don't set want_openssl_aes unless CRYPTO = -DOPENSSL

config.h.in

@@ -188,6 +188,9 @@ int sigwait(const unsigned int *set, int *sig);
    MSVC and with C++ compilers. */
 #undef FLEXIBLE_ARRAY_MEMBER
 
+/* Define to 1 if you have the `AES_encrypt' function. */
+#undef HAVE_AES_ENCRYPT
+
 /* Define to 1 if you have the `chroot' function. */
 #undef HAVE_CHROOT
 

configure

@@ -15684,7 +15684,10 @@ $as_echo "#define HMAC_SHA256_SIT 1" >>confdefs.h
 		if test "$ac_cv_func_AES_encrypt" = "yes"
 		then
 			with_sit_alg="aes"
+			if test "$CRYPTO" = "-DOPENSSL"
+			then
 				want_openssl_aes="yes"
+			fi
 
 $as_echo "#define AES_SIT 1" >>confdefs.h
 

configure.in

@@ -1558,7 +1558,10 @@ case $with_sit_alg in
 		if test "$ac_cv_func_AES_encrypt" = "yes"
 		then
 			with_sit_alg="aes"
+			if test "$CRYPTO" = "-DOPENSSL"
+			then
 				want_openssl_aes="yes"
+			fi
 			AC_DEFINE(AES_SIT, 1,
 				 [Use AES for Source Identity Token generation])
 		else