[From nobody Fri Jun 12 19:19:07 2026
Received: (at submit) by bugs.debian.org; 30 May 2026 16:10:57 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-28.2 required=4.0 tests=BAYES_00,
 BODY_INCLUDES_CONTROL_AFFECTS,BODY_INCLUDES_PACKAGE,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,HAS_PACKAGE,SPF_HELO_PASS,
 SPF_PASS,X_DEBBUGS_CC autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 23; hammy, 150; neutral, 57; spammy,
 0. spammytokens: hammytokens:0.000-+--wdatetime, 0.000-+--Wdatetime,
 0.000-+--Wdate-time, 0.000-+--wdate-time, 0.000-+--fPIC
Return-path: &lt;sebastian@breakpoint.cc&gt;
Received: from chamillionaire.breakpoint.cc ([2a0a:51c0:0:237:300::1]:57708)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;sebastian@breakpoint.cc&gt;)
 id 1wTMH3-002Erz-17 for submit@bugs.debian.org;
 Sat, 30 May 2026 16:10:57 +0000
Date: Sat, 30 May 2026 18:10:55 +0200
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=breakpoint.cc;
 s=2025; t=1780157455;
 h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
 to:to:cc:mime-version:mime-version:content-type:content-type:
 content-transfer-encoding:content-transfer-encoding;
 bh=1QhLHC4U80X0ml/AJCkQF7wBf3yuruO32kNMEGyj25Y=;
 b=hXLYjuVPnIM/ou1F+o8gDnVy97YJ49VcrS0CwMJfYEjrOeCQg0TROExURtmPCMNs+fmcAz
 Cxtq7+5w/P4A8/3S9xxiTaxD4E9RGh3VTW5L5gJMZQ3q7kB+kFStwC9aw0b4/Ahx2vWafh
 WtWvQmx4m92iQ1Fvf9ul+KP4MCxqi4esa8WHgkC7sy0VDbzChGg5dvQeNAoJezHgL1ECxf
 /n036hpTZJ5eRLf1VlAQ3rdjD33RchCh8MwRNrPG0neVLiP7BXBPnFS+cVFbpIF3HXtGLZ
 b990gaccQpnwGBM9W05R+Wli4/95Hsan7PflXOFqhTcM+nUDJw9vCTI9FYk7rQ==
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=breakpoint.cc;
 s=2025e; t=1780157455;
 h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
 to:to:cc:mime-version:mime-version:content-type:content-type:
 content-transfer-encoding:content-transfer-encoding;
 bh=1QhLHC4U80X0ml/AJCkQF7wBf3yuruO32kNMEGyj25Y=;
 b=9raGlDWLdce6LgR0AuKlqzM2Ojxo6DMgfRjt5xBX7WrFeFfb/3N3KuINH5Vdp0LXW8QlwR
 lZ8vT7btTSzJVpBA==
From: Sebastian Andrzej Siewior &lt;sebastian@breakpoint.cc&gt;
To: submit@bugs.debian.org
Subject: nginx: FTBFS with openssl 4.0
Message-ID: &lt;20260530161055.tmU9BhvP@breakpoint.cc&gt;
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
X-Debbugs-CC: pkg-openssl-devel@alioth-lists.debian.net
Delivered-To: submit@bugs.debian.org

Package: nginx
Version: 1.28.3-2
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel@lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| cc -c -g -O2 -Werror=3Dimplicit-function-declaration -ffile-prefix-map=3D=
/build/reproducible-path/nginx-1.28.3=3D. -fstack-protector-strong -fstack-=
clash-protection -Wformat -Werror=3Dformat-security -fcf-protection -g -O2 =
-Werror=3Dimplicit-function-declaration -ffile-prefix-map=3D/build/reproduc=
ible-path/nginx-1.28.3=3D. -fstack-protector-strong -fstack-clash-protectio=
n -Wformat -Werror=3Dformat-security -fcf-protection -fPIC -Wdate-time -D_F=
ORTIFY_SOURCE=3D2 -I src/core -I src/event -I src/event/modules -I src/even=
t/quic -I src/os/unix -I src/http/modules/perl -I /usr/include/libxml2 -I o=
bjs \
| 	-o objs/src/event/ngx_event_openssl_stapling.o \
| 	src/event/ngx_event_openssl_stapling.c
| src/event/ngx_event_openssl_stapling.c: In function =C3=A2=E2=82=AC=CB=9C=
ngx_ssl_ocsp_create_key=C3=A2=E2=82=AC=E2=84=A2:
| src/event/ngx_event_openssl_stapling.c:2682:10: warning: assignment disca=
rds =C3=A2=E2=82=AC=CB=9Cconst=C3=A2=E2=82=AC=E2=84=A2 qualifier from point=
er target type [-Wdiscarded-qualifiers]
|  2682 |     name =3D X509_get_subject_name(ctx-&gt;issuer);
|       |          ^
| src/event/ngx_event_openssl_stapling.c:2696:15: error: invalid use of inc=
omplete typedef =C3=A2=E2=82=AC=CB=9CASN1_INTEGER=C3=A2=E2=82=AC=E2=84=A2 {=
aka =C3=A2=E2=82=AC=CB=9Cstruct asn1_string_st=C3=A2=E2=82=AC=E2=84=A2}
|  2696 |     if (serial-&gt;length &gt; 20) {
|       |               ^~
| In file included from src/core/ngx_core.h:54,
|                  from src/event/ngx_event_openssl_stapling.c:9:
| src/event/ngx_event_openssl_stapling.c:2700:29: error: invalid use of inc=
omplete typedef =C3=A2=E2=82=AC=CB=9CASN1_INTEGER=C3=A2=E2=82=AC=E2=84=A2 {=
aka =C3=A2=E2=82=AC=CB=9Cstruct asn1_string_st=C3=A2=E2=82=AC=E2=84=A2}
|  2700 |     p =3D ngx_cpymem(p, serial-&gt;data, serial-&gt;length);
|       |                             ^~
| src/core/ngx_string.h:107:60: note: in definition of macro =C3=A2=E2=82=
=AC=CB=9Cngx_cpymem=C3=A2=E2=82=AC=E2=84=A2
|   107 | #define ngx_cpymem(dst, src, n)   (((u_char *) memcpy(dst, src, n=
)) + (n))
|       |                                                            ^~~
| src/event/ngx_event_openssl_stapling.c:2700:43: error: invalid use of inc=
omplete typedef =C3=A2=E2=82=AC=CB=9CASN1_INTEGER=C3=A2=E2=82=AC=E2=84=A2 {=
aka =C3=A2=E2=82=AC=CB=9Cstruct asn1_string_st=C3=A2=E2=82=AC=E2=84=A2}
|  2700 |     p =3D ngx_cpymem(p, serial-&gt;data, serial-&gt;length);
|       |                                           ^~
| src/core/ngx_string.h:107:65: note: in definition of macro =C3=A2=E2=82=
=AC=CB=9Cngx_cpymem=C3=A2=E2=82=AC=E2=84=A2
|   107 | #define ngx_cpymem(dst, src, n)   (((u_char *) memcpy(dst, src, n=
)) + (n))
|       |                                                                 ^
| src/event/ngx_event_openssl_stapling.c:2700:43: error: invalid use of inc=
omplete typedef =C3=A2=E2=82=AC=CB=9CASN1_INTEGER=C3=A2=E2=82=AC=E2=84=A2 {=
aka =C3=A2=E2=82=AC=CB=9Cstruct asn1_string_st=C3=A2=E2=82=AC=E2=84=A2}
|  2700 |     p =3D ngx_cpymem(p, serial-&gt;data, serial-&gt;length);
|       |                                           ^~
| src/core/ngx_string.h:107:72: note: in definition of macro =C3=A2=E2=82=
=AC=CB=9Cngx_cpymem=C3=A2=E2=82=AC=E2=84=A2
|   107 | #define ngx_cpymem(dst, src, n)   (((u_char *) memcpy(dst, src, n=
)) + (n))
|       |                                                                  =
      ^
| src/event/ngx_event_openssl_stapling.c:2701:31: error: invalid use of inc=
omplete typedef =C3=A2=E2=82=AC=CB=9CASN1_INTEGER=C3=A2=E2=82=AC=E2=84=A2 {=
aka =C3=A2=E2=82=AC=CB=9Cstruct asn1_string_st=C3=A2=E2=82=AC=E2=84=A2}
|  2701 |     ngx_memzero(p, 20 - serial-&gt;length);
|       |                               ^~
| src/core/ngx_string.h:88:57: note: in definition of macro =C3=A2=E2=82=AC=
=CB=9Cngx_memzero=C3=A2=E2=82=AC=E2=84=A2
|    88 | #define ngx_memzero(buf, n)       (void) memset(buf, 0, n)
|       |                                                         ^
| make[3]: *** [objs/Makefile:1056: objs/src/event/ngx_event_openssl_stapli=
ng.o] Error 1


Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/nginx_1.28.3-2_amd=
64-2026-04-19T10:48:30Z

Sebastian
]