diff --git a/secure/lib/libcrypto/Makefile b/secure/lib/libcrypto/Makefile
--- a/secure/lib/libcrypto/Makefile
+++ b/secure/lib/libcrypto/Makefile
@@ -649,10 +649,11 @@
 .else
 _cmd1=s/%%NO_ASM%%//
 .endif
-.if ${MK_OPENSSL_KTLS} != "no"
+.if ${MK_OPENSSL_KTLS} != "no" && !defined(BOOTSTRAPPING)
 _cmd2=/%%NO_KTLS%%/d
 .else
 _cmd2=s/%%NO_KTLS%%//
+CFLAGS+= -DOPENSSL_NO_KTLS
 .endif
 
 buildinf.h: Makefile
diff --git a/secure/lib/libssl/Makefile b/secure/lib/libssl/Makefile
--- a/secure/lib/libssl/Makefile
+++ b/secure/lib/libssl/Makefile
@@ -70,7 +70,7 @@
 SRCS+=	poll_immediate.c
 SRCS+=	rio_notifier.c poll_builder.c
 
-.if ${MK_OPENSSL_KTLS} == "no"
+.if ${MK_OPENSSL_KTLS} == "no" || defined(BOOTSTRAPPING)
 CFLAGS+=-DOPENSSL_NO_KTLS
 .else
 SRCS+=	ktls_meth.c