Index: src/openvpn/crypto_openssl.c
--- src/openvpn/crypto_openssl.c.orig
+++ src/openvpn/crypto_openssl.c
@@ -48,10 +48,7 @@
 #include <openssl/objects.h>
 #include <openssl/rand.h>
 #include <openssl/ssl.h>
-
-#if !defined(LIBRESSL_VERSION_NUMBER)
 #include <openssl/kdf.h>
-#endif
 #if OPENSSL_VERSION_NUMBER >= 0x30000000L
 #include <openssl/provider.h>
 #include <openssl/core_names.h>
@@ -1406,7 +1403,7 @@ ssl_tls1_PRF(const uint8_t *label, size_t label_len, c
     return CRYPTO_tls1_prf(EVP_md5_sha1(), out1, olen, sec, slen,
                            (const char *)label, label_len, NULL, 0, NULL, 0);
 }
-#elif !defined(LIBRESSL_VERSION_NUMBER) && !defined(ENABLE_CRYPTO_WOLFSSL)
+#elif !defined(ENABLE_CRYPTO_WOLFSSL)
 #if defined(__GNUC__) || defined(__clang__)
 #pragma GCC diagnostic push
 #pragma GCC diagnostic ignored "-Wconversion"
