diff --git a/Cargo.lock b/Cargo.lock
index 5b325029ca6..7a286e68c7e 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -461,6 +461,15 @@ version = "0.6.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "230c5f1ca6a325a32553f8640d31ac9b49f2411e901e427570154868b46da4f7"
 
+[[package]]
+name = "bit-vec"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b71798fca2c1fe1086445a7258a4bc81e6e49dcd24c8d0dd9a1e57395b603f51"
+dependencies = [
+ "serde",
+]
+
 [[package]]
 name = "bitflags"
 version = "1.3.2"
@@ -1363,11 +1372,11 @@ dependencies = [
  "log",
  "p256 0.13.2",
  "p384",
- "pem",
+ "pem 3.0.6",
  "portable-atomic",
  "rand 0.9.5",
  "rand_core 0.6.4",
- "rcgen",
+ "rcgen 0.13.2",
  "ring",
  "rkyv",
  "rustls",
@@ -3537,7 +3546,7 @@ dependencies = [
  "libp2p-identity",
  "libp2p-swarm",
  "libp2p-yamux",
- "rcgen",
+ "rcgen 0.14.10",
  "ring",
  "rustls",
  "rustls-webpki",
@@ -3587,7 +3596,7 @@ dependencies = [
  "multihash",
  "quickcheck",
  "rand 0.10.3",
- "rcgen",
+ "rcgen 0.14.10",
  "stun",
  "thiserror 2.0.21",
  "tokio",
@@ -3651,7 +3660,7 @@ dependencies = [
  "libp2p-tcp",
  "parking_lot",
  "pin-project-lite",
- "rcgen",
+ "rcgen 0.14.10",
  "rw-stream-sink",
  "soketto",
  "thiserror 2.0.21",
@@ -4479,6 +4488,16 @@ dependencies = [
  "serde_core",
 ]
 
+[[package]]
+name = "pem"
+version = "4.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d354a98a3d1251555de99e8fdd8afda05573c31b82f59063a7b0a29b5527f120"
+dependencies = [
+ "base64 0.23.1",
+ "serde_core",
+]
+
 [[package]]
 name = "pem-rfc7468"
 version = "0.7.0"
@@ -5117,7 +5136,7 @@ version = "0.13.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "75e669e5202259b5314d1ea5397316ad400819437857b90861765f24c4cf80a2"
 dependencies = [
- "pem",
+ "pem 3.0.6",
  "ring",
  "rustls-pki-types",
  "time",
@@ -5125,6 +5144,20 @@ dependencies = [
  "yasna 0.5.2",
 ]
 
+[[package]]
+name = "rcgen"
+version = "0.14.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8774e05a7d0de114588e6a28fe7e71694b82614ed569d86d8b389dfbc98b8ad8"
+dependencies = [
+ "pem 4.0.0",
+ "ring",
+ "rustls-pki-types",
+ "time",
+ "x509-parser 0.18.1",
+ "yasna 0.6.0",
+]
+
 [[package]]
 name = "redis"
 version = "1.7.1"
@@ -7079,10 +7112,10 @@ dependencies = [
  "interceptor",
  "lazy_static",
  "log",
- "pem",
+ "pem 3.0.6",
  "portable-atomic",
  "rand 0.9.5",
- "rcgen",
+ "rcgen 0.13.2",
  "regex",
  "ring",
  "rtcp",
@@ -7575,6 +7608,7 @@ dependencies = [
  "lazy_static",
  "nom",
  "oid-registry 0.8.1",
+ "ring",
  "rusticata-macros",
  "thiserror 2.0.21",
  "time",
@@ -7640,6 +7674,10 @@ name = "yasna"
 version = "0.6.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b5f6765e852b9b4dc8e2a76843e4d64d1cea8e79bcde0b6901aea8e7c7f08282"
+dependencies = [
+ "bit-vec",
+ "time",
+]
 
 [[package]]
 name = "yoke"
diff --git a/Cargo.toml b/Cargo.toml
index 6de97c9a3ea..b4dd0cfbf12 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -142,7 +142,7 @@ prost-codec = { version = "0.5.0", path = "misc/prost-codec" }
 prost = "0.14"
 quickcheck = { package = "quickcheck-ext", path = "misc/quickcheck-ext" }
 rand = "0.10"
-rcgen = "0.13"
+rcgen = "0.14"
 ring = "0.17"
 sha2 = "0.11"
 rw-stream-sink = { version = "0.5.0", path = "misc/rw-stream-sink" }