diff --git a/net/mosquitto/Makefile b/net/mosquitto/Makefile
index 948a1b6cc1a5..37be21cf92a7 100644
--- a/net/mosquitto/Makefile
+++ b/net/mosquitto/Makefile
@@ -1,53 +1,54 @@
 PORTNAME=	mosquitto
 DISTVERSION=	2.0.22
+PORTREVISION=	1
 CATEGORIES=	net
 MASTER_SITES=	https://mosquitto.org/files/source/
 
 MAINTAINER=	leres@FreeBSD.org
 COMMENT=	Open source MQTT broker
 WWW=		https://mosquitto.org/
 
 LICENSE=	EPL
 
 BUILD_DEPENDS=	docbook-xsl>0:textproc/docbook-xsl \
 		xsltproc:textproc/libxslt
 LIB_DEPENDS=	libcjson.so:devel/libcjson \
 		libuuid.so:misc/libuuid
 RUN_DEPENDS=	${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
 
 USES=		cmake cpe ssl
 USE_RC_SUBR=	mosquitto
 USE_LDCONFIG=	yes
 CMAKE_ARGS=	-DCMAKE_LIBDATADIR:PATH="${PREFIX}/libdata"
 CPE_VENDOR=	eclipse
 
 USERS=		nobody
 
 PLIST_SUB=	DISTVERSION=${DISTVERSION}
 
 OPTIONS_DEFINE=		CARES WEBSOCKET
 OPTIONS_DEFAULT=	CARES WEBSOCKET
 
 CARES_LIB_DEPENDS=	libcares.so:dns/c-ares
 CARES_CMAKE_ON=		-DWITH_SRV:BOOL=ON
 
 WEBSOCKET_LIB_DEPENDS=	libwebsockets.so:net/libwebsockets
 WEBSOCKET_CMAKE_ON=	-DWITH_WEBSOCKETS:BOOL=ON
 
 post-patch:
 	@${REINPLACE_CMD} -e '/ldconfig/d' ${WRKSRC}/src/CMakeLists.txt \
 		${WRKSRC}/lib/CMakeLists.txt ${WRKSRC}/lib/cpp/CMakeLists.txt
 	@${REINPLACE_CMD} -e 's|%%PREFIX%%|${PREFIX}|g' ${WRKSRC}/CMakeLists.txt
 
 post-install:
 	${SED} -e '/cafile/s,/usr/local,${LOCALBASE},' \
 		${STAGEDIR}${ETCDIR}/mosquitto.conf > \
 		${STAGEDIR}${ETCDIR}/mosquitto.conf.sample
 	${MV} ${STAGEDIR}${ETCDIR}/pwfile.example \
 		${STAGEDIR}${ETCDIR}/pwfile.sample
 	${MV} ${STAGEDIR}${ETCDIR}/pskfile.example \
 		${STAGEDIR}${ETCDIR}/pskfile.sample
 	${MV} ${STAGEDIR}${ETCDIR}/aclfile.example \
 		${STAGEDIR}${ETCDIR}/aclfile.sample
 
 .include <bsd.port.mk>
diff --git a/net/mosquitto/files/patch-mosquitto.conf b/net/mosquitto/files/patch-mosquitto.conf
index b20b04014aa1..2bf7472095b9 100644
--- a/net/mosquitto/files/patch-mosquitto.conf
+++ b/net/mosquitto/files/patch-mosquitto.conf
@@ -1,29 +1,20 @@
 --- mosquitto.conf.orig	2025-07-11 21:32:27 UTC
 +++ mosquitto.conf
 @@ -167,7 +167,7 @@
  # This should be set to /var/run/mosquitto/mosquitto.pid if mosquitto is
  # being run automatically on boot with an init script and
  # start-stop-daemon or similar.
 -#pid_file
 +pid_file /var/run/mosquitto.pid
  
  # Set to true to queue messages with QoS 0 when a persistent client is
  # disconnected. These messages are included in the limit imposed by
 @@ -206,7 +206,7 @@
  # If run as a non-root user, this setting has no effect.
  # Note that on Windows this has no effect and so mosquitto should be started by
  # the user you wish it to run as.
 -#user mosquitto
 +user nobody
  
  # =================================================================
  # Listeners
-@@ -360,7 +360,7 @@
- # certificate files must have ".crt" as the file ending and you must run
- # "openssl rehash <path to capath>" each time you add/remove a certificate.
- # capath is not supported for websockets.
--#cafile
-+cafile /usr/local/share/certs/ca-root-nss.crt
- #capath
- 
-