[From nobody Tue Jun 23 00:35:08 2026
Received: (at submit) by bugs.debian.org; 30 May 2026 16:11:30 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-28.0 required=4.0 tests=BAYES_00,
 BODY_INCLUDES_CONTROL_AFFECTS,BODY_INCLUDES_PACKAGE,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,HAS_PACKAGE,
 RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS,X_DEBBUGS_CC autolearn=ham
 autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 35; hammy, 150; neutral, 91; spammy,
 0. spammytokens: hammytokens:0.000-+--wdatetime, 0.000-+--Wdatetime,
 0.000-+--Wdate-time, 0.000-+--wdate-time, 0.000-+--fPIC
Return-path: &lt;sebastian@breakpoint.cc&gt;
Received: from chamillionaire.breakpoint.cc ([91.216.245.30]:59562)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;sebastian@breakpoint.cc&gt;)
 id 1wTMHa-002EwJ-1h for submit@bugs.debian.org;
 Sat, 30 May 2026 16:11:30 +0000
Date: Sat, 30 May 2026 18:11:28 +0200
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=breakpoint.cc;
 s=2025; t=1780157488;
 h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
 to:to:cc:mime-version:mime-version:content-type:content-type;
 bh=SoIa7SqK0hb4mGbkgexOB/iLOXoMfMR3P23hAGvEySo=;
 b=aC8obuGxi8D95iNBiJguOEVibJJzyCKD4h8TpCvUU85R9XsmTZoQgmOITOZPYp4T7H5fuw
 YXdWPDPUxuq3BJLE7VFARyouTGyJ7hL+DlHCb2A7OekBS52W82a/oRUrIemrs5X1ynDoLz
 svIF72wrBRrjT3EaFFXJhg1kVqoplOTze+UlkDtUaD2UMotl7TJ78NRpdvLfQKrM3o0uZb
 +vCQi/foGs6R7ov4K928NctWO7Yg9dqpLkw68oVVaQRwaF16wAfBDu9M15mRCwv985o6i5
 j4gwNpungahS4y1qUhapaFjyYEZlPn2B+hkRlZ5DhW7FWj0htmAvOBBJqyUPlg==
DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=breakpoint.cc;
 s=2025e; t=1780157488;
 h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
 to:to:cc:mime-version:mime-version:content-type:content-type;
 bh=SoIa7SqK0hb4mGbkgexOB/iLOXoMfMR3P23hAGvEySo=;
 b=GCiKKUIk7zj2P5ZZF6/HAGqyuDKEwz0q9eOg1+Y7DZHO64EHHY906QtvtwXxx7BioQ6ENs
 bhZLY1AiUjrPCsCg==
From: Sebastian Andrzej Siewior &lt;sebastian@breakpoint.cc&gt;
To: submit@bugs.debian.org
Subject: openldap: FTBFS with openssl 4.0
Message-ID: &lt;20260530161128.ElOE9Mop@breakpoint.cc&gt;
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
X-Debbugs-CC: pkg-openssl-devel@alioth-lists.debian.net
Delivered-To: submit@bugs.debian.org

Package: openldap
Version: 2.6.10+dfsg-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel@lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| libtool: compile:  cc -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/openldap-2.6.10+dfsg=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wall -D_GNU_SOURCE -Wno-unused-const-variable -I../../include -I../../../../include -Wdate-time -D_FORTIFY_SOURCE=2 -DLDAP_LIBRARY -c ../../../../libraries/libldap/tls_o.c  -fPIC -DPIC -o .libs/tls_o.o
| ../../../../libraries/libldap/tls_o.c: In function 'tlso_ca_list':
| ../../../../libraries/libldap/tls_o.c:197:33: warning: initialization discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   197 |                 X509_NAME *xn = X509_get_subject_name( cert );
|       |                                 ^~~~~~~~~~~~~~~~~~~~~
| ../../../../libraries/libldap/tls_o.c: In function 'tlso_session_my_dn':
| ../../../../libraries/libldap/tls_o.c:760:12: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   760 |         xn = X509_get_subject_name(x);
|       |            ^
| ../../../../libraries/libldap/tls_o.c: In function 'tlso_session_peer_dn':
| ../../../../libraries/libldap/tls_o.c:796:12: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   796 |         xn = X509_get_subject_name(x);
|       |            ^
| ../../../../libraries/libldap/tls_o.c: In function 'tlso_session_chkhost':
| ../../../../libraries/libldap/tls_o.c:867:20: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   867 |                 ex = X509_get_ext(x, i);
|       |                    ^
| ../../../../libraries/libldap/tls_o.c:980:20: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   980 |                 xn = X509_get_subject_name(x);
|       |                    ^
| ../../../../libraries/libldap/tls_o.c:983:28: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   983 |                         ne = X509_NAME_get_entry( xn, i );
|       |                            ^
| ../../../../libraries/libldap/tls_o.c:985:36: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   985 |                                 cn = X509_NAME_ENTRY_get_data( ne );
|       |                                    ^
| ../../../../libraries/libldap/tls_o.c:1002:31: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|  1002 |                 } else if ( cn-&gt;length == nlen &amp;&amp;
|       |                               ^~
| ../../../../libraries/libldap/tls_o.c:1003:55: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|  1003 |                         strncasecmp( name, (char *) cn-&gt;data, nlen ) == 0 ) {
|       |                                                       ^~
| ../../../../libraries/libldap/tls_o.c:1006:32: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|  1006 |                 } else if (( cn-&gt;data[0] == '*' ) &amp;&amp; ( cn-&gt;data[1] == '.' )) {
|       |                                ^~
| ../../../../libraries/libldap/tls_o.c:1006:58: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|  1006 |                 } else if (( cn-&gt;data[0] == '*' ) &amp;&amp; ( cn-&gt;data[1] == '.' )) {
|       |                                                          ^~
| ../../../../libraries/libldap/tls_o.c:1014:48: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|  1014 |                                 if ((dlen == cn-&gt;length-1) &amp;&amp;
|       |                                                ^~
| ../../../../libraries/libldap/tls_o.c:1015:74: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|  1015 |                                         !strncasecmp(domain, (char *) &amp;cn-&gt;data[1], dlen)) {
|       |                                                                          ^~
| In file included from ../../../../libraries/libldap/tls_o.c:37:
| ../../../../libraries/libldap/tls_o.c:1024:41: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|  1024 |                                 name, cn-&gt;length, cn-&gt;data );
|       |                                         ^~
| ../../../../libraries/libldap/ldap-int.h:103:52: note: in definition of macro 'Debug3'
|   103 |         ldap_log_printf( NULL, (level), fmt, arg1, arg2, arg3 ); \
|       |                                                    ^~~~
| ../../../../libraries/libldap/tls_o.c:1024:53: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|  1024 |                                 name, cn-&gt;length, cn-&gt;data );
|       |                                                     ^~
| ../../../../libraries/libldap/ldap-int.h:103:58: note: in definition of macro 'Debug3'
|   103 |         ldap_log_printf( NULL, (level), fmt, arg1, arg2, arg3 ); \
|       |                                                          ^~~~
| ../../../../libraries/libldap/tls_o.c: In function 'tlso_verify_cb':
| ../../../../libraries/libldap/tls_o.c:1578:17: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|  1578 |         subject = X509_get_subject_name( cert );
|       |                 ^
| ../../../../libraries/libldap/tls_o.c:1579:16: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|  1579 |         issuer = X509_get_issuer_name( cert );
|       |                ^
| make[5]: *** [Makefile:431: tls_o.lo] Error 1
| make[5]: Leaving directory '/build/reproducible-path/openldap-2.6.10+dfsg/debian/build/libraries/libldap'

Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/openldap_2.6.10+dfsg-1_amd64-2026-04-19T14:02:55Z

Sebastian
]