diff --git a/security/duo/Makefile b/security/duo/Makefile
index 1040da493124..8f420a3d7f7e 100644
--- a/security/duo/Makefile
+++ b/security/duo/Makefile
@@ -1,40 +1,42 @@
 PORTNAME=	duo
-PORTVERSION=	2.0.4
+PORTVERSION=	2.1.0
 CATEGORIES=	security
 MASTER_SITES=	https://dl.duosecurity.com/ \
 		ZI
 DISTNAME=	${PORTNAME}_unix-${PORTVERSION}
 
 MAINTAINER=	zi@FreeBSD.org
 COMMENT=	Duo unix integration package
 WWW=		https://duosecurity.com
 
 LICENSE=	GPLv2
 
 CONFIGURE_ARGS=	--with-pam=${PREFIX}/lib/security --sysconfdir=${PREFIX}/etc \
 		--docdir=${DOCSDIR} --includedir=${PREFIX}/include/${PORTNAME}
 
 GNU_CONFIGURE=	yes
 GNU_CONFIGURE_MANPREFIX=	${PREFIX}/share
 USES=		libtool pathfix ssl
 USE_LDCONFIG=	yes
 
 SUB_FILES=	pkg-message
 
 SUID_DESC=	Install login_duo with suid bit set
 OPTIONS_DEFINE=	DOCS SUID
 OPTIONS_SUB=	yes
 
 post-patch:
+	${REINPLACE_CMD} -e 's|ASN1_STRING_data|ASN1_STRING_get0_data|g' \
+		${WRKSRC}/lib/https.c
 	${REINPLACE_CMD} -e 's| /etc| ${PREFIX}/etc|g' \
 		${WRKSRC}/pam_duo/pam_duo.8 \
 		${WRKSRC}/login_duo/login_duo.8
 
 post-install:
 	@${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/security/pam_duo.so
 	${INSTALL_DATA} ${WRKSRC}/login_duo/login_duo.conf \
 		${STAGEDIR}${PREFIX}/etc/login_duo.conf.sample
 	${INSTALL_DATA} ${WRKSRC}/pam_duo/pam_duo.conf \
 		${STAGEDIR}${PREFIX}/etc/pam_duo.conf.sample
 
 .include <bsd.port.mk>
diff --git a/security/duo/distinfo b/security/duo/distinfo
index 0e7582eb76da..bdac431a2dd6 100644
--- a/security/duo/distinfo
+++ b/security/duo/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1745419537
-SHA256 (duo_unix-2.0.4.tar.gz) = 3fb2155f8472304476057f7d149520bf6259c7b29d764b62275d35ad3249c264
-SIZE (duo_unix-2.0.4.tar.gz) = 582678
+TIMESTAMP = 1752002178
+SHA256 (duo_unix-2.1.0.tar.gz) = 42917ea997827789fb03e765eded0a7f0a50f8220922835931a7c43f3d83b629
+SIZE (duo_unix-2.1.0.tar.gz) = 608257
diff --git a/security/duo/files/patch-lib_https.c b/security/duo/files/patch-lib_https.c
new file mode 100644
index 000000000000..38ced783a096
--- /dev/null
+++ b/security/duo/files/patch-lib_https.c
@@ -0,0 +1,13 @@
+--- lib/https.c.orig	2025-07-08 19:38:07 UTC
++++ lib/https.c
+@@ -9,6 +9,10 @@
+ 
+ #include "config.h"
+ 
++#if defined(__FreeBSD__)
++#include <netinet/in.h>
++#endif
++
+ #include <arpa/inet.h>
+ #include <sys/types.h>
+ #include <sys/socket.h>