diff --git a/net/stunnel/Makefile b/net/stunnel/Makefile
index a49e090b7..77771dda6 100644
--- a/net/stunnel/Makefile
+++ b/net/stunnel/Makefile
@@ -8,7 +8,7 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=stunnel
-PKG_VERSION:=5.53
+PKG_VERSION:=5.54
 PKG_RELEASE:=1
 
 PKG_LICENSE:=GPL-2.0+
@@ -23,7 +23,7 @@ PKG_SOURCE_URL:= \
 	https://www.usenix.org.uk/mirrors/stunnel/archive/$(word 1, $(subst .,$(space),$(PKG_VERSION))).x/
 
 PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
-PKG_HASH:=80439896ee14269eb70bc8bc669433c7d619018a62c9f9c5c760a24515302585
+PKG_HASH:=5e8588a6c274b46b1d63e1b50f0725f4908dec736f6588eb48d1eb3d20c87902
 
 PKG_FIXUP:=autoreconf
 PKG_FIXUP:=patch-libtool
diff --git a/net/stunnel/files/stunnel.init b/net/stunnel/files/stunnel.init
index 739e16b94..bc46bd011 100644
--- a/net/stunnel/files/stunnel.init
+++ b/net/stunnel/files/stunnel.init
@@ -101,6 +101,8 @@ validate_service_options() {
 		'socket:list(string)' \
 		'sslVersion:or("all","SSLv2","SSLv3","TLSv1","TLSv1.1","TLSv1.2")' \
 		'stack:uinteger' \
+		'ticketKeySecret:string' \
+		'ticketMacSecret:string' \
 		'TIMEOUTbusy:uinteger' \
 		'TIMEOUTclose:uinteger' \
 		'TIMEOUTconnect:uinteger' \
@@ -259,6 +261,8 @@ print_service_options() {
 		setuid \
 		sslVersion \
 		stack \
+		ticketKeySecret \
+		ticketMacSecret \
 		TIMEOUTbusy \
 		TIMEOUTclose \
 		TIMEOUTconnect \