LOGGING_CMAKE_BOOL=	ENABLE_HEAVY_LOGGING # may also need srt_setloglevel(LOG_DEBUG) in/after srt_startup() call
 
-post-install-OPENSSL-on:
-	# fix .pc files
-	@${REINPLACE_CMD} -i '' -e 's|Requires.private: openssl libcrypto|Requires.private:|; s|Libs.private:.*|& -lssl -lcrypto|' \
-		${STAGEDIR}${PREFIX}/libdata/pkgconfig/srt.pc \
-		${STAGEDIR}${PREFIX}/libdata/pkgconfig/haisrt.pc
+NONE_CMAKE_ON=		-DENABLE_ENCRYPTION=OFF
 
-# tests fail to compile, see https://github.com/Haivision/srt/issues/2758
+OPENSSL_USES=		ssl
+OPENSSL_CMAKE_ON=	-DUSE_ENCLIB=openssl
 
 .include <bsd.port.mk>
diff --git a/www/srt/distinfo b/www/srt/distinfo
index bfcf39c08391..3cb9003e9731 100644
--- a/www/srt/distinfo
+++ b/www/srt/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1694415329
-SHA256 (Haivision-srt-v1.5.3_GH0.tar.gz) = befaeb16f628c46387b898df02bc6fba84868e86a6f6d8294755375b9932d777
-SIZE (Haivision-srt-v1.5.3_GH0.tar.gz) = 1706632
+TIMESTAMP = 1731706792
+SHA256 (Haivision-srt-v1.5.4_GH0.tar.gz) = d0a8b600fe1b4eaaf6277530e3cfc8f15b8ce4035f16af4a5eb5d4b123640cdd
+SIZE (Haivision-srt-v1.5.4_GH0.tar.gz) = 1743040
diff --git a/www/srt/pkg-plist b/www/srt/pkg-plist
index 12c4b605b447..0792466e36b6 100644
--- a/www/srt/pkg-plist
+++ b/www/srt/pkg-plist
@@ -1,16 +1,15 @@
 bin/srt-ffplay
 bin/srt-file-transmit
 bin/srt-live-transmit
 bin/srt-tunnel
 include/srt/access_control.h
 include/srt/logging_api.h
 include/srt/platform_sys.h
 include/srt/srt.h
 include/srt/udt.h
 include/srt/version.h
-lib/libsrt.a
 lib/libsrt.so
 lib/libsrt.so.1.5
-lib/libsrt.so.1.5.3
+lib/libsrt.so.1.5.4
 libdata/pkgconfig/haisrt.pc
 libdata/pkgconfig/srt.pc