diff --git a/package/wolfssl/0001-Define-HAVE_LIMITS_H-in-options.h-rather-than-config.patch b/package/wolfssl/0001-Define-HAVE_LIMITS_H-in-options.h-rather-than-config.patch
index 67f9672c2a..0599f9d615 100644
--- a/package/wolfssl/0001-Define-HAVE_LIMITS_H-in-options.h-rather-than-config.patch
+++ b/package/wolfssl/0001-Define-HAVE_LIMITS_H-in-options.h-rather-than-config.patch
@@ -7,7 +7,6 @@ Subject: [PATCH] Define HAVE_LIMITS_H in options.h rather than config.h since
 
 Upstream: https://github.com/wolfSSL/wolfssl/pull/10097
 
-[Bernd: rebased for 5.7.2]
 Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
 ---
  cmake/config.in    | 3 ---
@@ -33,7 +32,7 @@ diff --git a/cmake/options.h.in b/cmake/options.h.in
 index 985b54241d6..c46ada8045d 100644
 --- a/cmake/options.h.in
 +++ b/cmake/options.h.in
-@@ -31,6 +31,9 @@ extern "C" {
+@@ -33,6 +33,9 @@ extern "C" {
  #endif
  
  #ifndef WOLFSSL_OPTIONS_IGNORE_SYS
@@ -47,12 +46,12 @@ diff --git a/configure.ac b/configure.ac
 index bce600f2ecc..c5cf9f320c7 100644
 --- a/configure.ac
 +++ b/configure.ac
-@@ -116,7 +116,9 @@
-     AM_CCASFLAGS="$AM_CCASFLAGS -DWOLFSSL_EXPERIMENTAL_SETTINGS"
- fi
+@@ -185,7 +185,9 @@ AC_ARG_ENABLE([freebsdkm-crypto-register],
+     [ENABLED_BSDKM_REGISTER=no]
+     )
  
--AC_CHECK_HEADERS([arpa/inet.h fcntl.h limits.h netdb.h netinet/in.h stddef.h time.h sys/ioctl.h sys/socket.h sys/time.h errno.h sys/un.h])
-+AC_CHECK_HEADERS([arpa/inet.h fcntl.h netdb.h netinet/in.h stddef.h time.h sys/ioctl.h sys/socket.h sys/time.h errno.h sys/un.h])
+-AC_CHECK_HEADERS([arpa/inet.h fcntl.h limits.h netdb.h netinet/in.h stddef.h time.h sys/ioctl.h sys/socket.h sys/time.h errno.h sys/un.h ctype.h sys/random.h])
++AC_CHECK_HEADERS([arpa/inet.h fcntl.h netdb.h netinet/in.h stddef.h time.h sys/ioctl.h sys/socket.h sys/time.h errno.h sys/un.h ctype.h sys/random.h])
 +# Special case: Since types.h depends on HAVE_LIMITS_H, we must define it in options.h.
 +AC_CHECK_HEADER([limits.h], [AM_CPPFLAGS="$AM_CPPFLAGS -DHAVE_LIMITS_H=1"], [])
  AC_CHECK_LIB([network],[socket])
diff --git a/package/wolfssl/wolfssl.hash b/package/wolfssl/wolfssl.hash
index 9a1e8bfd4a..e1ecd5f98a 100644
--- a/package/wolfssl/wolfssl.hash
+++ b/package/wolfssl/wolfssl.hash
@@ -1,6 +1,6 @@
 # Locally computed:
-sha256  0f2ed82e345b833242705bbc4b08a2a2037a33f7bf9c610efae6464f6b10e305  wolfssl-5.7.2.tar.gz
+sha256  d5ca7af48cd2d9a91d539e9baedeba55a0605a28d7ac8b01dc3d5254a13ca341  wolfssl-5.9.1.tar.gz
 
 # Hash for license files:
-sha256  8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643  COPYING
-sha256  b23c1da1f85d699d3288d73c952b4cd02760d23dc1ddc1b221cbb8be82387189  LICENSING
+sha256  8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903  COPYING
+sha256  84f8096dc7f70cdb6075ccf3722a44654361063eaf3e1ce7885c9875b8465a63  LICENSING
diff --git a/package/wolfssl/wolfssl.mk b/package/wolfssl/wolfssl.mk
index 91ab7ca08a..44f51e06e6 100644
--- a/package/wolfssl/wolfssl.mk
+++ b/package/wolfssl/wolfssl.mk
@@ -4,11 +4,11 @@
 #
 ################################################################################
 
-WOLFSSL_VERSION = 5.7.2
+WOLFSSL_VERSION = 5.9.1
 WOLFSSL_SITE = $(call github,wolfSSL,wolfssl,v$(WOLFSSL_VERSION)-stable)
 WOLFSSL_INSTALL_STAGING = YES
 
-WOLFSSL_LICENSE = GPL-2.0+
+WOLFSSL_LICENSE = GPL-3.0+
 WOLFSSL_LICENSE_FILES = COPYING LICENSING
 WOLFSSL_CPE_ID_VENDOR = wolfssl
 WOLFSSL_CONFIG_SCRIPTS = wolfssl-config