diff --git a/libs/getdns/patches/010-openssl-deprecated.patch b/libs/getdns/patches/010-openssl-deprecated.patch
new file mode 100644
index 000000000..21d850351
--- /dev/null
+++ b/libs/getdns/patches/010-openssl-deprecated.patch
@@ -0,0 +1,13 @@
+--- a/src/tls/val_secalgo.c
++++ b/src/tls/val_secalgo.c
+@@ -72,6 +72,10 @@
+ #include <openssl/engine.h>
+ #endif
+ 
++#ifdef USE_DSA
++#include <openssl/dsa.h>
++#endif
++
+ /** fake DSA support for unit tests */
+ int fake_dsa = 0;
+ /** fake SHA1 support for unit tests */