diff --git a/lib/core/output.c b/lib/core/output.c
index 64344407e..2de4a30a8 100644
--- a/lib/core/output.c
+++ b/lib/core/output.c
@@ -284,7 +284,9 @@ LWS_VISIBLE int
 lws_ssl_capable_write_no_ssl(struct lws *wsi, unsigned char *buf, int len)
 {
 	int n = 0;
+#if defined(LWS_PLAT_OPTEE)
 	ssize_t send(int sockfd, const void *buf, size_t len, int flags);
+#endif
 
 	if (lws_wsi_is_udp(wsi)) {
 #if !defined(LWS_WITH_ESP32) && !defined(LWS_PLAT_OPTEE)
diff --git a/lib/tls/mbedtls/wrapper/include/internal/ssl_types.h b/lib/tls/mbedtls/wrapper/include/internal/ssl_types.h
index 68ac748a2..35d2d852b 100644
--- a/lib/tls/mbedtls/wrapper/include/internal/ssl_types.h
+++ b/lib/tls/mbedtls/wrapper/include/internal/ssl_types.h
@@ -19,6 +19,7 @@
  extern "C" {
 #endif
 
+//#include "core/private.h"
 #include <lws_config.h>
 #if defined(LWS_WITH_ESP32)
 #undef MBEDTLS_CONFIG_FILE
@@ -154,10 +155,11 @@ struct X509_VERIFY_PARAM_st {
 
 };
 
-typedef int (*next_proto_cb)(SSL *ssl, unsigned char **out,
+typedef int (*next_proto_cb)(SSL *ssl, const unsigned char **out,
                              unsigned char *outlen, const unsigned char *in,
                              unsigned int inlen, void *arg);
 
+
 struct ssl_ctx_st
 {
     int version;
diff --git a/lib/tls/openssl/private.h b/lib/tls/openssl/private.h
index 15db4d186..6a89d51fd 100644
--- a/lib/tls/openssl/private.h
+++ b/lib/tls/openssl/private.h
@@ -21,6 +21,10 @@
  *  gencrypto openssl-specific helper declarations
  */
 
+typedef int (*next_proto_cb)(SSL *, const unsigned char **out,
+                             unsigned char *outlen, const unsigned char *in,
+                             unsigned int inlen, void *arg);
+
 struct lws_x509_cert {
 	X509 *cert; /* X509 is opaque, this has to be a pointer */
 };