[Pkg-openssl-devel] Bug#1138391: lighttpd: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: lighttpd
Version: 1.4.82-2
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| libtool: compile:  gcc -DHAVE_CONFIG_H -DHAVE_VERSIONSTAMP_H -DLIBRARY_DIR=\"/usr/lib/lighttpd\" -DSBIN_DIR=\"/usr/sbin\" -I. -I.. -Wdate-time -D_FORTIFY_SOURCE=2 -D_REENTRANT -D_TIME_BITS=64 -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -D_LARGE_FILES -D_DEFAULT_SOURCE -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/lighttpd-1.4.82=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wa,--noexecstack -pipe -Wall -W -Wshadow -pedantic -c mod_openssl.c  -fPIC -DPIC -o .libs/mod_openssl_la-mod_openssl.o
| mod_openssl.c: In function ‘verify_callback’:
| mod_openssl.c:1944:16: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|  1944 |         issuer = X509_get_issuer_name(err_cert);
|       |                ^
| mod_openssl.c:1970:29: warning: passing argument 1 of ‘safer_X509_NAME_oneline’ discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|  1970 |     safer_X509_NAME_oneline(X509_get_subject_name(err_cert),buf,sizeof(buf));
|       |                             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| mod_openssl.c:1857:36: note: expected ‘X509_NAME *’ {aka ‘struct X509_name_st *’} but argument is of type ‘const X509_NAME *’ {aka ‘const struct X509_name_st *’}
|  1857 | safer_X509_NAME_oneline(X509_NAME *name, char *buf, size_t sz)
|       |                         ~~~~~~~~~~~^~~~
| mod_openssl.c:1983:33: warning: passing argument 1 of ‘safer_X509_NAME_oneline’ discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|  1983 |         safer_X509_NAME_oneline(X509_get_issuer_name(err_cert),buf,sizeof(buf));
|       |                                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| mod_openssl.c:1857:36: note: expected ‘X509_NAME *’ {aka ‘struct X509_name_st *’} but argument is of type ‘const X509_NAME *’ {aka ‘const struct X509_name_st *’}
|  1857 | safer_X509_NAME_oneline(X509_NAME *name, char *buf, size_t sz)
|       |                         ~~~~~~~~~~~^~~~
| mod_openssl.c: In function ‘https_add_ssl_client_subject’:
| mod_openssl.c:4853:18: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|  4853 |         if (!(xe = X509_NAME_get_entry(xn, i))) {
|       |                  ^
| mod_openssl.c:4863:74: error: invalid use of incomplete typedef ‘ASN1_STRING’ {aka ‘const struct asn1_string_st’}
|  4863 |                                 (const char*)X509_NAME_ENTRY_get_data(xe)->data,
|       |                                                                          ^~
| mod_openssl.c:4864:61: error: invalid use of incomplete typedef ‘ASN1_STRING’ {aka ‘const struct asn1_string_st’}
|  4864 |                                 X509_NAME_ENTRY_get_data(xe)->length);
|       |                                                             ^~
| mod_openssl.c: In function ‘https_add_ssl_client_entries’:
| mod_openssl.c:4906:8: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|  4906 |     xn = X509_get_subject_name(xs);
|       |        ^
| make[4]: *** [Makefile:2631: mod_openssl_la-mod_openssl.lo] Error 1
| 

Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/lighttpd_1.4.82-2_amd64-2026-04-19T12:28:30Z

Sebastian