[Pkg-openssl-devel] Bug#1138422: proxytunnel: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: proxytunnel
Version: 1.12.3-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| cc -Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/proxytunnel-1.12.3=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DOPENSSL11 -DHAVE_GETOPT_LONG -DUSE_SSL -DSETPROCTITLE -DSPT_TYPE=2 -c -o ptstream.o ptstream.c
| ptstream.c: In function ‘check_cert_names’:
| ptstream.c:233:45: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   233 |                                 if (gn->d.ip->length == 4 && peer_host_is_ipv4) {
|       |                                             ^~
| ptstream.c:234:73: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   234 |                                         if (check_cert_valid_ip(gn->d.ip->data, gn->d.ip->length, &addr)) {
|       |                                                                         ^~
| ptstream.c:234:89: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   234 |                                         if (check_cert_valid_ip(gn->d.ip->data, gn->d.ip->length, &addr)) {
|       |                                                                                         ^~
| ptstream.c:237:52: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   237 |                                 } else if (gn->d.ip->length == 16 && peer_host_is_ipv6) {
|       |                                                    ^~
| ptstream.c:238:74: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   238 |                                         if (check_cert_valid_ip6(gn->d.ip->data, gn->d.ip->length, &addr6)) {
|       |                                                                          ^~
| ptstream.c:238:90: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   238 |                                         if (check_cert_valid_ip6(gn->d.ip->data, gn->d.ip->length, &addr6)) {
|       |                                                                                          ^~
| ptstream.c:246:17: warning: ‘X509_NAME_get_text_by_NID’ is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|   246 |                 X509_NAME_get_text_by_NID(X509_get_subject_name(cert), NID_commonName, peer_cn, sizeof(peer_cn));
|       |                 ^~~~~~~~~~~~~~~~~~~~~~~~~
| In file included from /usr/include/openssl/x509v3.h:27,
|                  from ptstream.c:23:
| /usr/include/openssl/x509.h:1041:27: note: declared here
|  1041 | OSSL_DEPRECATEDIN_4_0 int X509_NAME_get_text_by_NID(const X509_NAME *name,
|       |                           ^~~~~~~~~~~~~~~~~~~~~~~~~
| make[1]: *** [Makefile:106: ptstream.o] Error 1
| make[1]: Leaving directory '/build/reproducible-path/proxytunnel-1.12.3'


Full buildlog
  https://breakpoint.cc/openssl-rebuild/logs-4/attempted/proxytunnel_1.12.3-1_amd64-2026-04-19T10:47:00Z

Sebastian