diff --git a/common/shlibs b/common/shlibs
index fa7925bc252..4cbe926a0ba 100644
--- a/common/shlibs
+++ b/common/shlibs
@@ -236,6 +236,7 @@ liblzo2.so.2 lzo-2.03_1
 libgcrypt.so.20 libgcrypt-1.6.1_1
 libgnutls.so.30 gnutls-3.4.13_1
 libgnutlsxx.so.28 gnutls-3.2.13_1
+libgnutls-dane.so.0 gnutls-3.6.12_1
 libdevmapper.so.1.02 device-mapper-2.02.110_1
 libdevmapper-event.so.1.02 device-mapper-2.02.110_1
 libdevmapper-event-lvm2.so.2.02 device-mapper-2.02.110_1
diff --git a/srcpkgs/gnutls/template b/srcpkgs/gnutls/template
index a41da9a18a0..2dcc455f87a 100644
--- a/srcpkgs/gnutls/template
+++ b/srcpkgs/gnutls/template
@@ -1,22 +1,23 @@
 # Template file for 'gnutls'
 pkgname=gnutls
-version=3.6.11.1
+version=3.6.12
 revision=1
 build_style=gnu-configure
 configure_args="--with-zlib --disable-guile --disable-static
  --disable-valgrind-tests --disable-rpath
- --with-default-trust-store-file=/etc/ssl/certs/ca-certificates.crt"
-hostmakedepends="gettext-devel pkg-config libtool"
+ --with-default-trust-store-file=/etc/ssl/certs/ca-certificates.crt
+ --with-trousers-lib=${XBPS_CROSS_BASE}/usr/lib"
+hostmakedepends="which gettext-devel pkg-config libtool"
 # add autogen when #6550 is solved
 makedepends="zlib-devel lzo-devel readline-devel libgpg-error-devel
  libtasn1-devel libgcrypt-devel p11-kit-devel nettle-devel libidn2-devel
- libunistring-devel"
+ libunistring-devel unbound-devel trousers-devel"
 short_desc="GNU Transport Layer Security library"
 maintainer="Orphaned <orphan@voidlinux.org>"
 license="GPL-3.0-only, LGPL-2.1-or-later"
 homepage="https://gnutls.org"
-distfiles="https://www.gnupg.org/ftp/gcrypt/gnutls/v${version%.*.*}/gnutls-${version}.tar.xz"
-checksum=fbba12f3db9a55dbf027e14111755817ec44b57eabec3e8089aac8ac6f533cf8
+distfiles="https://www.gnupg.org/ftp/gcrypt/gnutls/v${version%.*}/gnutls-${version}.tar.xz"
+checksum=bfacf16e342949ffd977a9232556092c47164bd26e166736cf3459a870506c4b
 
 gnutls-devel_package() {
 	depends="${makedepends} ${sourcepkg}>=${version}_${revision}"