From 0f7aa44e87cc624bb3864305bd8707a8664a23e9 Mon Sep 17 00:00:00 2001
From: Aram Sargsyan <aram@isc.org>
Date: Tue, 28 Apr 2026 16:28:28 +0000
Subject: [PATCH] Fix compatibility with OpenSSL 1.0.2u

BIND failed to build with OpenSSL 1.0.2u. Add the missing header
file includes.
---
 lib/isc/openssl_shim.c | 1 +
 lib/isc/tls.c          | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/lib/isc/openssl_shim.c b/lib/isc/openssl_shim.c
index 8a2e20b15b..bdcb9693a6 100644
--- a/lib/isc/openssl_shim.c
+++ b/lib/isc/openssl_shim.c
@@ -16,6 +16,7 @@
 #include <string.h>
 
 #include <openssl/crypto.h>
+#include <openssl/err.h>
 #include <openssl/evp.h>
 #include <openssl/opensslv.h>
 #include <openssl/ssl.h>
diff --git a/lib/isc/tls.c b/lib/isc/tls.c
index d564998af5..2107d02087 100644
--- a/lib/isc/tls.c
+++ b/lib/isc/tls.c
@@ -25,6 +25,9 @@
 #include <openssl/conf.h>
 #include <openssl/crypto.h>
 #include <openssl/dh.h>
+#if !defined(OPENSSL_NO_ENGINE) && OPENSSL_API_LEVEL < 30000
+#include <openssl/engine.h>
+#endif /* if !defined(OPENSSL_NO_ENGINE) && OPENSSL_API_LEVEL < 30000 */
 #include <openssl/err.h>
 #include <openssl/evp.h>
 #include <openssl/opensslv.h>