[Pkg-openssl-devel] Bug#1138478: dcmtk: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: dcmtk
Version: 3.7.0+really3.7.0-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| /build/reproducible-path/dcmtk-3.7.0+really3.7.0/dcmsign/libsrc/sicert.cc:360:32: warning: ‘int X509_cmp_current_time(const ASN1_TIME*)’ is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|   360 |       if (X509_cmp_current_time(certexpiry) > 0) result = OFFalse;
|       |           ~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~
| In file included from /build/reproducible-path/dcmtk-3.7.0+really3.7.0/dcmsign/libsrc/sicert.cc:38:
| /usr/include/openssl/x509.h:694:27: note: declared here
|   694 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_current_time(const ASN1_TIME *s);
|       |                           ^~~~~~~~~~~~~~~~~~~~~
| /build/reproducible-path/dcmtk-3.7.0+really3.7.0/dcmsign/libsrc/sicert.cc: In member function ‘OFBool SiCertificate::isCertNotYetValidNow() const’:
| /build/reproducible-path/dcmtk-3.7.0+really3.7.0/dcmsign/libsrc/sicert.cc:377:32: warning: ‘int X509_cmp_current_time(const ASN1_TIME*)’ is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|   377 |       if (X509_cmp_current_time(certstart) < 0) result = OFFalse;
|       |           ~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~
| /usr/include/openssl/x509.h:694:27: note: declared here
|   694 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_current_time(const ASN1_TIME *s);
|       |                           ^~~~~~~~~~~~~~~~~~~~~
| /build/reproducible-path/dcmtk-3.7.0+really3.7.0/dcmsign/libsrc/sicert.cc: In static member function ‘static OFCondition SiCertificate::convertGeneralizedTime(const ASN1_GENERALIZEDTIME*, OFDateTime&)’:
| /build/reproducible-path/dcmtk-3.7.0+really3.7.0/dcmsign/libsrc/sicert.cc:514:10: error: invalid use of incomplete type ‘const ASN1_GENERALIZEDTIME’ {aka ‘const struct asn1_string_st’}
|   514 |     if (d->type != V_ASN1_GENERALIZEDTIME) return EC_IllegalCall;
|       |          ^~
| In file included from /build/reproducible-path/dcmtk-3.7.0+really3.7.0/dcmsign/libsrc/sicert.cc:27:
| /build/reproducible-path/dcmtk-3.7.0+really3.7.0/dcmsign/include/dcmtk/dcmsign/sicert.h:37:8: note: forward declaration of ‘ASN1_GENERALIZEDTIME’ {aka ‘struct asn1_string_st’}
|    37 | struct asn1_string_st;
|       |        ^~~~~~~~~~~~~~
| /build/reproducible-path/dcmtk-3.7.0+really3.7.0/dcmsign/libsrc/sicert.cc:515:10: error: invalid use of incomplete type ‘const ASN1_GENERALIZEDTIME’ {aka ‘const struct asn1_string_st’}
|   515 |     l = d->length;
|       |          ^~
| /build/reproducible-path/dcmtk-3.7.0+really3.7.0/dcmsign/include/dcmtk/dcmsign/sicert.h:37:8: note: forward declaration of ‘ASN1_GENERALIZEDTIME’ {aka ‘struct asn1_string_st’}
|    37 | struct asn1_string_st;
|       |        ^~~~~~~~~~~~~~
| /build/reproducible-path/dcmtk-3.7.0+really3.7.0/dcmsign/libsrc/sicert.cc:516:18: error: invalid use of incomplete type ‘const ASN1_GENERALIZEDTIME’ {aka ‘const struct asn1_string_st’}
|   516 |     a = (char *)d->data;
|       |                  ^~
| /build/reproducible-path/dcmtk-3.7.0+really3.7.0/dcmsign/include/dcmtk/dcmsign/sicert.h:37:8: note: forward declaration of ‘ASN1_GENERALIZEDTIME’ {aka ‘struct asn1_string_st’}
|    37 | struct asn1_string_st;
|       |        ^~~~~~~~~~~~~~
| make[4]: *** [dcmsign/libsrc/CMakeFiles/dcmdsig.dir/build.make:138: dcmsign/libsrc/CMakeFiles/dcmdsig.dir/sicert.cc.o] Error 1


Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/dcmtk_3.7.0+really3.7.0-1_amd64-2026-04-19T11:35:17Z

Sebastian