[From nobody Tue Jul 14 15:55:10 2026
Received: (at submit) by bugs.debian.org; 30 May 2026 15:50:08 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-28.1 required=4.0 tests=BAYES_00,
 BODY_INCLUDES_CONTROL_AFFECTS,BODY_INCLUDES_PACKAGE,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HAS_PACKAGE,RCVD_IN_DNSWL_MED,
 SPF_HELO_PASS,SPF_PASS,X_DEBBUGS_CC autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 41; hammy, 149; neutral, 24; spammy,
 1. spammytokens:0.941-+--H*r:bugs.debian.org
 hammytokens:0.000-+--sk:pkgope, 0.000-+--sk:pkg-ope,
 0.000-+--H*F:U*sebastian, 0.000-+--H*F:D*breakpoint.cc,
 0.000-+--H*RU:sk:chamill
Return-path: &lt;sebastian@breakpoint.cc&gt;
Received: from chamillionaire.breakpoint.cc ([91.216.245.30]:53552)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;sebastian@breakpoint.cc&gt;)
 id 1wTLwu-002BBw-0Z for submit@bugs.debian.org;
 Sat, 30 May 2026 15:50:08 +0000
Date: Sat, 30 May 2026 17:50:05 +0200
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=breakpoint.cc;
 s=2025; t=1780156206;
 h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
 to:to:cc:mime-version:mime-version:content-type:content-type:
 content-transfer-encoding:content-transfer-encoding;
 bh=FId4mbCS7sewKSrlbOVMstX8gwcbp/HuarkIIb5M0S4=;
 b=Tvcamw3YsVuS2G5xQCx7C3bK4FEEYwM+0gT9g9+Eyqynk2uud/WztxKqTp7vel50epxEsr
 xuwQdjEXoU8fRorj12UpRiIzs/fVYxL1xutTqrCXQP+I/vAKtx00Vok/l6GIcDtpYvhuyE
 Q2NIuvWGsrpWTkMTqmi3ybi5LKI/W2EQ+yh3Q+4fiMdpjvTy1O/x3AtxSP9f6D5mm1hBoe
 Lw+a+LnvJsRUoFW8kiv/+55OCm2ySQdDkRI7f54NbQm6gYHZVMNxsrMV/CBpFtWK90Fmdy
 JWNELuBAIsAsXGXE9ohYrkrX8V+goBEy1uaE+1FMK2VvbMIR5bjOz9JVCMVBCw==
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=breakpoint.cc;
 s=2025e; t=1780156206;
 h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
 to:to:cc:mime-version:mime-version:content-type:content-type:
 content-transfer-encoding:content-transfer-encoding;
 bh=FId4mbCS7sewKSrlbOVMstX8gwcbp/HuarkIIb5M0S4=;
 b=vlhyov9oqshhR/wxbzavm/a3BzQmXIJbbbbcueml1Wb8cbJQSaHYxkw3ib0BGwlP1H6FmQ
 Nev+G/FZS0bqcfDA==
From: Sebastian Andrzej Siewior &lt;sebastian@breakpoint.cc&gt;
To: submit@bugs.debian.org
Subject: icinga2: FTBFS with openssl 4.0
Message-ID: &lt;20260530155005.pX9d_l1H@breakpoint.cc&gt;
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
X-Debbugs-CC: pkg-openssl-devel@alioth-lists.debian.net
Delivered-To: submit@bugs.debian.org

Package: icinga2
Version: 2.15.2-2
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel@lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| /build/reproducible-path/icinga2-2.15.2/lib/base/tlsutility.cpp: In funct=
ion =C3=A2=E2=82=AC=CB=9Cicinga::String icinga::GetCertificateCN(const std:=
:shared_ptr&lt;x509_st&gt;&amp;)=C3=A2=E2=82=AC=E2=84=A2:
| /build/reproducible-path/icinga2-2.15.2/lib/base/tlsutility.cpp:431:51: e=
rror: invalid conversion from =C3=A2=E2=82=AC=CB=9Cconst X509_NAME*=C3=A2=
=E2=82=AC=E2=84=A2 {aka =C3=A2=E2=82=AC=CB=9Cconst X509_name_st*=C3=A2=E2=
=82=AC=E2=84=A2} to =C3=A2=E2=82=AC=CB=9CX509_NAME*=C3=A2=E2=82=AC=E2=84=A2=
 {aka =C3=A2=E2=82=AC=CB=9CX509_name_st*=C3=A2=E2=82=AC=E2=84=A2} [-fpermis=
sive]
|   431 |         return GetX509NameCN(X509_get_subject_name(certificate.ge=
t()));
|       |                              ~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~=
~~~~
|       |                                                   |
|       |                                                   const X509_NAME=
* {aka const X509_name_st*}
| /build/reproducible-path/icinga2-2.15.2/lib/base/tlsutility.cpp:591:60: e=
rror: invalid conversion from =C3=A2=E2=82=AC=CB=9Cconst X509_NAME*=C3=A2=
=E2=82=AC=E2=84=A2 {aka =C3=A2=E2=82=AC=CB=9Cconst X509_name_st*=C3=A2=E2=
=82=AC=E2=84=A2} to =C3=A2=E2=82=AC=CB=9CX509_NAME*=C3=A2=E2=82=AC=E2=84=A2=
 {aka =C3=A2=E2=82=AC=CB=9CX509_name_st*=C3=A2=E2=82=AC=E2=84=A2} [-fpermis=
sive]
|   591 |                 X509_NAME *name =3D X509_REQ_get_subject_name(req=
);
|       |                                   ~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~
|       |                                                            |
|       |                                                            const =
X509_NAME* {aka const X509_name_st*}
| /build/reproducible-path/icinga2-2.15.2/lib/base/tlsutility.cpp:768:65: e=
rror: invalid conversion from =C3=A2=E2=82=AC=CB=9Cconst X509_NAME*=C3=A2=
=E2=82=AC=E2=84=A2 {aka =C3=A2=E2=82=AC=CB=9Cconst X509_name_st*=C3=A2=E2=
=82=AC=E2=84=A2} to =C3=A2=E2=82=AC=CB=9CX509_NAME*=C3=A2=E2=82=AC=E2=84=A2=
 {aka =C3=A2=E2=82=AC=CB=9CX509_name_st*=C3=A2=E2=82=AC=E2=84=A2} [-fpermis=
sive]
|   768 |         return CreateCert(pubkey, subject, X509_get_subject_name(=
cacert.get()), privkey, ca);
|       |                                            ~~~~~~~~~~~~~~~~~~~~~^=
~~~~~~~~~~~~~
|       |                                                                 |
|       |                                                                 c=
onst X509_NAME* {aka const X509_name_st*}
| /build/reproducible-path/icinga2-2.15.2/lib/base/tlsutility.cpp:643:83: n=
ote: initializing argument 3 of =C3=A2=E2=82=AC=CB=9Cstd::shared_ptr&lt;x509_s=
t&gt; icinga::CreateCert(EVP_PKEY*, X509_NAME*, X509_NAME*, EVP_PKEY*, bool)=
=C3=A2=E2=82=AC=E2=84=A2
|   643 | std::shared_ptr&lt;X509&gt; CreateCert(EVP_PKEY *pubkey, X509_NAME *sub=
ject, X509_NAME *issuer, EVP_PKEY *cakey, bool ca)
|       |                                                                  =
      ~~~~~~~~~~~^~~~~~
| /build/reproducible-path/icinga2-2.15.2/lib/base/tlsutility.cpp: In funct=
ion =C3=A2=E2=82=AC=CB=9Cstd::shared_ptr&lt;x509_st&gt; icinga::CreateCertIcingaC=
A(const std::shared_ptr&lt;x509_st&gt;&amp;)=C3=A2=E2=82=AC=E2=84=A2:
| /build/reproducible-path/icinga2-2.15.2/lib/base/tlsutility.cpp:774:68: e=
rror: invalid conversion from =C3=A2=E2=82=AC=CB=9Cconst X509_NAME*=C3=A2=
=E2=82=AC=E2=84=A2 {aka =C3=A2=E2=82=AC=CB=9Cconst X509_name_st*=C3=A2=E2=
=82=AC=E2=84=A2} to =C3=A2=E2=82=AC=CB=9CX509_NAME*=C3=A2=E2=82=AC=E2=84=A2=
 {aka =C3=A2=E2=82=AC=CB=9CX509_name_st*=C3=A2=E2=82=AC=E2=84=A2} [-fpermis=
sive]
|   774 |         return CreateCertIcingaCA(pkey.get(), X509_get_subject_na=
me(cert.get()));
|       |                                               ~~~~~~~~~~~~~~~~~~~=
~~^~~~~~~~~~~~
|       |                                                                  =
  |
|       |                                                                  =
  const X509_NAME* {aka const X509_name_st*}
| /build/reproducible-path/icinga2-2.15.2/lib/base/tlsutility.cpp:731:71: n=
ote: initializing argument 2 of =C3=A2=E2=82=AC=CB=9Cstd::shared_ptr&lt;x509_s=
t&gt; icinga::CreateCertIcingaCA(EVP_PKEY*, X509_NAME*, bool)=C3=A2=E2=82=AC=
=E2=84=A2
|   731 | std::shared_ptr&lt;X509&gt; CreateCertIcingaCA(EVP_PKEY *pubkey, X509_N=
AME *subject, bool ca)
|       |                                                            ~~~~~~=
~~~~~^~~~~~~

Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/icinga2_2.15.2-2_a=
md64-2026-04-19T09:08:24Z

Sebastian
]