  #include <openssl/rand.h>
  #include <openssl/x509v3.h>
  #ifndef OPENSSL_NO_DSA
-@@ -154,6 +156,18 @@ static unsigned long OpenSSL_version_num(void)
+@@ -152,6 +154,18 @@ static unsigned long OpenSSL_version_num(void)
  #define OSSL_PACKAGE "OpenSSL"
  #endif
  

 {
   OPENSSL_load_builtin_modules();
 
@@ -776,7 +790,7 @@ int Curl_ossl_init(void)
 }
 
 /* Global cleanup */

       if(verifypeer) {
         /* Fail if we insist on successfully verifying the server. */
         failf(data, "error setting certificate verify locations:\n"
@@ -2164,14 +2178,14 @@ static CURLcode ossl_connect_step1(struct connectdata *conn, int sockindex)
   else if(verifypeer) {
     /* verfying the peer without any CA certificates won't
        work so use openssl's built in default as fallback */
