diff --git a/Makefile-libostree.am b/Makefile-libostree.am
index 8edd7f4de1..e616b0ae23 100644
--- a/Makefile-libostree.am
+++ b/Makefile-libostree.am
@@ -262,11 +262,6 @@ libostree_1_la_SOURCES += \
 	src/libostree/ostree-sign-private.h \
 	$(NULL)
 
-if USE_LIBSODIUM
-libostree_1_la_CFLAGS += $(OT_DEP_LIBSODIUM_CFLAGS)
-libostree_1_la_LIBADD += $(OT_DEP_LIBSODIUM_LIBS)
-endif # USE_LIBSODIUM
-
 if USE_COMPOSEFS
 libostree_1_la_LIBADD += libcomposefs.la
 endif # USE_COMPOSEFS
diff --git a/Makefile-ostree.am b/Makefile-ostree.am
index db3f7a54be..118db281c7 100644
--- a/Makefile-ostree.am
+++ b/Makefile-ostree.am
@@ -153,8 +153,3 @@ if USE_LIBARCHIVE
 ostree_CFLAGS += $(OT_DEP_LIBARCHIVE_CFLAGS)
 ostree_LDADD += $(OT_DEP_LIBARCHIVE_LIBS)
 endif
-
-if USE_LIBSODIUM
-ostree_CFLAGS += $(OT_DEP_LIBSODIUM_CFLAGS)
-ostree_LDADD += $(OT_DEP_LIBSODIUM_LIBS)
-endif # USE_LIBSODIUM
diff --git a/configure.ac b/configure.ac
index 5eb7367e3c..02164858bf 100644
--- a/configure.ac
+++ b/configure.ac
@@ -465,6 +465,10 @@ AS_IF([ test $with_crypto = gnutls ], [
 AM_CONDITIONAL(USE_GNUTLS, test $with_crypto = gnutls)
 dnl end gnutls
 
+dnl we always inject libsodium into our crypto deps in addition to openssl/gnutls
+OT_DEP_CRYPTO_CFLAGS="${OT_DEP_CRYPTO_CFLAGS} ${OT_DEP_LIBSODIUM_CFLAGS}"
+OT_DEP_CRYPTO_LIBS="${OT_DEP_CRYPTO_LIBS} ${OT_DEP_LIBSODIUM_LIBS}"
+
 dnl Avahi dependency for finding repos
 AVAHI_DEPENDENCY="avahi-client >= 0.6.31 avahi-glib >= 0.6.31"