diff --git a/doc/Changelog b/doc/Changelog
index 035d040a9..e98876fca 100644
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,6 +1,7 @@
 9 October 2020: Wouter
 	- Fix dnstap socket and the chroot not applied properly to the dnstap
 	  socket path.
+	- Fix warning in libnss compile, nss_buf2dsa is not used without DSA.
 
 8 October 2020: Wouter
 	- Tag for 1.12.0 release.
diff --git a/validator/val_secalgo.c b/validator/val_secalgo.c
index 65bca8b69..15cccf017 100644
--- a/validator/val_secalgo.c
+++ b/validator/val_secalgo.c
@@ -990,6 +990,7 @@ static SECKEYPublicKey* nss_buf2ecdsa(unsigned char* key, size_t len, int algo)
 	return pk;
 }
 
+#if defined(USE_DSA) && defined(USE_SHA1)
 static SECKEYPublicKey* nss_buf2dsa(unsigned char* key, size_t len)
 {
 	SECKEYPublicKey* pk;
@@ -1050,6 +1051,7 @@ static SECKEYPublicKey* nss_buf2dsa(unsigned char* key, size_t len)
 	}
 	return pk;
 }
+#endif /* USE_DSA && USE_SHA1 */
 
 static SECKEYPublicKey* nss_buf2rsa(unsigned char* key, size_t len)
 {