diff --git a/Cargo.lock b/Cargo.lock
index b6c6b97ee38a..6a727e51b47b 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2387,7 +2387,7 @@ dependencies = [
  "tower",
  "trust-dns-resolver",
  "tun",
- "webpki-roots 0.24.0",
+ "webpki-roots 0.25.1",
  "windows-sys 0.48.0",
 ]
 
@@ -3100,12 +3100,9 @@ dependencies = [
 
 [[package]]
 name = "webpki-roots"
-version = "0.24.0"
+version = "0.25.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b291546d5d9d1eab74f069c77749f2cb8504a12caa20f0f2de93ddbf6f411888"
-dependencies = [
- "rustls-webpki 0.101.1",
-]
+checksum = "c9c6eda1c830a36f361e7721c87fd79ea84293b54f8c48c959f85ec636f0f196"
 
 [[package]]
 name = "widestring"
diff --git a/crates/shadowsocks-service/Cargo.toml b/crates/shadowsocks-service/Cargo.toml
index 6ae78d930782..db0a9244af78 100644
--- a/crates/shadowsocks-service/Cargo.toml
+++ b/crates/shadowsocks-service/Cargo.toml
@@ -97,7 +97,7 @@ tokio = { version = "1.5", features = ["io-util", "macros", "net", "parking_lot"
 tokio-native-tls = { version = "0.3", optional = true }
 native-tls = { version = "0.2.8", optional = true, features = ["alpn"] }
 tokio-rustls = { version = "0.24", optional = true }
-webpki-roots = { version = "0.24", optional = true }
+webpki-roots = { version = "0.25", optional = true }
 rustls-native-certs = { version = "0.6.3", optional = true }
 async-trait = "0.1"