diff --git a/ChangeLog.md b/ChangeLog.md
--- a/ChangeLog.md
+++ b/ChangeLog.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## 2.3.4
+
+- Widen `tls` upper bound from `<2.4` to `<2.5` for tls 2.4.x compatibility
+
 ## 2.3.3
 
 - Bump wai-app-static upper bound to include 3.2.x
diff --git a/keter.cabal b/keter.cabal
--- a/keter.cabal
+++ b/keter.cabal
@@ -1,6 +1,6 @@
 cabal-version:      3.0
 name:               keter
-version:            2.3.3
+version:            2.3.4
 synopsis:
   Web application deployment manager, focusing on Haskell web frameworks. It mitigates downtime.
 
@@ -62,7 +62,7 @@
     , template-haskell      >=2.17.0   && <3.0
     , text                  >=1.2.5    && <3.0
     , time                  >=1.9.3    && <2.0
-    , tls                   >=1.5.7    && <2.4
+    , tls                   >=1.5.7    && <2.5
     , tls-session-manager   >=0.0.4    && <0.1     || ^>=0.1.0
     , transformers          >=0.5.6    && <0.7
     , unix                  >=2.7.2    && <2.9