diff --git a/comms/conserver/Makefile b/comms/conserver/Makefile
index 265a395e285..7d92b1c7ec3 100644
--- a/comms/conserver/Makefile
+++ b/comms/conserver/Makefile
@@ -1,9 +1,9 @@
-# $OpenBSD: Makefile,v 1.64 2019/01/25 11:35:54 sthen Exp $
+# $OpenBSD: Makefile,v 1.65 2019/02/25 19:53:16 sthen Exp $
 
 COMMENT=	manage remote serial consoles via TCP/IP
 
 V=		8.2.2
-REVISION=	2
+REVISION=	3
 DISTNAME=	conserver-$V
 CATEGORIES=	comms
 
diff --git a/comms/conserver/patches/patch-conserver_main_c b/comms/conserver/patches/patch-conserver_main_c
index c817a08cd81..0032f9c8146 100644
--- a/comms/conserver/patches/patch-conserver_main_c
+++ b/comms/conserver/patches/patch-conserver_main_c
@@ -1,6 +1,7 @@
-$OpenBSD: patch-conserver_main_c,v 1.2 2018/05/29 13:54:05 sthen Exp $
+$OpenBSD: patch-conserver_main_c,v 1.3 2019/02/25 19:53:16 sthen Exp $
 
-enable "setproctitle" option by default, for more information ps listings
+- enable "setproctitle" option by default, for more information ps listings
+- libressl doesn't support @SECLEVEL=0
 
 Index: conserver/main.c
 --- conserver/main.c.orig
@@ -14,3 +15,12 @@ Index: conserver/main.c
  #endif
  #if HAVE_OPENSSL
  	, (char *)0, FLAGTRUE, FLAGFALSE, (char *)0
+@@ -363,7 +363,7 @@ SetupSSL(void)
+ 	    }
+ 	    ciphers = "ALL:!LOW:!EXP:!MD5:!aNULL:@STRENGTH";
+ 	} else {
+-	    ciphers = "ALL:aNULL:!LOW:!EXP:!MD5:@STRENGTH" CIPHER_SEC0;
++	    ciphers = "ALL:aNULL:!LOW:!EXP:!MD5:@STRENGTH";
+ 	}
+ 	if (config->sslcacertificatefile != (char *)0) {
+ 	    STACK_OF(X509_NAME) * cert_names;