[Pkg-openssl-devel] Bug#1138390: systemd: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: systemd
Version: 260.1-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| cc -Isrc/shared/libsystemd-shared-260.a.p -Isrc/basic -I../src/basic -Isrc/fundamental -I../src/fundamental -Isrc/systemd -I../src/systemd -Isrc/version -I../src/version -I../src/libsystemd/sd-bus -I../src/libsystemd/sd-common -I../src/libsystemd/sd-device -I../src/libsystemd/sd-event -I../src/libsystemd/sd-hwdb -I../src/libsystemd/sd-id128 -Isrc/libsystemd/sd-journal -I../src/libsystemd/sd-journal -I../src/libsystemd/sd-json -I../src/libsystemd/sd-netlink -I../src/libsystemd/sd-network -I../src/libsystemd/sd-path -I../src/libsystemd/sd-resolve -I../src/libsystemd/sd-varlink -Isrc/shared -I../src/shared -I/usr/include/blkid -I/usr/include/uuid -I/usr/include/json-c -I/usr/include/libmount -I/usr/include/p11-kit-1 -I/usr/include/tss2 -fdiagnostics-color=always -D_FILE_OFFSET_BITS=64 -Wall -Winvalid-pch -Wextra -std=gnu17 -Wno-missing-field-initializers -Wno-unused-parameter -Wno-nonnull-compare -Warray-bounds -Warray-bounds=2 -Wdate-time -Wendif-labels -Werror=bool-compare -Werror=discarded-qualifiers -Werror=flex-array-member-not-at-end -Werror=format=2 -Werror=format-signedness -Werror=implicit-function-declaration -Werror=implicit-int -Werror=incompatible-pointer-types -Werror=int-conversion -Werror=missing-declarations -Werror=missing-parameter-name -Werror=missing-prototypes -Werror=overflow -Werror=override-init -Werror=pointer-sign -Werror=return-type -Werror=sequence-point -Werror=shift-count-overflow -Werror=shift-overflow=2 -Werror=strict-flex-arrays -Werror=undef -Wfloat-equal -Wimplicit-fallthrough=5 -Winit-self -Wlogical-op -Wmissing-include-dirs -Wmissing-noreturn -Wnested-externs -Wold-style-definition -Wpointer-arith -Wredundant-decls -Wshadow -Wstrict-aliasing=2 -Wstrict-prototypes -Wsuggest-attribute=noreturn -Wunterminated-string-initialization -Wunused-function -Wwrite-strings -Wzero-as-null-pointer-constant -Wzero-length-bounds -fdiagnostics-show-option -fno-common -fstack-protector -fstack-protector-strong -fstrict-flex-arrays=3 --param=ssp-buffer-size=4 -Wno-maybe-uninitialized -Wno-unused-result -ftrivial-auto-var-init=zero -Werror=shadow -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/systemd-260.1=. -flto=auto -ffat-lto-objects -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 -fPIC -fno-strict-aliasing -fstrict-flex-arrays=1 -fvisibility=hidden -include config.h -pthread -isystem../src/include/override -isystemsrc/include/override -isystem../src/include/uapi -fvisibility=default -MD -MQ src/shared/libsystemd-shared-260.a.p/pkcs11-util.c.o -MF src/shared/libsystemd-shared-260.a.p/pkcs11-util.c.o.d -o src/shared/libsystemd-shared-260.a.p/pkcs11-util.c.o -c ../src/shared/pkcs11-util.c
| In file included from /usr/include/openssl/indicator.h:18,
|                  from /usr/include/openssl/core_dispatch.h:16,
|                  from /usr/include/openssl/evp.h:28,
|                  from ../src/shared/openssl-util.h:38,
|                  from ../src/shared/pkcs11-util.c:11:
| ../src/shared/pkcs11-util.c: In function ‘pkcs11_token_read_public_key’:
| ../src/shared/pkcs11-util.c:557:76: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   557 |                         OSSL_PARAM_octet_string(OSSL_PKEY_PARAM_PUB_KEY, os->data, os->length)
|       |                                                                            ^~
| ../src/shared/pkcs11-util.c:557:86: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   557 |                         OSSL_PARAM_octet_string(OSSL_PKEY_PARAM_PUB_KEY, os->data, os->length)
|       |                                                                                      ^~
| ../src/shared/pkcs11-util.c: In function ‘pkcs11_token_read_x509_certificate’:
| ../src/shared/pkcs11-util.c:694:14: error: assignment discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers]
|   694 |         name = X509_get_subject_name(x509);
|       |              ^
| cc1: some warnings being treated as errors
| ninja: build stopped: subcommand failed.

Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/systemd_260.1-1_amd64-2026-04-19T12:33:12Z

Sebastian