diff -up pdns-4.0.1/pdns/dns_random.cc.openssl pdns-4.0.1/pdns/dns_random.cc
--- pdns-4.0.1/pdns/dns_random.cc.openssl	2016-11-19 11:35:33.865736519 -0700
+++ pdns-4.0.1/pdns/dns_random.cc	2016-11-19 11:36:13.357295050 -0700
@@ -2,6 +2,7 @@
 #include "config.h"
 #endif
 #include <openssl/aes.h>
+#include <openssl/opensslv.h>
 #if OPENSSL_VERSION_NUMBER > 0x1000100fL
 // Older OpenSSL does not have CRYPTO_ctr128_encrypt. Before 1.1.0 the header
 // file did not have the necessary extern "C" wrapper. In 1.1.0, AES_ctr128_encrypt