[Pkg-openssl-devel] Bug#1138392: globus-proxy-utils: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: globus-proxy-utils
Version: 7.4-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:
| gcc -DPACKAGE_NAME=\"globus_proxy_utils\" -DPACKAGE_TARNAME=\"globus_proxy_utils\" -DPACKAGE_VERSION=\"7.4\" -DPACKAGE_STRING=\"globus_proxy_utils\ 7.4\" -DPACKAGE_BUGREPORT=\"https://github.com/gridcf/gct/issues\" -DPACKAGE_URL=\"\" -DPACKAGE=\"globus_proxy_utils\" -DVERSION=\"7.4\" -DHAVE_STDIO_H=1 -DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 -DHAVE_INTTYPES_H=1 -DHAVE_STDINT_H=1 -DHAVE_STRINGS_H=1 -DHAVE_SYS_STAT_H=1 -DHAVE_SYS_TYPES_H=1 -DHAVE_UNISTD_H=1 -DSTDC_HEADERS=1 -DHAVE_DLFCN_H=1 -DLT_OBJDIR=\".libs/\" -I.  -I.. -I/usr/include/globus  -Wdate-time -D_FORTIFY_SOURCE=2  -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/globus-proxy-utils-7.4=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c -o grid-cert-diagnostics.o grid-cert-diagnostics.c
| grid-cert-diagnostics.c: In function ‘default_cred_check’:
| grid-cert-diagnostics.c:744:5: warning: ‘RSA_get0_key’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
|   744 |     RSA_get0_key(EVP_PKEY_get0_RSA(pubkey), &pub_n, NULL, NULL);
|       |     ^~~~~~~~~~~~
| In file included from /usr/include/openssl/x509.h:38,
|                  from /usr/include/globus/globus_gsi_system_config.h:28,
|                  from grid-cert-diagnostics.c:18:
| /usr/include/openssl/rsa.h:228:28: note: declared here
|   228 | OSSL_DEPRECATEDIN_3_0 void RSA_get0_key(const RSA *r,
|       |                            ^~~~~~~~~~~~
| grid-cert-diagnostics.c:744:5: warning: ‘EVP_PKEY_get0_RSA’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
|   744 |     RSA_get0_key(EVP_PKEY_get0_RSA(pubkey), &pub_n, NULL, NULL);
|       |     ^~~~~~~~~~~~
| In file included from /usr/include/openssl/x509.h:31:
| /usr/include/openssl/evp.h:1303:22: note: declared here
|  1303 | const struct rsa_st *EVP_PKEY_get0_RSA(const EVP_PKEY *pkey);
|       |                      ^~~~~~~~~~~~~~~~~
| grid-cert-diagnostics.c:745:5: warning: ‘RSA_get0_key’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
|   745 |     RSA_get0_key(EVP_PKEY_get0_RSA(privkey), &priv_n, NULL, NULL);
|       |     ^~~~~~~~~~~~
| /usr/include/openssl/rsa.h:228:28: note: declared here
|   228 | OSSL_DEPRECATEDIN_3_0 void RSA_get0_key(const RSA *r,
|       |                            ^~~~~~~~~~~~
| grid-cert-diagnostics.c:745:5: warning: ‘EVP_PKEY_get0_RSA’ is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
|   745 |     RSA_get0_key(EVP_PKEY_get0_RSA(privkey), &priv_n, NULL, NULL);
|       |     ^~~~~~~~~~~~
| /usr/include/openssl/evp.h:1303:22: note: declared here
|  1303 | const struct rsa_st *EVP_PKEY_get0_RSA(const EVP_PKEY *pkey);
|       |                      ^~~~~~~~~~~~~~~~~
| grid-cert-diagnostics.c: In function ‘check_service_cert_chain’:
| grid-cert-diagnostics.c:1644:7: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|  1644 |     n = X509_get_subject_name(cert);
|       |       ^
| grid-cert-diagnostics.c:1654:7: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|  1654 |     n = X509_get_issuer_name(cert);
|       |       ^
| grid-cert-diagnostics.c:1673:19: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|  1673 |         ext_value = X509_get_ext(cert, idx);
|       |                   ^
| grid-cert-diagnostics.c:1691:57: error: invalid use of incomplete typedef ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|  1691 |                        (int) subject_alt_name->d.dNSName->length,
|       |                                                         ^~
| grid-cert-diagnostics.c:1692:51: error: invalid use of incomplete typedef ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|  1692 |                        subject_alt_name->d.dNSName->data);
|       |                                                   ^~
| grid-cert-diagnostics.c:1698:59: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|  1698 |                        (int) subject_alt_name->d.iPAddress->length,
|       |                                                           ^~
| grid-cert-diagnostics.c:1699:53: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|  1699 |                        subject_alt_name->d.iPAddress->data);
|       |                                                     ^~
| make[2]: *** [Makefile:494: grid-cert-diagnostics.o] Error 1

Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/globus-proxy-utils_7.4-1_amd64-2026-04-19T07:47:51Z

Sebastian