[Pkg-openssl-devel] Bug#1138320: globus-gsi-credential: FTBFS with openssl 4.0

Sebastian Andrzej Siewior sebastian at breakpoint.cc
Sat May 30 16:53:02 BST 2026


Package: globus-gsi-credential
Version: 8.5-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:
| libtool: compile:  gcc -DPACKAGE_NAME=\"globus_gsi_credential\" -DPACKAGE_TARNAME=\"globus_gsi_credential\" -DPACKAGE_VERSION=\"8.5\" "-DPACKAGE_STRING=\"globus_gsi_credential 8.5\"" -DPACKAGE_BUGREPORT=\"https://github.com/gridcf/gct/issues\" -DPACKAGE_URL=\"\" -DPACKAGE=\"globus_gsi_credential\" -DVERSION=\"8.5\" -DHAVE_STDIO_H=1 -DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 -DHAVE_INTTYPES_H=1 -DHAVE_STDINT_H=1 -DHAVE_STRINGS_H=1 -DHAVE_SYS_STAT_H=1 -DHAVE_SYS_TYPES_H=1 -DHAVE_UNISTD_H=1 -DSTDC_HEADERS=1 -DHAVE_DLFCN_H=1 -DLT_OBJDIR=\".libs/\" -I. -I.. -I. -I/usr/include/globus -Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/globus-gsi-credential-8.5=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c globus_gsi_cred_handle.c  -fPIC -DPIC -o .libs/libglobus_gsi_credential_la-globus_gsi_cred_handle.o
| globus_gsi_cred_handle.c: In function 'globus_gsi_cred_get_policies':
| globus_gsi_cred_handle.c:1281:21: error: implicit declaration of function 'ASN1_STRING_data'; did you mean 'ASN1_STRING_set0'? [-Wimplicit-function-declaration]
|  1281 |                     ASN1_STRING_data(policy->policy),
|       |                     ^~~~~~~~~~~~~~~~
|       |                     ASN1_STRING_set0
| globus_gsi_cred_handle.c:1281:21: error: passing argument 2 of 'memcpy' makes pointer from integer without a cast [-Wint-conversion]
|  1281 |                     ASN1_STRING_data(policy->policy),
|       |                     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|       |                     |
|       |                     int
| In file included from /usr/include/features.h:523,
|                  from /usr/include/x86_64-linux-gnu/bits/libc-header-start.h:33,
|                  from /usr/include/stdint.h:26,
|                  from /usr/lib/gcc/x86_64-linux-gnu/15/include/stdint.h:11,
|                  from /usr/include/globus/globus_config.h:22,
|                  from /usr/include/globus/globus_common_include.h:26,
|                  from /usr/include/globus/globus_common.h:67,
|                  from globus_gsi_credential.h:26,
|                  from globus_i_gsi_credential.h:28,
|                  from globus_gsi_cred_handle.c:17:
| /usr/include/x86_64-linux-gnu/bits/string_fortified.h:26:1: note: expected 'const void *' but argument is of type 'int'
|    26 | __NTH (memcpy (void *__restrict __dest, const void *__restrict __src,
|       | ^~~~~
| globus_gsi_cred_handle.c: In function 'globus_gsi_cred_verify_cert_chain':
| globus_gsi_cred_handle.c:1735:49: error: passing argument 2 of 'X509_STORE_set_check_issued' from incompatible pointer type [-Wincompatible-pointer-types]
|  1735 |         X509_STORE_set_check_issued(cert_store, globus_gsi_callback_check_issued);
|       |                                                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|       |                                                 |
|       |                                                 int (*)(X509_STORE_CTX *, X509 *, X509 *) {aka int (*)(struct x509_store_ctx_st *, struct x509_st *, struct x509_st *)}
| In file included from /usr/include/openssl/x509.h:494,
|                  from /usr/include/globus/globus_gsi_cert_utils.h:99,
|                  from /usr/include/globus/globus_gsi_callback.h:28,
|                  from globus_gsi_credential.h:29:
| /usr/include/openssl/x509_vfy.h:556:36: note: expected 'X509_STORE_CTX_check_issued_fn' {aka 'int (*)(struct x509_store_ctx_st *, const struct x509_st *, const struct x509_st *)'} but argument is of type 'int (*)(X509_STORE_CTX *, X509 *, X509 *)' {aka 'int (*)(struct x509_store_ctx_st *, struct x509_st *, struct x509_st *)'}
|   556 |     X509_STORE_CTX_check_issued_fn check_issued);
|       |     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~
| /usr/include/globus/globus_gsi_callback.h:152:5: note: 'globus_gsi_callback_check_issued' declared here
|   152 | int globus_gsi_callback_check_issued(
|       |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| /usr/include/openssl/x509_vfy.h:259:15: note: 'X509_STORE_CTX_check_issued_fn' declared here
|   259 | typedef int (*X509_STORE_CTX_check_issued_fn)(X509_STORE_CTX *ctx,
|       |               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| globus_gsi_cred_handle.c: In function 'globus_gsi_cred_verify_cert_chain_when':
| globus_gsi_cred_handle.c:1927:49: error: passing argument 2 of 'X509_STORE_set_check_issued' from incompatible pointer type [-Wincompatible-pointer-types]
|  1927 |         X509_STORE_set_check_issued(cert_store, globus_gsi_callback_check_issued);
|       |                                                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|       |                                                 |
|       |                                                 int (*)(X509_STORE_CTX *, X509 *, X509 *) {aka int (*)(struct x509_store_ctx_st *, struct x509_st *, struct x509_st *)}
| /usr/include/openssl/x509_vfy.h:556:36: note: expected 'X509_STORE_CTX_check_issued_fn' {aka 'int (*)(struct x509_store_ctx_st *, const struct x509_st *, const struct x509_st *)'} but argument is of type 'int (*)(X509_STORE_CTX *, X509 *, X509 *)' {aka 'int (*)(struct x509_store_ctx_st *, struct x509_st *, struct x509_st *)'}
|   556 |     X509_STORE_CTX_check_issued_fn check_issued);
|       |     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~
| /usr/include/globus/globus_gsi_callback.h:152:5: note: 'globus_gsi_callback_check_issued' declared here
|   152 | int globus_gsi_callback_check_issued(
|       |     ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| /usr/include/openssl/x509_vfy.h:259:15: note: 'X509_STORE_CTX_check_issued_fn' declared here
|   259 | typedef int (*X509_STORE_CTX_check_issued_fn)(X509_STORE_CTX *ctx,
|       |               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| make[2]: *** [Makefile:502: libglobus_gsi_credential_la-globus_gsi_cred_handle.lo] Error 1

Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/globus-gsi-credential_8.5-1_amd64-2026-04-19T09:13:23Z

Sebastian



More information about the Pkg-openssl-devel mailing list