[Pkg-openssl-devel] Bug#1138369: openvpn3-client: FTBFS with openssl 4.0
Sebastian Andrzej Siewior
sebastian at breakpoint.cc
Sat May 30 17:02:05 BST 2026
Package: openvpn3-client
Version: 27+dfsg-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0
OpenSSL 4.0 is in experimental. This package fails to build against it:
| c++ -Isrc/client/openvpn3-service-client.p -Isrc/client -I../src/client -I../openvpn3-core -I/usr/include -Isrc -I../src -I. -I.. -I../subprojects/fmt-11.2.0/include -Isrc/dco -I/usr/include/jsoncpp -I/usr/include/gio-unix-2.0 -I/usr/include/libmount -I/usr/include/blkid -I/usr/include/glib-2.0 -I/usr/lib/x86_64-linux-gnu/glib-2.0/include -I/usr/include/sysprof-6 -I/usr/include/libnl3 -I/usr/include/uuid -fdiagnostics-color=always -D_GLIBCXX_ASSERTIONS=1 -D_FILE_OFFSET_BITS=64 -Wall -Winvalid-pch -Werror -std=c++17 -Wno-non-virtual-dtor -DOVPN_TINYXML2_HAS_ERROR_NAME -DOVPN_TINYXML2_HAS_ERROR_STR -g -O2 -ffile-prefix-map=/build/reproducible-path/openvpn3-client-27+dfsg=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 -pthread -DFMT_HEADER_ONLY -MD -MQ src/client/openvpn3-service-client.p/openvpn3-service-client.cpp.o -MF src/client/openvpn3-service-client.p/openvpn3-service-client.cpp.o.d -o src/client/openvpn3-service-client.p/openvpn3-service-client.cpp.o -c ../src/client/openvpn3-service-client.cpp
| In file included from ../openvpn3-core/openvpn/openssl/ssl/sslctx.hpp:77,
| from ../openvpn3-core/openvpn/init/engineinit.hpp:23,
| from ../openvpn3-core/openvpn/init/initprocess.hpp:24,
| from ../openvpn3-core/client/ovpncli.cpp:78,
| from ../src/client/core-client.hpp:43,
| from ../src/client/openvpn3-service-client.cpp:60:
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp: In function ‘std::string openvpn::OpenSSLPKI::x509_get_field(X509*, int)’:
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp:142:49: error: invalid conversion from ‘const X509_NAME*’ {aka ‘const X509_name_st*’} to ‘X509_NAME*’ {aka ‘X509_name_st*’} [-fpermissive]
| 142 | X509_NAME *x509_name = X509_get_subject_name(cert);
| | ~~~~~~~~~~~~~~~~~~~~~^~~~~~
| | |
| | const X509_NAME* {aka const X509_name_st*}
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp:146:51: error: invalid conversion from ‘const X509_NAME_ENTRY*’ {aka ‘const X509_name_entry_st*’} to ‘X509_NAME_ENTRY*’ {aka ‘X509_name_entry_st*’} [-fpermissive]
| 146 | X509_NAME_ENTRY *ent = X509_NAME_get_entry(x509_name, i);
| | ~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~
| | |
| | const X509_NAME_ENTRY* {aka const X509_name_entry_st*}
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp:149:56: error: invalid conversion from ‘const ASN1_STRING*’ {aka ‘const asn1_string_st*’} to ‘ASN1_STRING*’ {aka ‘asn1_string_st*’} [-fpermissive]
| 149 | ASN1_STRING *val = X509_NAME_ENTRY_get_data(ent);
| | ~~~~~~~~~~~~~~~~~~~~~~~~^~~~~
| | |
| | const ASN1_STRING* {aka const asn1_string_st*}
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp:167:47: error: invalid conversion from ‘const X509_EXTENSION*’ {aka ‘const X509_extension_st*’} to ‘X509_EXTENSION*’ {aka ‘X509_extension_st*’} [-fpermissive]
| 167 | X509_EXTENSION *ext = X509_get_ext(cert, i);
| | ~~~~~~~~~~~~^~~~~~~~~
| | |
| | const X509_EXTENSION* {aka const X509_extension_st*}
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp: In function ‘std::string openvpn::OpenSSLPKI::x509_get_serial_hex(X509*)’:
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp:228:33: error: invalid use of incomplete type ‘const ASN1_INTEGER’ {aka ‘const struct asn1_string_st’}
| 228 | return render_hex_sep(asn1_i->data, asn1_i->length, ':', false);
| | ^~
| In file included from /usr/include/openssl/crypto.h:38,
| from ../openvpn3-core/openvpn/crypto/definitions.hpp:16,
| from ../openvpn3-core/openvpn/crypto/cryptoalgs.hpp:26,
| from ../openvpn3-core/openvpn/crypto/cryptodc.hpp:27,
| from ../openvpn3-core/openvpn/transport/client/transbase.hpp:27,
| from ../openvpn3-core/openvpn/tun/client/tunbase.hpp:24,
| from ../openvpn3-core/openvpn/tun/linux/client/tunnetlink.hpp:24,
| from ../src/client/core-client.hpp:41:
| /usr/include/openssl/types.h:57:16: note: forward declaration of ‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’}
| 57 | typedef struct asn1_string_st ASN1_INTEGER;
| | ^~~~~~~~~~~~~~
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp:228:47: error: invalid use of incomplete type ‘const ASN1_INTEGER’ {aka ‘const struct asn1_string_st’}
| 228 | return render_hex_sep(asn1_i->data, asn1_i->length, ':', false);
| | ^~
| /usr/include/openssl/types.h:57:16: note: forward declaration of ‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’}
| 57 | typedef struct asn1_string_st ASN1_INTEGER;
| | ^~~~~~~~~~~~~~
| ../openvpn3-core/openvpn/openssl/ssl/sslctx.hpp: In static member function ‘static void openvpn::OpenSSLContext::load_serial_number_into_authcert(openvpn::AuthCert&, X509*)’:
| ../openvpn3-core/openvpn/openssl/ssl/sslctx.hpp:1807:15: error: invalid use of incomplete type ‘const ASN1_INTEGER’ {aka ‘const struct asn1_string_st’}
| 1807 | if (ai->type == V_ASN1_NEG_INTEGER) // negative serial number is considered to be undefined
| | ^~
| /usr/include/openssl/types.h:57:16: note: forward declaration of ‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’}
| 57 | typedef struct asn1_string_st ASN1_INTEGER;
| | ^~~~~~~~~~~~~~
| ninja: build stopped: subcommand failed.
|
Full buildlog
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/openvpn3-client_27+dfsg-1_amd64-2026-04-19T11:28:29Z
Sebastian
More information about the Pkg-openssl-devel
mailing list