diff --git a/pkgs/by-name/op/openfortivpn/package.nix b/pkgs/by-name/op/openfortivpn/package.nix
index 147139d3d01d..6651f17ed167 100644
--- a/pkgs/by-name/op/openfortivpn/package.nix
+++ b/pkgs/by-name/op/openfortivpn/package.nix
@@ -9,17 +9,19 @@
   systemd,
   withSystemd ? lib.meta.availableOn stdenv.hostPlatform systemd,
   withPpp ? stdenv.hostPlatform.isLinux,
+  versionCheckHook,
+  nix-update-script,
 }:
 
 stdenv.mkDerivation rec {
   pname = "openfortivpn";
-  version = "1.22.1";
+  version = "1.23.1";
 
   src = fetchFromGitHub {
     owner = "adrienverge";
     repo = pname;
-    rev = "v${version}";
-    hash = "sha256-FhS4q8p1Q2Lu7xj2ZkUbJcMWvRSn+lqFdYqBNYB3V1E=";
+    tag = "v${version}";
+    hash = "sha256-Pv9v7e5xPTIrgqldBDtTFxW+aIjbxSeu0sQ9n6HjO9w=";
   };
 
   # we cannot write the config file to /etc and as we don't need the file, so drop it
@@ -51,12 +53,22 @@ stdenv.mkDerivation rec {
 
   enableParallelBuilding = true;
 
-  meta = with lib; {
+  nativeInstallCheckInputs = [
+    versionCheckHook
+  ];
+  versionCheckProgramArg = [ "--version" ];
+  doInstallCheck = true;
+
+  passthru = {
+    updateScript = nix-update-script { };
+  };
+
+  meta = {
     description = "Client for PPP+SSL VPN tunnel services";
     homepage = "https://github.com/adrienverge/openfortivpn";
-    license = licenses.gpl3;
-    maintainers = with maintainers; [ madjar ];
-    platforms = with platforms; linux ++ darwin;
+    license = lib.licenses.gpl3;
+    maintainers = with lib.maintainers; [ madjar ];
+    platforms = with lib.platforms; linux ++ darwin;
     mainProgram = "openfortivpn";
   };
 }