Someone decided to disable all backwards compatibility when they built OpenSSL 1.1.0.
Unfortunately when we test built against OpenSS1 1.1.0 we did a default build which
doesn't do this.  Anyway the fix is simple.

diff --git a/lib/dns/openssl_link.c b/lib/dns/openssl_link.c
index 7f74489937..88e7921d46 100644
--- a/lib/dns/openssl_link.c
+++ b/lib/dns/openssl_link.c
@@ -204,9 +204,9 @@ dst__openssl_init(const char *engine) {
                goto cleanup_mutexalloc;
        CRYPTO_set_locking_callback(lock_callback);
        CRYPTO_set_id_callback(id_callback);
-#endif
 
        ERR_load_crypto_strings();
+#endif
 
        rm = mem_alloc(sizeof(RAND_METHOD) FILELINE);
        if (rm == NULL) {