diff --git a/net/ldns/Makefile b/net/ldns/Makefile
index 446ea7ebbb99..4af40762e672 100644
--- a/net/ldns/Makefile
+++ b/net/ldns/Makefile
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.45 2021/05/24 19:53:18 wiz Exp $
+# $NetBSD: Makefile,v 1.46 2021/11/26 23:52:34 he Exp $
 
-DISTNAME=	ldns-1.7.1
-PKGREVISION=	4
+DISTNAME=	ldns-1.8.0
+PKGNAME=	${DISTNAME:S/-rc./rc/}
 CATEGORIES=	net
 MASTER_SITES=	http://www.nlnetlabs.nl/downloads/ldns/
 
@@ -16,14 +16,14 @@ GNU_CONFIGURE=		yes
 
 REPLACE_PERL=	doc/doxyparse.pl
 
+BUILDLINK_API_DEPENDS+= openssl>=1.1.0
+# So we can omit --disable-dane-verify
+
 CHECK_BUILTIN.openssl=	yes
 .include "../../security/openssl/builtin.mk"
 CHECK_BUILTIN.openssl=	no
 .include "../../security/openssl/buildlink3.mk"
 
-# if openssl < 1.1.0
-CONFIGURE_ARGS+=	--disable-dane-verify
-
 PLIST_VARS+=		sha2 gost
 .if defined(USE_BUILTIN.openssl) && !empty(USE_BUILTIN.openssl:M[yY][eE][sS])
 PLIST_VARS.gost!=	\
@@ -66,5 +66,6 @@ CONFIGURE_ARGS+=	--with-ssl=${SSLBASE}
 CONFIGURE_ARGS+=	DOXYGEN=${FALSE}
 
 CONFIGURE_ARGS+=	--with-examples
+CONFIGURE_ARGS+=	--enable-rrtype-svcb-https
 
 .include "../../mk/bsd.pkg.mk"
diff --git a/net/ldns/distinfo b/net/ldns/distinfo
index 6b68244d8d15..3efb63e40a09 100644
--- a/net/ldns/distinfo
+++ b/net/ldns/distinfo
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.26 2021/10/26 11:05:52 nia Exp $
+$NetBSD: distinfo,v 1.27 2021/11/26 23:52:34 he Exp $
 
-BLAKE2s (ldns-1.7.1.tar.gz) = 1eba67c3b9950ac569f69676ffe40962663e7a4ddd0f118f9a680a20e6c899ad
-SHA512 (ldns-1.7.1.tar.gz) = e8f72a4ff4aa544acac5e7be9a8ba38c6b8d388bb26f9a0ed04c1a921622f8582cc8539beafc76a29187a55c94069b7c1875e77522e1a7e7bb3e297dd1e4c2b7
-Size (ldns-1.7.1.tar.gz) = 1244394 bytes
+BLAKE2s (ldns-1.8.0.tar.gz) = cca9780737bece19a0c4c6fd59bab1cb6fa560f65d77609283728e4198ddfd1e
+SHA512 (ldns-1.8.0.tar.gz) = 54b306160bb7fd76d181f4be0a13134017f6f98ae96e0c954409f31f262e9dbe611c4b76fb6dff47bb6155c652ed8d026b52a50dfcf611e54d9c204b314c4fd6
+Size (ldns-1.8.0.tar.gz) = 1283220 bytes