[Pkg-openssl-devel] Bug#1138437: globus-gsi-cert-utils: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: globus-gsi-cert-utils
Version: 10.11-2
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I.. -I/usr/include/globus -Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/globus-gsi-cert-utils-10.11=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c globus_gsi_cert_utils.c  -fPIC -DPIC -o .libs/globus_gsi_cert_utils.o
| globus_gsi_cert_utils.c: In function 'globus_gsi_cert_utils_get_cert_type':
| globus_gsi_cert_utils.c:267:13: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   267 |     subject = X509_get_subject_name(cert);
|       |             ^
| globus_gsi_cert_utils.c:269:12: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   269 |     if((ne = X509_NAME_get_entry(subject, X509_NAME_entry_count(subject)-1))
|       |            ^
| globus_gsi_cert_utils.c:282:14: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   282 |         data = X509_NAME_ENTRY_get_data(ne);
|       |              ^
| globus_gsi_cert_utils.c:283:16: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|   283 |         if(data->length == 5 && !memcmp(data->data,"proxy",5))
|       |                ^~
| globus_gsi_cert_utils.c:283:45: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|   283 |         if(data->length == 5 && !memcmp(data->data,"proxy",5))
|       |                                             ^~
| globus_gsi_cert_utils.c:287:21: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|   287 |         else if(data->length == 13 && !memcmp(data->data,"limited proxy",13))
|       |                     ^~
| globus_gsi_cert_utils.c:287:51: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|   287 |         else if(data->length == 13 && !memcmp(data->data,"limited proxy",13))
|       |                                                   ^~
| globus_gsi_cert_utils.c:294:26: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   294 |                 (pci_ext = X509_get_ext(cert,index)) &&
|       |                          ^
| globus_gsi_cert_utils.c:359:26: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   359 |                 (pci_ext = X509_get_ext(cert,index)) &&
|       |                          ^
| In file included from globus_gsi_cert_utils.c:26:
| globus_gsi_cert_utils.c:431:44: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|   431 |                     "Subject is %s\n", data->data));
|       |                                            ^~
| globus_i_gsi_cert_utils.h:43:32: note: in definition of macro 'GLOBUS_I_GSI_CERT_UTILS_DEBUG_FPRINTF'
|    43 |            globus_libc_fprintf _MESSAGE_; \
|       |                                ^~~~~~~~~
| globus_gsi_cert_utils.c:444:60: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|   444 |                                                        data->type,
|       |                                                            ^~
| globus_gsi_cert_utils.c:445:60: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|   445 |                                                        data->data, -1)) == NULL)
|       |                                                            ^~
| globus_gsi_cert_utils.c:450:74: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|   450 |                     (_CUSL("Error creating X509 name entry of: %s"), data->data));
|       |                                                                          ^~
| globus_i_gsi_cert_utils.h:107:41: note: in definition of macro 'GLOBUS_GSI_CERT_UTILS_OPENSSL_ERROR_RESULT'
|   107 |             globus_common_create_string _ERRSTR_; \
|       |                                         ^~~~~~~~
| globus_gsi_cert_utils.c:462:26: error: invalid use of incomplete typedef 'ASN1_STRING' {aka 'struct asn1_string_st'}
|   462 |                      data->data));
|       |                          ^~
| globus_i_gsi_cert_utils.h:107:41: note: in definition of macro 'GLOBUS_GSI_CERT_UTILS_OPENSSL_ERROR_RESULT'
|   107 |             globus_common_create_string _ERRSTR_; \
|       |                                         ^~~~~~~~
| make[3]: *** [Makefile:481: globus_gsi_cert_utils.lo] Error 1

Full buildlog
	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/globus-gsi-cert-utils_10.11-2_amd64-2026-04-19T10:44:26Z
 
Sebastian