diff --git a/security/libreswan/Makefile b/security/libreswan/Makefile
index 500e7dc53169..679851c0f29d 100644
--- a/security/libreswan/Makefile
+++ b/security/libreswan/Makefile
@@ -1,46 +1,46 @@
 PORTNAME=	libreswan
-DISTVERSION=	4.5
+DISTVERSION=	4.6
 CATEGORIES=	security
 MASTER_SITES=	https://download.libreswan.org/
 
 MAINTAINER=	yuri@FreeBSD.org
 COMMENT=	IPsec and IKE based firewall
 
 LICENSE=	GPLv2
 LICENSE_FILE=	${WRKSRC}/COPYING
 
 BUILD_DEPENDS=	gawk:lang/gawk \
 		xmlto:textproc/xmlto # build requires xmlto, but manpages aren't installed: https://github.com/libreswan/libreswan/issues/479
 LIB_DEPENDS=	libcurl.so:ftp/curl \
 		libevent.so:devel/libevent \
 		libldns.so:dns/ldns \
 		libnspr4.so:devel/nspr \
 		libnss3.so:security/nss \
 		libunbound.so:dns/unbound
 
 USES=		bison cpe gmake pkgconfig python
 
 CFLAGS+=	-I${WRKSRC}/include/unbound
 
 MAKE_ARGS=	PKG_BASE=${LOCALBASE} \
 		NSS_CFLAGS="`pkg-config --cflags nss`" NSS_LDFLAGS="`pkg-config --libs nss`" \
 		NSPR_LDFLAGS="`pkg-config --libs nspr`" \
 		CRYPT_LDFLAGS=-lcrypt \
 		USE_PTHREAD_SETSCHEDPRIO=false \
 		WERROR_CFLAGS=""  \
 		PYTHON_BINARY=${PYTHON_CMD}
 
 BINARY_ALIAS=	awk=gawk
 
 OPTIONS_DEFINE=	DOCS
 
 post-configure:
 	@cd ${WRKSRC}/mk/defaults && \
 		${RLN} netbsd.mk freebsd.mk
 
 post-install:
 .for f in _import_crl addconn algparse cavp dncheck ecdsasigkey enumcheck hunkcheck ipcheck jambufcheck keyidcheck pluto readwriteconf rsasigkey showhostkey timecheck whack
 	@${STRIP_CMD} ${STAGEDIR}${PREFIX}/libexec/ipsec/${f}
 .endfor
 
 .include <bsd.port.mk>
diff --git a/security/libreswan/distinfo b/security/libreswan/distinfo
index 638f64910308..8533eca1a4fc 100644
--- a/security/libreswan/distinfo
+++ b/security/libreswan/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1629563708
-SHA256 (libreswan-4.5.tar.gz) = 0703f51bdc6674d4ba66adb50854df9e0731bfa78a8983ebc2aa3adc55dd90a3
-SIZE (libreswan-4.5.tar.gz) = 3529355
+TIMESTAMP = 1642197311
+SHA256 (libreswan-4.6.tar.gz) = 26396f4826a682735772a4689a7ce9ae2d409d166a4b72836fc55d14bad356ff
+SIZE (libreswan-4.6.tar.gz) = 3579760
diff --git a/security/libreswan/pkg-plist b/security/libreswan/pkg-plist
index ec8655fa8b5f..104ab2f76f8c 100644
--- a/security/libreswan/pkg-plist
+++ b/security/libreswan/pkg-plist
@@ -1,75 +1,77 @@
 /etc/pam.d/pluto
 etc/ipsec.conf
 etc/ipsec.d/policies/block
 etc/ipsec.d/policies/clear
 etc/ipsec.d/policies/clear-or-private
 etc/ipsec.d/policies/portexcludes.conf
 etc/ipsec.d/policies/private
 etc/ipsec.d/policies/private-or-clear
 etc/ipsec.secrets
 etc/logrotate.d/libreswan
+etc/rc.d/pluto
 libexec/ipsec/_import_crl
 libexec/ipsec/_plutorun
 libexec/ipsec/_realsetup
 libexec/ipsec/_secretcensor
 libexec/ipsec/_stackmanager
 libexec/ipsec/_unbound-hook
 libexec/ipsec/_updown
 libexec/ipsec/_updown.bsdkame
 libexec/ipsec/addconn
 libexec/ipsec/algparse
 libexec/ipsec/auto
 libexec/ipsec/barf
 libexec/ipsec/cavp
 libexec/ipsec/dncheck
 libexec/ipsec/ecdsasigkey
 libexec/ipsec/enumcheck
 libexec/ipsec/hunkcheck
 libexec/ipsec/ipcheck
 libexec/ipsec/jambufcheck
 libexec/ipsec/keyidcheck
 libexec/ipsec/letsencrypt
 libexec/ipsec/look
 libexec/ipsec/newhostkey
 libexec/ipsec/pluto
 libexec/ipsec/readwriteconf
 libexec/ipsec/rsasigkey
 libexec/ipsec/setup
 libexec/ipsec/show
 libexec/ipsec/showhostkey
 libexec/ipsec/timecheck
 libexec/ipsec/verify
 libexec/ipsec/whack
 sbin/ipsec
 %%PORTDOCS%%%%DOCSDIR%%/ipsec.conf-sample
 %%PORTDOCS%%%%DOCSDIR%%/ipsec.secrets-sample
+share/examples/rc.d/pluto
 share/man/man5/ipsec.conf.5.gz
 share/man/man5/ipsec.secrets.5.gz
 share/man/man8/ipsec.8.gz
 share/man/man8/ipsec__import_crl.8.gz
 share/man/man8/ipsec__plutorun.8.gz
 share/man/man8/ipsec__realsetup.8.gz
 share/man/man8/ipsec__secretcensor.8.gz
 share/man/man8/ipsec__stackmanager.8.gz
 share/man/man8/ipsec__unbound-hook.8.gz
 share/man/man8/ipsec__updown.8.gz
 share/man/man8/ipsec__updown.bsdkame.8.gz
 share/man/man8/ipsec_addconn.8.gz
 share/man/man8/ipsec_auto.8.gz
 share/man/man8/ipsec_barf.8.gz
 share/man/man8/ipsec_checknss.8.gz
 share/man/man8/ipsec_ecdsasigkey.8.gz
 share/man/man8/ipsec_import.8.gz
 share/man/man8/ipsec_initnss.8.gz
 share/man/man8/ipsec_letsencrypt.8.gz
 share/man/man8/ipsec_look.8.gz
 share/man/man8/ipsec_newhostkey.8.gz
 share/man/man8/ipsec_pluto.8.gz
 share/man/man8/ipsec_readwriteconf.8.gz
 share/man/man8/ipsec_rsasigkey.8.gz
 share/man/man8/ipsec_setup.8.gz
 share/man/man8/ipsec_show.8.gz
 share/man/man8/ipsec_showhostkey.8.gz
 share/man/man8/ipsec_verify.8.gz
 share/man/man8/ipsec_whack.8.gz
 share/man/man8/pluto.8.gz