[Pkg-openssl-devel] Bug#1138303: s-nail: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: s-nail
Version: 14.9.25-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| cc -DNDEBUG  -std=c99 -O3 -W -Wall -Wextra -pedantic -Wno-uninitialized -Wno-unused-result -Wno-unused-value -fno-asynchronous-unwind-tables -fno-common -fno-unwind-tables -fstrict-aliasing -fstrict-overflow -fstack-protector-strong -D_FORTIFY_SOURCE=2 -fPIE  -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/s-nail-14.9.25=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 -I/build/reproducible-path/s-nail-14.9.25/include -I/build/reproducible-path/s-nail-14.9.25/.obj -I/build/reproducible-path/s-nail-14.9.25/include/ -I/build/reproducible-path/s-nail-14.9.25/src/ -isystem /usr/include/mit-krb5 -c -o mx-072.o /build/reproducible-path/s-nail-14.9.25/src/mx/xtls.c
| /build/reproducible-path/s-nail-14.9.25/src/mx/xtls.c:300:5: warning: initializer-string for array of 'char' truncates NUL terminator but destination lacks 'nonstring' attribute (9 chars into 8 available) [-Wunterminated-string-initialization]
|   300 |    {"TLSv1.3\0", SSL_OP_NO_TLSv1_3, TLS1_3_VERSION, TRU1,TRU1,FAL0,FAL0,{0}},
|       |     ^~~~~~~~~~~
| /build/reproducible-path/s-nail-14.9.25/src/mx/xtls.c: In function 'a_xtls_parse_asn1_time':
| /build/reproducible-path/s-nail-14.9.25/src/mx/xtls.c:710:25: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   710 |          /*is (int)*/atp->length, (char const*)atp->data);
|       |                         ^~
| /build/reproducible-path/s-nail-14.9.25/src/mx/xtls.c:710:51: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   710 |          /*is (int)*/atp->length, (char const*)atp->data);
|       |                                                   ^~
| /build/reproducible-path/s-nail-14.9.25/src/mx/xtls.c: In function 'a_xtls_check_host':
| /build/reproducible-path/s-nail-14.9.25/src/mx/xtls.c:1401:54: error: invalid use of incomplete typedef 'ASN1_IA5STRING' {aka 'struct asn1_string_st'}
|  1401 |                   urlp->url_host.s, (char*)gen->d.ia5->data);
|       |                                                      ^~
| /build/reproducible-path/s-nail-14.9.25/src/mx/xtls.c:1403:36: error: invalid use of incomplete typedef 'ASN1_IA5STRING' {aka 'struct asn1_string_st'}
|  1403 |                   (char*)gen->d.ia5->data)))
|       |                                    ^~
| /build/reproducible-path/s-nail-14.9.25/src/mx/xtls.c:1409:13: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|  1409 |    if((subj = X509_get_subject_name(peercert)) != NULL &&
|       |             ^
| /build/reproducible-path/s-nail-14.9.25/src/mx/xtls.c:1410:10: warning: 'X509_NAME_get_text_by_NID' is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|  1410 |          X509_NAME_get_text_by_NID(subj, NID_commonName, data, sizeof data
|       |          ^~~~~~~~~~~~~~~~~~~~~~~~~
| In file included from /usr/include/openssl/pem.h:23,
|                  from /build/reproducible-path/s-nail-14.9.25/src/mx/xtls.c:57:
| /usr/include/openssl/x509.h:1041:27: note: declared here
|  1041 | OSSL_DEPRECATEDIN_4_0 int X509_NAME_get_text_by_NID(const X509_NAME *name,
|       |                           ^~~~~~~~~~~~~~~~~~~~~~~~~
| /build/reproducible-path/s-nail-14.9.25/src/mx/xtls.c: In function 'smime_verify':
| /build/reproducible-path/s-nail-14.9.25/src/mx/xtls.c:1525:47: error: invalid use of incomplete typedef 'ASN1_IA5STRING' {aka 'struct asn1_string_st'}
|  1525 |                      sender, (char*)gen->d.ia5->data);
|       |                                               ^~
| /build/reproducible-path/s-nail-14.9.25/src/mx/xtls.c:1526:53: error: invalid use of incomplete typedef 'ASN1_IA5STRING' {aka 'struct asn1_string_st'}
|  1526 |                if (!su_cs_cmp_case((char*)gen->d.ia5->data, sender))
|       |                                                     ^~
| /build/reproducible-path/s-nail-14.9.25/src/mx/xtls.c:1532:17: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|  1532 |       if ((subj = X509_get_subject_name(cert)) != NULL &&
|       |                 ^
| /build/reproducible-path/s-nail-14.9.25/src/mx/xtls.c:1533:13: warning: 'X509_NAME_get_text_by_NID' is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|  1533 |             X509_NAME_get_text_by_NID(subj, NID_pkcs9_emailAddress,
|       |             ^~~~~~~~~~~~~~~~~~~~~~~~~
| /usr/include/openssl/x509.h:1041:27: note: declared here
|  1041 | OSSL_DEPRECATEDIN_4_0 int X509_NAME_get_text_by_NID(const X509_NAME *name,
|       |                           ^~~~~~~~~~~~~~~~~~~~~~~~~
| make[2]: *** [mk-config.mk:418: mx-072.o] Error 1
| make[2]: Leaving directory '/build/reproducible-path/s-nail-14.9.25/.obj'


Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/s-nail_14.9.25-1_amd64-2026-04-19T07:45:03Z

Sebastian