diff --git a/net/libwebsockets/Makefile b/net/libwebsockets/Makefile
index 77d3ff45b19e..c021c9abb922 100644
--- a/net/libwebsockets/Makefile
+++ b/net/libwebsockets/Makefile
@@ -1,84 +1,83 @@
 PORTNAME=	libwebsockets
 DISTVERSIONPREFIX=	v
-DISTVERSION=	4.3.2
-PORTREVISION=	1
+DISTVERSION=	4.3.3
 CATEGORIES=	net devel
 MASTER_SITES=	https://libwebsockets.org/git/libwebsockets/snapshot/
 
 MAINTAINER=	ports@FreeBSD.org
 COMMENT=	C library for lightweight websocket clients and servers
 WWW=		https://libwebsockets.org/
 
 LICENSE=	MIT
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 USES=		cmake localbase pkgconfig tar:xz
 USE_LDCONFIG=	yes
 
 BUILDINFO=	${HOSTARCH}-portbld-${OPSYS:tl}-${OSREL:R}
 
 CMAKE_ARGS=	-DLWS_BUILD_HASH:STRING="${BUILDINFO}"
 CMAKE_ON=	CMAKE_DISABLE_FIND_PACKAGE_Git \
 		LWS_WITH_DISKCACHE LWS_WITH_FTS LWS_IPV6 LWS_WITH_RANGES \
 		LWS_WITH_SSL LWS_WITH_THREADPOOL LWS_WITH_ZLIB \
 		LWS_WITHOUT_BUILTIN_SHA1 \
 		LWS_WITHOUT_TESTAPPS LWS_WITHOUT_TEST_SERVER \
 		LWS_WITHOUT_TEST_SERVER_EXTPOLL \
 		LWS_WITHOUT_TEST_PING LWS_WITHOUT_TEST_CLIENT
 
 OPTIONS_DEFINE=		HTTP_PROXY HTTP2 MQTT PEERLIMITS PLUGINS \
 			SECURE_STREAMS SOCKS SQLITE WEBSERVER
 OPTIONS_DEFAULT=	HTTP2 MQTT OPENSSL LIBUV
 OPTIONS_SUB=		yes
 
 OPTIONS_SINGLE=		SSL
 OPTIONS_SINGLE_SSL=	MBEDTLS OPENSSL
 OPTIONS_GROUP=		EVLOOP
 OPTIONS_GROUP_EVLOOP=	GLIB LIBEV LIBEVENT LIBUV
 
 HTTP_PROXY_DESC=	HTTP proxy support
 MQTT_DESC=		MQTT client support
 PEERLIMITS_DESC=	Tracking and limiting of resources of peer(s)
 PLUGINS_DESC=		Plugins support
 SECURE_STREAMS_DESC=	Secure streams protocol API support
 SOCKS_DESC=		Allow use of SOCKS5 proxy on client connections
 EVLOOP_DESC=		Event loop support
 GLIB_DESC=		Events support via Glib
 LIBEVENT_DESC=		Asynchronous event notification via libevent
 LIBUV_DESC=		Asynchronous I/O support via libuv
 
 HTTP_PROXY_CMAKE_BOOL=	LWS_WITH_HTTP_PROXY
 HTTP2_CMAKE_BOOL=	LWS_WITH_HTTP2
 MQTT_CMAKE_BOOL=	LWS_ROLE_MQTT LWS_WITH_EXTERNAL_POLL
 PEERLIMITS_CMAKE_BOOL=	LWS_WITH_PEER_LIMITS
 PLUGINS_CMAKE_BOOL=	LWS_WITH_PLUGINS \
 			LWS_WITH_PLUGINS_API
 SECURE_STREAMS_CMAKE_BOOL=	LWS_WITH_SECURE_STREAMS \
 			LWS_WITH_SECURE_STREAMS_PROXY_API
 SOCKS_CMAKE_BOOL=	LWS_WITH_SOCKS5
 SQLITE_LIB_DEPENDS=	libsqlite3.so:databases/sqlite3
 SQLITE_CMAKE_BOOL=	LWS_WITH_SQLITE3
 WEBSERVER_CMAKE_BOOL=	LWS_WITH_LWSWS
 WEBSERVER_IMPLIES=	PEERLIMITS PLUGINS LIBUV
 
 MBEDTLS_LIB_DEPENDS=	libmbedtls.so:security/mbedtls
 MBEDTLS_CMAKE_BOOL=	LWS_WITH_MBEDTLS
 OPENSSL_USES=		ssl
 OPENSSL_CMAKE_BOOL=	LWS_WITHOUT_BUILTIN_SHA1
 # WolfSSL needs to be compiled with --enable-libwebsockets to work
 # WOLFSSL_LIB_DEPENDS=	libwolfssl.so:security/wolfssl
 # WOLFSSL_CMAKE_BOOL=	LWS_WITH_SSL LWS_WITH_WOLFSSL
 # WOLFSSL_CMAKE_ON=	-DLWS_WOLFSSL_INCLUDE_DIRS=${LOCALBASE}/include \
 #			-DLWS_WOLFSSL_LIBRARIES=${LOCALBASE}/lib/libwolfssl.so
 
 GLIB_USES=		gnome
 GLIB_USE=		GNOME=glib20
 GLIB_CMAKE_BOOL=	LWS_WITH_GLIB
 LIBEV_LIB_DEPENDS=	libev.so:devel/libev
 LIBEV_CMAKE_BOOL=	LWS_WITH_LIBEV
 LIBEVENT_LIB_DEPENDS=	libevent.so:devel/libevent
 LIBEVENT_CMAKE_BOOL=	LWS_WITH_LIBEVENT
 LIBUV_LIB_DEPENDS=	libuv.so:devel/libuv
 LIBUV_CMAKE_BOOL=	LWS_WITH_LIBUV
 
 .include <bsd.port.mk>
diff --git a/net/libwebsockets/distinfo b/net/libwebsockets/distinfo
index dc5571a60e73..c37c979d9b66 100644
--- a/net/libwebsockets/distinfo
+++ b/net/libwebsockets/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1677032963
-SHA256 (libwebsockets-v4.3.2.tar.xz) = 287ad6f63344323c4e2404d2ab3a8a0803932d554c724aaffbb1e8fe2e5e9243
-SIZE (libwebsockets-v4.3.2.tar.xz) = 13598720
+TIMESTAMP = 1700903354
+SHA256 (libwebsockets-v4.3.3.tar.xz) = 3c4efc167e1c92e7571f51edc07faf9776a240b25065aa5b15500179b1b2c55b
+SIZE (libwebsockets-v4.3.3.tar.xz) = 13608960
diff --git a/net/libwebsockets/files/patch-lib_tls_CMakeLists.txt b/net/libwebsockets/files/patch-lib_tls_CMakeLists.txt
index ac872cf1aee1..b816a12382e2 100644
--- a/net/libwebsockets/files/patch-lib_tls_CMakeLists.txt
+++ b/net/libwebsockets/files/patch-lib_tls_CMakeLists.txt
@@ -1,19 +1,19 @@
 Disable usage of pkg-config for OpenSSL to avoid linking two different versions.
 See PRs: 258345, 271495
 
 --- lib/tls/CMakeLists.txt.orig	2023-05-19 06:48:43 UTC
 +++ lib/tls/CMakeLists.txt
 @@ -264,10 +264,10 @@ if (LWS_WITH_SSL)
  		if (NOT OPENSSL_FOUND AND NOT LWS_WITH_BORINGSSL)
  			# TODO: Add support for STATIC also.
  			if (NOT LWS_PLAT_FREERTOS)
 -				find_package(PkgConfig QUIET)
 -				pkg_check_modules(PC_OPENSSL openssl QUIET)
 +				#find_package(PkgConfig QUIET)
 +				#pkg_check_modules(PC_OPENSSL openssl QUIET)
  				find_package(OpenSSL REQUIRED)
--				list(APPEND OPENSSL_LIBRARIES ${PC_OPENSSL_LIBRARIES})
-+				#list(APPEND OPENSSL_LIBRARIES ${PC_OPENSSL_LIBRARIES})
+-				list(APPEND OPENSSL_LIBRARIES ${PC_OPENSSL_LINK_LIBRARIES})
++				#list(APPEND OPENSSL_LIBRARIES ${PC_OPENSSL_LINK_LIBRARIES})
  				set(OPENSSL_LIBRARIES ${OPENSSL_LIBRARIES} PARENT_SCOPE)
  			endif()
  			set(OPENSSL_INCLUDE_DIRS "${OPENSSL_INCLUDE_DIR}")