From 87f3477626cac8dc09dafdff2f465baa2f8a7095 Mon Sep 17 00:00:00 2001
From: Quanah Gibson-Mount <quanah@openldap.org>
Date: Tue, 18 Apr 2017 13:40:05 -0700
Subject: [PATCH] Fix autoca build with OpenSSL 1.1.0

---
 servers/slapd/overlays/autoca.c | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/servers/slapd/overlays/autoca.c b/servers/slapd/overlays/autoca.c
index a72e798a01..bcd62898a2 100644
--- a/servers/slapd/overlays/autoca.c
+++ b/servers/slapd/overlays/autoca.c
@@ -37,6 +37,15 @@
 #include <openssl/x509v3.h>
 #include <openssl/evp.h>
 
+/* Starting with OpenSSL 1.1.0, rsa.h is no longer included in
+ * x509.h, so we need to explicitly include it for the
+ * call to EVP_PKEY_CTX_set_rsa_keygen_bits
+ */
+
+#if OPENSSL_VERSION_NUMBER >= 0x10100000
+#include <openssl/rsa.h>
+#endif
+
 /* This overlay implements a certificate authority that can generate
  * certificates automatically for any entry in the directory.
  * On startup it generates a self-signed CA cert for the directory's