[Pkg-openssl-devel] Bug#1138483: libnetconf2: FTBFS with openssl 4.0

[Sebastian Andrzej Siewior]

Package: libnetconf2
Version: 3.7.10-2
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| [ 75%] Building C object CMakeFiles/netconf2.dir/src/session_openssl.c.o
| /usr/bin/cc -Dnetconf2_EXPORTS -I/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu/compat -I/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu/src -I/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu/include -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/libnetconf2-3.7.10=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 -Wdate-time -D_FORTIFY_SOURCE=2 -Wall -Wextra -fvisibility=hidden -std=c99 -DNC_ENABLED_SSH_TLS -fPIC -MD -MT CMakeFiles/netconf2.dir/src/session_openssl.c.o -MF CMakeFiles/netconf2.dir/src/session_openssl.c.o.d -o CMakeFiles/netconf2.dir/src/session_openssl.c.o -c /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c: In function ‘nc_tls_get_san_value_type_wrap’:
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:505:15: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   505 |         if (ip->length == 4) {
|       |               ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:54: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   506 |             if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) {
|       |                                                      ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:67: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   506 |             if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) {
|       |                                                                   ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:80: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   506 |             if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) {
|       |                                                                                ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:93: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   506 |             if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) {
|       |                                                                                             ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:511:22: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   511 |         } else if (ip->length == 16) {
|       |                      ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:23: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   513 |                     ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5],
|       |                       ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:36: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   513 |                     ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5],
|       |                                    ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:49: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   513 |                     ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5],
|       |                                                 ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:62: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   513 |                     ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5],
|       |                                                              ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:75: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   513 |                     ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5],
|       |                                                                           ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:88: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   513 |                     ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5],
|       |                                                                                        ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:23: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   514 |                     ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11],
|       |                       ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:36: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   514 |                     ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11],
|       |                                    ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:49: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   514 |                     ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11],
|       |                                                 ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:62: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   514 |                     ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11],
|       |                                                              ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:75: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   514 |                     ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11],
|       |                                                                           ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:89: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   514 |                     ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11],
|       |                                                                                         ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:23: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   515 |                     ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) {
|       |                       ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:37: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   515 |                     ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) {
|       |                                     ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:51: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   515 |                     ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) {
|       |                                                   ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:65: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   515 |                     ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) {
|       |                                                                 ^~
| In file included from /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:35:
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:521:80: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
|   521 |             WRN(NULL, "SAN IP address in an unknown format (length is %d).", ip->length);
|       |                                                                                ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/log_p.h:57:123: note: in definition of macro ‘WRN’
|    57 | #define WRN(session, ...) if(ATOMIC_LOAD_RELAXED(verbose_level)>=NC_VERB_WARNING){nc_log_printf(session, NC_VERB_WARNING, __VA_ARGS__);}
|       |                                                                                                                           ^~~~~~~~~~~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c: In function ‘nc_tls_move_crls_to_store’:
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:789:5: warning: ‘X509_STORE_get0_objects’ is deprecated: Since OpenSSL 4.0;Use X509_STORE_get1_objects [-Wdeprecated-declarations]
|   789 |     objs = X509_STORE_get0_objects(src);
|       |     ^~~~
| In file included from /usr/include/openssl/x509.h:494,
|                  from /usr/include/openssl/ssl.h:34,
|                  from /build/reproducible-path/libnetconf2-3.7.10/src/session_wrapper.h:48,
|                  from /build/reproducible-path/libnetconf2-3.7.10/src/session_p.h:36,
|                  from /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:37:
| /usr/include/openssl/x509_vfy.h:527:24: note: declared here
|   527 | STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
|       |                        ^~~~~~~~~~~~~~~~~~~~~~~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c: In function ‘nc_server_tls_get_crl_distpoint_uris_wrap’:
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:1370:5: warning: ‘X509_STORE_get0_objects’ is deprecated: Since OpenSSL 4.0;Use X509_STORE_get1_objects [-Wdeprecated-declarations]
|  1370 |     objs = X509_STORE_get0_objects(cert_store);
|       |     ^~~~
| /usr/include/openssl/x509_vfy.h:527:24: note: declared here
|   527 | STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
|       |                        ^~~~~~~~~~~~~~~~~~~~~~~
| make[3]: *** [CMakeFiles/netconf2.dir/build.make:320: CMakeFiles/netconf2.dir/src/session_openssl.c.o] Error 1
| make[3]: Leaving directory '/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu'

Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/libnetconf2_3.7.10-2_amd64-2026-04-19T10:51:08Z

Sebastian