[Pkg-openssl-devel] Bug#1138374: freeradius: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: freeradius
Version: 3.2.8+dfsg-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| build/make/jlibtool --silent --mode=compile gcc -o build/objs/src/main/tls.lo -c -MD -Wdate-time -D_FORTIFY_SOURCE=2 -I. -Isrc -include src/freeradius-devel/autoconf.h -include src/freeradius-devel/build.h -include src/freeradius-devel/features.h -include src/freeradius-devel/radpaths.h -fno-strict-aliasing -Wno-date-time -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/freeradius-3.2.8+dfsg=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wall -std=c99 -D_GNU_SOURCE -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -DNDEBUG -DIS_MODULE=1 -DWITH_EAPCLIENT -DBUILT_WITH_CPPFLAGS=\"-Wdate-time -D_FORTIFY_SOURCE=2\" -DBUILT_WITH_CFLAGS=\"-I. -Isrc -include src/freeradius-devel/autoconf.h -include src/freeradius-devel/build.h -include src/freeradius-devel/features.h -include src/freeradius-devel/radpaths.h -fno-strict-aliasing -Wno-date-time -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/freeradius-3.2.8+dfsg=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wall -std=c99 -D_GNU_SOURCE -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -DNDEBUG -DIS_MODULE=1\" -DBUILT_WITH_LDFLAGS=\" -Wl,-z,relro -Wl,-z,now \" -DBUILT_WITH_LIBS=\"-lcrypto -lssl -ltalloc -latomic -lcap -lresolv -ldl -lpthread -lreadline\" -Isrc/modules/rlm_eap/libeap src/main/tls.c
| In file included from src/main/tls.c:55:
| src/main/tls.c: In function ‘ocsp_parse_cert_url’:
| src/main/tls.c:2540:64: error: invalid use of incomplete typedef ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|  2540 |                 if (OCSP_parse_url((char *) ad->location->d.ia5->data, host_out,
|       |                                                                ^~
| src/main/tls.c: In function ‘cbtls_verify’:
| src/main/tls.c:3022:48: error: invalid use of incomplete typedef ‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’}
|  3022 |             (lookup <= 1) && sn && ((size_t) sn->length < (sizeof(buf) / 2))) {
|       |                                                ^~
| src/main/tls.c:3026:35: error: invalid use of incomplete typedef ‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’}
|  3026 |                 for (i = 0; i < sn->length; i++) {
|       |                                   ^~
| src/main/tls.c:3027:60: error: invalid use of incomplete typedef ‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’}
|  3027 |                         sprintf(p, "%02x", (unsigned int)sn->data[i]);
|       |                                                            ^~
| src/main/tls.c:3040:22: error: invalid use of incomplete typedef ‘ASN1_TIME’ {aka ‘struct asn1_string_st’}
|  3040 |             (asn_time->length < (int) sizeof(buf))) {
|       |                      ^~
| src/main/tls.c:3041:45: error: invalid use of incomplete typedef ‘ASN1_TIME’ {aka ‘struct asn1_string_st’}
|  3041 |                 memcpy(buf, (char*) asn_time->data, asn_time->length);
|       |                                             ^~
| src/main/tls.c:3041:61: error: invalid use of incomplete typedef ‘ASN1_TIME’ {aka ‘struct asn1_string_st’}
|  3041 |                 memcpy(buf, (char*) asn_time->data, asn_time->length);
|       |                                                             ^~
| src/main/tls.c:3042:29: error: invalid use of incomplete typedef ‘ASN1_TIME’ {aka ‘struct asn1_string_st’}
|  3042 |                 buf[asn_time->length] = '\0';
|       |                             ^~
| src/main/tls.c:3053:22: error: invalid use of incomplete typedef ‘ASN1_TIME’ {aka ‘struct asn1_string_st’}
|  3053 |             (asn_time->length < (int) sizeof(buf))) {
|       |                      ^~
| src/main/tls.c:3054:45: error: invalid use of incomplete typedef ‘ASN1_TIME’ {aka ‘struct asn1_string_st’}
|  3054 |                 memcpy(buf, (char*) asn_time->data, asn_time->length);
|       |                                             ^~
| src/main/tls.c:3054:61: error: invalid use of incomplete typedef ‘ASN1_TIME’ {aka ‘struct asn1_string_st’}
|  3054 |                 memcpy(buf, (char*) asn_time->data, asn_time->length);
|       |                                                             ^~
| src/main/tls.c:3055:29: error: invalid use of incomplete typedef ‘ASN1_TIME’ {aka ‘struct asn1_string_st’}
|  3055 |                 buf[asn_time->length] = '\0';
|       |                             ^~
| src/main/tls.c:3083:9: warning: ‘X509_NAME_get_text_by_NID’ is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|  3083 |         X509_NAME_get_text_by_NID(X509_get_subject_name(client_cert),
|       |         ^~~~~~~~~~~~~~~~~~~~~~~~~
| In file included from /usr/include/openssl/ssl.h:34,
|                  from src/freeradius-devel/missing.h:87,
|                  from src/freeradius-devel/libradius.h:71,
|                  from src/freeradius-devel/radiusd.h:29,
|                  from src/main/tls.c:28:
| /usr/include/openssl/x509.h:1041:27: note: declared here
|  1041 | OSSL_DEPRECATEDIN_4_0 int X509_NAME_get_text_by_NID(const X509_NAME *name,
|       |                           ^~~~~~~~~~~~~~~~~~~~~~~~~
| src/main/tls.c:3132:26: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|  3132 |                 if ((ext = X509_get_ext(client_cert, loc)) &&
|       |                          ^
| src/main/tls.c:3240:29: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|  3240 |                         obj = X509_EXTENSION_get_object(ext);
|       |                             ^
| make[2]: *** [scripts/boiler.mk:643: build/objs/src/main/tls.lo] Error 1

Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/freeradius_3.2.8+dfsg-1_amd64-2026-04-19T08:33:37Z

Sebastian