diff --git a/packages/mbedtls/build.sh b/packages/mbedtls/build.sh
index 499f102d3..1d19ad147 100644
--- a/packages/mbedtls/build.sh
+++ b/packages/mbedtls/build.sh
@@ -2,15 +2,34 @@ TERMUX_PKG_HOMEPAGE=https://tls.mbed.org/
 TERMUX_PKG_DESCRIPTION="Light-weight cryptographic and SSL/TLS library"
 TERMUX_PKG_LICENSE="Apache-2.0"
 TERMUX_PKG_MAINTAINER="Andy Li @andyli"
-TERMUX_PKG_VERSION=2.17.0
-TERMUX_PKG_REVISION=1
-TERMUX_PKG_SHA256=321a2c0220d9f75703e929c01dabba7b77da4cf2e39944897fc41d888bb1ef0d
+TERMUX_PKG_VERSION=2.19.1
 TERMUX_PKG_BREAKS="mbedtls-dev"
 TERMUX_PKG_REPLACES="mbedtls-dev"
-TERMUX_PKG_SRCURL=https://github.com/ARMmbed/mbedtls/archive/mbedtls-$TERMUX_PKG_VERSION.tar.gz
+
 TERMUX_PKG_EXTRA_CONFIGURE_ARGS="
 -DUSE_STATIC_MBEDTLS_LIBRARY=OFF
 -DUSE_SHARED_MBEDTLS_LIBRARY=ON
 -DENABLE_TESTING=OFF
 -DENABLE_PROGRAMS=OFF
 "
+
+termux_step_extract_package() {
+	local CHECKED_OUT_FOLDER=$TERMUX_PKG_CACHEDIR/checkout-$TERMUX_PKG_VERSION
+	if [ ! -d $CHECKED_OUT_FOLDER ]; then
+		local TMP_CHECKOUT=$TERMUX_PKG_TMPDIR/tmp-checkout
+		rm -Rf $TMP_CHECKOUT
+		mkdir -p $TMP_CHECKOUT
+
+		git clone --depth 1 \
+			--branch mbedtls-$TERMUX_PKG_VERSION \
+			https://github.com/ARMmbed/mbedtls.git \
+			$TMP_CHECKOUT
+		cd $TMP_CHECKOUT
+		git submodule update --init # --depth 1
+		mv $TMP_CHECKOUT $CHECKED_OUT_FOLDER
+	fi
+
+	mkdir $TERMUX_PKG_SRCDIR
+	cd $TERMUX_PKG_SRCDIR
+	cp -Rf $CHECKED_OUT_FOLDER/* .
+}