[Pkg-openssl-devel] Bug#1138428: syslog-ng: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: syslog-ng
Version: 4.8.1-7
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I../.. -I../../lib -I../../modules -I./lib -I./modules -Wdate-time -D_FORTIFY_SOURCE=2 -I/usr/include/glib-2.0 -I/usr/lib/x86_64-linux-gnu/glib-2.0/include -I/usr/include/sysprof-6 -pthread -DGLIB_VERSION_MIN_REQUIRED=GLIB_VERSION_2_68 -I../../lib/eventlog/src -I./lib/eventlog/src -D_BSD_SOURCE -D_DEFAULT_SOURCE -DHAVE_NET_ETHERNET_H -I/usr/include -D_DEFAULT_SOURCE -I/usr/include/dbi -I/usr/include/dbi/dbi -I/usr/include/json-c -D_GNU_SOURCE -D_DEFAULT_SOURCE -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -Wshadow -Wno-stack-protector -Wno-unused-parameter -Wno-variadic-macros -fno-omit-frame-pointer -O2 -g -pthread -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/syslog-ng-4.8.1=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c ../../lib/transport/tls-verifier.c  -fPIC -DPIC -o lib/transport/.libs/libsyslog_ng_la-tls-verifier.o
| ../../lib/transport/tls-verifier.c: In function 'tls_verify_certificate_name':
| ../../lib/transport/tls-verifier.c:192:11: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   192 |       ext = X509_get_ext(cert, ext_ndx);
|       |           ^
| ../../lib/transport/tls-verifier.c:225:44: error: invalid use of incomplete typedef 'ASN1_OCTET_STRING' {aka 'struct asn1_string_st'}
|   225 |                   if (gen_name->d.iPAddress->length == 16)
|       |                                            ^~
| ../../lib/transport/tls-verifier.c:228:67: error: invalid use of incomplete typedef 'ASN1_OCTET_STRING' {aka 'struct asn1_string_st'}
|   228 |                   if (inet_ntop(addr_family, gen_name->d.iPAddress->data, dotted_ip, sizeof(dotted_ip)))
|       |                                                                   ^~
| ../../lib/transport/tls-verifier.c:245:12: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   245 |       name = X509_get_subject_name(cert);
|       |            ^
| ../../lib/transport/tls-verifier.c:246:7: warning: 'X509_NAME_get_text_by_NID' is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|   246 |       if (X509_NAME_get_text_by_NID(name, NID_commonName, pattern_buf, sizeof(pattern_buf)) != -1)
|       |       ^~
| In file included from /usr/include/openssl/ssl.h:34,
|                  from ../../lib/transport/tls-verifier.h:29,
|                  from ../../lib/transport/tls-verifier.c:25:
| /usr/include/openssl/x509.h:1041:27: note: declared here
|  1041 | OSSL_DEPRECATEDIN_4_0 int X509_NAME_get_text_by_NID(const X509_NAME *name,
|       |                           ^~~~~~~~~~~~~~~~~~~~~~~~~
| make[3]: *** [Makefile:22045: lib/transport/libsyslog_ng_la-tls-verifier.lo] Error 1

Full buildlog
	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/syslog-ng_4.8.1-7_amd64-2026-04-19T14:06:16Z
 
Sebastian