[Pkg-openssl-devel] Bug#1137470: aws-crt-python: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: aws-crt-python
Version: 0.28.4+dfsg-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:
| /build/reproducible-path/aws-crt-python-0.28.4+dfsg/crt/s2n/crypto/s2n_openssl_x509.c: In function ‘s2n_openssl_x509_get_cert_info’:
| /build/reproducible-path/aws-crt-python-0.28.4+dfsg/crt/s2n/crypto/s2n_openssl_x509.c:95:30: warning: initialization discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|    95 |     X509_NAME *issuer_name = X509_get_issuer_name(cert);
|       |                              ^~~~~~~~~~~~~~~~~~~~
| /build/reproducible-path/aws-crt-python-0.28.4+dfsg/crt/s2n/crypto/s2n_openssl_x509.c:98:31: warning: initialization discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|    98 |     X509_NAME *subject_name = X509_get_subject_name(cert);
|       |                               ^~~~~~~~~~~~~~~~~~~~~
| [ 47%] Building C object CMakeFiles/s2n.dir/tls/s2n_alerts.c.o
| [ 48%] Building C object CMakeFiles/s2n.dir/tls/s2n_async_pkey.c.o
| /build/reproducible-path/aws-crt-python-0.28.4+dfsg/crt/s2n/crypto/s2n_certificate.c: In function ‘s2n_cert_chain_and_key_load_sans’:
| /build/reproducible-path/aws-crt-python-0.28.4+dfsg/crt/s2n/crypto/s2n_certificate.c:230:57: error: invalid use of incomplete typedef ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|   230 |             unsigned char *san_str = san_name->d.dNSName->data;
|       |                                                         ^~
| /build/reproducible-path/aws-crt-python-0.28.4+dfsg/crt/s2n/crypto/s2n_certificate.c:231:59: error: invalid use of incomplete typedef ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|   231 |             const size_t san_str_len = san_name->d.dNSName->length;
|       |                                                           ^~
| /build/reproducible-path/aws-crt-python-0.28.4+dfsg/crt/s2n/crypto/s2n_certificate.c: In function ‘s2n_cert_chain_and_key_load_cns’:
| /build/reproducible-path/aws-crt-python-0.28.4+dfsg/crt/s2n/crypto/s2n_certificate.c:268:26: warning: initialization discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|   268 |     X509_NAME *subject = X509_get_subject_name(x509_cert);
|       |                          ^~~~~~~~~~~~~~~~~~~~~
| /build/reproducible-path/aws-crt-python-0.28.4+dfsg/crt/s2n/crypto/s2n_certificate.c:275:39: warning: initialization discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|   275 |         X509_NAME_ENTRY *name_entry = X509_NAME_get_entry(subject, lastpos);
|       |                                       ^~~~~~~~~~~~~~~~~~~
| /build/reproducible-path/aws-crt-python-0.28.4+dfsg/crt/s2n/crypto/s2n_certificate.c:280:33: warning: initialization discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|   280 |         ASN1_STRING *asn1_str = X509_NAME_ENTRY_get_data(name_entry);
|       |                                 ^~~~~~~~~~~~~~~~~~~~~~~~

Full buildlog
	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/aws-crt-python_0.28.4+dfsg-1_amd64-2026-04-19T12:58:03Z

Sebastian