Hi Jakob, Thank you for reaching out. I am not sure I fully understand your report, though. OpenSSL 1.1 indeed does not support GOST, but could you please explain what you meant by "rewriting the autoconf test"? "./configure --with-gost" fails hard when attempted with OpenSSL 1.1 whereas a plain "./configure" properly detects that GOST is unavailable and thus disables GOST support in BIND. In light of the above, could you please provide a more detailed explanation of the problem that you are observing?