diff --git a/security/libretls/Makefile b/security/libretls/Makefile
index bf0f873b2db2..3896a57d7601 100644
--- a/security/libretls/Makefile
+++ b/security/libretls/Makefile
@@ -1,17 +1,17 @@
 PORTNAME=	libretls
-PORTVERSION=	3.3.1p1
+PORTVERSION=	3.3.2
 CATEGORIES=	security devel
 MASTER_SITES=	https://causal.agency/libretls/
 
 MAINTAINER=	bapt@FreeBSD.org
 COMMENT=	TLS library designed to ease writing foolproof applications
 
 LICENSE=	ISCL
 
 USES=	libtool ssl pkgconfig
 INSTALL_TARGET=	install-strip
 GNU_CONFIGURE=	yes
 
 USE_LDCONFIG=	yes
 
 .include <bsd.port.mk>
diff --git a/security/libretls/distinfo b/security/libretls/distinfo
index 84e595566d93..2f87eb8eb36f 100644
--- a/security/libretls/distinfo
+++ b/security/libretls/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1616681474
-SHA256 (libretls-3.3.1p1.tar.gz) = 0efdbdb1394f1345abf3aef3871d9762d1754295fa0c2ebca59804afdf5afb6c
-SIZE (libretls-3.3.1p1.tar.gz) = 433028
+TIMESTAMP = 1619407795
+SHA256 (libretls-3.3.2.tar.gz) = 840e78062ce451149781e770484ade35363bfd9a60c505ef70ea16de0d3f973c
+SIZE (libretls-3.3.2.tar.gz) = 434212
diff --git a/security/libretls/pkg-plist b/security/libretls/pkg-plist
index 1330004caccf..bd937318aa3e 100644
--- a/security/libretls/pkg-plist
+++ b/security/libretls/pkg-plist
@@ -1,94 +1,94 @@
 include/tls.h
 lib/libtls.a
 lib/libtls.so
 lib/libtls.so.20
-lib/libtls.so.20.0.1
+lib/libtls.so.20.0.3
 libdata/pkgconfig/libtls.pc
 man/man3/tls_accept_cbs.3.gz
 man/man3/tls_accept_fds.3.gz
 man/man3/tls_accept_socket.3.gz
 man/man3/tls_client.3.gz
 man/man3/tls_close.3.gz
 man/man3/tls_config_add_keypair_file.3.gz
 man/man3/tls_config_add_keypair_mem.3.gz
 man/man3/tls_config_add_keypair_ocsp_file.3.gz
 man/man3/tls_config_add_keypair_ocsp_mem.3.gz
 man/man3/tls_config_add_ticket_key.3.gz
 man/man3/tls_config_clear_keys.3.gz
 man/man3/tls_config_error.3.gz
 man/man3/tls_config_free.3.gz
 man/man3/tls_config_insecure_noverifycert.3.gz
 man/man3/tls_config_insecure_noverifyname.3.gz
 man/man3/tls_config_insecure_noverifytime.3.gz
 man/man3/tls_config_new.3.gz
 man/man3/tls_config_ocsp_require_stapling.3.gz
 man/man3/tls_config_parse_protocols.3.gz
 man/man3/tls_config_prefer_ciphers_client.3.gz
 man/man3/tls_config_prefer_ciphers_server.3.gz
 man/man3/tls_config_set_alpn.3.gz
 man/man3/tls_config_set_ca_file.3.gz
 man/man3/tls_config_set_ca_mem.3.gz
 man/man3/tls_config_set_ca_path.3.gz
 man/man3/tls_config_set_cert_file.3.gz
 man/man3/tls_config_set_cert_mem.3.gz
 man/man3/tls_config_set_ciphers.3.gz
 man/man3/tls_config_set_crl_file.3.gz
 man/man3/tls_config_set_crl_mem.3.gz
 man/man3/tls_config_set_dheparams.3.gz
 man/man3/tls_config_set_ecdhecurves.3.gz
 man/man3/tls_config_set_key_file.3.gz
 man/man3/tls_config_set_key_mem.3.gz
 man/man3/tls_config_set_keypair_file.3.gz
 man/man3/tls_config_set_keypair_mem.3.gz
 man/man3/tls_config_set_keypair_ocsp_file.3.gz
 man/man3/tls_config_set_keypair_ocsp_mem.3.gz
 man/man3/tls_config_set_ocsp_staple_file.3.gz
 man/man3/tls_config_set_ocsp_staple_mem.3.gz
 man/man3/tls_config_set_protocols.3.gz
 man/man3/tls_config_set_session_fd.3.gz
 man/man3/tls_config_set_session_id.3.gz
 man/man3/tls_config_set_session_lifetime.3.gz
 man/man3/tls_config_set_verify_depth.3.gz
 man/man3/tls_config_verify.3.gz
 man/man3/tls_config_verify_client.3.gz
 man/man3/tls_config_verify_client_optional.3.gz
 man/man3/tls_configure.3.gz
 man/man3/tls_conn_alpn_selected.3.gz
 man/man3/tls_conn_cipher.3.gz
 man/man3/tls_conn_cipher_strength.3.gz
 man/man3/tls_conn_servername.3.gz
 man/man3/tls_conn_session_resumed.3.gz
 man/man3/tls_conn_version.3.gz
 man/man3/tls_connect.3.gz
 man/man3/tls_connect_cbs.3.gz
 man/man3/tls_connect_fds.3.gz
 man/man3/tls_connect_servername.3.gz
 man/man3/tls_connect_socket.3.gz
 man/man3/tls_default_ca_cert_file.3.gz
 man/man3/tls_error.3.gz
 man/man3/tls_free.3.gz
 man/man3/tls_handshake.3.gz
 man/man3/tls_init.3.gz
 man/man3/tls_load_file.3.gz
 man/man3/tls_ocsp_process_response.3.gz
 man/man3/tls_peer_cert_chain_pem.3.gz
 man/man3/tls_peer_cert_contains_name.3.gz
 man/man3/tls_peer_cert_hash.3.gz
 man/man3/tls_peer_cert_issuer.3.gz
 man/man3/tls_peer_cert_notafter.3.gz
 man/man3/tls_peer_cert_notbefore.3.gz
 man/man3/tls_peer_cert_provided.3.gz
 man/man3/tls_peer_cert_subject.3.gz
 man/man3/tls_peer_ocsp_cert_status.3.gz
 man/man3/tls_peer_ocsp_crl_reason.3.gz
 man/man3/tls_peer_ocsp_next_update.3.gz
 man/man3/tls_peer_ocsp_response_status.3.gz
 man/man3/tls_peer_ocsp_result.3.gz
 man/man3/tls_peer_ocsp_revocation_time.3.gz
 man/man3/tls_peer_ocsp_this_update.3.gz
 man/man3/tls_peer_ocsp_url.3.gz
 man/man3/tls_read.3.gz
 man/man3/tls_reset.3.gz
 man/man3/tls_server.3.gz
 man/man3/tls_unload_file.3.gz
 man/man3/tls_write.3.gz