[Pkg-openssl-devel] Bug#1138367: unbound: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: unbound
Version: 1.24.2-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| libtool: compile:  gcc -I. -Wdate-time -D_FORTIFY_SOURCE=2 -I../.. -I/usr/include/python3.13 -DSRCDIR=../.. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/unbound-1.24.2=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -ffile-prefix-map=../../= -pthread -c ../../smallapp/unbound-anchor.c  -fPIC -DPIC -o .libs/unbound-anchor.o
| ../../smallapp/unbound-anchor.c: In function 'get_usage_of_ex':
| ../../smallapp/unbound-anchor.c:1679:21: error: invalid use of incomplete typedef 'ASN1_BIT_STRING' {aka 'struct asn1_string_st'}
|  1679 |                 if(s->length > 0) {
|       |                     ^~
| ../../smallapp/unbound-anchor.c:1680:32: error: invalid use of incomplete typedef 'ASN1_BIT_STRING' {aka 'struct asn1_string_st'}
|  1680 |                         val = s->data[0];
|       |                                ^~
| ../../smallapp/unbound-anchor.c:1681:29: error: invalid use of incomplete typedef 'ASN1_BIT_STRING' {aka 'struct asn1_string_st'}
|  1681 |                         if(s->length > 1)
|       |                             ^~
| ../../smallapp/unbound-anchor.c:1682:41: error: invalid use of incomplete typedef 'ASN1_BIT_STRING' {aka 'struct asn1_string_st'}
|  1682 |                                 val |= s->data[1] << 8;
|       |                                         ^~
| ../../smallapp/unbound-anchor.c: In function 'get_valid_signers':
| ../../smallapp/unbound-anchor.c:1708:33: warning: initialization discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|  1708 |                 X509_NAME* nm = X509_get_subject_name(
|       |                                 ^~~~~~~~~~~~~~~~~~~~~
| ../../smallapp/unbound-anchor.c:1720:25: warning: 'X509_NAME_get_text_by_NID' is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|  1720 |                         if(verb >= 3 && X509_NAME_get_text_by_NID(nm,
|       |                         ^~
| In file included from /usr/include/openssl/ssl.h:34,
|                  from ../../smallapp/unbound-anchor.c:130:
| /usr/include/openssl/x509.h:1041:27: note: declared here
|  1041 | OSSL_DEPRECATEDIN_4_0 int X509_NAME_get_text_by_NID(const X509_NAME *name,
|       |                           ^~~~~~~~~~~~~~~~~~~~~~~~~
| ../../smallapp/unbound-anchor.c:1723:25: warning: 'X509_NAME_get_text_by_NID' is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|  1723 |                         if(verb >= 3 && X509_NAME_get_text_by_NID(nm,
|       |                         ^~
| /usr/include/openssl/x509.h:1041:27: note: declared here
|  1041 | OSSL_DEPRECATEDIN_4_0 int X509_NAME_get_text_by_NID(const X509_NAME *name,
|       |                           ^~~~~~~~~~~~~~~~~~~~~~~~~
| ../../smallapp/unbound-anchor.c:1731:54: warning: initialization discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|  1731 |                                 X509_EXTENSION *ex = X509_get_ext(
|       |                                                      ^~~~~~~~~~~~
| ../../smallapp/unbound-anchor.c:1744:25: warning: 'X509_NAME_get_text_by_NID' is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|  1744 |                         if(!X509_NAME_get_text_by_NID(nm,
|       |                         ^~
| /usr/include/openssl/x509.h:1041:27: note: declared here
|  1041 | OSSL_DEPRECATEDIN_4_0 int X509_NAME_get_text_by_NID(const X509_NAME *name,
|       |                           ^~~~~~~~~~~~~~~~~~~~~~~~~
| make[4]: *** [Makefile:323: unbound-anchor.lo] Error 1

Full buildlog
	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/unbound_1.24.2-1_amd64-2026-04-19T11:05:05Z

Sebastian