diff --git a/net/libsrtp2/Makefile b/net/libsrtp2/Makefile
index 1e6279e9e68f..165e75562f22 100644
--- a/net/libsrtp2/Makefile
+++ b/net/libsrtp2/Makefile
@@ -1,35 +1,35 @@
 PORTNAME=	libsrtp
 DISTVERSIONPREFIX=	v
-DISTVERSION=	2.4.2
+DISTVERSION=	2.5.0
 CATEGORIES=	net
 PKGNAMESUFFIX=	2
 
 MAINTAINER=	tijl@FreeBSD.org
 COMMENT=	Secure RTP (SRTP) Reference Implementation
 WWW=		https://github.com/cisco/libsrtp
 
 LICENSE=	BSD3CLAUSE
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 USE_GITHUB=	yes
 GH_ACCOUNT=	cisco
 
 GNU_CONFIGURE=	yes
 CONFIGURE_ARGS=	--enable-openssl \
 		crypto_CFLAGS="-I${OPENSSLINC}" \
 		crypto_LIBS="${OPENSSLLIB}/libcrypto.so"
 USES=		cpe gmake pkgconfig ssl
 CPE_VENDOR=	cisco
 USE_LDCONFIG=	yes
 
 ALL_TARGET=	all shared_library
 TEST_TARGET=	runtest
 TEST_ENV=	LD_LIBRARY_PATH=${WRKSRC}
 
 post-patch:
 	@${REINPLACE_CMD} '/supported_cflags=.*-fPIC/d' ${WRKSRC}/configure
 
 post-install:
 	@${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/libsrtp2.so.1
 
 .include <bsd.port.mk>
diff --git a/net/libsrtp2/distinfo b/net/libsrtp2/distinfo
index 9923e5c59836..f14e8c49e761 100644
--- a/net/libsrtp2/distinfo
+++ b/net/libsrtp2/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1632244600
-SHA256 (cisco-libsrtp-v2.4.2_GH0.tar.gz) = 3b1bcb14ebda572b04b9bdf07574a449c84cb924905414e4d94e62837d22b628
-SIZE (cisco-libsrtp-v2.4.2_GH0.tar.gz) = 631393
+TIMESTAMP = 1675429915
+SHA256 (cisco-libsrtp-v2.5.0_GH0.tar.gz) = 8a43ef8e9ae2b665292591af62aa1a4ae41e468b6d98d8258f91478735da4e09
+SIZE (cisco-libsrtp-v2.5.0_GH0.tar.gz) = 638704
diff --git a/net/libsrtp2/files/patch-crypto_hash_hmac__ossl.c b/net/libsrtp2/files/patch-crypto_hash_hmac__ossl.c
deleted file mode 100644
index 248e6fda0403..000000000000
--- a/net/libsrtp2/files/patch-crypto_hash_hmac__ossl.c
+++ /dev/null
@@ -1,20 +0,0 @@
---- crypto/hash/hmac_ossl.c.orig	2022-10-17 11:30:42 UTC
-+++ crypto/hash/hmac_ossl.c
-@@ -80,7 +80,7 @@ static srtp_err_status_t srtp_hmac_alloc(srtp_auth_t *
- 
- /* OpenSSL 1.1.0 made HMAC_CTX an opaque structure, which must be allocated
-    using HMAC_CTX_new.  But this function doesn't exist in OpenSSL 1.0.x. */
--#if OPENSSL_VERSION_NUMBER < 0x10100000L || LIBRESSL_VERSION_NUMBER
-+#if OPENSSL_VERSION_NUMBER < 0x10100000L
-     {
-         /* allocate memory for auth and HMAC_CTX structures */
-         uint8_t *pointer;
-@@ -126,7 +126,7 @@ static srtp_err_status_t srtp_hmac_dealloc(srtp_auth_t
- 
-     hmac_ctx = (HMAC_CTX *)a->state;
- 
--#if OPENSSL_VERSION_NUMBER < 0x10100000L || LIBRESSL_VERSION_NUMBER
-+#if OPENSSL_VERSION_NUMBER < 0x10100000L
-     HMAC_CTX_cleanup(hmac_ctx);
- 
-     /* zeroize entire state*/
diff --git a/net/libsrtp2/files/patch-libsrtp2.pc.in b/net/libsrtp2/files/patch-libsrtp2.pc.in
deleted file mode 100644
index ca4395df712a..000000000000
--- a/net/libsrtp2/files/patch-libsrtp2.pc.in
+++ /dev/null
@@ -1,10 +0,0 @@
---- libsrtp2.pc.in.orig	2014-12-30 16:27:06 UTC
-+++ libsrtp2.pc.in
-@@ -7,5 +7,6 @@ Name: @PACKAGE_NAME@
- Version: @PACKAGE_VERSION@
- Description: Library for SRTP (Secure Realtime Transport Protocol)
- 
--Libs: -L${libdir} -lsrtp2 @LIBS@
-+Libs: -L${libdir} -lsrtp2
-+Libs.private: -lcrypto
- Cflags: -I${includedir}