[Pkg-openssl-devel] Bug#1138397: nghttp2: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: nghttp2
Version: 1.68.1-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| g++ -std=gnu++20 -DHAVE_CONFIG_H -I. -I..  -DPKGDATADIR='"/usr/share/nghttp2"' -DPKGLIBDIR='"/usr/lib/x86_64-linux-gnu/nghttp2"' -I../lib/includes -I../lib/includes -I../lib -I../third-party/urlparse -I../third-party/llhttp/include -I/usr/include/libxml2 -DHAVE_CONFIG_H   -Wdate-time -D_FORTIFY_SOURCE=2   -g -O2 -ffile-prefix-map=/build/reproducible-path/nghttp2-1.68.1=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c -o libnghttpx_a-shrpx_tls.o `test -f 'shrpx_tls.cc' || echo './'`shrpx_tls.cc
| shrpx_tls.cc: In function ‘int shrpx::tls::verify_numeric_hostname(X509*, const std::string_view&, const nghttp2::Address*)’:
| shrpx_tls.cc:1734:42: error: invalid use of incomplete type ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|  1734 |       auto ip_addr = altname->d.iPAddress->data;
|       |                                          ^~
| In file included from /usr/include/openssl/crypto.h:38,
|                  from /usr/include/openssl/comp.h:25,
|                  from /usr/include/openssl/ssl.h:31,
|                  from ssl_compat.h:51,
|                  from shrpx_tls.h:33,
|                  from shrpx_tls.cc:25:
| /usr/include/openssl/types.h:57:16: note: forward declaration of ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|    57 | typedef struct asn1_string_st ASN1_INTEGER;
|       |                ^~~~~~~~~~~~~~
| shrpx_tls.cc:1738:65: error: invalid use of incomplete type ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|  1738 |       auto ip_addrlen = static_cast<size_t>(altname->d.iPAddress->length);
|       |                                                                 ^~
| /usr/include/openssl/types.h:57:16: note: forward declaration of ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|    57 | typedef struct asn1_string_st ASN1_INTEGER;
|       |                ^~~~~~~~~~~~~~
| shrpx_tls.cc: In function ‘std::string_view shrpx::tls::get_x509_subject_name(nghttp2::BlockAllocator&, X509*)’:
| shrpx_tls.cc:2378:53: error: invalid conversion from ‘const X509_NAME*’ {aka ‘const X509_name_st*’} to ‘X509_NAME*’ {aka ‘X509_name_st*’} [-fpermissive]
|  2378 |   return get_x509_name(balloc, X509_get_subject_name(x));
|       |                                ~~~~~~~~~~~~~~~~~~~~~^~~
|       |                                                     |
|       |                                                     const X509_NAME* {aka const X509_name_st*}
| shrpx_tls.cc:2355:67: note: initializing argument 2 of ‘std::string_view shrpx::tls::{anonymous}::get_x509_name(nghttp2::BlockAllocator&, X509_NAME*)’
|  2355 | std::string_view get_x509_name(BlockAllocator &balloc, X509_NAME *nm) {
|       |                                                        ~~~~~~~~~~~^~
| shrpx_tls.cc: In function ‘std::string_view shrpx::tls::get_x509_issuer_name(nghttp2::BlockAllocator&, X509*)’:
| shrpx_tls.cc:2382:52: error: invalid conversion from ‘const X509_NAME*’ {aka ‘const X509_name_st*’} to ‘X509_NAME*’ {aka ‘X509_name_st*’} [-fpermissive]
|  2382 |   return get_x509_name(balloc, X509_get_issuer_name(x));
|       |                                ~~~~~~~~~~~~~~~~~~~~^~~
|       |                                                    |
|       |                                                    const X509_NAME* {aka const X509_name_st*}
| shrpx_tls.cc:2355:67: note: initializing argument 2 of ‘std::string_view shrpx::tls::{anonymous}::get_x509_name(nghttp2::BlockAllocator&, X509_NAME*)’
|  2355 | std::string_view get_x509_name(BlockAllocator &balloc, X509_NAME *nm) {
|       |                                                        ~~~~~~~~~~~^~
| make[5]: *** [Makefile:1827: libnghttpx_a-shrpx_tls.o] Error 1


Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/nghttp2_1.68.1-1_amd64-2026-04-19T12:24:41Z

Sebastian