[Pkg-openssl-devel] Bug#1138438: xrootd: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: xrootd
Version: 5.9.2-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| [ 16%] Building CXX object src/CMakeFiles/XrdUtils.dir/XrdTls/XrdTlsNotary.cc.o
| cd /build/reproducible-path/xrootd-5.9.2/obj-x86_64-linux-gnu/src && /usr/bin/c++ -DHAVE_ATOMICS -DHAVE_CRYPT -DHAVE_DH_PADDED -DHAVE_ET_COM_ERR_H -DHAVE_FSTATAT -DHAVE_GETHBYXR -DHAVE_GETIFADDRS -DHAVE_LIBZ -DHAVE_NAMEINFO -DHAVE_PROTOR -DHAVE_READLINE -DHAVE_SENDFILE -DHAVE_SETRESUID -DHAVE_SHADOWPW -DHAVE_SIGWTI -DHAVE_SSL -DHAVE_STRLCPY -DHAVE_SYSTEMD -DHAVE_XML2 -DHAVE_XRDCRYPTO -DXrdUtils_EXPORTS -D_FILE_OFFSET_BITS=64 -D_LARGEFILE64_SOURCE -D_LARGEFILE_SOURCE -I/build/reproducible-path/xrootd-5.9.2/obj-x86_64-linux-gnu/src -I/build/reproducible-path/xrootd-5.9.2/src -g -O2 -ffile-prefix-map=/build/reproducible-path/xrootd-5.9.2=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 -std=gnu++17 -fPIC -Wall -Wextra -Wdeprecated -Wnull-dereference -Wno-unused-parameter -Wno-vla -MD -MT src/CMakeFiles/XrdUtils.dir/XrdTls/XrdTlsNotary.cc.o -MF CMakeFiles/XrdUtils.dir/XrdTls/XrdTlsNotary.cc.o.d -o CMakeFiles/XrdUtils.dir/XrdTls/XrdTlsNotary.cc.o -c /build/reproducible-path/xrootd-5.9.2/src/XrdTls/XrdTlsNotary.cc
| In file included from /build/reproducible-path/xrootd-5.9.2/src/XrdTls/XrdTlsNotary.cc:50:
| /build/reproducible-path/xrootd-5.9.2/src/XrdTls/XrdTlsNotaryUtils.icc: In function ‘HostnameValidationResult matches_common_name(const char*, const X509*)’:
| /build/reproducible-path/xrootd-5.9.2/src/XrdTls/XrdTlsNotaryUtils.icc:70:48: error: invalid conversion from ‘const X509_NAME_ENTRY*’ {aka ‘const X509_name_entry_st*’} to ‘X509_NAME_ENTRY*’ {aka ‘X509_name_entry_st*’} [-fpermissive]
|    70 |         common_name_entry = X509_NAME_get_entry(X509_get_subject_name((X509 *) server_cert), common_name_loc);
|       |                             ~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|       |                                                |
|       |                                                const X509_NAME_ENTRY* {aka const X509_name_entry_st*}
| /build/reproducible-path/xrootd-5.9.2/src/XrdTls/XrdTlsNotaryUtils.icc:76:52: error: invalid conversion from ‘const ASN1_STRING*’ {aka ‘const asn1_string_st*’} to ‘ASN1_STRING*’ {aka ‘asn1_string_st*’} [-fpermissive]
|    76 |         common_name_asn1 = X509_NAME_ENTRY_get_data(common_name_entry);
|       |                            ~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~
|       |                                                    |
|       |                                                    const ASN1_STRING* {aka const asn1_string_st*}
| make[4]: *** [src/CMakeFiles/XrdUtils.dir/build.make:1636: src/CMakeFiles/XrdUtils.dir/XrdTls/XrdTlsNotary.cc.o] Error 1
| make[4]: Leaving directory '/build/reproducible-path/xrootd-5.9.2/obj-x86_64-linux-gnu'

Full buildlog
	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/xrootd_5.9.2-1_amd64-2026-04-19T12:20:18Z
 
Sebastian