diff --git a/lib/ldap.c b/lib/ldap.c
index 7a6aff179451c0bf6332c92b24c96a17d46d5f65..cc8d29ab12849176800a067e99022c998f9809ed 100644
--- a/lib/ldap.c
+++ b/lib/ldap.c
@@ -54,6 +54,15 @@
 # endif /* HAVE_LDAP_SSL && HAVE_LDAP_SSL_H */
 #endif
 
+/* These are macros in both <wincrypt.h> (in above <winldap.h>) and typedefs
+ * in BoringSSL's <openssl/x509.h>
+ */
+#ifdef HAVE_BORINGSSL
+# undef X509_NAME
+# undef X509_CERT_PAIR
+# undef X509_EXTENSIONS
+#endif
+
 #include "urldata.h"
 #include <curl/curl.h>
 #include "sendf.h"