[Syslog-ng-maintainers] Bug#1138428: 1138428: [syslog-ng] Fix build failure with OpenSSL 4.0

[Ravi Kant Sharma]

Package: 1138428
Followup-For: Bug #1138428
X-Debbugs-Cc: ravi.kant.sharma at canonical.com

This patch fixes the build failure with OpenSSL 4.0.


-- System Information:
Debian Release: trixie/sid
  APT prefers noble-updates
  APT policy: (500, 'noble-updates'), (500, 'noble-security'), (500, 'noble'), (100, 'noble-backports')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.8.0-117-generic (SMP w/12 CPU threads; PREEMPT)
Kernel taint flags: TAINT_WARN
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
-------------- next part --------------
>From c5602daad14bf3c1f51bfaf7fbfcf684b8f45034 Mon Sep 17 00:00:00 2001
From: Hofi <hofione at gmail.com>
Date: Mon, 4 May 2026 10:40:57 +0200
Subject: [PATCH] tls-verifier: use dedicated ASN1_STRING field accessors
 instead of direct member access

Signed-off-by: Hofi <hofione at gmail.com>
Origin: upstream, https://github.com/syslog-ng/syslog-ng/commit/1803ccca95334409eacb4187b4f39a2acb3a70f1
Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/syslog-ng/+bug/2154973
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138428
--- a/lib/transport/tls-verifier.c
+++ b/lib/transport/tls-verifier.c
@@ -157,10 +157,10 @@
                 {
                   gchar dotted_ip[64] = {0};
                   int addr_family = AF_INET;
-                  if (gen_name->d.iPAddress->length == 16)
+                  if (ASN1_STRING_length(gen_name->d.iPAddress) == 16)
                     addr_family = AF_INET6;
 
-                  if (inet_ntop(addr_family, gen_name->d.iPAddress->data, dotted_ip, sizeof(dotted_ip)))
+                  if (inet_ntop(addr_family, ASN1_STRING_get0_data(gen_name->d.iPAddress), dotted_ip, sizeof(dotted_ip)))
                     {
                       g_strlcpy(pattern_buf, dotted_ip, sizeof(pattern_buf));
                       found = TRUE;