[Pkg-openssl-devel] Bug#1138412: lcmaps-plugins-verify-proxy: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: lcmaps-plugins-verify-proxy
Version: 1.5.12-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| gcc -DHAVE_CONFIG_H -I. -I../../src  -I./verify-lib/src_internal/ -I./proxylifetime/ -I../../src/verify-proxy/verify-lib/interface -Wdate-time -D_FORTIFY_SOURCE=2  -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/lcmaps-plugins-verify-proxy-1.5.12=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c -o verify-lib/src/verify_x509_utils.o verify-lib/src/verify_x509_utils.c
| gcc -DHAVE_CONFIG_H -I. -I../../src  -I./verify-lib/src_internal/ -I./proxylifetime/ -I../../src/verify-proxy/verify-lib/interface -Wdate-time -D_FORTIFY_SOURCE=2  -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/lcmaps-plugins-verify-proxy-1.5.12=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c -o verify-lib/src_internal/_verify_x509.o verify-lib/src_internal/_verify_x509.c
| verify-lib/src_internal/_verify_x509.c: In function ‘verify_verifyCert’:
| verify-lib/src_internal/_verify_x509.c:699:40: error: passing argument 2 of ‘X509_STORE_set_check_issued’ from incompatible pointer type [-Wincompatible-pointer-types]
|   699 |     X509_STORE_set_check_issued(store, grid_X509_check_issued_wrapper);
|       |                                        ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|       |                                        |
|       |                                        int (*)(X509_STORE_CTX *, X509 *, X509 *) {aka int (*)(struct x509_store_ctx_st *, struct x509_st *, struct x509_st *)}
| In file included from /usr/include/openssl/x509.h:494,
|                  from verify-lib/src_internal/_verify_x509.c:36:
| /usr/include/openssl/x509_vfy.h:556:36: note: expected ‘X509_STORE_CTX_check_issued_fn’ {aka ‘int (*)(struct x509_store_ctx_st *, const struct x509_st *, const struct x509_st *)’} but argument is of type ‘int (*)(X509_STORE_CTX *, X509 *, X509 *)’ {aka ‘int (*)(struct x509_store_ctx_st *, struct x509_st *, struct x509_st *)’}
|   556 |     X509_STORE_CTX_check_issued_fn check_issued);
|       |     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~
| verify-lib/src_internal/_verify_x509.c:187:12: note: ‘grid_X509_check_issued_wrapper’ declared here
|   187 | static int grid_X509_check_issued_wrapper(X509_STORE_CTX *ctx,X509 *x,X509 *issuer);
|       |            ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| /usr/include/openssl/x509_vfy.h:259:15: note: ‘X509_STORE_CTX_check_issued_fn’ declared here
|   259 | typedef int (*X509_STORE_CTX_check_issued_fn)(X509_STORE_CTX *ctx,
|       |               ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| verify-lib/src_internal/_verify_x509.c: In function ‘grid_X509_knownCriticalExts’:
| verify-lib/src_internal/_verify_x509.c:1462:12: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|  1462 |         ex = X509_get_ext(cert, i);
|       |            ^
| make[4]: *** [Makefile:668: verify-lib/src_internal/_verify_x509.o] Error 1
| make[4]: Leaving directory '/build/reproducible-path/lcmaps-plugins-verify-proxy-1.5.12/src/verify-proxy'


Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/lcmaps-plugins-verify-proxy_1.5.12-1_amd64-2026-04-19T11:42:17Z

Sebastian