diff --git a/security/libreswan/Makefile b/security/libreswan/Makefile
index aa19ad4e659f..b067d2261730 100644
--- a/security/libreswan/Makefile
+++ b/security/libreswan/Makefile
@@ -1,55 +1,55 @@
 PORTNAME=	libreswan
-DISTVERSION=	4.11
+DISTVERSION=	4.12
 CATEGORIES=	security
 MASTER_SITES=	https://download.libreswan.org/
 
 MAINTAINER=	yuri@FreeBSD.org
 COMMENT=	IPsec and IKE based firewall
 WWW=		https://libreswan.org/
 
 LICENSE=	GPLv2
 LICENSE_FILE=	${WRKSRC}/COPYING
 
 BUILD_DEPENDS=	gawk:lang/gawk \
 		${NONEXISTENT}:dns/unbound:patch \
 		xmlto:textproc/xmlto # build requires xmlto, but manpages aren't installed: https://github.com/libreswan/libreswan/issues/479
 LIB_DEPENDS=	libcurl.so:ftp/curl \
 		libevent.so:devel/libevent \
 		libldns.so:dns/ldns \
 		libnspr4.so:devel/nspr \
 		libnss3.so:security/nss \
 		libunbound.so:dns/unbound
 
 USES=		bison cpe gmake pkgconfig python
 
 UNBOUND_WRKSRC=	`${MAKE} -C ${PORTSDIR}/dns/unbound -V WRKSRC`
 
 CFLAGS+=	-I${WRKSRC}/include/unbound
 
 MAKE_ARGS=	PKG_BASE=${LOCALBASE} \
 		NSS_CFLAGS="`pkg-config --cflags nss`" NSS_LDFLAGS="`pkg-config --libs nss`" \
 		NSPR_LDFLAGS="`pkg-config --libs nspr`" \
 		CRYPT_LDFLAGS=-lcrypt \
 		USE_PTHREAD_SETSCHEDPRIO=false \
 		WERROR_CFLAGS=""  \
 		PYTHON_BINARY=${PYTHON_CMD}
 
 BINARY_ALIAS=	awk=gawk
 
 OPTIONS_DEFINE=	DOCS
 
 post-patch:
 	@${RM} ${WRKSRC}/include/unbound/unbound-event.h && ${LN} -s ${UNBOUND_WRKSRC}/libunbound/unbound-event.h ${WRKSRC}/include/unbound/unbound-event.h
 
 post-configure:
 	@cd ${WRKSRC}/mk/defaults && \
 		${RLN} netbsd.mk freebsd.mk
 
 post-install:
 .for f in \
 	_import_crl addconn algparse asn1check cavp dncheck ecdsasigkey enumcheck hunkcheck ipcheck \
 	jambufcheck keyidcheck pluto readwriteconf rsasigkey showhostkey showroute timecheck vendoridcheck whack
 	@${STRIP_CMD} ${STAGEDIR}${PREFIX}/libexec/ipsec/${f}
 .endfor
 
 .include <bsd.port.mk>
diff --git a/security/libreswan/distinfo b/security/libreswan/distinfo
index 414ef7d47d8a..00546289fa2a 100644
--- a/security/libreswan/distinfo
+++ b/security/libreswan/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1691024733
-SHA256 (libreswan-4.11.tar.gz) = 429a917fe4a55260f152cfb3188a587e5b12e94a14e240ac125319ff14b8c83d
-SIZE (libreswan-4.11.tar.gz) = 3711304
+TIMESTAMP = 1691558433
+SHA256 (libreswan-4.12.tar.gz) = ae85abe415f7becf4b6a2b9897e1712f27e5aac9c35dfbdddbcce0ad7dfd99f7
+SIZE (libreswan-4.12.tar.gz) = 3718440