diff --git a/net-dns/dnssec-validator/dnssec-validator-2.2-r1.ebuild b/net-dns/dnssec-validator/dnssec-validator-2.2-r1.ebuild
index 276cf1a05974e..7830c98a5d5b1 100644
--- a/net-dns/dnssec-validator/dnssec-validator-2.2-r1.ebuild
+++ b/net-dns/dnssec-validator/dnssec-validator-2.2-r1.ebuild
@@ -12,9 +12,10 @@ SRC_URI="http://www.dnssec-tools.org/download/dnsval-${PV}.tar.gz"
 LICENSE="BSD"
 SLOT="0"
 KEYWORDS="~amd64 ~arm ~x86"
-IUSE="ipv6 static-libs +threads"
+IUSE="ipv6 static-libs +threads +ecdsa-check"
 
 RDEPEND="dev-libs/openssl:0
+	ecdsa-check? ( dev-libs/openssl:0[-bindist] )
 	!<net-dns/dnssec-tools-1.13"
 DEPEND="${RDEPEND}"
 
@@ -28,7 +29,8 @@ src_configure() {
 		--with-nsec3 \
 		--with-dlv \
 		$(use_with ipv6) \
-		$(use_with threads)
+		$(use_with threads) \
+		$(use_enable ecdsa-check)
 }
 
 src_install() {
diff --git a/net-dns/dnssec-validator/metadata.xml b/net-dns/dnssec-validator/metadata.xml
index a535b88528299..6f3178436bbc1 100644
--- a/net-dns/dnssec-validator/metadata.xml
+++ b/net-dns/dnssec-validator/metadata.xml
@@ -5,4 +5,7 @@
 <email>xmw@gentoo.org</email>
 <name>Michael Weber</name>
 </maintainer>
+<use>
+	<flag name="ecdsa-check">Requires openssl[-bindist]</flag>
+</use>
 </pkgmetadata>