diff --git a/security/libssh/Makefile b/security/libssh/Makefile
index 2db7839d7c4f..2f33d925a089 100644
--- a/security/libssh/Makefile
+++ b/security/libssh/Makefile
@@ -49,13 +49,21 @@ CMAKE_ON=	BUILD_SHARED_LIBS \
 CMAKE_TESTING_ON=	UNIT_TESTING
 USE_LDCONFIG=	yes
 
-OPTIONS_DEFINE=	GSSAPI STATIC
+OPTIONS_DEFINE=	STATIC
 OPTIONS_RADIO=	CRYPTO
 OPTIONS_RADIO_CRYPTO=	MBEDTLS OPENSSL
-OPTIONS_DEFAULT=GSSAPI OPENSSL STATIC
+OPTIONS_SINGLE=	GSSAPI
+OPTIONS_SINGLE_GSSAPI=	GSSAPI_BASE GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE
+OPTIONS_DEFAULT=GSSAPI_BASE OPENSSL STATIC
 OPTIONS_SUB=	yes
 
-GSSAPI_CMAKE_BOOL=	WITH_GSSAPI
+GSSAPI_BASE_CMAKE_ON=	-DKRB5_CONFIG=${KRB5CONFIG} -DWITH_GSSAPI=ON
+GSSAPI_BASE_USES=	gssapi:base,flags
+GSSAPI_HEIMDAL_CMAKE_ON=-DKRB5_CONFIG=${KRB5CONFIG} -DWITH_GSSAPI=ON
+GSSAPI_HEIMDAL_USES=	gssapi:heimdal,flags
+GSSAPI_MIT_CMAKE_ON=	-DKRB5_CONFIG=${KRB5CONFIG} -DWITH_GSSAPI=ON
+GSSAPI_MIT_USES=	gssapi:mit,flags
+GSSAPI_NONE_CMAKE_BOOL_OFF=	WITH_GSSAPI
 MBEDTLS_CMAKE_BOOL=	WITH_MBEDTLS
 MBEDTLS_LIB_DEPENDS=	libmbedcrypto.so:security/mbedtls
 OPENSSL_CMAKE_BOOL_OFF=	CMAKE_DISABLE_FIND_PACKAGE_OpenSSL