[Pkg-openssl-devel] Bug#1138360: nzbget: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: nzbget
Version: 21.0+dfsg-4
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| g++ -DHAVE_CONFIG_H -I.  -I./daemon/connect -I./daemon/extension -I./daemon/feed -I./daemon/frontend -I./daemon/main -I./daemon/nntp -I./daemon/postprocess -I./daemon/queue -I./daemon/remote -I./daemon/util -I./daemon/nserv -I./lib/par2 -I./lib/yencode  -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/include/libxml2 -D_DEFAULT_SOURCE -D_XOPEN_SOURCE=600    -g -O2 -ffile-prefix-map=/build/reproducible-path/nzbget-21.0+dfsg=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c -o daemon/connect/TlsSocket.o daemon/connect/TlsSocket.cpp
| daemon/connect/TlsSocket.cpp: In member function ‘bool TlsSocket::Start()’:
| daemon/connect/TlsSocket.cpp:396:56: warning: ‘EC_KEY* EC_KEY_new_by_curve_name(int)’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
|   396 |                 EC_KEY* ecdh = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);
|       |                                ~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~
| In file included from /usr/include/openssl/x509.h:35,
|                  from /usr/include/openssl/ssl.h:34,
|                  from ./daemon/main/nzbget.h:257,
|                  from daemon/connect/TlsSocket.cpp:21:
| /usr/include/openssl/ec.h:1017:31: note: declared here
|  1017 | OSSL_DEPRECATEDIN_3_0 EC_KEY *EC_KEY_new_by_curve_name(int nid);
|       |                               ^~~~~~~~~~~~~~~~~~~~~~~~
| daemon/connect/TlsSocket.cpp:406:36: warning: ‘void EC_KEY_free(EC_KEY*)’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
|   406 |                         EC_KEY_free(ecdh);
|       |                         ~~~~~~~~~~~^~~~~~
| /usr/include/openssl/ec.h:1022:28: note: declared here
|  1022 | OSSL_DEPRECATEDIN_3_0 void EC_KEY_free(EC_KEY *key);
|       |                            ^~~~~~~~~~~
| daemon/connect/TlsSocket.cpp:410:28: warning: ‘void EC_KEY_free(EC_KEY*)’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
|   410 |                 EC_KEY_free(ecdh);
|       |                 ~~~~~~~~~~~^~~~~~
| /usr/include/openssl/ec.h:1022:28: note: declared here
|  1022 | OSSL_DEPRECATEDIN_3_0 void EC_KEY_free(EC_KEY *key);
|       |                            ^~~~~~~~~~~
| daemon/connect/TlsSocket.cpp: In member function ‘bool TlsSocket::ValidateCert()’:
| daemon/connect/TlsSocket.cpp:578:81: error: invalid conversion from ‘const X509_NAME_ENTRY*’ {aka ‘const X509_name_entry_st*’} to ‘X509_NAME_ENTRY*’ {aka ‘X509_name_entry_st*’} [-fpermissive]
|   578 |                         X509_NAME_ENTRY* common_name_entry = X509_NAME_get_entry(X509_get_subject_name(cert), common_name_loc);
|       |                                                              ~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|       |                                                                                 |
|       |                                                                                 const X509_NAME_ENTRY* {aka const X509_name_entry_st*}
| daemon/connect/TlsSocket.cpp:582:89: error: invalid conversion from ‘const ASN1_STRING*’ {aka ‘const asn1_string_st*’} to ‘ASN1_STRING*’ {aka ‘asn1_string_st*’} [-fpermissive]
|   582 |                                 ASN1_STRING* common_name_asn1 = X509_NAME_ENTRY_get_data(common_name_entry);
|       |                                                                 ~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~
|       |                                                                                         |
|       |                                                                                         const ASN1_STRING* {aka const asn1_string_st*}
| make[2]: *** [Makefile:1777: daemon/connect/TlsSocket.o] Error 1


Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/nzbget_21.0+dfsg-4_amd64-2026-04-19T11:20:22Z

Sebastian