diff --git a/security/s2n-tls/Makefile b/security/s2n-tls/Makefile
index 01183437148a..047057b8c9c8 100644
--- a/security/s2n-tls/Makefile
+++ b/security/s2n-tls/Makefile
@@ -1,52 +1,51 @@
 PORTNAME=	s2n-tls
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.3.26
-PORTREVISION=	1
+DISTVERSION=	1.3.27
 PORTEPOCH=	1
 CATEGORIES=	security
 
 PATCH_SITES=	https://github.com/aws/s2n-tls/pull/3586/commits/
 PATCHFILES=	d3eb1b478af7d86840f1e4e0150d34b46ddfed16.patch:-p1 # fix s2n_cipher_suites test, https://github.com/aws/s2n-tls/issues/3489
 
 MAINTAINER=	eduardo@FreeBSD.org
 COMMENT=	C99 implementation of the TLS/SSL protocols
 WWW=		https://github.com/aws/s2n-tls
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 USES=		cmake:testing ssl
 
 USE_GITHUB=	yes
 GH_ACCOUNT=	aws
 
 USE_LDCONFIG=	yes
 CMAKE_OFF=	BUILD_TESTING
 CMAKE_ON=	BUILD_SHARED_LIBS
 
 SUB_FILES=	pkg-message
 
 OPTIONS_DEFINE=	DOCS EXAMPLES LTO
 OPTIONS_DEFINE_amd64=	ASM
 OPTIONS_DEFAULT=	LTO
 
 ASM_DESC=	Enable PQ crypto assembly (reqs AVX2 and BMI2 support)
 
 ASM_CMAKE_OFF=	-DS2N_NO_PQ_ASM=1
 LTO_CMAKE_BOOL=	S2N_LTO
 
 .include <bsd.port.options.mk>
 
 .if ${ARCH} != aarch64 && ${ARCH} != amd64 && ${ARCH} != arm && ${ARCH} != armv6 && ${ARCH} != armv7 && ${ARCH} != i386
 CMAKE_ON+=	S2N_NO_PQ
 .endif
 
 post-install:
 	@${MKDIR} ${STAGEDIR}${DOCSDIR}
 	${CP} -r ${WRKSRC}/docs/* ${STAGEDIR}${DOCSDIR}
 	@${MKDIR} ${STAGEDIR}${EXAMPLESDIR}
 	${INSTALL_DATA} ${WRKSRC}/bin/*.c ${STAGEDIR}${EXAMPLESDIR}
 
 # testunit fails: https://github.com/aws/s2n-tls/issues/3489
 
 .include <bsd.port.mk>
diff --git a/security/s2n-tls/distinfo b/security/s2n-tls/distinfo
index 29567a0b611b..6d95cddcc543 100644
--- a/security/s2n-tls/distinfo
+++ b/security/s2n-tls/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1667386938
-SHA256 (aws-s2n-tls-v1.3.26_GH0.tar.gz) = 62e1f40bc4fa96ce838c9833a2068844ae7f7b288cf96766d6b9939f06c967d8
-SIZE (aws-s2n-tls-v1.3.26_GH0.tar.gz) = 4494933
+TIMESTAMP = 1667820544
+SHA256 (aws-s2n-tls-v1.3.27_GH0.tar.gz) = 58dde9979867a3209a19098ffcd748a144b2462ec81edca5baf864313ff4f589
+SIZE (aws-s2n-tls-v1.3.27_GH0.tar.gz) = 4512547
 SHA256 (d3eb1b478af7d86840f1e4e0150d34b46ddfed16.patch) = 589cd6e7aecd728321c5b4ce2fffc8764ab5b7215c10ac21281433146e375bb2
 SIZE (d3eb1b478af7d86840f1e4e0150d34b46ddfed16.patch) = 823
diff --git a/security/s2n-tls/pkg-plist b/security/s2n-tls/pkg-plist
index 22f2bda08b76..67c221d0b36f 100644
--- a/security/s2n-tls/pkg-plist
+++ b/security/s2n-tls/pkg-plist
@@ -1,32 +1,33 @@
 include/s2n.h
+include/s2n/unstable/npn.h
 include/s2n/unstable/renegotiate.h
 lib/libs2n.so
 lib/libs2n.so.1
 lib/libs2n.so.1.0.0
 lib/s2n/cmake/modules/Findcrypto.cmake
 lib/s2n/cmake/s2n-config.cmake
 lib/s2n/cmake/shared/s2n-targets-%%CMAKE_BUILD_TYPE%%.cmake
 lib/s2n/cmake/shared/s2n-targets.cmake
 %%PORTDOCS%%%%DOCSDIR%%/BINDINGS.md
 %%PORTDOCS%%%%DOCSDIR%%/DEVELOPMENT-GUIDE.md
 %%PORTDOCS%%%%DOCSDIR%%/READING-LIST.md
 %%PORTDOCS%%%%DOCSDIR%%/SAFETY-MACROS.md
 %%PORTDOCS%%%%DOCSDIR%%/STATE-MACHINE.md
 %%PORTDOCS%%%%DOCSDIR%%/USAGE-GUIDE.md
 %%PORTDOCS%%%%DOCSDIR%%/doxygen/Doxyfile
 %%PORTDOCS%%%%DOCSDIR%%/images/s2n-logo-final.pdf
 %%PORTDOCS%%%%DOCSDIR%%/images/s2n-logo-final.svg
 %%PORTDOCS%%%%DOCSDIR%%/images/s2n-logo-github.svg
 %%PORTDOCS%%%%DOCSDIR%%/images/s2n_lambda.png
 %%PORTDOCS%%%%DOCSDIR%%/images/s2n_logo_github.png
 %%PORTDOCS%%%%DOCSDIR%%/images/s2n_stuffer_layout.png
 %%PORTDOCS%%%%DOCSDIR%%/images/s2n_tls_layers.png
 %%PORTDOCS%%%%DOCSDIR%%/images/scram_example.png
 %%PORTDOCS%%%%DOCSDIR%%/images/scram_intro.png
 %%PORTDOCS%%%%DOCSDIR%%/images/tls12_state_machine.svg
 %%PORTDOCS%%%%DOCSDIR%%/images/tls13_state_machine.svg
 %%PORTEXAMPLES%%%%EXAMPLESDIR%%/common.c
 %%PORTEXAMPLES%%%%EXAMPLESDIR%%/echo.c
 %%PORTEXAMPLES%%%%EXAMPLESDIR%%/https.c
 %%PORTEXAMPLES%%%%EXAMPLESDIR%%/s2nc.c
 %%PORTEXAMPLES%%%%EXAMPLESDIR%%/s2nd.c