[Pkg-openssl-devel] Bug#1138423: openssh: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: openssh
Version: 1:10.3p1-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| cc -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/openssh-10.3p1=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -pipe -Wno-error=format-truncation -Wall -Wextra -Wpointer-arith -Wuninitialized -Wsign-compare -Wformat-security -Wsizeof-pointer-memaccess -Wno-pointer-sign -Wno-unused-parameter -Wno-unused-result -Wimplicit-fallthrough -Wmisleading-indentation -fno-strict-aliasing -D_FORTIFY_SOURCE=2 -ftrapv -fzero-call-used-regs=used -ftrivial-auto-var-init=zero -fno-builtin-memset -fstack-protector-strong -Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/openssh-10.3p1=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DSSH_EXTRAVERSION=\"Debian-1\"   -I. -I../.. -I"/build/reproducible-path/openssh-10.3p1/debian/build-deb/openbsd-compat/include" -Wdate-time -D_FORTIFY_SOURCE=2 -D_XOPEN_SOURCE=600 -D_BSD_SOURCE -D_DEFAULT_SOURCE -D_GNU_SOURCE -I/usr/include/editline  -DOPENSSL_API_COMPAT=0x10100000L  -isystem /usr/include/mit-krb5 -isystem /usr/include/mit-krb5 -isystem /usr/include/mit-krb5 -DSSHDIR=\"/etc/ssh\" -D_PATH_SSH_PROGRAM=\"/usr/bin/ssh\" -D_PATH_SSH_ASKPASS_DEFAULT=\"/usr/bin/ssh-askpass\" -D_PATH_SFTP_SERVER=\"/usr/lib/openssh/sftp-server\" -D_PATH_SSH_KEY_SIGN=\"/usr/lib/openssh/ssh-keysign\" -D_PATH_SSHD_SESSION=\"/usr/lib/openssh/sshd-session\" -D_PATH_SSHD_AUTH=\"/usr/lib/openssh/sshd-auth\" -D_PATH_SSH_PKCS11_HELPER=\"/usr/lib/openssh/ssh-pkcs11-helper\" -D_PATH_SSH_SK_HELPER=\"/usr/lib/openssh/ssh-sk-helper\" -D_PATH_SSH_PIDDIR=\"/run\" -D_PATH_PRIVSEP_CHROOT_DIR=\"/run/sshd\" -DHAVE_CONFIG_H -c ../../ssh-sk-client.c -o ssh-sk-client.o
| cc -o ssh ssh.o readconf.o clientloop.o sshtty.o sshconnect.o sshconnect2.o mux.o ssh-pkcs11.o ssh-sk-client.o -L. -Lopenbsd-compat/ -Wl,-z,relro -Wl,-z,now -Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -fstack-protector-strong -Wl,--as-needed -Wl,-z,relro -Wl,-z,now  -lssh -lopenbsd-compat -lmd  -lselinux -L/usr/lib/x86_64-linux-gnu/mit-krb5 -lgssapi_krb5 -lcrypto  -lz
| /usr/bin/x86_64-linux-gnu-ld.bfd: openbsd-compat//libopenbsd-compat.a(openssl-compat.o): in function `ssh_libcrypto_init':
| ./debian/build-deb/openbsd-compat/../../../openbsd-compat/openssl-compat.c:80:(.text+0x69): undefined reference to `ENGINE_load_builtin_engines'
| /usr/bin/x86_64-linux-gnu-ld.bfd: ./debian/build-deb/openbsd-compat/../../../openbsd-compat/openssl-compat.c:81:(.text+0x6e): undefined reference to `ENGINE_register_all_complete'
| collect2: error: ld returned 1 exit status
| make[2]: *** [Makefile:223: ssh] Error 1


Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/openssh_10.3p1-1_amd64-2026-04-19T12:07:47Z

Sebastian