[Pkg-openssl-devel] Bug#1138326: stunnel4: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: stunnel4
Version: 3:5.77-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| gcc -DHAVE_CONFIG_H -I.  -I/usr/kerberos/include -I/usr/include -DLIBDIR='"/usr/lib/x86_64-linux-gnu/stunnel"' -DCONFDIR='"/etc/stunnel"' -Wdate-time -D_FORTIFY_SOURCE=2  -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/stunnel4-5.77=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wall -pthread -Wextra -Wpedantic -Wformat=2 -Wconversion -Wno-deprecated-declarations -Wno-unused-command-line-argument -fPIE -fcf-protection=full -D_FORTIFY_SOURCE=2 -c -o stunnel-verify.o `test -f 'verify.c' || echo './'`verify.c
| verify.c: In function ‘verify_checks’:
| verify.c:284:28: warning: passing argument 1 of ‘X509_NAME2text’ discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|   284 |     subject=X509_NAME2text(X509_get_subject_name(cert));
|       |                            ^~~~~~~~~~~~~~~~~~~~~~~~~~~
| In file included from verify.c:38:
| prototypes.h:682:22: note: expected ‘X509_NAME *’ {aka ‘struct X509_name_st *’} but argument is of type ‘const X509_NAME *’ {aka ‘const struct X509_name_st *’}
|   682 | char *X509_NAME2text(X509_NAME *);
|       |                      ^~~~~~~~~~~
| verify.c: In function ‘cert_check_local’:
| verify.c:393:12: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|   393 |     subject=X509_get_subject_name(cert);
|       |            ^
| verify.c: In function ‘compare_pubkeys’:
| verify.c:449:24: error: invalid use of incomplete typedef ‘ASN1_BIT_STRING’ {aka ‘const struct asn1_string_st’}
|   449 |     if(!k1 || !k2 || k1->length!=k2->length || k1->length<0 ||
|       |                        ^~
| verify.c:449:36: error: invalid use of incomplete typedef ‘ASN1_BIT_STRING’ {aka ‘const struct asn1_string_st’}
|   449 |     if(!k1 || !k2 || k1->length!=k2->length || k1->length<0 ||
|       |                                    ^~
| verify.c:449:50: error: invalid use of incomplete typedef ‘ASN1_BIT_STRING’ {aka ‘const struct asn1_string_st’}
|   449 |     if(!k1 || !k2 || k1->length!=k2->length || k1->length<0 ||
|       |                                                  ^~
| verify.c:450:27: error: invalid use of incomplete typedef ‘ASN1_BIT_STRING’ {aka ‘const struct asn1_string_st’}
|   450 |             safe_memcmp(k1->data, k2->data, (size_t)k1->length))
|       |                           ^~
| verify.c:450:37: error: invalid use of incomplete typedef ‘ASN1_BIT_STRING’ {aka ‘const struct asn1_string_st’}
|   450 |             safe_memcmp(k1->data, k2->data, (size_t)k1->length))
|       |                                     ^~
| verify.c:450:55: error: invalid use of incomplete typedef ‘ASN1_BIT_STRING’ {aka ‘const struct asn1_string_st’}
|   450 |             safe_memcmp(k1->data, k2->data, (size_t)k1->length))
|       |                                                       ^~
| At top level:
| cc1: note: unrecognized command-line option ‘-Wno-unused-command-line-argument’ may have been intended to silence earlier diagnostics

Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/stunnel4_5.77-1_amd64-2026-04-19T13:40:56Z

Sebastian