diff --git a/Cargo.lock b/Cargo.lock
index 914a239..fe65162 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -143,15 +143,31 @@ version = "1.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0c4b4d0bd25bd0b74681c0ad21497610ce1b7c91b1022cd21c80c6fbdd9476b0"
 
+[[package]]
+name = "aws-lc-fips-sys"
+version = "0.12.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "33d41a5d02120c5eca009507574fa0d4885fa370cbda6b561d91ba463c3025a7"
+dependencies = [
+ "bindgen",
+ "cmake",
+ "dunce",
+ "fs_extra",
+ "libc",
+ "paste",
+]
+
 [[package]]
 name = "aws-lc-rs"
 version = "1.8.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "4ae74d9bd0a7530e8afd1770739ad34b36838829d6ad61818f9230f683f5ad77"
 dependencies = [
+ "aws-lc-fips-sys",
  "aws-lc-sys",
  "mirai-annotations",
  "paste",
+ "untrusted 0.7.1",
  "zeroize",
 ]
 
@@ -479,6 +495,7 @@ name = "dnsdist-acme"
 version = "0.1.0"
 dependencies = [
  "anyhow",
+ "aws-lc-rs",
  "axum",
  "axum-macros",
  "axum-server",
@@ -1207,7 +1224,7 @@ dependencies = [
  "getrandom",
  "libc",
  "spin",
- "untrusted",
+ "untrusted 0.9.0",
  "windows-sys",
 ]
 
@@ -1275,7 +1292,7 @@ dependencies = [
  "aws-lc-rs",
  "ring",
  "rustls-pki-types",
- "untrusted",
+ "untrusted 0.9.0",
 ]
 
 [[package]]
@@ -1693,6 +1710,12 @@ version = "0.2.11"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "673aac59facbab8a9007c7f6108d11f63b603f7cabff99fabf650fea5c32b861"
 
+[[package]]
+name = "untrusted"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a156c684c91ea7d62626509bce3cb4e1d9ed5c4d978f7b4352658f96a4c26b4a"
+
 [[package]]
 name = "untrusted"
 version = "0.9.0"
diff --git a/Cargo.toml b/Cargo.toml
index 28fa65f..1a3d337 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -7,6 +7,7 @@ edition = "2021"
 
 [dependencies]
 anyhow = "1.0.86"
+aws-lc-rs = {version = "*", features = ["bindgen"]}
 axum = "0.7.5"
 axum-macros = "0.4.1"
 axum-server = { version = "0.7.1", features = ["tls-rustls"] }
diff --git a/Dockerfile b/Dockerfile
index 9b0ada4..eee6615 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,10 +1,11 @@
 ## builder
-FROM alpine:3.19 as builder
+FROM alpine:3.19 AS builder
 
 WORKDIR /code/dnsdist-acme
 
 # setup build dependencies
-RUN apk add rust cargo
+RUN apk add rust cargo build-base clang clang-dev cmake g++
+RUN cargo install --force --locked bindgen-cli
 RUN cargo init .
 COPY Cargo.toml Cargo.lock ./
 RUN cargo build --release
@@ -19,13 +20,13 @@ RUN cargo build --release
 
 
 ## dnstap
-FROM alpine:3.19 as dnstap
+FROM alpine:3.19 AS dnstap
 RUN apk add go
 RUN go install github.com/dnstap/golang-dnstap/dnstap@v0.4.0
 
 
 ## runtime
-FROM alpine:3.19 as runtime
+FROM alpine:3.19 AS runtime
 
 WORKDIR /dnsdist-acme