Bug#1138450: e2guardian: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: e2guardian
Version: 5.5.9-2
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| g++ -DHAVE_CONFIG_H -I. -I..  -D__LOGLOCATION='"/var/log/e2guardian/"' -D__PIDDIR='"/var/run"' -D__PROXYUSER='"e2guardian"' -D__PROXYGROUP='"e2guardian"' -D__CONFDIR='"/etc/e2guardian"' -D__HTTPWORKERS='500'  -Wdate-time -D_FORTIFY_SOURCE=2 -DPCRE2POSIX_SHARED  -Wall -g -O2 -ffile-prefix-map=/build/reproducible-path/e2guardian-5.5.9=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection --std=c++11 -funsigned-char    -c -o e2guardian-CertificateAuthority.o `test -f 'CertificateAuthority.cpp' || echo './'`CertificateAuthority.cpp
| CertificateAuthority.cpp: In constructor ‘CertificateAuthority::CertificateAuthority(const char*, const char*, const char*, const char*, time_t&, time_t&)’:
| CertificateAuthority.cpp:75:40: warning: ‘int X509_cmp_current_time(const ASN1_TIME*)’ is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|    75 |         auto rc = X509_cmp_current_time(X509_get_notBefore(_caCert));
|       |                   ~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| In file included from /usr/include/openssl/pem.h:23,
|                  from CertificateAuthority.cpp:19:
| /usr/include/openssl/x509.h:694:27: note: declared here
|   694 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_current_time(const ASN1_TIME *s);
|       |                           ^~~~~~~~~~~~~~~~~~~~~
| CertificateAuthority.cpp:84:35: warning: ‘int X509_cmp_current_time(const ASN1_TIME*)’ is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|    84 |         rc = X509_cmp_current_time(X509_get_notAfter(_caCert));
|       |              ~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~
| /usr/include/openssl/x509.h:694:27: note: declared here
|   694 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_current_time(const ASN1_TIME *s);
|       |                           ^~~~~~~~~~~~~~~~~~~~~
| CertificateAuthority.cpp: In member function ‘X509* CertificateAuthority::generateCertificate(const char*, ca_serial*, bool)’:
| CertificateAuthority.cpp:411:44: error: invalid conversion from ‘const X509_NAME*’ {aka ‘const X509_name_st*’} to ‘X509_NAME*’ {aka ‘X509_name_st*’} [-fpermissive]
|   411 |     X509_NAME *name = X509_get_subject_name(newCert);
|       |                       ~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~
|       |                                            |
|       |                                            const X509_NAME* {aka const X509_name_st*}
| CertificateAuthority.cpp:432:51: error: invalid conversion from ‘const X509_NAME*’ {aka ‘const X509_name_st*’} to ‘X509_NAME*’ {aka ‘X509_name_st*’} [-fpermissive]
|   432 |     X509_NAME *subjectName = X509_get_subject_name(_caCert);
|       |                              ~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~
|       |                                                   |
|       |                                                   const X509_NAME* {aka const X509_name_st*}
| CertificateAuthority.cpp:459:50: error: invalid use of incomplete type ‘const ASN1_OCTET_STRING’ {aka ‘const struct asn1_string_st’}
|   459 |     ASN1_OCTET_STRING_set(akid->keyid,auth_key_id->data,auth_key_id->length);
|       |                                                  ^~
| In file included from /usr/include/openssl/crypto.h:38,
|                  from /usr/include/openssl/bio.h:32,
|                  from /usr/include/openssl/pem.h:20:
| /usr/include/openssl/types.h:57:16: note: forward declaration of ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|    57 | typedef struct asn1_string_st ASN1_INTEGER;
|       |                ^~~~~~~~~~~~~~
| CertificateAuthority.cpp:459:68: error: invalid use of incomplete type ‘const ASN1_OCTET_STRING’ {aka ‘const struct asn1_string_st’}
|   459 |     ASN1_OCTET_STRING_set(akid->keyid,auth_key_id->data,auth_key_id->length);
|       |                                                                    ^~
| /usr/include/openssl/types.h:57:16: note: forward declaration of ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|    57 | typedef struct asn1_string_st ASN1_INTEGER;
|       |                ^~~~~~~~~~~~~~
| make[3]: *** [Makefile:1280: e2guardian-CertificateAuthority.o] Error 1

Full buildlog
	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/e2guardian_5.5.9-2_amd64-2026-04-19T13:53:46Z
 
Sebastian