From fb46af61188ddb98031d58ef87847dee99c93a0e Mon Sep 17 00:00:00 2001
From: Rosen Penev <rosenp@gmail.com>
Date: Mon, 30 Mar 2020 13:40:44 -0700
Subject: [PATCH] fix compilation without deprecated OpenSSL APIs

This header is normally included with ssl.h.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
---
 pdns/opensslsigners.cc | 1 +
 pdns/pkcs11signers.cc  | 1 +
 2 files changed, 2 insertions(+)

diff --git a/pdns/opensslsigners.cc b/pdns/opensslsigners.cc
index 6322db0ebd..d879d67e4d 100644
--- a/pdns/opensslsigners.cc
+++ b/pdns/opensslsigners.cc
@@ -29,6 +29,7 @@
 #if defined(HAVE_LIBCRYPTO_ED25519) || defined(HAVE_LIBCRYPTO_ED448)
 #include <openssl/evp.h>
 #endif
+#include <openssl/bn.h>
 #include <openssl/sha.h>
 #include <openssl/rand.h>
 #include <openssl/rsa.h>
diff --git a/pdns/pkcs11signers.cc b/pdns/pkcs11signers.cc
index 231ad9afb0..1d3c5ffb62 100644
--- a/pdns/pkcs11signers.cc
+++ b/pdns/pkcs11signers.cc
@@ -15,6 +15,7 @@
 #include "pdns/lock.hh"
 
 #ifdef HAVE_LIBCRYPTO_ECDSA
+#include <openssl/bn.h>
 #include <openssl/ec.h>
 #endif
 
-- 
2.47.2