[Pkg-nginx-maintainers] Bug#1138417: nginx: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: nginx
Version: 1.28.3-2
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| cc -c -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/nginx-1.28.3=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/nginx-1.28.3=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -fPIC -Wdate-time -D_FORTIFY_SOURCE=2 -I src/core -I src/event -I src/event/modules -I src/event/quic -I src/os/unix -I src/http/modules/perl -I /usr/include/libxml2 -I objs \
| 	-o objs/src/event/ngx_event_openssl_stapling.o \
| 	src/event/ngx_event_openssl_stapling.c
| src/event/ngx_event_openssl_stapling.c: In function ‘ngx_ssl_ocsp_create_key’:
| src/event/ngx_event_openssl_stapling.c:2682:10: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|  2682 |     name = X509_get_subject_name(ctx->issuer);
|       |          ^
| src/event/ngx_event_openssl_stapling.c:2696:15: error: invalid use of incomplete typedef ‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’}
|  2696 |     if (serial->length > 20) {
|       |               ^~
| In file included from src/core/ngx_core.h:54,
|                  from src/event/ngx_event_openssl_stapling.c:9:
| src/event/ngx_event_openssl_stapling.c:2700:29: error: invalid use of incomplete typedef ‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’}
|  2700 |     p = ngx_cpymem(p, serial->data, serial->length);
|       |                             ^~
| src/core/ngx_string.h:107:60: note: in definition of macro ‘ngx_cpymem’
|   107 | #define ngx_cpymem(dst, src, n)   (((u_char *) memcpy(dst, src, n)) + (n))
|       |                                                            ^~~
| src/event/ngx_event_openssl_stapling.c:2700:43: error: invalid use of incomplete typedef ‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’}
|  2700 |     p = ngx_cpymem(p, serial->data, serial->length);
|       |                                           ^~
| src/core/ngx_string.h:107:65: note: in definition of macro ‘ngx_cpymem’
|   107 | #define ngx_cpymem(dst, src, n)   (((u_char *) memcpy(dst, src, n)) + (n))
|       |                                                                 ^
| src/event/ngx_event_openssl_stapling.c:2700:43: error: invalid use of incomplete typedef ‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’}
|  2700 |     p = ngx_cpymem(p, serial->data, serial->length);
|       |                                           ^~
| src/core/ngx_string.h:107:72: note: in definition of macro ‘ngx_cpymem’
|   107 | #define ngx_cpymem(dst, src, n)   (((u_char *) memcpy(dst, src, n)) + (n))
|       |                                                                        ^
| src/event/ngx_event_openssl_stapling.c:2701:31: error: invalid use of incomplete typedef ‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’}
|  2701 |     ngx_memzero(p, 20 - serial->length);
|       |                               ^~
| src/core/ngx_string.h:88:57: note: in definition of macro ‘ngx_memzero’
|    88 | #define ngx_memzero(buf, n)       (void) memset(buf, 0, n)
|       |                                                         ^
| make[3]: *** [objs/Makefile:1056: objs/src/event/ngx_event_openssl_stapling.o] Error 1


Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/nginx_1.28.3-2_amd64-2026-04-19T10:48:30Z

Sebastian