diff --git a/security/dogtag-jss/Makefile b/security/dogtag-jss/Makefile
index dc9d9c5d122d..96c98ba23440 100644
--- a/security/dogtag-jss/Makefile
+++ b/security/dogtag-jss/Makefile
@@ -1,76 +1,76 @@
 PORTNAME=	dogtag-jss
 DISTVERSIONPREFIX=	v
-DISTVERSION=	5.7.0
+DISTVERSION=	5.10.1
 CATEGORIES=	security java
 
 MAINTAINER=	joneum@FreeBSD.org
 COMMENT=	Java security services using Mozilla NSS
 WWW=		https://github.com/dogtagpki/jss
 
 LICENSE=	APACHE20 MPL11
 LICENSE_COMB=	multi
 LICENSE_FILE_APACHE20=	${WRKSRC}/symkey/LICENSE
 LICENSE_FILE_MPL11=	${WRKSRC}/MPL-1.1.txt
 
 BUILD_DEPENDS=	${JAVAJARDIR}/commons-lang3.jar:java/apache-commons-lang3 \
 		${JAVAJARDIR}/slf4j-api.jar:devel/slf4j \
 		${JAVASHAREDIR}/slf4j/slf4j-jdk14.jar:devel/slf4j \
 		${LOCALBASE}/apache-tomcat-9.0/lib/catalina.jar:www/tomcat9 \
 		bash:shells/bash \
 		zip:archivers/zip
 
 LIB_DEPENDS=	libnspr4.so:devel/nspr \
 		libnss3.so:security/nss
 
 RUN_DEPENDS=	${JAVAJARDIR}/commons-lang3.jar:java/apache-commons-lang3 \
 		${JAVAJARDIR}/slf4j-api.jar:devel/slf4j \
 		${JAVASHAREDIR}/slf4j/slf4j-jdk14.jar:devel/slf4j \
 		${LOCALBASE}/apache-tomcat-9.0/lib/catalina.jar:www/tomcat9
 
 USES=		cmake compiler:c++11-lang java:build,run pkgconfig shebangfix
 USE_GITHUB=	yes
 GH_ACCOUNT=	dogtagpki
 GH_PROJECT=	jss
-JAVA_VERSION=	17
+JAVA_VERSION=	21
 USE_LDCONFIG=	yes
 
 SHEBANG_FILES=	tools/reproducible_jar.sh
 
 CMAKE_ARGS=	-DJAVA_HOME=${JAVA_HOME} \
 		-DJNI_DIR=${JAVAJARDIR} \
 		-DLANG_JAR=${JAVAJARDIR}/commons-lang3.jar \
 		-DLIB_DIR=${PREFIX}/lib \
 		-DSLF4J_API_JAR=${JAVAJARDIR}/slf4j-api.jar \
 		-DSLF4J_JDK14_JAR=${JAVASHAREDIR}/slf4j/slf4j-jdk14.jar \
 		-DTOMCAT_CATALINA_JAR=${LOCALBASE}/apache-tomcat-9.0/lib/catalina.jar \
 		-DTOMCAT_COYOTE_JAR=${LOCALBASE}/apache-tomcat-9.0/lib/tomcat-coyote.jar \
 		-DTOMCAT_JULI_JAR=${LOCALBASE}/apache-tomcat-9.0/bin/tomcat-juli.jar \
 		-DTOMCAT_UTIL_JAR=${LOCALBASE}/apache-tomcat-9.0/lib/tomcat-util.jar
-CMAKE_OFF=	WITH_JAVADOC WITH_TESTS
+CMAKE_OFF=	WITH_JAVADOC WITH_MLDSA WITH_MLKEM WITH_TESTS
 
 ALL_TARGET=	java symkey_library
 LDFLAGS+=	-L${LOCALBASE}/lib -Wl,--undefined-version
 
 PLIST_FILES=	${JAVAJARDIR}/jss-tomcat-9.0.jar \
 		${JAVAJARDIR}/jss-tomcat.jar \
 		${JAVAJARDIR}/jss.jar \
 		lib/libjss-symkey.so \
 		lib/libjss.so
 
 do-install:
 	@${MKDIR} ${STAGEDIR}${JAVAJARDIR}
 	${INSTALL_DATA} ${BUILD_WRKSRC}/jss.jar \
 		${STAGEDIR}${JAVAJARDIR}/jss.jar
 	${INSTALL_DATA} ${BUILD_WRKSRC}/jss-tomcat.jar \
 		${STAGEDIR}${JAVAJARDIR}/jss-tomcat.jar
 	${INSTALL_DATA} ${BUILD_WRKSRC}/jss-tomcat-9.0.jar \
 		${STAGEDIR}${JAVAJARDIR}/jss-tomcat-9.0.jar
 	@${MKDIR} ${STAGEDIR}${PREFIX}/lib
 	${INSTALL_LIB} ${BUILD_WRKSRC}/libjss.so \
 		${STAGEDIR}${PREFIX}/lib/libjss.so
 	${INSTALL_LIB} ${BUILD_WRKSRC}/symkey/libjss-symkey.so \
 		${STAGEDIR}${PREFIX}/lib/libjss-symkey.so
 	${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/libjss.so
 	${STRIP_CMD} ${STAGEDIR}${PREFIX}/lib/libjss-symkey.so
 
 .include <bsd.port.mk>
diff --git a/security/dogtag-jss/distinfo b/security/dogtag-jss/distinfo
index 5849ad5ce04c..1c3fee4d09c7 100644
--- a/security/dogtag-jss/distinfo
+++ b/security/dogtag-jss/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1784227336
-SHA256 (dogtagpki-jss-v5.7.0_GH0.tar.gz) = d984b9fd81923d0a59300b7146ef9f6261112d3a9c84a5fda0bc38832bb5a689
-SIZE (dogtagpki-jss-v5.7.0_GH0.tar.gz) = 1219186
+TIMESTAMP = 1787131792
+SHA256 (dogtagpki-jss-v5.10.1_GH0.tar.gz) = fa30b7388468e28349f1f3fc6c48061f935859c13d3d6e6ee866dfe22d9f6747
+SIZE (dogtagpki-jss-v5.10.1_GH0.tar.gz) = 1262748