diff --git a/ssl/dnssec.c b/ssl/dnssec.c
index adbee5d1d2..8b1f4dd9c3 100644
--- a/ssl/dnssec.c
+++ b/ssl/dnssec.c
@@ -5,6 +5,8 @@
 #include <openssl/bio.h>
 #include <openssl/dso.h>
 
+#include "ssl.h"
+
 #ifndef OPENSSL_NO_LIBUNBOUND
 #include <unbound.h>
 
diff --git a/ssl/ssl.h b/ssl/ssl.h
index 7260c8cba3..b8c8847a10 100644
--- a/ssl/ssl.h
+++ b/ssl/ssl.h
@@ -2295,7 +2295,7 @@ void SSL_trace(int write_p, int version, int content_type,
 const char *SSL_CIPHER_standard_name(const SSL_CIPHER *c);
 #endif
 
-void *SSL_get_tlsa_record_byname(const char *name,int port,int type);
+unsigned char *SSL_get_tlsa_record_byname(const char *name,int port,int type);
 
 /* BEGIN ERROR CODES */
 /* The following lines are auto generated by the script mkerr.pl. Any changes