[Pkg-openssl-devel] Bug#1138435: globus-gsi-proxy-core 9.9-1: FTBFS with openssl 4.0
Sebastian Andrzej Siewior
sebastian at breakpoint.cc
Sat May 30 17:14:14 BST 2026
Package: globus-gsi-proxy-core 9.9-1
Version: 9.9-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0
OpenSSL 4.0 is in experimental. This package fails to build against it:
| libtool: compile: gcc -DPACKAGE_NAME=\"globus_gsi_proxy_core\" -DPACKAGE_TARNAME=\"globus_gsi_proxy_core\" -DPACKAGE_VERSION=\"9.9\" "-DPACKAGE_STRING=\"globus_gsi_proxy_core 9.9\"" -DPACKAGE_BUGREPORT=\"https://github.com/gridcf/gct/issues\" -DPACKAGE_URL=\"\" -DPACKAGE=\"globus_gsi_proxy_core\" -DVERSION=\"9.9\" -DHAVE_STDIO_H=1 -DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 -DHAVE_INTTYPES_H=1 -DHAVE_STDINT_H=1 -DHAVE_STRINGS_H=1 -DHAVE_SYS_STAT_H=1 -DHAVE_SYS_TYPES_H=1 -DHAVE_UNISTD_H=1 -DHAVE_WCHAR_H=1 -DSTDC_HEADERS=1 -D_ALL_SOURCE=1 -D_DARWIN_C_SOURCE=1 -D_GNU_SOURCE=1 -D_HPUX_ALT_XOPEN_SOCKET_API=1 -D_NETBSD_SOURCE=1 -D_OPENBSD_SOURCE=1 -D_POSIX_PTHREAD_SEMANTICS=1 -D__STDC_WANT_IEC_60559_ATTRIBS_EXT__=1 -D__STDC_WANT_IEC_60559_BFP_EXT__=1 -D__STDC_WANT_IEC_60559_DFP_EXT__=1 -D__STDC_WANT_IEC_60559_EXT__=1 -D__STDC_WANT_IEC_60559_FUNCS_EXT__=1 -D__STDC_WANT_IEC_60559_TYPES_EXT__=1 -D__STDC_WANT_LIB_EXT2__=1 -D__STDC_WANT_MATH_SPEC_FUNCS__=1 -D_TANDEM_SOURCE=1 -D__EXTENSIONS__=1 -DHAVE_DLFCN_H=1 -DLT_OBJDIR=\".libs/\" -DUSE_SYMBOL_VERSIONS=1 -I. -I.. -I../library -I/usr/include/globus -Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/globus-gsi-proxy-core-9.9=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c globus_gsi_proxy.c -fPIC -DPIC -o .libs/libglobus_gsi_proxy_core_la-globus_gsi_proxy.o
| globus_gsi_proxy.c: In function 'globus_gsi_proxy_create_req':
| globus_gsi_proxy.c:273:5: warning: 'RSA_new' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
| 273 | rsa_key = RSA_new();
| | ^~~~~~~
| In file included from /usr/include/openssl/x509.h:38,
| from /usr/include/globus/globus_gsi_cert_utils.h:99,
| from /usr/include/globus/globus_gsi_callback.h:28,
| from /usr/include/globus/globus_gsi_credential.h:29,
| from globus_gsi_proxy.h:65,
| from globus_i_gsi_proxy.h:25,
| from globus_gsi_proxy.c:28:
| /usr/include/openssl/rsa.h:212:28: note: declared here
| 212 | OSSL_DEPRECATEDIN_3_0 RSA *RSA_new(void);
| | ^~~~~~~
| globus_gsi_proxy.c:312:5: warning: 'RSA_generate_key_ex' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
| 312 | rc = RSA_generate_key_ex(rsa_key, handle->attrs->key_bits, e, gencbp);
| | ^~
| /usr/include/openssl/rsa.h:269:27: note: declared here
| 269 | OSSL_DEPRECATEDIN_3_0 int RSA_generate_key_ex(RSA *rsa, int bits, BIGNUM *e,
| | ^~~~~~~~~~~~~~~~~~~
| globus_gsi_proxy.c:325:5: warning: 'EVP_PKEY_assign' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
| 325 | if(!EVP_PKEY_assign_RSA(handle->proxy_key, rsa_key))
| | ^~
| In file included from /usr/include/openssl/x509.h:31:
| /usr/include/openssl/evp.h:1285:5: note: declared here
| 1285 | int EVP_PKEY_assign(EVP_PKEY *pkey, int type, void *key);
| | ^~~~~~~~~~~~~~~
| globus_gsi_proxy.c:551:21: error: implicit declaration of function 'ASN1_STRING_data'; did you mean 'ASN1_STRING_set0'? [-Wimplicit-function-declaration]
| 551 | ASN1_STRING_data(handle->proxy_cert_info->proxyPolicy->policy),
| | ^~~~~~~~~~~~~~~~
| | ASN1_STRING_set0
| globus_gsi_proxy.c:551:21: error: passing argument 2 of 'memcpy' makes pointer from integer without a cast [-Wint-conversion]
| 551 | ASN1_STRING_data(handle->proxy_cert_info->proxyPolicy->policy),
| | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| | |
| | int
| In file included from /usr/include/features.h:523,
| from /usr/include/x86_64-linux-gnu/bits/libc-header-start.h:33,
| from /usr/include/stdint.h:26,
| from /usr/lib/gcc/x86_64-linux-gnu/15/include/stdint.h:11,
| from /usr/include/globus/globus_config.h:22,
| from /usr/include/globus/globus_common_include.h:26,
| from /usr/include/globus/globus_common.h:67,
| from /usr/include/globus/globus_gsi_credential.h:26:
| /usr/include/x86_64-linux-gnu/bits/string_fortified.h:26:1: note: expected 'const void *' but argument is of type 'int'
| 26 | __NTH (memcpy (void *__restrict __dest, const void *__restrict __src,
| | ^~~~~
| globus_gsi_proxy.c:630:9: warning: 'RSA_free' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
| 630 | RSA_free(rsa_key);
| | ^~~~~~~~
| /usr/include/openssl/rsa.h:302:28: note: declared here
| 302 | OSSL_DEPRECATEDIN_3_0 void RSA_free(RSA *r);
| | ^~~~~~~~
| globus_gsi_proxy.c: In function 'globus_gsi_proxy_inquire_req':
| globus_gsi_proxy.c:732:23: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
| 732 | extension_oid = X509_EXTENSION_get_object(extension);
| | ^
| globus_gsi_proxy.c: In function 'globus_l_gsi_proxy_sign_key':
| globus_gsi_proxy.c:1288:9: warning: 'ASN1_digest' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
| 1288 | ASN1_digest((i2d_of_void *) i2d_PUBKEY,sha1,(char *) public_key,md,&len);
| | ^~~~~~~~~~~
| /usr/include/openssl/x509.h:828:5: note: declared here
| 828 | int ASN1_digest(i2d_of_void *i2d, const EVP_MD *type, char *data,
| | ^~~~~~~~~~~
| globus_gsi_proxy.c:1367:23: error: invalid use of incomplete typedef 'ASN1_OCTET_STRING' {aka 'struct asn1_string_st'}
| 1367 | pci_DER_string->data = pci_DER;
| | ^~
| globus_gsi_proxy.c:1368:23: error: invalid use of incomplete typedef 'ASN1_OCTET_STRING' {aka 'struct asn1_string_st'}
| 1368 | pci_DER_string->length = pci_DER_length;
| | ^~
| globus_gsi_proxy.c:1445:21: error: passing argument 2 of 'memcpy' makes pointer from integer without a cast [-Wint-conversion]
| 1445 | ASN1_STRING_data(handle->proxy_cert_info->proxyPolicy->policy),
| | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| | |
| | int
| /usr/include/x86_64-linux-gnu/bits/string_fortified.h:26:1: note: expected 'const void *' but argument is of type 'int'
| 26 | __NTH (memcpy (void *__restrict __dest, const void *__restrict __src,
| | ^~~~~
| globus_gsi_proxy.c:1510:24: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
| 1510 | if(!(extension = X509_get_ext(issuer_cert, position)))
| | ^
| globus_gsi_proxy.c:1586:22: error: invalid use of incomplete typedef 'ASN1_OCTET_STRING' {aka 'struct asn1_string_st'}
| 1586 | ku_DER_string->data = ku_DER;
| | ^~
| globus_gsi_proxy.c:1587:22: error: invalid use of incomplete typedef 'ASN1_OCTET_STRING' {aka 'struct asn1_string_st'}
| 1587 | ku_DER_string->length = ku_DER_length;
| | ^~
| globus_gsi_proxy.c:1622:24: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
| 1622 | if(!(extension = X509_get_ext(issuer_cert, position)))
| | ^
| globus_gsi_proxy.c: In function 'globus_i_gsi_proxy_set_pc_times':
| globus_gsi_proxy.c:2334:8: warning: 'X509_cmp_time' is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
| 2334 | X509_cmp_time(X509_get_notAfter(issuer_cert), & tmp_time) < 0)
| | ^~~~~~~~~~~~~
| /usr/include/openssl/x509.h:693:27: note: declared here
| 693 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_time(const ASN1_TIME *s, const time_t *t);
| | ^~~~~~~~~~~~~
| make[2]: *** [Makefile:499: libglobus_gsi_proxy_core_la-globus_gsi_proxy.lo] Error 1
Full buildlog
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/globus-gsi-proxy-core_9.9-1_amd64-2026-04-19T08:18:28Z
Sebastian
More information about the Pkg-openssl-devel
mailing list