diff --git a/security/testssl.sh/Makefile b/security/testssl.sh/Makefile
index d5b5bb22de2d..06e3a54273b0 100644
--- a/security/testssl.sh/Makefile
+++ b/security/testssl.sh/Makefile
@@ -1,45 +1,45 @@
 PORTNAME=	testssl.sh
 DISTVERSIONPREFIX=	v
-DISTVERSION=	3.2.2
+DISTVERSION=	3.2.3
 CATEGORIES=	security
 
 MAINTAINER=	adamw@FreeBSD.org
 COMMENT=	Analyze and report TLS/SSL configuration/misconfiguration
 WWW=		https://github.com/testssl/testssl.sh
 
 LICENSE=	GPLv2
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 RUN_DEPENDS=	openssl-unsafe>=1.0.1:security/openssl-unsafe \
 		bash:shells/bash
 TEST_DEPENDS=	p5-JSON>=0:converters/p5-JSON
 
 USES=		perl5 shebangfix ssl
 USE_GITHUB=	yes
 GH_ACCOUNT=	testssl
 
 SHEBANG_FILES=	testssl.sh utils/*
 SUB_LIST+=	OPENSSLBASE="${OPENSSLBASE}"
 
 USE_PERL5=	test
 TEST_ENV=	TESTSSL_INSTALL_DIR=${WRKSRC}
 
 NO_ARCH=	yes
 NO_BUILD=	yes
 
 post-patch:
 	${REINPLACE_CMD} -e 's|%%PREFIX%%|${PREFIX}|; s|%%DATADIR%%|${DATADIR}|' \
 		${WRKSRC}/testssl.sh
 
 do-install:
 	${INSTALL_SCRIPT} ${WRKSRC}/testssl.sh ${STAGEDIR}${PREFIX}/bin
 	${INSTALL_MAN} ${WRKSRC}/doc/testssl.1 ${STAGEDIR}${PREFIX}/share/man/man1
 	cd ${WRKSRC} && ${COPYTREE_SHARE} "etc utils" ${STAGEDIR}${DATADIR}
 
 do-test:
 # Run the badssl.com test as a sanity check.  The full test suite
 # opens too many network connections and might take too long to
 # run.
 	cd ${WRKSRC} && ${SETENV} ${TEST_ENV} prove -v t/51_badssl.com.t
 
 .include <bsd.port.mk>
diff --git a/security/testssl.sh/distinfo b/security/testssl.sh/distinfo
index 9897e27450ef..fa974bac504c 100644
--- a/security/testssl.sh/distinfo
+++ b/security/testssl.sh/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1758229141
-SHA256 (testssl-testssl.sh-v3.2.2_GH0.tar.gz) = 7beafef432baecf76ef76f2ae022b5ada4ea7fad54e02ae7d192db85b42a496f
-SIZE (testssl-testssl.sh-v3.2.2_GH0.tar.gz) = 6985625
+TIMESTAMP = 1770909224
+SHA256 (testssl-testssl.sh-v3.2.3_GH0.tar.gz) = 1c4bb10185a67592164eb870c717b8bdd03f290c8d68f9a8c658335ff5ac8b91
+SIZE (testssl-testssl.sh-v3.2.3_GH0.tar.gz) = 6996856