diff --git a/dns/powerdns-recursor/Makefile b/dns/powerdns-recursor/Makefile
index 37a468371b74..f61770ea60d1 100644
--- a/dns/powerdns-recursor/Makefile
+++ b/dns/powerdns-recursor/Makefile
@@ -1,61 +1,61 @@
 PORTNAME=	recursor
-DISTVERSION=	4.9.0
+DISTVERSION=	4.9.1
 CATEGORIES=	dns
 MASTER_SITES=	http://downloads.powerdns.com/releases/
 PKGNAMEPREFIX=	powerdns-
 DISTNAME=	pdns-${PORTNAME}-${DISTVERSION}
 
 MAINTAINER=	tremere@cainites.net
 COMMENT=	Advanced DNS recursor
 WWW=		https://www.PowerDNS.com/recursor.html
 
 LICENSE=	GPLv2
 LICENSE_FILE=	${WRKSRC}/COPYING
 
 BROKEN_armv6=	fails to compile: use of overloaded operator << is ambiguous
 BROKEN_armv7=	fails to compile: use of overloaded operator << is ambiguous
 BROKEN_FreeBSD_12_powerpc64=	fails to compile: Assembler messages: unaligned opcodes detected in executable segment
 NOT_FOR_ARCHS=	i386
 NOT_FOR_ARCHS_REASON=	archs with 32-bits time_t are no longer supported by upstream
 
 BUILD_DEPENDS=	${LOCALBASE}/include/boost/shared_ptr.hpp:devel/boost-libs
 LIB_DEPENDS=	libboost_context.so:devel/boost-libs
 
 USES=		autoreconf compiler:c++11-lib cpe gmake libtool \
 		localbase:ldflags pkgconfig ssl tar:bzip2
 
 CPE_VENDOR=	powerdns
 USE_RC_SUBR=	pdns-recursor
 
 GNU_CONFIGURE=	YES
 CONFIGURE_ARGS=	--sysconfdir=${PREFIX}/etc/pdns \
 		--with-libsodium=no \
 		--without-net-snmp \
 		--without-systemd
 
 SUB_FILES=	pkg-message
 
 USERS=		pdns_recursor
 GROUPS=		pdns
 
 OPTIONS_DEFINE=		DNSTAP
 OPTIONS_DEFAULT=	LUA
 OPTIONS_SINGLE=		EXTLUA
 OPTIONS_SINGLE_EXTLUA=	LUA LUAJIT
 
 DNSTAP_DESC=	dnstap support (see dnstap.info)
 LUAJIT_DESC=	Use luajit
 LUA_DESC=	Use lang/lua
 
 DNSTAP_LIB_DEPENDS=		libfstrm.so:devel/fstrm
 DNSTAP_CONFIGURE_ENABLE=	dnstap
 
 LUAJIT_USES=		luajit
 LUAJIT_CONFIGURE_ON=	--with-lua=luajit
 
 LUA_USES=	lua
 
 post-install:
 	@${MKDIR} ${STAGEDIR}/var/run/pdns-recursor
 
 .include <bsd.port.mk>
diff --git a/dns/powerdns-recursor/distinfo b/dns/powerdns-recursor/distinfo
index 861c97590877..aa6114cd237a 100644
--- a/dns/powerdns-recursor/distinfo
+++ b/dns/powerdns-recursor/distinfo
@@ -1,3 +1,3 @@
-TIMESTAMP = 1688122340
-SHA256 (pdns-recursor-4.9.0.tar.bz2) = d36f162843e367646a661a785ca0becde9b68552855bf40532aebafa103966f3
-SIZE (pdns-recursor-4.9.0.tar.bz2) = 1551436
+TIMESTAMP = 1692955131
+SHA256 (pdns-recursor-4.9.1.tar.bz2) = 0a1edc13e8f2bd661f39e316387d941e22de6a03b8a7a2fc662fdf8b942ea2be
+SIZE (pdns-recursor-4.9.1.tar.bz2) = 1566613
diff --git a/dns/powerdns-recursor/files/patch-m4_pdns__check__libcrypto.m4 b/dns/powerdns-recursor/files/patch-m4_pdns__check__libcrypto.m4
index 7348da12d752..6bd1ed29d7ef 100644
--- a/dns/powerdns-recursor/files/patch-m4_pdns__check__libcrypto.m4
+++ b/dns/powerdns-recursor/files/patch-m4_pdns__check__libcrypto.m4
@@ -1,24 +1,14 @@
---- m4/pdns_check_libcrypto.m4.orig	2023-03-27 15:08:37 UTC
+--- m4/pdns_check_libcrypto.m4.orig	2023-06-01 06:54:16 UTC
 +++ m4/pdns_check_libcrypto.m4
 @@ -75,8 +75,10 @@ AC_DEFUN([PDNS_CHECK_LIBCRYPTO], [
          for ssldir in $ssldirs; do
              AC_MSG_CHECKING([for openssl/crypto.h in $ssldir])
              if test -f "$ssldir/include/openssl/crypto.h"; then
 -                LIBCRYPTO_INCLUDES="-I$ssldir/include"
 -                LIBCRYPTO_LDFLAGS="-L$ssldir/lib"
 +                if test $ssldir != /usr; then
 +                    LIBCRYPTO_INCLUDES="-I$ssldir/include"
 +                    LIBCRYPTO_LDFLAGS="-L$ssldir/lib"
 +                fi
                  LIBCRYPTO_LIBS="-lcrypto"
                  found=true
-                 AC_MSG_RESULT([yes])
-@@ -108,7 +110,7 @@ AC_DEFUN([PDNS_CHECK_LIBCRYPTO], [
-     LIBS="$LIBCRYPTO_LIBS $LIBS"
-     CPPFLAGS="$LIBCRYPTO_INCLUDES $CPPFLAGS"
-     AC_LINK_IFELSE(
--        [AC_LANG_PROGRAM([#include <openssl/crypto.h>], [ERR_load_CRYPTO_strings()])],
-+        [AC_LANG_PROGRAM([#include <openssl/bn.h>], [BN_new()])],
-         [
-             AC_MSG_RESULT([yes])
-             AC_CHECK_FUNCS([RAND_bytes RAND_pseudo_bytes CRYPTO_memcmp OPENSSL_init_crypto EVP_MD_CTX_new EVP_MD_CTX_free RSA_get0_key])