diff -urN /usr/ports/net/ocserv.old/Makefile /usr/ports/net/ocserv/Makefile
--- /usr/ports/net/ocserv.old/Makefile	2015-10-07 03:36:22.000000000 +0200
+++ /usr/ports/net/ocserv/Makefile	2015-10-13 12:02:36.797080000 +0200
@@ -2,7 +2,7 @@
 # $FreeBSD: head/net/ocserv/Makefile 398733 2015-10-07 01:36:22Z amdmi3 $
 
 PORTNAME=	ocserv
-PORTVERSION=	0.10.8
+PORTVERSION=	0.10.9
 CATEGORIES=	net security
 MASTER_SITES=	ftp://ftp.infradead.org/pub/ocserv/
 
diff -urN /usr/ports/net/ocserv.old/distinfo /usr/ports/net/ocserv/distinfo
--- /usr/ports/net/ocserv.old/distinfo	2015-09-06 22:24:10.000000000 +0200
+++ /usr/ports/net/ocserv/distinfo	2015-10-13 11:45:33.555016000 +0200
@@ -1,2 +1,2 @@
-SHA256 (ocserv-0.10.8.tar.xz) = af989f27585d3567221ffc40babbb383bcd0ca6879e52bbcdee6ac3a90608454
-SIZE (ocserv-0.10.8.tar.xz) = 714404
+SHA256 (ocserv-0.10.9.tar.xz) = 96d0ea22e811a70e46561ffe29c4e6b1cc014ee24d353c0367ca72edcedf533c
+SIZE (ocserv-0.10.9.tar.xz) = 718004
diff -urN /usr/ports/net/ocserv.old/files/patch-src_ocserv-args.def /usr/ports/net/ocserv/files/patch-src_ocserv-args.def
--- /usr/ports/net/ocserv.old/files/patch-src_ocserv-args.def	2015-09-06 22:24:10.000000000 +0200
+++ /usr/ports/net/ocserv/files/patch-src_ocserv-args.def	2015-10-13 11:52:09.908186000 +0200
@@ -1,4 +1,4 @@
---- src/ocserv-args.def.orig	2015-08-31 19:19:45 UTC
+--- src/ocserv-args.def.orig	2015-10-13 09:47:33 UTC
 +++ src/ocserv-args.def
 @@ -68,7 +68,7 @@ doc-section = {
    ds-format = 'texi';
@@ -13,12 +13,12 @@
  #  This enabled PAM authentication of the user. The gid-min option is used 
  # by auto-select-group option, in order to select the minimum valid group ID.
  #
--# plain[passwd=/etc/ocserv/ocpasswd]
-+# plain[passwd=/usr/local/etc/ocserv/ocpasswd]
+-# plain[passwd=/etc/ocserv/ocpasswd,otp=/etc/ocserv/users.otp]
++# plain[passwd=/usr/local/etc/ocserv/ocpasswd,otp=/usr/local/etc/ocserv/users.otp]
  #  The plain option requires specifying a password file which contains
  # entries of the following format.
  # "username:groupname1,groupname2:encoded-password"
-@@ -119,7 +119,7 @@ An example configuration file follows.
+@@ -121,7 +121,7 @@ An example configuration file follows.
  #auth = "certificate"
  #auth = "pam"
  #auth = "pam[gid-min=1000]"
@@ -27,7 +27,7 @@
  #auth = "radius[config=/etc/radiusclient/radiusclient.conf,groupconfig=true]"
  
  # Specify alternative authentication methods that are sufficient
-@@ -429,7 +429,7 @@ rekey-method = ssl
+@@ -437,7 +437,7 @@ rekey-method = ssl
  use-occtl = true
  
  # PID file. It can be overriden in the command line.
@@ -36,7 +36,7 @@
  
  # Set the protocol-defined priority (SO_PRIORITY) for packets to
  # be sent. That is a number from 0 to 6 with 0 being the lowest
-@@ -553,13 +553,13 @@ no-route = 192.168.5.0/255.255.255.0
+@@ -564,13 +564,13 @@ no-route = 192.168.5.0/255.255.255.0
  # Also explicit addresses, are only allowed when they are odd. In that
  # case the next even address will be used as the remote address (in PtP).