[Pkg-openssl-devel] Bug#1138338: trustedqsl: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: trustedqsl
Version: 2.8.4-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| [  7%] Building CXX object src/CMakeFiles/tqsllib.dir/openssl_cert.cpp.o
| cd /build/reproducible-path/trustedqsl-2.8.4/obj-x86_64-linux-gnu/src && /usr/bin/c++ -DCONFDIR=\"/usr/share/TrustedQSL/\" -DTQSLLIB_VERSION_MAJOR=2 -DTQSLLIB_VERSION_MINOR=6 -DTQSL_VERSION_MAJOR=2 -DTQSL_VERSION_MINOR=8 -DTQSL_VERSION_PATCH=0 -DTQSL_VERSION_UPDATE=4 -Dtqsllib_EXPORTS  -g -O2 -ffile-prefix-map=/build/reproducible-path/trustedqsl-2.8.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DNDEBUG -Wdate-time -D_FORTIFY_SOURCE=2 -fPIC -fPIC -MD -MT src/CMakeFiles/tqsllib.dir/openssl_cert.cpp.o -MF CMakeFiles/tqsllib.dir/openssl_cert.cpp.o.d -o CMakeFiles/tqsllib.dir/openssl_cert.cpp.o -c /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp
| /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp: In function ‘int tqsl_createCertRequest(const char*, TQSL_CERT_REQ*, int (*)(char*, int, void*), void*)’:
| /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp:667:41: error: invalid conversion from ‘const X509_NAME*’ {aka ‘const X509_name_st*’} to ‘X509_NAME*’ {aka ‘X509_name_st*’} [-fpermissive]
|   667 |         subj = X509_REQ_get_subject_name(xr);
|       |                ~~~~~~~~~~~~~~~~~~~~~~~~~^~~~
|       |                                         |
|       |                                         const X509_NAME* {aka const X509_name_st*}
| /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp: In function ‘int tqsl_getCertificateIssuerOrganization(tQSL_Cert, char*, int)’:
| /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp:1921:40: error: invalid conversion from ‘const X509_NAME*’ {aka ‘const X509_name_st*’} to ‘X509_NAME*’ {aka ‘X509_name_st*’} [-fpermissive]
|  1921 |         if ((iss = X509_get_issuer_name(TQSL_API_TO_CERT(cert)->cert)) == NULL) {
|       |                    ~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|       |                                        |
|       |                                        const X509_NAME* {aka const X509_name_st*}
| /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp: In function ‘int tqsl_getCertificateIssuerOrganizationalUnit(tQSL_Cert, char*, int)’:
| /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp:1959:40: error: invalid conversion from ‘const X509_NAME*’ {aka ‘const X509_name_st*’} to ‘X509_NAME*’ {aka ‘X509_name_st*’} [-fpermissive]
|  1959 |         if ((iss = X509_get_issuer_name(TQSL_API_TO_CERT(cert)->cert)) == NULL) {
|       |                    ~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|       |                                        |
|       |                                        const X509_NAME* {aka const X509_name_st*}
| /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp: In function ‘std::string tqsl_asn1_octet_string_to_hex(ASN1_OCTET_STRING*)’:
| /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp:2771:31: error: invalid use of incomplete type ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|  2771 |         for (int k = 0; k < os->length; k++) {
|       |                               ^~
| In file included from /usr/include/openssl/err.h:30,
|                  from /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp:153:
| /usr/include/openssl/types.h:57:16: note: forward declaration of ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|    57 | typedef struct asn1_string_st ASN1_INTEGER;
|       |                ^~~~~~~~~~~~~~
| /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp:2773:30: error: invalid use of incomplete type ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|  2773 |                 hex[0] = ((os->data[k] >> 4) & 0xf) + '0';
|       |                              ^~
| /usr/include/openssl/types.h:57:16: note: forward declaration of ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|    57 | typedef struct asn1_string_st ASN1_INTEGER;
|       |                ^~~~~~~~~~~~~~
| /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp:2775:29: error: invalid use of incomplete type ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|  2775 |                 hex[1] = (os->data[k] & 0xf) + '0';
|       |                             ^~
| /usr/include/openssl/types.h:57:16: note: forward declaration of ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|    57 | typedef struct asn1_string_st ASN1_INTEGER;
|       |                ^~~~~~~~~~~~~~
| /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp: In function ‘int tqsl_get_bag_attribute(PKCS12_SAFEBAG*, const char*, std::string&)’:
| /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp:2800:56: error: invalid use of incomplete type ‘ASN1_BMPSTRING’ {aka ‘struct asn1_string_st’}
|  2800 |                 char *c = uni2asc(attr->value.bmpstring->data, attr->value.bmpstring->length);
|       |                                                        ^~
| /usr/include/openssl/types.h:57:16: note: forward declaration of ‘ASN1_BMPSTRING’ {aka ‘struct asn1_string_st’}
|    57 | typedef struct asn1_string_st ASN1_INTEGER;
|       |                ^~~~~~~~~~~~~~
| /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp:2800:85: error: invalid use of incomplete type ‘ASN1_BMPSTRING’ {aka ‘struct asn1_string_st’}
|  2800 |                 char *c = uni2asc(attr->value.bmpstring->data, attr->value.bmpstring->length);
|       |                                                                                     ^~
| /usr/include/openssl/types.h:57:16: note: forward declaration of ‘ASN1_BMPSTRING’ {aka ‘struct asn1_string_st’}
|    57 | typedef struct asn1_string_st ASN1_INTEGER;
|       |                ^~~~~~~~~~~~~~
| /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp: In function ‘stack_st_X509* tqsl_filter_cert_list(stack_st_X509*, const char*, int, const tQSL_Date*, const TQSL_PROVIDER*, int)’:
| /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp:3850:56: error: invalid conversion from ‘const X509_NAME*’ {aka ‘const X509_name_st*’} to ‘X509_NAME*’ {aka ‘X509_name_st*’} [-fpermissive]
|  3850 |                         if ((iss = X509_get_issuer_name(x)) == NULL)
|       |                                    ~~~~~~~~~~~~~~~~~~~~^~~
|       |                                                        |
|       |                                                        const X509_NAME* {aka const X509_name_st*}
| /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp: In function ‘int tqsl_get_name_stuff(X509_NAME_ENTRY*, TQSL_X509_NAME_ITEM*)’:
| /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp:4095:41: error: invalid conversion from ‘const ASN1_OBJECT*’ {aka ‘const asn1_object_st*’} to ‘ASN1_OBJECT*’ {aka ‘asn1_object_st*’} [-fpermissive]
|  4095 |         obj = X509_NAME_ENTRY_get_object(entry);
|       |               ~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~
|       |                                         |
|       |                                         const ASN1_OBJECT* {aka const asn1_object_st*}
| /build/reproducible-path/trustedqsl-2.8.4/src/openssl_cert.cpp:4110:49: error: invalid conversion from ‘const ASN1_STRING*’ {aka ‘const asn1_string_st*’} to ‘ASN1_STRING*’ {aka ‘asn1_string_st*’} [-fpermissive]
|  4110 |                 value = X509_NAME_ENTRY_get_data(entry);
|       |                         ~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~
|       |                                                 |
|       |                                                 const ASN1_STRING* {aka const asn1_string_st*}
…

Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/trustedqsl_2.8.4-1_amd64-2026-04-19T08:16:17Z

Sebastian