diff --git a/common/shlibs b/common/shlibs
index 3c0982bd81b..3085536be33 100644
--- a/common/shlibs
+++ b/common/shlibs
@@ -2060,9 +2060,9 @@ librrd_th.so.4 rrdtool-1.4.9_1
 libmosquitto.so.1 libmosquitto-1.4_1
 libmosquittopp.so.1 libmosquittopp-1.4_1
 libmpv.so.1 mpv-0.8.0_2
-libmbedtls.so.10 mbedtls-2.0.0_1
-libmbedcrypto.so.1 mbedtls-2.8.0_1
-libmbedx509.so.0 mbedtls-2.0.0_1
+libmbedtls.so.11 mbedtls-2.9.0_1
+libmbedcrypto.so.3 mbedtls-2.9.0_1
+libmbedx509.so.0 mbedtls-2.9.0_1
 libdmtx.so.0 libdmtx-0.7.4_1
 libdbus-c++-1.so.0 libdbus-c++-0.9.0_1
 libdbus-c++-glib-1.so.0 libdbus-c++-0.9.0_1
diff --git a/srcpkgs/mbedtls/template b/srcpkgs/mbedtls/template
index 2176dbd1adc..dfc9ed38516 100644
--- a/srcpkgs/mbedtls/template
+++ b/srcpkgs/mbedtls/template
@@ -1,17 +1,18 @@
 # Template file for 'mbedtls'
 pkgname=mbedtls
-version=2.8.0
+version=2.11.0
 revision=1
 wrksrc="mbedtls-mbedtls-${version}"
 build_style=cmake
 hostmakedepends="perl"
-configure_args="-DENABLE_TESTING=0 -DUSE_SHARED_MBEDTLS_LIBRARY=1"
+configure_args="-DENABLE_TESTING=1 -DUSE_SHARED_MBEDTLS_LIBRARY=1"
 short_desc="Portable cryptographic TLS library"
 maintainer="Juan RP <xtraeme@voidlinux.eu>"
 license="Apache-2.0"
 homepage="https://tls.mbed.org/"
+changelog="https://raw.githubusercontent.com/ARMmbed/mbedtls/development/ChangeLog"
 distfiles="https://github.com/ARMmbed/mbedtls/archive/mbedtls-${version}.tar.gz"
-checksum=c544d5a6ea6cf629a3c2d0653b1e8f3ab0491a852b84d9478403c6a3fb699fe4
+checksum=50d715c4bf1c21757b25df192cdff6951a621b32da1c991b513c23b9ddf3333a
 
 pre_configure() {
 	sed -i include/mbedtls/config.h \
@@ -23,7 +24,7 @@ mbedtls-utils_package() {
 	short_desc+=" - additional utilities"
 	depends="${sourcepkg}-${version}_${revision}"
 	pkg_install() {
-		vmove "usr/bin/*"
+		vmove usr/bin
 	}
 }
 
@@ -36,3 +37,4 @@ mbedtls-devel_package() {
 		vmove "usr/lib/*.so"
 	}
 }
+