[pkg-opensc-maint] Bug#1138448: pkcs11-helper: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: pkcs11-helper
Version: 1.31.0-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I../include -I../include -Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pkcs11-helper-1.31.0=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c pkcs11h-crypto.c -o pkcs11h-crypto.o >/dev/null 2>&1
| /bin/bash ../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I..  -I../include -I../include -Wdate-time -D_FORTIFY_SOURCE=2  -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pkcs11-helper-1.31.0=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection  -c -o _pkcs11h-crypto-openssl.lo _pkcs11h-crypto-openssl.c
| libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I../include -I../include -Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pkcs11-helper-1.31.0=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c _pkcs11h-crypto-openssl.c  -fPIC -DPIC -o .libs/_pkcs11h-crypto-openssl.o
| _pkcs11h-crypto-openssl.c: In function '__pkcs11h_crypto_openssl_certificate_get_expiration':
| _pkcs11h-crypto-openssl.c:150:17: warning: 'X509_cmp_current_time' is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|   150 |                 X509_cmp_current_time (notBefore) <= 0 &&
|       |                 ^~~~~~~~~~~~~~~~~~~~~
| In file included from _pkcs11h-crypto-openssl.c:56:
| /usr/include/openssl/x509.h:694:27: note: declared here
|   694 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_current_time(const ASN1_TIME *s);
|       |                           ^~~~~~~~~~~~~~~~~~~~~
| _pkcs11h-crypto-openssl.c:151:17: warning: 'X509_cmp_current_time' is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|   151 |                 X509_cmp_current_time (notAfter) >= 0 &&
|       |                 ^~~~~~~~~~~~~~~~~~~~~
| /usr/include/openssl/x509.h:694:27: note: declared here
|   694 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_current_time(const ASN1_TIME *s);
|       |                           ^~~~~~~~~~~~~~~~~~~~~
| _pkcs11h-crypto-openssl.c:152:25: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   152 |                 notAfter->length >= 12
|       |                         ^~
| _pkcs11h-crypto-openssl.c:157:40: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   157 |                 tm1.tm_year = (notAfter->data[ 0] - '0') * 10 + (notAfter->data[ 1] - '0') + 100;
|       |                                        ^~
| _pkcs11h-crypto-openssl.c:157:74: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   157 |                 tm1.tm_year = (notAfter->data[ 0] - '0') * 10 + (notAfter->data[ 1] - '0') + 100;
|       |                                                                          ^~
| _pkcs11h-crypto-openssl.c:158:40: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   158 |                 tm1.tm_mon  = (notAfter->data[ 2] - '0') * 10 + (notAfter->data[ 3] - '0') - 1;
|       |                                        ^~
| _pkcs11h-crypto-openssl.c:158:74: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   158 |                 tm1.tm_mon  = (notAfter->data[ 2] - '0') * 10 + (notAfter->data[ 3] - '0') - 1;
|       |                                                                          ^~
| _pkcs11h-crypto-openssl.c:159:40: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   159 |                 tm1.tm_mday = (notAfter->data[ 4] - '0') * 10 + (notAfter->data[ 5] - '0');
|       |                                        ^~
| _pkcs11h-crypto-openssl.c:159:74: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   159 |                 tm1.tm_mday = (notAfter->data[ 4] - '0') * 10 + (notAfter->data[ 5] - '0');
|       |                                                                          ^~
| _pkcs11h-crypto-openssl.c:160:40: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   160 |                 tm1.tm_hour = (notAfter->data[ 6] - '0') * 10 + (notAfter->data[ 7] - '0');
|       |                                        ^~
| _pkcs11h-crypto-openssl.c:160:74: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   160 |                 tm1.tm_hour = (notAfter->data[ 6] - '0') * 10 + (notAfter->data[ 7] - '0');
|       |                                                                          ^~
| _pkcs11h-crypto-openssl.c:161:40: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   161 |                 tm1.tm_min  = (notAfter->data[ 8] - '0') * 10 + (notAfter->data[ 9] - '0');
|       |                                        ^~
| _pkcs11h-crypto-openssl.c:161:74: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   161 |                 tm1.tm_min  = (notAfter->data[ 8] - '0') * 10 + (notAfter->data[ 9] - '0');
|       |                                                                          ^~
| _pkcs11h-crypto-openssl.c:162:40: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   162 |                 tm1.tm_sec  = (notAfter->data[10] - '0') * 10 + (notAfter->data[11] - '0');
|       |                                        ^~
| _pkcs11h-crypto-openssl.c:162:74: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   162 |                 tm1.tm_sec  = (notAfter->data[10] - '0') * 10 + (notAfter->data[11] - '0');
|       |                                                                          ^~
| make[4]: *** [Makefile:620: _pkcs11h-crypto-openssl.lo] Error 1
| make[4]: Leaving directory '/build/reproducible-path/pkcs11-helper-1.31.0/lib'


Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/pkcs11-helper_1.31.0-1_amd64-2026-04-19T14:15:29Z

Sebastian