[Pkg-openssl-devel] Bug#1138475: ncrack: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: ncrack
Version: 0.7+debian-6
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| gcc -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/ncrack-0.7+debian=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wall -Wpointer-arith -Wuninitialized -Wsign-compare -Wformat-security -Wsizeof-pointer-memaccess -Wno-pointer-sign -Wno-unused-result -fno-strict-aliasing -D_FORTIFY_SOURCE=2 -ftrapv -fno-builtin-memset -fstack-protector-strong -fPIE  -I. -Wdate-time -D_FORTIFY_SOURCE=2 -DHAVE_CONFIG_H -c cipher-bf1.c
| cipher-bf1.c: In function ‘evp_ssh1_bf’:
| cipher-bf1.c:93:19: error: implicit declaration of function ‘EVP_CIPHER_meth_dup’; did you mean ‘EVP_CIPHER_CTX_dup’? [-Wimplicit-function-declaration]
|    93 |         ssh1_bf = EVP_CIPHER_meth_dup(EVP_bf_cbc());
|       |                   ^~~~~~~~~~~~~~~~~~~
|       |                   EVP_CIPHER_CTX_dup
| cipher-bf1.c:93:17: error: assignment to ‘EVP_CIPHER *’ {aka ‘struct evp_cipher_st *’} from ‘int’ makes pointer from integer without a cast [-Wint-conversion]
|    93 |         ssh1_bf = EVP_CIPHER_meth_dup(EVP_bf_cbc());
|       |                 ^
| cipher-bf1.c:94:26: error: implicit declaration of function ‘EVP_CIPHER_meth_get_do_cipher’; did you mean ‘EVP_CIPHER_CTX_get1_cipher’? [-Wimplicit-function-declaration]
|    94 |         orig_do_cipher = EVP_CIPHER_meth_get_do_cipher(ssh1_bf);
|       |                          ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|       |                          EVP_CIPHER_CTX_get1_cipher
| cipher-bf1.c:94:24: error: assignment to ‘int (*)(EVP_CIPHER_CTX *, u_char *, const u_char *, size_t)’ {aka ‘int (*)(struct evp_cipher_ctx_st *, unsigned char *, const unsigned char *, long unsigned int)’} from ‘int’ makes pointer from integer without a cast [-Wint-conversion]
|    94 |         orig_do_cipher = EVP_CIPHER_meth_get_do_cipher(ssh1_bf);
|       |                        ^
| cipher-bf1.c:99:9: error: implicit declaration of function ‘EVP_CIPHER_meth_set_do_cipher’; did you mean ‘EVP_CIPHER_CTX_get1_cipher’? [-Wimplicit-function-declaration]
|    99 |         EVP_CIPHER_meth_set_do_cipher(ssh1_bf, bf_ssh1_do_cipher);
|       |         ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|       |         EVP_CIPHER_CTX_get1_cipher
| make[2]: *** [Makefile:72: cipher-bf1.o] Error 1
| make[2]: Leaving directory '/build/reproducible-path/ncrack-0.7+debian/opensshlib'

Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/ncrack_0.7+debian-6_amd64-2026-04-19T14:15:07Z

Sebastian