diff --git a/usr.sbin/syslogd/tls.c b/usr.sbin/syslogd/tls.c
index 6a7c110aaec1..8c91302b5a79 100644
--- a/usr.sbin/syslogd/tls.c
+++ b/usr.sbin/syslogd/tls.c
@@ -1,4 +1,4 @@
-/*	$NetBSD: tls.c,v 1.15 2018/02/06 22:04:22 maya Exp $	*/
+/*	$NetBSD: tls.c,v 1.16 2018/02/08 17:45:29 christos Exp $	*/
 
 /*-
  * Copyright (c) 2008 The NetBSD Foundation, Inc.
@@ -45,7 +45,7 @@
  */
 
 #include <sys/cdefs.h>
-__RCSID("$NetBSD: tls.c,v 1.15 2018/02/06 22:04:22 maya Exp $");
+__RCSID("$NetBSD: tls.c,v 1.16 2018/02/08 17:45:29 christos Exp $");
 
 #ifndef DISABLE_TLS
 #include <sys/stat.h>
@@ -84,9 +84,6 @@ static const char *TLS_CONN_STATES[] = {
 
 DH *get_dh1024(void);
 /* DH parameter precomputed with "openssl dhparam -C -2 1024" */
-#ifndef HEADER_DH_H
-#include <openssl/dh.h>
-#endif
 DH *
 get_dh1024(void)
 {
diff --git a/usr.sbin/syslogd/tls.h b/usr.sbin/syslogd/tls.h
index 9672f1ce2d93..69cd0702d374 100644
--- a/usr.sbin/syslogd/tls.h
+++ b/usr.sbin/syslogd/tls.h
@@ -1,4 +1,4 @@
-/*	$NetBSD: tls.h,v 1.2 2008/11/07 07:36:38 minskim Exp $	*/
+/*	$NetBSD: tls.h,v 1.3 2018/02/08 17:45:29 christos Exp $	*/
 
 /*-
  * Copyright (c) 2008 The NetBSD Foundation, Inc.
@@ -45,6 +45,7 @@
 #include <openssl/err.h>
 #include <openssl/rand.h>
 #include <openssl/pem.h>
+#include <openssl/dh.h>
 
 /* initial size for TLS inbuf, minimum prefix + linelength
  * guaranteed to be accepted */