diff --git a/CMakeLists.txt b/CMakeLists.txt
index ecacb26a9..80d66bc28 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -687,9 +687,15 @@ if( WITH_PKCS )
     message( STATUS "Found OpenSC PKCS11 provider: ${OPENSC_PKCS11_PROVIDER_LIBRARY}" )
   endif( OPENSC_PKCS11_PROVIDER_LIBRARY )
   if( NOT OPENSC_PKCS11_PROVIDER_FOUND )
-    tde_message_fatal( "PKCS is requested, but not OpenSC PKCS11 provider was not found on your system" )
+    tde_message_fatal( "PKCS is requested, but no OpenSC PKCS11 provider was found on your system" )
   endif( NOT OPENSC_PKCS11_PROVIDER_FOUND )
-  set( HAVE_PKCS 1 )
+  pkg_search_module( SSL openssl )
+  if( NOT SSL_FOUND OR SSL_VERSION VERSION_LESS "1.1" )
+    set( HAVE_PKCS 1 )
+  else( )
+    set( WITH_PKCS OFF CACHE INTERNAL "PKCS support is not ready for OpenSSL >= 1.1" FORCE )
+    message( WARNING "\nPKCS support is not ready for OpenSSL >= 1.1" )
+  endif( )
 endif( )