diff --git a/lib/hcrypto/evp-pkcs11.c b/lib/hcrypto/evp-pkcs11.c
index 9d420f509..08f258475 100644
--- a/lib/hcrypto/evp-pkcs11.c
+++ b/lib/hcrypto/evp-pkcs11.c
@@ -31,6 +31,7 @@
 /* PKCS#11 provider */
 
 #include "config.h"
+#include <roken.h>
 
 #include <assert.h>
 #ifdef HAVE_DLFCN_H
@@ -51,7 +52,6 @@
 #error PKCS11 support requires dlfcn.h
 #endif
 
-#include <roken.h>
 #include <heimbase.h>
 
 #include <evp.h>