diff --git a/srcpkgs/openssh/template b/srcpkgs/openssh/template
index 33166577a01..794a6cefbed 100644
--- a/srcpkgs/openssh/template
+++ b/srcpkgs/openssh/template
@@ -36,6 +36,10 @@ if [ "$build_option_fido2" ]; then
 	subpackages="openssh-sk-helper"
 fi
 
+if [ "$build_option_ldns" -a -z "$build_option_ssl" ]; then
+	broken="option 'ldns' requires option 'ssl'"
+fi
+
 CFLAGS="-Wno-format-truncation -Wno-stringop-truncation"
 
 case $XBPS_TARGET_MACHINE in