diff --git a/security/testssl.sh/Makefile b/security/testssl.sh/Makefile
index 2f0e40310c75..b5932a038e79 100644
--- a/security/testssl.sh/Makefile
+++ b/security/testssl.sh/Makefile
@@ -1,44 +1,44 @@
 PORTNAME=	testssl.sh
 DISTVERSIONPREFIX=	v
-DISTVERSION=	3.0.7
+DISTVERSION=	3.0.8
 CATEGORIES=	security
 
 MAINTAINER=	adamw@FreeBSD.org
 COMMENT=	Analyze and report TLS/SSL configuration/misconfiguration
 WWW=		https://github.com/drwetter/testssl.sh
 
 LICENSE=	GPLv2
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 RUN_DEPENDS=	openssl-unsafe>=1.0.1:security/openssl-unsafe \
 		bash:shells/bash
 TEST_DEPENDS=	p5-JSON>=0:converters/p5-JSON
 
 USES=		perl5 shebangfix
 USE_GITHUB=	yes
 GH_ACCOUNT=	drwetter
 
 SHEBANG_FILES=	testssl.sh utils/*
 
 USE_PERL5=	test
 TEST_ENV=	TESTSSL_INSTALL_DIR=${WRKSRC}
 
 NO_ARCH=	yes
 NO_BUILD=	yes
 
 post-patch:
 	${REINPLACE_CMD} -e 's|%%PREFIX%%|${PREFIX}|; s|%%DATADIR%%|${DATADIR}|' \
 		${WRKSRC}/testssl.sh
 
 do-install:
 	${INSTALL_SCRIPT} ${WRKSRC}/testssl.sh ${STAGEDIR}${PREFIX}/bin
 	${INSTALL_MAN} ${WRKSRC}/doc/testssl.1 ${STAGEDIR}${MAN1PREFIX}/man/man1
 	cd ${WRKSRC} && ${COPYTREE_SHARE} "etc utils" ${STAGEDIR}${DATADIR}
 
 do-test:
 # Run the badssl.com test as a sanity check.  The full test suite
 # opens too many network connections and might take too long to
 # run.
 	cd ${WRKSRC} && ${SETENV} ${TEST_ENV} prove -v t/51_badssl.com.t
 
 .include <bsd.port.mk>
diff --git a/security/testssl.sh/distinfo b/security/testssl.sh/distinfo
index 31abe3c57ded..b48ccd7ae247 100644
--- a/security/testssl.sh/distinfo
+++ b/security/testssl.sh/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1645302781
-SHA256 (drwetter-testssl.sh-v3.0.7_GH0.tar.gz) = c2beb3ae1fc1301ad845c7aa01c0a292c41b95747ef67f34601f21fb2da16145
-SIZE (drwetter-testssl.sh-v3.0.7_GH0.tar.gz) = 9219774
+TIMESTAMP = 1664409825
+SHA256 (drwetter-testssl.sh-v3.0.8_GH0.tar.gz) = 22c5dc6dfc7500db94b6f8a48775f72b5149d0a372b8552ed7666016ee79edf0
+SIZE (drwetter-testssl.sh-v3.0.8_GH0.tar.gz) = 9372229
diff --git a/security/testssl.sh/pkg-plist b/security/testssl.sh/pkg-plist
index 06887c5e1e62..15e48f91ca34 100644
--- a/security/testssl.sh/pkg-plist
+++ b/security/testssl.sh/pkg-plist
@@ -1,36 +1,38 @@
 bin/testssl.sh
 man/man1/testssl.1.gz
 %%DATADIR%%/etc/Apple.pem
+%%DATADIR%%/etc/DST Root CA X3.txt
 %%DATADIR%%/etc/Java.pem
 %%DATADIR%%/etc/Linux.pem
 %%DATADIR%%/etc/Microsoft.pem
 %%DATADIR%%/etc/Mozilla.pem
 %%DATADIR%%/etc/README.md
 %%DATADIR%%/etc/ca_hashes.txt
 %%DATADIR%%/etc/cipher-mapping.txt
 %%DATADIR%%/etc/client-simulation.txt
 %%DATADIR%%/etc/client-simulation.wiresharked.md
 %%DATADIR%%/etc/client-simulation.wiresharked.txt
 %%DATADIR%%/etc/common-primes.txt
 %%DATADIR%%/etc/curves.txt
+%%DATADIR%%/etc/curves-mapping.txt
 %%DATADIR%%/etc/openssl.cnf
 %%DATADIR%%/etc/tls_data.txt
 %%DATADIR%%/utils/00_unittest_baseline.sh
 %%DATADIR%%/utils/ccs-injection.bash
 %%DATADIR%%/utils/checkcert.sh
 %%DATADIR%%/utils/create_ca_hashes.sh
 %%DATADIR%%/utils/curves.bash
 %%DATADIR%%/utils/docker-debian10.tls13only.start.sh
 %%DATADIR%%/utils/docker-nginx.tls13-earlydata.start.sh
 %%DATADIR%%/utils/generate_static_cipher_lists.sh
 %%DATADIR%%/utils/gmap2testssl.sh
 %%DATADIR%%/utils/heartbleed.bash
 %%DATADIR%%/utils/hexstream2cipher.sh
 %%DATADIR%%/utils/make-openssl.sh
 %%DATADIR%%/utils/make-openssl111.sh
 %%DATADIR%%/utils/parse_client_ciphers.pl
 %%DATADIR%%/utils/prototype.ssl2proto-check.bash
 %%DATADIR%%/utils/prototype.tls-protocol-checker.bash
 %%DATADIR%%/utils/resume.sh
 %%DATADIR%%/utils/ticketbleed.bash
 %%DATADIR%%/utils/update_client_sim_data.pl