[Pkg-openssl-devel] Bug#1138408: yubihsm-shell: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: yubihsm-shell
Version: 2.7.3-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| [ 64%] Building C object examples/CMakeFiles/attest.dir/attest.c.o
| cd /build/reproducible-path/yubihsm-shell-2.7.3/obj-x86_64-linux-gnu/examples && /usr/bin/cc -DDEFAULT_CONNECTOR_URL=\"http://localhost:12345\" -DENABLE_CERT_COMPRESS -DHAVE_EXPLICIT_BZERO -DOPENSSL_API_COMPAT=0x10000000L -I/build/reproducible-path/yubihsm-shell-2.7.3/examples/../lib -I/build/reproducible-path/yubihsm-shell-2.7.3/examples/../pkcs11 -I/build/reproducible-path/yubihsm-shell-2.7.3/examples/../common -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/yubihsm-shell-2.7.3=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/include/PCSC -flto -Wno-missing-braces -Wno-missing-field-initializers -std=gnu11 -Wformat -Wformat-nonliteral -Wformat-security -Wshadow -Wmissing-prototypes -Wbad-function-cast -pedantic -pedantic-errors -fpie -fpic -Wall -Wextra -Werror -fstack-protector-all -Wno-implicit-fallthrough -MD -MT examples/CMakeFiles/attest.dir/attest.c.o -MF CMakeFiles/attest.dir/attest.c.o.d -o CMakeFiles/attest.dir/attest.c.o -c /build/reproducible-path/yubihsm-shell-2.7.3/examples/attest.c
| /build/reproducible-path/yubihsm-shell-2.7.3/examples/attest.c: In function ‘print_extension’:
| /build/reproducible-path/yubihsm-shell-2.7.3/examples/attest.c:56:27: error: initialization discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|    56 |   ASN1_OBJECT *a_object = X509_EXTENSION_get_object(extension);
|       |                           ^~~~~~~~~~~~~~~~~~~~~~~~~
| /build/reproducible-path/yubihsm-shell-2.7.3/examples/attest.c:57:32: error: initialization discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|    57 |   ASN1_OCTET_STRING *a_value = X509_EXTENSION_get_data(extension);
|       |                                ^~~~~~~~~~~~~~~~~~~~~~~
| make[4]: *** [examples/CMakeFiles/attest.dir/build.make:82: examples/CMakeFiles/attest.dir/attest.c.o] Error 1

Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/yubihsm-shell_2.7.3-1_amd64-2026-04-19T12:55:25Z

Sebastian