[Pkg-openssl-devel] Bug#1138442: openpace: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: openpace
Version: 1.1.2+ds+git20220117+453c3d6b03a0-1.1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -DCVCDIR=\"/etc/eac/cvc\" -DX509DIR=\"/etc/eac/x509\" -Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/openpace-1.1.2+ds+git20220117+453c3d6b03a0=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wall -pedantic -c cv_cert.c  -fPIC -DPIC -o .libs/libeac_la-cv_cert.o
| cv_cert.c: In function 'CVC_verify_signature':
| cv_cert.c:416:52: error: invalid use of incomplete typedef 'ASN1_OCTET_STRING' {aka 'struct asn1_string_st'}
|   416 |     signature = BUF_MEM_create_init(cert->signature->data, cert->signature->length);
|       |                                                    ^~
| cv_cert.c:416:75: error: invalid use of incomplete typedef 'ASN1_OCTET_STRING' {aka 'struct asn1_string_st'}
|   416 |     signature = BUF_MEM_create_init(cert->signature->data, cert->signature->length);
|       |                                                                           ^~
| cv_cert.c: In function 'CVC_get_role':
| cv_cert.c:471:45: error: invalid use of incomplete typedef 'ASN1_OCTET_STRING' {aka 'struct asn1_string_st'}
|   471 |             || !chat->relative_authorization->data
|       |                                             ^~
| cv_cert.c:472:44: error: invalid use of incomplete typedef 'ASN1_OCTET_STRING' {aka 'struct asn1_string_st'}
|   472 |             || chat->relative_authorization->length < 1)
|       |                                            ^~
| cv_cert.c:476:41: error: invalid use of incomplete typedef 'ASN1_OCTET_STRING' {aka 'struct asn1_string_st'}
|   476 |     return (chat->relative_authorization->data[0] >> 6) & 3;
|       |                                         ^~
| cv_cert.c: In function 'CVC_pubkey2rsa':
| cv_cert.c:547:5: warning: 'RSA_new' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
|   547 |     rsa = RSA_new();
|       |     ^~~
| In file included from ssl_compat.h:8,
|                  from cv_cert.c:55:
| /usr/include/openssl/rsa.h:212:28: note: declared here
|   212 | OSSL_DEPRECATEDIN_3_0 RSA *RSA_new(void);
|       |                            ^~~~~~~
| cv_cert.c:551:5: warning: 'RSA_set0_key' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
|   551 |     check(RSA_set0_key(rsa,
|       |     ^~~~~
| /usr/include/openssl/rsa.h:218:27: note: declared here
|   218 | OSSL_DEPRECATEDIN_3_0 int RSA_set0_key(RSA *r, BIGNUM *n, BIGNUM *e, BIGNUM *d);
|       |                           ^~~~~~~~~~~~
| In file included from cv_cert.c:52:
| cv_cert.c:552:44: error: invalid use of incomplete typedef 'ASN1_OCTET_STRING' {aka 'struct asn1_string_st'}
|   552 |                 BN_bin2bn(public_key->cont1->data, public_key->cont1->length,
|       |                                            ^~
| eac_err.h:62:32: note: in definition of macro 'check'
|    62 | #define check(A, M, ...) {if(!(A)) { log_err(M, ##__VA_ARGS__); goto err; }}
|       |                                ^
| cv_cert.c:552:69: error: invalid use of incomplete typedef 'ASN1_OCTET_STRING' {aka 'struct asn1_string_st'}
|   552 |                 BN_bin2bn(public_key->cont1->data, public_key->cont1->length,
|       |                                                                     ^~
| eac_err.h:62:32: note: in definition of macro 'check'
|    62 | #define check(A, M, ...) {if(!(A)) { log_err(M, ##__VA_ARGS__); goto err; }}
|       |                                ^
| cv_cert.c:554:44: error: invalid use of incomplete typedef 'ASN1_OCTET_STRING' {aka 'struct asn1_string_st'}
|   554 |                 BN_bin2bn(public_key->cont2->data, public_key->cont2->length,
|       |                                            ^~
| eac_err.h:62:32: note: in definition of macro 'check'
|    62 | #define check(A, M, ...) {if(!(A)) { log_err(M, ##__VA_ARGS__); goto err; }}
|       |                                ^
| cv_cert.c:554:69: error: invalid use of incomplete typedef 'ASN1_OCTET_STRING' {aka 'struct asn1_string_st'}
|   554 |                 BN_bin2bn(public_key->cont2->data, public_key->cont2->length,
|       |                                                                     ^~
…

Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/openpace_1.1.2+ds+git20220117+453c3d6b03a0-1.1_amd64-2026-04-19T09:49:15Z

Sebastian