explicit about what is used where. Seems to be the least worst solution.
-/* $OpenBSD: cert.c,v 1.23 2021/01/29 10:13:16 claudio Exp $ */
+/* $OpenBSD: cert.c,v 1.24 2021/02/04 08:58:19 claudio Exp $ */
/*
* Copyright (c) 2019 Kristaps Dzonsons <kristaps@bsd.lv>
*
#include <string.h>
#include <unistd.h>
-#include <openssl/x509v3.h> /* DIST_POINT */
+#include <openssl/asn1.h>
+#include <openssl/x509.h>
#include "extern.h"
-/* $OpenBSD: gbr.c,v 1.3 2021/01/29 10:13:16 claudio Exp $ */
+/* $OpenBSD: gbr.c,v 1.4 2021/02/04 08:58:19 claudio Exp $ */
/*
* Copyright (c) 2020 Claudio Jeker <claudio@openbsd.org>
*
#include <string.h>
#include <unistd.h>
+#include <openssl/x509.h>
+
#include "extern.h"
/*
-/* $OpenBSD: mft.c,v 1.24 2021/01/29 10:13:16 claudio Exp $ */
+/* $OpenBSD: mft.c,v 1.25 2021/02/04 08:58:19 claudio Exp $ */
/*
* Copyright (c) 2019 Kristaps Dzonsons <kristaps@bsd.lv>
*
#include <string.h>
#include <unistd.h>
+#include <openssl/asn1.h>
#include <openssl/sha.h>
+#include <openssl/x509.h>
#include "extern.h"
-/* $OpenBSD: parser.c,v 1.2 2021/02/04 08:13:57 claudio Exp $ */
+/* $OpenBSD: parser.c,v 1.3 2021/02/04 08:58:19 claudio Exp $ */
/*
* Copyright (c) 2019 Claudio Jeker <claudio@openbsd.org>
* Copyright (c) 2019 Kristaps Dzonsons <kristaps@bsd.lv>
#include <openssl/asn1.h>
#include <openssl/err.h>
+#include <openssl/evp.h>
#include <openssl/x509.h>
#include "extern.h"
-/* $OpenBSD: roa.c,v 1.12 2021/01/29 10:13:16 claudio Exp $ */
+/* $OpenBSD: roa.c,v 1.13 2021/02/04 08:58:19 claudio Exp $ */
/*
* Copyright (c) 2019 Kristaps Dzonsons <kristaps@bsd.lv>
*
#include <string.h>
#include <unistd.h>
+#include <openssl/asn1.h>
+#include <openssl/x509.h>
+
#include "extern.h"
/*