[Pkg-openssl-devel] Bug#1138456: rauc: FTBFS with openssl 4.0
Sebastian Andrzej Siewior
sebastian at breakpoint.cc
Sat May 30 17:17:54 BST 2026
Package: rauc
Version: 1.15.2-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0
OpenSSL 4.0 is in experimental. This package fails to build against it:
| cc -Ilibrauc.a.p -I. -I.. -I../include -I/usr/include/x86_64-linux-gnu -I/usr/include/p11-kit-1 -I/usr/include/libnl3 -I/usr/include/json-glib-1.0 -I/usr/include/glib-2.0 -I/usr/lib/x86_64-linux-gnu/glib-2.0/include -I/usr/include/libmount -I/usr/include/blkid -I/usr/include/sysprof-6 -I/usr/include/dbus-1.0 -I/usr/lib/x86_64-linux-gnu/dbus-1.0/include -I/usr/include/gio-unix-2.0 -I/usr/include/libfdisk -I/usr/include/uuid -fdiagnostics-color=always -D_FILE_OFFSET_BITS=64 -Wall -Winvalid-pch -Wextra -std=gnu11 '-DGLIB_VERSION_MAX_ALLOWED=G_ENCODE_VERSION(2,64)' '-DGLIB_VERSION_MIN_REQUIRED=G_ENCODE_VERSION(2,64)' -Walloca -Warray-bounds -Wcast-align -Wcast-align=strict -Wdate-time -Wformat=2 -Wformat-nonliteral -Wformat-security -Wformat-truncation=2 -Wimplicit-function-declaration -Winit-self -Winline -Wint-conversion -Winvalid-utf8 -Wjump-misses-init -Wlogical-op -Wmissing-declarations -Wmissing-format-attribute -Wmissing-include-dirs -Wmissing-noreturn -Wmissing-prototypes -Wnested-externs -Wold-style-definition -Wpacked -Wpointer-arith -Wredundant-decls -Wreturn-type -Wshadow -Wsign-compare -Wstrict-aliasing -Wstrict-overflow -Wstrict-prototypes -Wswitch-default -Wswitch-enum -Wtrampolines -Wundef -Wunused-but-set-variable -Wuse-after-free=3 -Wwrite-strings -Wno-unused-parameter -Wno-error=unused-parameter -Wno-error=deprecated-declarations -fdata-sections -ffunction-sections -fno-strict-aliasing '-DG_LOG_DOMAIN="rauc"' -D_GNU_SOURCE -include /build/reproducible-path/rauc-1.15.2/obj-x86_64-linux-gnu/config.h -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/rauc-1.15.2=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 -fPIC -pthread -isystem /usr/include/mit-krb5 -isystem /usr/include/mit-krb5 -include /build/reproducible-path/rauc-1.15.2/obj-x86_64-linux-gnu/version.h -MD -MQ librauc.a.p/src_signature.c.o -MF librauc.a.p/src_signature.c.o.d -o librauc.a.p/src_signature.c.o -c ../src/signature.c
| ../src/signature.c: In function ‘get_pkcs11_engine’:
| ../src/signature.c:140:9: warning: ‘ENGINE_load_builtin_engines’ is deprecated: ENGINE_load_builtin_engines API symbol is removed. Define OPENSSL_ENGINE_STUBS to mask linker errors. [-Wdeprecated-declarations]
| 140 | ENGINE_load_builtin_engines();
| | ^~~~~~~~~~~~~~~~~~~~~~~~~~~
| In file included from ../src/signature.c:9:
| /usr/include/openssl/engine.h:437:1: note: declared here
| 437 | ENGINE_VOID_FUNC_NOARGS(ENGINE_load_builtin_engines)
| | ^~~~~~~~~~~~~~~~~~~~~~~
| ../src/signature.c:142:9: warning: ‘ENGINE_by_id’ is deprecated: ENGINE_by_id API symbol is removed. Define OPENSSL_ENGINE_STUBS to mask linker errors. [-Wdeprecated-declarations]
| 142 | e = ENGINE_by_id("pkcs11");
| | ^
| /usr/include/openssl/engine.h:421:1: note: declared here
| 421 | ENGINE_FUNC(ENGINE *, ENGINE_by_id, (const char *id), NULL)
| | ^~~~~~~~~~~
| ../src/signature.c:155:17: warning: ‘ENGINE_ctrl_cmd_string’ is deprecated: ENGINE_ctrl_cmd_string API symbol is removed. Define OPENSSL_ENGINE_STUBS to mask linker errors. [-Wdeprecated-declarations]
| 155 | if (!ENGINE_ctrl_cmd_string(e, "MODULE_PATH", env, 0)) {
| | ^~
| /usr/include/openssl/engine.h:601:1: note: declared here
| 601 | ENGINE_FUNC(int, ENGINE_ctrl_cmd_string,
| | ^~~~~~~~~~~
| ../src/signature.c:165:9: warning: ‘ENGINE_init’ is deprecated: ENGINE_init API symbol is removed. Define OPENSSL_ENGINE_STUBS to mask linker errors. [-Wdeprecated-declarations]
| 165 | if (ENGINE_init(e) == 0) {
| | ^~
| /usr/include/openssl/engine.h:905:1: note: declared here
| 905 | ENGINE_FUNC(int, ENGINE_init, (ENGINE *e), 0)
| | ^~~~~~~~~~~
| ../src/signature.c:177:17: warning: ‘ENGINE_ctrl_cmd_string’ is deprecated: ENGINE_ctrl_cmd_string API symbol is removed. Define OPENSSL_ENGINE_STUBS to mask linker errors. [-Wdeprecated-declarations]
| 177 | if (!ENGINE_ctrl_cmd_string(e, "PIN", env, 0)) {
| | ^~
| /usr/include/openssl/engine.h:601:1: note: declared here
| 601 | ENGINE_FUNC(int, ENGINE_ctrl_cmd_string,
| | ^~~~~~~~~~~
| ../src/signature.c:190:9: warning: ‘ENGINE_finish’ is deprecated: ENGINE_finish API symbol is removed. Define OPENSSL_ENGINE_STUBS to mask linker errors. [-Wdeprecated-declarations]
| 190 | ENGINE_finish(e);
| | ^~~~~~~~~~~~~
| /usr/include/openssl/engine.h:914:1: note: declared here
| 914 | ENGINE_FUNC(int, ENGINE_finish, (ENGINE *e), 0)
| | ^~~~~~~~~~~
| ../src/signature.c:192:9: warning: ‘ENGINE_free’ is deprecated: ENGINE_free API symbol is removed. Define OPENSSL_ENGINE_STUBS to mask linker errors. [-Wdeprecated-declarations]
| 192 | ENGINE_free(e);
| | ^~~~~~~~~~~
| /usr/include/openssl/engine.h:617:1: note: declared here
| 617 | ENGINE_FUNC(int, ENGINE_free, (ENGINE *e), 0)
| | ^~~~~~~~~~~
| ../src/signature.c: In function ‘load_key_pkcs11’:
| ../src/signature.c:251:9: warning: ‘ENGINE_load_private_key’ is deprecated: ENGINE_load_private_key API symbol is removed. Define OPENSSL_ENGINE_STUBS to mask linker errors. [-Wdeprecated-declarations]
| 251 | res = ENGINE_load_private_key(e, url, NULL, NULL);
| | ^~~
| /usr/include/openssl/engine.h:928:1: note: declared here
| 928 | ENGINE_FUNC(EVP_PKEY *, ENGINE_load_private_key,
| | ^~~~~~~~~~~
| ../src/signature.c: In function ‘load_cert_pkcs11’:
| ../src/signature.c:391:9: warning: ‘ENGINE_ctrl_cmd’ is deprecated: ENGINE_ctrl_cmd API symbol is removed. Define OPENSSL_ENGINE_STUBS to mask linker errors. [-Wdeprecated-declarations]
| 391 | if (!ENGINE_ctrl_cmd(e, "LOAD_CERT_CTRL", 0, &parms, NULL, 0) || (parms.cert == NULL)) {
| | ^~
| /usr/include/openssl/engine.h:570:1: note: declared here
| 570 | ENGINE_FUNC(int, ENGINE_ctrl_cmd, (ENGINE *e, const char *cmd_name, long i, void *p, void (*f)(void), int cmd_optional), 0)
| | ^~~~~~~~~~~
| ../src/signature.c: In function ‘cms_sign’:
| ../src/signature.c:681:25: warning: ‘X509_cmp_current_time’ is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
| 681 | if (X509_cmp_current_time(expiry_time) == 1 && X509_cmp_time(expiry_time, &comp) == -1) {
| | ^~
| In file included from /usr/include/openssl/cms.h:29,
| from ../src/signature.c:2:
| /usr/include/openssl/x509.h:694:27: note: declared here
| 694 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_current_time(const ASN1_TIME *s);
| | ^~~~~~~~~~~~~~~~~~~~~
| ../src/signature.c:681:25: warning: ‘X509_cmp_time’ is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
| 681 | if (X509_cmp_current_time(expiry_time) == 1 && X509_cmp_time(expiry_time, &comp) == -1) {
| | ^~
| /usr/include/openssl/x509.h:693:27: note: declared here
| 693 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_time(const ASN1_TIME *s, const time_t *t);
| | ^~~~~~~~~~~~~
| ../src/signature.c: In function ‘cms_check_signer_cns’:
| ../src/signature.c:1172:45: warning: initialization discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
| 1172 | X509_NAME *current_signer = X509_get_subject_name(sk_X509_value(signers, i));
| | ^~~~~~~~~~~~~~~~~~~~~
| ../src/signature.c: In function ‘cms_get_unverified_manifest’:
| ../src/signature.c:1403:24: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 1403 | if (!(*content)->data || ((*content)->length <= 0)) {
| | ^~
| ../src/signature.c:1403:45: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 1403 | if (!(*content)->data || ((*content)->length <= 0)) {
| | ^~
| ../src/signature.c:1412:37: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 1412 | tmp = g_bytes_new((*content)->data, (*content)->length);
| | ^~
| ../src/signature.c:1412:55: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 1412 | tmp = g_bytes_new((*content)->data, (*content)->length);
| | ^~
| ../src/signature.c: In function ‘cms_verify_bytes’:
| ../src/signature.c:1518:20: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers]
| 1518 | so = X509_ATTRIBUTE_get0_type(xa, 0);
| | ^
| ninja: build stopped: subcommand failed.
Full buildlog
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/rauc_1.15.2-1_amd64-2026-04-19T09:27:15Z
Sebastian
More information about the Pkg-openssl-devel
mailing list