[From nobody Fri Jul 10 08:07:07 2026
Received: (at submit) by bugs.debian.org; 30 May 2026 16:03:02 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-28.2 required=4.0 tests=BAYES_00,
 BODY_INCLUDES_CONTROL_AFFECTS,BODY_INCLUDES_PACKAGE,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HAS_PACKAGE,SPF_HELO_PASS,
 SPF_PASS,X_DEBBUGS_CC autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 49; hammy, 150; neutral, 145; spammy,
 0. spammytokens: hammytokens:0.000-+--wdatetime,
 0.000-+--Wdatetime, 
 0.000-+--wdate-time, 0.000-+--Wdate-time, 0.000-+--sk:ffile-p
Return-path: <sebastian@breakpoint.cc>
Received: from chamillionaire.breakpoint.cc ([2a0a:51c0:0:237:300::1]:50496)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <sebastian@breakpoint.cc>)
 id 1wTM9O-002DOu-1F for submit@bugs.debian.org;
 Sat, 30 May 2026 16:03:02 +0000
Date: Sat, 30 May 2026 18:03:00 +0200
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=breakpoint.cc;
 s=2025; t=1780156980;
 h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
 to:to:cc:mime-version:mime-version:content-type:content-type:
 content-transfer-encoding:content-transfer-encoding;
 bh=UDTBn5lugyxnCyrZBQDnTIcKCJyYrsBMMYJN3eNK6xg=;
 b=ayWJxXe0gng26JYBSr/jdo0Wa3Dsdm5dW7Eht9eZOzSQHieXr6oQpihOVl0Mx3cMxL+YRF
 y1J/9sgwOoqTF7uBD2k1txu3wZgIrazHfq2ZaB5OfNDf+8jQd2m0zShoJgiBJicu7u9S27
 14aFJQ1xIL6rzAZxKA/QAPUGxrgkd3U/ZfxhpkfPFCM7tEm22hURjVRt6bVqVdsGjJUxyS
 Wq/Bhf2NSeb5fRFCilzTEIF+f/Vo2+f2Y0+P4f8n+I9sq+U7CHC6L72GhSlx/84WNLny15
 c3cAZ0Q9hReGmPD8Qty+ZFyzAa5PJGdli5McZtcgjN2mqu3vmk0siAHARylMhA==
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=breakpoint.cc;
 s=2025e; t=1780156980;
 h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
 to:to:cc:mime-version:mime-version:content-type:content-type:
 content-transfer-encoding:content-transfer-encoding;
 bh=UDTBn5lugyxnCyrZBQDnTIcKCJyYrsBMMYJN3eNK6xg=;
 b=sFtjV7oxi9FfambfwAdZum6v7yARiiFFfBF+Z6kOj7n3F+KcM3zfhIiw0F0wFHM0zdsZQA
 MV7kD9whFsNzn9BQ==
From: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
To: submit@bugs.debian.org
Subject: freeradius: FTBFS with openssl 4.0
Message-ID: <20260530160300.7HkD62XK@breakpoint.cc>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
X-Debbugs-CC: pkg-openssl-devel@alioth-lists.debian.net
Delivered-To: submit@bugs.debian.org

Package: freeradius
Version: 3.2.8+dfsg-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel@lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| build/make/jlibtool --silent --mode=3Dcompile gcc -o build/objs/src/main/=
tls.lo -c -MD -Wdate-time -D_FORTIFY_SOURCE=3D2 -I. -Isrc -include src/free=
radius-devel/autoconf.h -include src/freeradius-devel/build.h -include src/=
freeradius-devel/features.h -include src/freeradius-devel/radpaths.h -fno-s=
trict-aliasing -Wno-date-time -g -O2 -Werror=3Dimplicit-function-declaratio=
n -ffile-prefix-map=3D/build/reproducible-path/freeradius-3.2.8+dfsg=3D. -f=
stack-protector-strong -fstack-clash-protection -Wformat -Werror=3Dformat-s=
ecurity -fcf-protection -Wall -std=3Dc99 -D_GNU_SOURCE -D_REENTRANT -D_POSI=
X_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -DNDEBUG -DIS_MODULE=3D1 -DWITH_EAPCL=
IENT -DBUILT_WITH_CPPFLAGS=3D\"-Wdate-time -D_FORTIFY_SOURCE=3D2\" -DBUILT_=
WITH_CFLAGS=3D\"-I. -Isrc -include src/freeradius-devel/autoconf.h -include=
 src/freeradius-devel/build.h -include src/freeradius-devel/features.h -inc=
lude src/freeradius-devel/radpaths.h -fno-strict-aliasing -Wno-date-time -g=
 -O2 -Werror=3Dimplicit-function-declaration -ffile-prefix-map=3D/build/rep=
roducible-path/freeradius-3.2.8+dfsg=3D. -fstack-protector-strong -fstack-c=
lash-protection -Wformat -Werror=3Dformat-security -fcf-protection -Wall -s=
td=3Dc99 -D_GNU_SOURCE -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO=
_KRB5 -DNDEBUG -DIS_MODULE=3D1\" -DBUILT_WITH_LDFLAGS=3D\" -Wl,-z,relro -Wl=
,-z,now \" -DBUILT_WITH_LIBS=3D\"-lcrypto -lssl -ltalloc -latomic -lcap -lr=
esolv -ldl -lpthread -lreadline\" -Isrc/modules/rlm_eap/libeap src/main/tls=
=2Ec
| In file included from src/main/tls.c:55:
| src/main/tls.c: In function =C3=A2=E2=82=AC=CB=9Cocsp_parse_cert_url=C3=
=A2=E2=82=AC=E2=84=A2:
| src/main/tls.c:2540:64: error: invalid use of incomplete typedef =C3=A2=
=E2=82=AC=CB=9CASN1_IA5STRING=C3=A2=E2=82=AC=E2=84=A2 {aka =C3=A2=E2=82=AC=
=CB=9Cstruct asn1_string_st=C3=A2=E2=82=AC=E2=84=A2}
|  2540 |                 if (OCSP_parse_url((char *) ad->location->d.ia5->=
data, host_out,
|       |                                                                ^~
| src/main/tls.c: In function =C3=A2=E2=82=AC=CB=9Ccbtls_verify=C3=A2=E2=82=
=AC=E2=84=A2:
| src/main/tls.c:3022:48: error: invalid use of incomplete typedef =C3=A2=
=E2=82=AC=CB=9CASN1_INTEGER=C3=A2=E2=82=AC=E2=84=A2 {aka =C3=A2=E2=82=AC=CB=
=9Cstruct asn1_string_st=C3=A2=E2=82=AC=E2=84=A2}
|  3022 |             (lookup <=3D 1) && sn && ((size_t) sn->length < (size=
of(buf) / 2))) {
|       |                                                ^~
| src/main/tls.c:3026:35: error: invalid use of incomplete typedef =C3=A2=
=E2=82=AC=CB=9CASN1_INTEGER=C3=A2=E2=82=AC=E2=84=A2 {aka =C3=A2=E2=82=AC=CB=
=9Cstruct asn1_string_st=C3=A2=E2=82=AC=E2=84=A2}
|  3026 |                 for (i =3D 0; i < sn->length; i++) {
|       |                                   ^~
| src/main/tls.c:3027:60: error: invalid use of incomplete typedef =C3=A2=
=E2=82=AC=CB=9CASN1_INTEGER=C3=A2=E2=82=AC=E2=84=A2 {aka =C3=A2=E2=82=AC=CB=
=9Cstruct asn1_string_st=C3=A2=E2=82=AC=E2=84=A2}
|  3027 |                         sprintf(p, "%02x", (unsigned int)sn->data=
[i]);
|       |                                                            ^~
| src/main/tls.c:3040:22: error: invalid use of incomplete typedef =C3=A2=
=E2=82=AC=CB=9CASN1_TIME=C3=A2=E2=82=AC=E2=84=A2 {aka =C3=A2=E2=82=AC=CB=9C=
struct asn1_string_st=C3=A2=E2=82=AC=E2=84=A2}
|  3040 |             (asn_time->length < (int) sizeof(buf))) {
|       |                      ^~
| src/main/tls.c:3041:45: error: invalid use of incomplete typedef =C3=A2=
=E2=82=AC=CB=9CASN1_TIME=C3=A2=E2=82=AC=E2=84=A2 {aka =C3=A2=E2=82=AC=CB=9C=
struct asn1_string_st=C3=A2=E2=82=AC=E2=84=A2}
|  3041 |                 memcpy(buf, (char*) asn_time->data, asn_time->len=
gth);
|       |                                             ^~
| src/main/tls.c:3041:61: error: invalid use of incomplete typedef =C3=A2=
=E2=82=AC=CB=9CASN1_TIME=C3=A2=E2=82=AC=E2=84=A2 {aka =C3=A2=E2=82=AC=CB=9C=
struct asn1_string_st=C3=A2=E2=82=AC=E2=84=A2}
|  3041 |                 memcpy(buf, (char*) asn_time->data, asn_time->len=
gth);
|       |                                                             ^~
| src/main/tls.c:3042:29: error: invalid use of incomplete typedef =C3=A2=
=E2=82=AC=CB=9CASN1_TIME=C3=A2=E2=82=AC=E2=84=A2 {aka =C3=A2=E2=82=AC=CB=9C=
struct asn1_string_st=C3=A2=E2=82=AC=E2=84=A2}
|  3042 |                 buf[asn_time->length] =3D '\0';
|       |                             ^~
| src/main/tls.c:3053:22: error: invalid use of incomplete typedef =C3=A2=
=E2=82=AC=CB=9CASN1_TIME=C3=A2=E2=82=AC=E2=84=A2 {aka =C3=A2=E2=82=AC=CB=9C=
struct asn1_string_st=C3=A2=E2=82=AC=E2=84=A2}
|  3053 |             (asn_time->length < (int) sizeof(buf))) {
|       |                      ^~
| src/main/tls.c:3054:45: error: invalid use of incomplete typedef =C3=A2=
=E2=82=AC=CB=9CASN1_TIME=C3=A2=E2=82=AC=E2=84=A2 {aka =C3=A2=E2=82=AC=CB=9C=
struct asn1_string_st=C3=A2=E2=82=AC=E2=84=A2}
|  3054 |                 memcpy(buf, (char*) asn_time->data, asn_time->len=
gth);
|       |                                             ^~
| src/main/tls.c:3054:61: error: invalid use of incomplete typedef =C3=A2=
=E2=82=AC=CB=9CASN1_TIME=C3=A2=E2=82=AC=E2=84=A2 {aka =C3=A2=E2=82=AC=CB=9C=
struct asn1_string_st=C3=A2=E2=82=AC=E2=84=A2}
|  3054 |                 memcpy(buf, (char*) asn_time->data, asn_time->len=
gth);
|       |                                                             ^~
| src/main/tls.c:3055:29: error: invalid use of incomplete typedef =C3=A2=
=E2=82=AC=CB=9CASN1_TIME=C3=A2=E2=82=AC=E2=84=A2 {aka =C3=A2=E2=82=AC=CB=9C=
struct asn1_string_st=C3=A2=E2=82=AC=E2=84=A2}
|  3055 |                 buf[asn_time->length] =3D '\0';
|       |                             ^~
| src/main/tls.c:3083:9: warning: =C3=A2=E2=82=AC=CB=9CX509_NAME_get_text_b=
y_NID=C3=A2=E2=82=AC=E2=84=A2 is deprecated: Since OpenSSL 4.0 [-Wdeprecate=
d-declarations]
|  3083 |         X509_NAME_get_text_by_NID(X509_get_subject_name(client_ce=
rt),
|       |         ^~~~~~~~~~~~~~~~~~~~~~~~~
| In file included from /usr/include/openssl/ssl.h:34,
|                  from src/freeradius-devel/missing.h:87,
|                  from src/freeradius-devel/libradius.h:71,
|                  from src/freeradius-devel/radiusd.h:29,
|                  from src/main/tls.c:28:
| /usr/include/openssl/x509.h:1041:27: note: declared here
|  1041 | OSSL_DEPRECATEDIN_4_0 int X509_NAME_get_text_by_NID(const X509_NA=
ME *name,
|       |                           ^~~~~~~~~~~~~~~~~~~~~~~~~
| src/main/tls.c:3132:26: warning: assignment discards =C3=A2=E2=82=AC=CB=
=9Cconst=C3=A2=E2=82=AC=E2=84=A2 qualifier from pointer target type [-Wdisc=
arded-qualifiers]
|  3132 |                 if ((ext =3D X509_get_ext(client_cert, loc)) &&
|       |                          ^
| src/main/tls.c:3240:29: warning: assignment discards =C3=A2=E2=82=AC=CB=
=9Cconst=C3=A2=E2=82=AC=E2=84=A2 qualifier from pointer target type [-Wdisc=
arded-qualifiers]
|  3240 |                         obj =3D X509_EXTENSION_get_object(ext);
|       |                             ^
| make[2]: *** [scripts/boiler.mk:643: build/objs/src/main/tls.lo] Error 1

Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/freeradius_3.2.8+d=
fsg-1_amd64-2026-04-19T08:33:37Z

Sebastian
]