[Pkg-openssl-devel] Bug#1138440: smartdns: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: smartdns
Version: 46.1+dfsg-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| cc -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/smartdns-46.1+dfsg=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -DHAVE_UNWIND_BACKTRACE -Iinclude -DBASE_FILE_NAME='"dns_client.c"'  -DSMARTDNS_VERION='"46.1+dfsg-1"' -Wdate-time -D_FORTIFY_SOURCE=2  -c -o dns_client.o dns_client.c
| dns_client.c: In function ‘_dns_client_tls_get_cert_CN’:
| dns_client.c:3130:19: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|  3130 |         cert_name = X509_get_subject_name(cert);
|       |                   ^
| dns_client.c:3136:9: warning: ‘X509_NAME_get_text_by_NID’ is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|  3136 |         if (X509_NAME_get_text_by_NID(cert_name, NID_commonName, cn, max_cn_len) == -1) {
|       |         ^~
| In file included from /usr/include/openssl/ssl.h:34,
|                  from dns_client.c:47:
| /usr/include/openssl/x509.h:1041:27: note: declared here
|  1041 | OSSL_DEPRECATEDIN_4_0 int X509_NAME_get_text_by_NID(const X509_NAME *name,
|       |                           ^~~~~~~~~~~~~~~~~~~~~~~~~
| In file included from dns_client.c:30:
| dns_client.c: In function ‘_dns_client_verify_common_name’:
| dns_client.c:3183:61: error: invalid use of incomplete typedef ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|  3183 |                         tlog(TLOG_DEBUG, "peer SAN: %s", dns->data);
|       |                                                             ^~
| tlog.h:93:102: note: in definition of macro ‘tlog’
|    93 | #define tlog(level, format, ...) tlog_ext(level, BASE_FILE_NAME, __LINE__, __func__, NULL, format, ##__VA_ARGS__)
|       |                                                                                                      ^~~~~~~~~~~
| dns_client.c:3184:83: error: invalid use of incomplete typedef ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|  3184 |                         if (_dns_client_tls_matchName(tls_host_verify, (char *)dns->data, dns->length) == 0) {
|       |                                                                                   ^~
| dns_client.c:3184:94: error: invalid use of incomplete typedef ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|  3184 |                         if (_dns_client_tls_matchName(tls_host_verify, (char *)dns->data, dns->length) == 0) {
|       |                                                                                              ^~
| dns_client.c:3185:75: error: invalid use of incomplete typedef ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|  3185 |                                 tlog(TLOG_DEBUG, "peer SAN match: %s", dns->data);
|       |                                                                           ^~
| tlog.h:93:102: note: in definition of macro ‘tlog’
|    93 | #define tlog(level, format, ...) tlog_ext(level, BASE_FILE_NAME, __LINE__, __func__, NULL, format, ##__VA_ARGS__)
|       |                                                                                                      ^~~~~~~~~~~
| dns_client.c: In function ‘_dns_client_tls_verify’:
| dns_client.c:3257:16: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
|  3257 |         pubkey = X509_get_X509_PUBKEY(cert);
|       |                ^
| make[2]: *** [<builtin>: dns_client.o] Error 1

Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/smartdns_46.1+dfsg-1_amd64-2026-04-19T11:09:58Z

Sebastian