diff --git a/programs/ssl/ssl_client2.c b/programs/ssl/ssl_client2.c
index cd02fcb50..788793a49 100644
--- a/programs/ssl/ssl_client2.c
+++ b/programs/ssl/ssl_client2.c
@@ -707,6 +707,9 @@ static int my_verify( void *data, mbedtls_x509_crt *crt,
 
 #endif /* MBEDTLS_X509_CRT_PARSE_C */
 
+#if ( defined(MBEDTLS_X509_CRT_PARSE_C) &&        \
+      !defined(MBEDTLS_SSL_CONF_SINGLE_HASH) ) || \
+    !defined(MBEDTLS_CTR_DRBG_C)
 static int available_hashes[] = {
 #if defined(MBEDTLS_SHA512_C)
     MBEDTLS_MD_SHA512,
@@ -722,6 +725,8 @@ static int available_hashes[] = {
 #endif
     MBEDTLS_MD_NONE
 };
+#endif /* ( MBEDTLS_X509_CRT_PARSE_C && !MBEDTLS_SSL_CONF_SINGLE_HASH ) ||
+          !MBEDTLS_CTR_DRBG_C */
 
 /*
  * Wait for an event from the underlying transport or the timer
diff --git a/programs/ssl/ssl_server2.c b/programs/ssl/ssl_server2.c
index d32d3aaa6..778fe941c 100644
--- a/programs/ssl/ssl_server2.c
+++ b/programs/ssl/ssl_server2.c
@@ -1137,6 +1137,9 @@ void term_handler( int sig )
 }
 #endif
 
+#if ( defined(MBEDTLS_X509_CRT_PARSE_C) &&        \
+      !defined(MBEDTLS_SSL_CONF_SINGLE_HASH) ) || \
+    !defined(MBEDTLS_CTR_DRBG_C)
 static int available_hashes[] = {
 #if defined(MBEDTLS_SHA512_C)
     MBEDTLS_MD_SHA512,
@@ -1152,6 +1155,8 @@ static int available_hashes[] = {
 #endif
     MBEDTLS_MD_NONE
 };
+#endif /* ( MBEDTLS_X509_CRT_PARSE_C && !MBEDTLS_SSL_CONF_SINGLE_HASH ) ||
+          !MBEDTLS_CTR_DRBG_C */
 
 /** Return true if \p ret is a status code indicating that there is an
  * operation in progress on an SSL connection, and false if it indicates