[Pkg-openssl-devel] Bug#1138336: svxlink: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: svxlink
Version: 25.05.1-4
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| [  2%] Building CXX object async/core/CMakeFiles/asynccore.dir/AsyncTcpClientBase.cpp.o
| cd /build/reproducible-path/svxlink-25.05.1/build/async/core && /usr/bin/c++ -DINTERNAL_SAMPLE_RATE=16000 -D_REENTRANT -Dasynccore_EXPORTS -I/build/reproducible-path/svxlink-25.05.1/build/include -I/build/reproducible-path/svxlink-25.05.1/build -I/usr/lib/x86_64-linux-gnu/sigc++-2.0/include -I/usr/include/sigc++-2.0 -g -O2 -ffile-prefix-map=/build/reproducible-path/svxlink-25.05.1=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 -Wdate-time -D_FORTIFY_SOURCE=2 --std=c++11 -fPIC -MD -MT async/core/CMakeFiles/asynccore.dir/AsyncTcpClientBase.cpp.o -MF CMakeFiles/asynccore.dir/AsyncTcpClientBase.cpp.o.d -o CMakeFiles/asynccore.dir/AsyncTcpClientBase.cpp.o -c /build/reproducible-path/svxlink-25.05.1/src/async/core/AsyncTcpClientBase.cpp
| In file included from /build/reproducible-path/svxlink-25.05.1/build/include/AsyncTcpConnection.h:63,
|                  from /build/reproducible-path/svxlink-25.05.1/build/include/AsyncTcpClientBase.h:52,
|                  from /build/reproducible-path/svxlink-25.05.1/src/async/core/AsyncTcpClient.h:58,
|                  from /build/reproducible-path/svxlink-25.05.1/src/async/core/AsyncTcpClientBase.cpp:66:
| /build/reproducible-path/svxlink-25.05.1/build/include/AsyncSslX509.h: In member function ‘std::string Async::SslX509::commonName() const’:
| /build/reproducible-path/svxlink-25.05.1/build/include/AsyncSslX509.h:357:49: error: invalid conversion from ‘const X509_NAME_ENTRY*’ {aka ‘const X509_name_entry_st*’} to ‘X509_NAME_ENTRY*’ {aka ‘X509_name_entry_st*’} [-fpermissive]
|   357 |         X509_NAME_ENTRY *e = X509_NAME_get_entry(subj, lastpos);
|       |                              ~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~
|       |                                                 |
|       |                                                 const X509_NAME_ENTRY* {aka const X509_name_entry_st*}
| /build/reproducible-path/svxlink-25.05.1/build/include/AsyncSslX509.h:358:50: error: invalid conversion from ‘const ASN1_STRING*’ {aka ‘const asn1_string_st*’} to ‘ASN1_STRING*’ {aka ‘asn1_string_st*’} [-fpermissive]
|   358 |         ASN1_STRING *d = X509_NAME_ENTRY_get_data(e);
|       |                          ~~~~~~~~~~~~~~~~~~~~~~~~^~~
|       |                                                  |
|       |                                                  const ASN1_STRING* {aka const asn1_string_st*}
| /build/reproducible-path/svxlink-25.05.1/build/include/AsyncSslX509.h: In member function ‘bool Async::SslX509::timeIsWithinRange(time_t, time_t) const’:
| /build/reproducible-path/svxlink-25.05.1/build/include/AsyncSslX509.h:634:29: warning: ‘int X509_cmp_time(const ASN1_TIME*, const time_t*)’ is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|   634 |               (X509_cmp_time(not_before, &tbegin) == -1)) &&
|       |                ~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~
| In file included from /usr/include/openssl/pem.h:23,
|                  from /build/reproducible-path/svxlink-25.05.1/build/include/AsyncTcpConnection.h:44:
| /usr/include/openssl/x509.h:693:27: note: declared here
|   693 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_time(const ASN1_TIME *s, const time_t *t);
|       |                           ^~~~~~~~~~~~~
| /build/reproducible-path/svxlink-25.05.1/build/include/AsyncSslX509.h:636:29: warning: ‘int X509_cmp_time(const ASN1_TIME*, const time_t*)’ is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|   636 |               (X509_cmp_time(not_after, &tend) == 1));
|       |                ~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~
| /usr/include/openssl/x509.h:693:27: note: declared here
|   693 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_time(const ASN1_TIME *s, const time_t *t);
|       |                           ^~~~~~~~~~~~~
| /build/reproducible-path/svxlink-25.05.1/build/include/AsyncSslX509.h: In member function ‘void Async::SslX509::addIssuerName(const std::string&, const std::string&)’:
| /build/reproducible-path/svxlink-25.05.1/build/include/AsyncSslX509.h:715:45: error: invalid conversion from ‘const X509_NAME*’ {aka ‘const X509_name_st*’} to ‘X509_NAME*’ {aka ‘X509_name_st*’} [-fpermissive]
|   715 |       X509_NAME* name = X509_get_issuer_name(m_cert);
|       |                         ~~~~~~~~~~~~~~~~~~~~^~~~~~~~
|       |                                             |
|       |                                             const X509_NAME* {aka const X509_name_st*}
| /build/reproducible-path/svxlink-25.05.1/build/include/AsyncSslX509.h: In member function ‘void Async::SslX509::addSubjectName(const std::string&, const std::string&)’:
| /build/reproducible-path/svxlink-25.05.1/build/include/AsyncSslX509.h:738:46: error: invalid conversion from ‘const X509_NAME*’ {aka ‘const X509_name_st*’} to ‘X509_NAME*’ {aka ‘X509_name_st*’} [-fpermissive]
|   738 |       X509_NAME* name = X509_get_subject_name(m_cert);
|       |                         ~~~~~~~~~~~~~~~~~~~~~^~~~~~~~
|       |                                              |
|       |                                              const X509_NAME* {aka const X509_name_st*}
| make[4]: *** [async/core/CMakeFiles/asynccore.dir/build.make:152: async/core/CMakeFiles/asynccore.dir/AsyncTcpClientBase.cpp.o] Error 1


Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/svxlink_25.05.1-4_amd64-2026-04-19T11:48:12Z

Sebastian