[Pkg-openssl-devel] Bug#1138473: libwebsockets: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: libwebsockets
Version: 4.3.5-4
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| cd /build/reproducible-path/libwebsockets-4.3.5/obj-x86_64-linux-gnu/lib && /usr/bin/cc -DLWS_BUILDING_STATIC -I/build/reproducible-path/libwebsockets-4.3.5/include -I/build/reproducible-path/libwebsockets-4.3.5/obj-x86_64-linux-gnu -I/build/reproducible-path/libwebsockets-4.3.5/lib -I/build/reproducible-path/libwebsockets-4.3.5/lib/. -I/build/reproducible-path/libwebsockets-4.3.5/lib/plat/unix/. -I/build/reproducible-path/libwebsockets-4.3.5/lib/tls/. -I/build/reproducible-path/libwebsockets-4.3.5/lib/core/. -I/build/reproducible-path/libwebsockets-4.3.5/lib/misc/. -I/build/reproducible-path/libwebsockets-4.3.5/lib/system/./async-dns -I/build/reproducible-path/libwebsockets-4.3.5/lib/system/smd/. -I/build/reproducible-path/libwebsockets-4.3.5/lib/system/metrics/. -I/build/reproducible-path/libwebsockets-4.3.5/lib/core-net/. -I/build/reproducible-path/libwebsockets-4.3.5/lib/roles/. -I/build/reproducible-path/libwebsockets-4.3.5/lib/roles/http/. -I/build/reproducible-path/libwebsockets-4.3.5/lib/roles/http/./compression -I/build/reproducible-path/libwebsockets-4.3.5/lib/roles/h1/. -I/build/reproducible-path/libwebsockets-4.3.5/lib/roles/h2/. -I/build/reproducible-path/libwebsockets-4.3.5/lib/roles/ws/. -I/build/reproducible-path/libwebsockets-4.3.5/lib/roles/raw-skt/. -I/build/reproducible-path/libwebsockets-4.3.5/lib/roles/raw-file/. -I/build/reproducible-path/libwebsockets-4.3.5/lib/roles/listen/. -I/build/reproducible-path/libwebsockets-4.3.5/lib/event-libs/. -I/build/reproducible-path/libwebsockets-4.3.5/lib/event-libs/poll/../poll -I/build/reproducible-path/libwebsockets-4.3.5/lib/event-libs/libuv/. -I/build/reproducible-path/libwebsockets-4.3.5/lib/event-libs/glib/. -I/usr/include/glib-2.0 -I/usr/lib/x86_64-linux-gnu/glib-2.0/include -I/usr/include/sysprof-6 -I/build/reproducible-path/libwebsockets-4.3.5/lib/event-libs/libev/. -Wno-deprecated-declarations -Wno-deprecated -Wall -Wextra -Wno-unused-parameter -Wconversion -Wsign-compare -Wstrict-aliasing -fvisibility=hidden -Wundef  -Wuninitialized -Wtype-limits -Wignored-qualifiers -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/libwebsockets-4.3.5=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2  -Werror -pthread -MD -MT lib/CMakeFiles/websockets.dir/tls/openssl/openssl-x509.c.o -MF CMakeFiles/websockets.dir/tls/openssl/openssl-x509.c.o.d -o CMakeFiles/websockets.dir/tls/openssl/openssl-x509.c.o -c /build/reproducible-path/libwebsockets-4.3.5/lib/tls/openssl/openssl-x509.c
| /build/reproducible-path/libwebsockets-4.3.5/lib/tls/openssl/openssl-x509.c: In function ‘lws_tls_openssl_asn1time_to_unix’:
| /build/reproducible-path/libwebsockets-4.3.5/lib/tls/openssl/openssl-x509.c:42:41: error: invalid use of incomplete typedef ‘ASN1_TIME’ {aka ‘struct asn1_string_st’}
|    42 |         const char *p = (const char *)as->data;
|       |                                         ^~
| /build/reproducible-path/libwebsockets-4.3.5/lib/tls/openssl/openssl-x509.c: In function ‘lws_tls_openssl_cert_info’:
| /build/reproducible-path/libwebsockets-4.3.5/lib/tls/openssl/openssl-x509.c:128:20: error: assignment discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers]
|   128 |                 xn = X509_get_subject_name(x509);
|       |                    ^
| /build/reproducible-path/libwebsockets-4.3.5/lib/tls/openssl/openssl-x509.c:139:20: error: assignment discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers]
|   139 |                 xn = X509_get_issuer_name(x509);
|       |                    ^
| /build/reproducible-path/libwebsockets-4.3.5/lib/tls/openssl/openssl-x509.c:209:21: error: assignment discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers]
|   209 |                 ext = X509_get_ext(x509, (int)loc);
|       |                     ^
| /build/reproducible-path/libwebsockets-4.3.5/lib/tls/openssl/openssl-x509.c:220:48: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   220 |                 dp = (const unsigned char *)val->data;
|       |                                                ^~
| /build/reproducible-path/libwebsockets-4.3.5/lib/tls/openssl/openssl-x509.c:221:27: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   221 |                 xlen = val->length;
|       |                           ^~
| /build/reproducible-path/libwebsockets-4.3.5/lib/tls/openssl/openssl-x509.c:237:21: error: assignment discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers]
|   237 |                 ext = X509_get_ext(x509, (int)loc);
|       |                     ^
| /build/reproducible-path/libwebsockets-4.3.5/lib/tls/openssl/openssl-x509.c:290:21: error: assignment discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers]
|   290 |                 ext = X509_get_ext(x509, (int)loc);
|       |                     ^
| /build/reproducible-path/libwebsockets-4.3.5/lib/tls/openssl/openssl-x509.c:316:21: error: assignment discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers]
|   316 |                 ext = X509_get_ext(x509, (int)loc);
|       |                     ^
| /build/reproducible-path/libwebsockets-4.3.5/lib/tls/openssl/openssl-x509.c:320:21: error: assignment discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers]
|   320 |                 val = X509_EXTENSION_get_data(ext);
|       |                     ^
| /build/reproducible-path/libwebsockets-4.3.5/lib/tls/openssl/openssl-x509.c:327:48: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   327 |                 dp = (const unsigned char *)val->data;
|       |                                                ^~
| /build/reproducible-path/libwebsockets-4.3.5/lib/tls/openssl/openssl-x509.c:330:55: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   330 |                                     &tag, &xclass, val->length) & 0x80)
|       |                                                       ^~
| /build/reproducible-path/libwebsockets-4.3.5/lib/tls/openssl/openssl-x509.c: In function ‘lws_x509_verify’:
| /build/reproducible-path/libwebsockets-4.3.5/lib/tls/openssl/openssl-x509.c:446:33: error: initialization discards ‘const’ qualifier from pointer target type [-Werror=discarded-qualifiers]
|   446 |                 X509_NAME *xn = X509_get_subject_name(x509->cert);
|       |                                 ^~~~~~~~~~~~~~~~~~~~~
| cc1: all warnings being treated as errors
| make[3]: *** [lib/CMakeFiles/websockets.dir/build.make:264: lib/CMakeFiles/websockets.dir/tls/openssl/openssl-x509.c.o] Error 1


Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/libwebsockets_4.3.5-4_amd64-2026-04-19T09:29:23Z

Sebastian