diff --git a/security/pkcs11-tools/Makefile b/security/pkcs11-tools/Makefile
index 6e2b2c49accd..67a035f58317 100644
--- a/security/pkcs11-tools/Makefile
+++ b/security/pkcs11-tools/Makefile
@@ -1,51 +1,51 @@
 PORTNAME=	pkcs11-tools
 DISTVERSIONPREFIX=	v
-DISTVERSION=	2.3.1
+DISTVERSION=	2.4.0
 CATEGORIES=	security
 
 MAINTAINER=	eric.devolder@gmail.com
 COMMENT=	Tools for managing PKCS11 cryptographic tokens
 
 LICENSE=	APACHE20
 
 BROKEN_SSL=	libressl
 BROKEN_SSL_REASON_libressl=	error: use of undeclared identifier 'EVP_PKEY_X25519' (LibreSSL has no support for Edwards curves)
 
 BUILD_DEPENDS=	autoconf-archive>0:devel/autoconf-archive \
 		autoconf>0:devel/autoconf \
 		automake>0:devel/automake \
 		flex:textproc/flex
 RUN_DEPENDS=	bash:shells/bash
 
 USES=		bison compiler:c11 libtool:build pkgconfig ssl
 
 USE_GITHUB=	yes
 GH_ACCOUNT=	Mastercard
 GH_TUPLE=	coreutils:gnulib:5b3a6f94f:gnulib \
 		oasis-tcs:pkcs11:df530bf:oasis_pkcs11
 
 GNU_CONFIGURE=	yes
 
 MAKE_ENV=	LIBCRYPTO_RPATH=${OPENSSLBASE}/lib
 
 # workaround for Bug#255277:
 # -lcrypto # fails to find symbol in the shared library: ld: error: undefined symbol: EVP_PKEY_meth_get_digestsign
 LDFLAGS+=	${OPENSSLBASE}/lib/libcrypto.a
 
 INSTALL_TARGET=	install-strip
 
 .include <bsd.port.options.mk>
 
 .if ${SSL_DEFAULT} == base && ${OPSYS} == FreeBSD && ${OSVERSION} < 1200085
 BROKEN=		OpenSSL version is too old, lacks symbols: error: use of undeclared identifier 'EVP_PKEY_X25519', etc.
 .endif
 
 post-extract:
 	@${RMDIR} ${WRKSRC}/.gnulib ${WRKSRC}/include/oasis-pkcs11
 	@${MV} ${WRKSRC_gnulib} ${WRKSRC}/.gnulib
 	@${MV} ${WRKSRC_oasis_pkcs11} ${WRKSRC}/include/oasis-pkcs11
 
 pre-configure:
 	@cd ${WRKSRC} && BUILD_PORT=1 ${WRKSRC}/bootstrap.sh
 
 .include <bsd.port.mk>
diff --git a/security/pkcs11-tools/distinfo b/security/pkcs11-tools/distinfo
index e3768f68ba61..fd56acaad49f 100644
--- a/security/pkcs11-tools/distinfo
+++ b/security/pkcs11-tools/distinfo
@@ -1,7 +1,7 @@
-TIMESTAMP = 1625477167
-SHA256 (Mastercard-pkcs11-tools-v2.3.1_GH0.tar.gz) = 7bdf6904115144862fe1492a614753d5ef0cd4b6eb488fc4654170dda687444f
-SIZE (Mastercard-pkcs11-tools-v2.3.1_GH0.tar.gz) = 228484
+TIMESTAMP = 1627083104
+SHA256 (Mastercard-pkcs11-tools-v2.4.0_GH0.tar.gz) = e1a33638bfca5b4d1c739ef7538f87ad6a72721e8be0041c4f1bcbb38d1bfe57
+SIZE (Mastercard-pkcs11-tools-v2.4.0_GH0.tar.gz) = 285389
 SHA256 (coreutils-gnulib-5b3a6f94f_GH0.tar.gz) = 93ab4c723fc482a531dc55a28c9da5d7907a3402bcef4e99f4d8168415ae3a71
 SIZE (coreutils-gnulib-5b3a6f94f_GH0.tar.gz) = 7293249
 SHA256 (oasis-tcs-pkcs11-df530bf_GH0.tar.gz) = a1e9203c463fe1187d89d2f29b5453f9bda84c55f31a91c12638d113fc2214cb
 SIZE (oasis-tcs-pkcs11-df530bf_GH0.tar.gz) = 119448