Bug#1138420: openldap: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: openldap
Version: 2.6.10+dfsg-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| libtool: compile:  cc -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/openldap-2.6.10+dfsg=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wall -D_GNU_SOURCE -Wno-unused-const-variable -I../../include -I../../../../include -Wdate-time -D_FORTIFY_SOURCE=2 -DLDAP_LIBRARY -c ../../../../libraries/libldap/tls_o.c  -fPIC -DPIC -o .libs/tls_o.o
| ../../../../libraries/libldap/tls_o.c: In function 'tlso_ca_list':
| ../../../../libraries/libldap/tls_o.c:197:33: warning: initialization discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   197 |                 X509_NAME *xn = X509_get_subject_name( cert );
|       |                                 ^~~~~~~~~~~~~~~~~~~~~
| ../../../../libraries/libldap/tls_o.c: In function 'tlso_session_my_dn':
| ../../../../libraries/libldap/tls_o.c:760:12: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   760 |         xn = X509_get_subject_name(x);
|       |            ^
| ../../../../libraries/libldap/tls_o.c: In function 'tlso_session_peer_dn':
| ../../../../libraries/libldap/tls_o.c:796:12: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   796 |         xn = X509_get_subject_name(x);
|       |            ^
| ../../../../libraries/libldap/tls_o.c: In function 'tlso_session_chkhost':
| ../../../../libraries/libldap/tls_o.c:867:20: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   867 |                 ex = X509_get_ext(x, i);
|       |                    ^
| ../../../../libraries/libldap/tls_o.c:980:20: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   980 |                 xn = X509_get_subject_name(x);
|       |                    ^
| ../../../../libraries/libldap/tls_o.c:983:28: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   983 |                         ne = X509_NAME_get_entry( xn, i );
|       |                            ^
| ../../../../libraries/libldap/tls_o.c:985:36: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   985 |                                 cn = X509_NAME_ENTRY_get_data( ne );
|       |                                    ^
| ../../../../libraries/libldap/tls_o.c:1002:31: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|  1002 |                 } else if ( cn->length == nlen &&
|       |                               ^~
| ../../../../libraries/libldap/tls_o.c:1003:55: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|  1003 |                         strncasecmp( name, (char *) cn->data, nlen ) == 0 ) {
|       |                                                       ^~
| ../../../../libraries/libldap/tls_o.c:1006:32: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|  1006 |                 } else if (( cn->data[0] == '*' ) && ( cn->data[1] == '.' )) {
|       |                                ^~
| ../../../../libraries/libldap/tls_o.c:1006:58: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|  1006 |                 } else if (( cn->data[0] == '*' ) && ( cn->data[1] == '.' )) {
|       |                                                          ^~
| ../../../../libraries/libldap/tls_o.c:1014:48: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|  1014 |                                 if ((dlen == cn->length-1) &&
|       |                                                ^~
| ../../../../libraries/libldap/tls_o.c:1015:74: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|  1015 |                                         !strncasecmp(domain, (char *) &cn->data[1], dlen)) {
|       |                                                                          ^~
| In file included from ../../../../libraries/libldap/tls_o.c:37:
| ../../../../libraries/libldap/tls_o.c:1024:41: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|  1024 |                                 name, cn->length, cn->data );
|       |                                         ^~
| ../../../../libraries/libldap/ldap-int.h:103:52: note: in definition of macro 'Debug3'
|   103 |         ldap_log_printf( NULL, (level), fmt, arg1, arg2, arg3 ); \
|       |                                                    ^~~~
| ../../../../libraries/libldap/tls_o.c:1024:53: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|  1024 |                                 name, cn->length, cn->data );
|       |                                                     ^~
| ../../../../libraries/libldap/ldap-int.h:103:58: note: in definition of macro 'Debug3'
|   103 |         ldap_log_printf( NULL, (level), fmt, arg1, arg2, arg3 ); \
|       |                                                          ^~~~
| ../../../../libraries/libldap/tls_o.c: In function 'tlso_verify_cb':
| ../../../../libraries/libldap/tls_o.c:1578:17: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|  1578 |         subject = X509_get_subject_name( cert );
|       |                 ^
| ../../../../libraries/libldap/tls_o.c:1579:16: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|  1579 |         issuer = X509_get_issuer_name( cert );
|       |                ^
| make[5]: *** [Makefile:431: tls_o.lo] Error 1
| make[5]: Leaving directory '/build/reproducible-path/openldap-2.6.10+dfsg/debian/build/libraries/libldap'

Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/openldap_2.6.10+dfsg-1_amd64-2026-04-19T14:02:55Z

Sebastian