Your message dated Mon, 08 Jun 2026 10:37:58 +0000
with message-id <[email protected]>
and subject line Bug#1138486: fixed in osslsigncode 2.13-2
has caused the Debian Bug report #1138486,
regarding osslsigncode: FTBFS with openssl 4.0
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1138486: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138486
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: osslsigncode
Version: 2.13-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: [email protected]
Usertags: openssl-4.0
OpenSSL 4.0 is in experimental. This package fails to build against it:
| [ 10%] Building C object CMakeFiles/osslsigncode.dir/osslsigncode.c.o
| /usr/bin/cc -DHAVE_CONFIG_H=1
-I/build/reproducible-path/osslsigncode-2.13/obj-x86_64-linux-gnu -g -O2
-Werror=implicit-function-declaration
-ffile-prefix-map=/build/reproducible-path/osslsigncode-2.13=.
-fstack-protector-strong -fstack-clash-protection -Wformat
-Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2
-std=gnu11 -fPIE -MD -MT CMakeFiles/osslsigncode.dir/osslsigncode.c.o -MF
CMakeFiles/osslsigncode.dir/osslsigncode.c.o.d -o
CMakeFiles/osslsigncode.dir/osslsigncode.c.o -c
/build/reproducible-path/osslsigncode-2.13/osslsigncode.c
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c: In function
‘bio_encode_rfc3161_request’:
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c:319:36: error:
invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct
asn1_string_st’}
| 319 | BIO_write(bhash, si->enc_digest->data, si->enc_digest->length);
| | ^~
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c:319:58: error:
invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct
asn1_string_st’}
| 319 | BIO_write(bhash, si->enc_digest->data, si->enc_digest->length);
| | ^~
| In file included from /usr/include/openssl/bio.h:32,
| from /usr/include/openssl/asn1.h:32,
| from /usr/include/openssl/asn1t.h:28,
| from
/build/reproducible-path/osslsigncode-2.13/osslsigncode.h:48,
| from
/build/reproducible-path/osslsigncode-2.13/osslsigncode.c:61:
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c: In function
‘create_nonce’:
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c:396:23: error:
invalid use of incomplete typedef ‘ASN1_INTEGER’ {aka ‘struct
asn1_string_st’}
| 396 | OPENSSL_free(nonce->data);
| | ^~
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c:397:10: error:
invalid use of incomplete typedef ‘ASN1_INTEGER’ {aka ‘struct
asn1_string_st’}
| 397 | nonce->length = len - i;
| | ^~
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c:398:10: error:
invalid use of incomplete typedef ‘ASN1_INTEGER’ {aka ‘struct
asn1_string_st’}
| 398 | nonce->data = OPENSSL_malloc((size_t)nonce->length + 1);
| | ^~
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c:398:47: error:
invalid use of incomplete typedef ‘ASN1_INTEGER’ {aka ‘struct
asn1_string_st’}
| 398 | nonce->data = OPENSSL_malloc((size_t)nonce->length + 1);
| | ^~
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c:399:17: error:
invalid use of incomplete typedef ‘ASN1_INTEGER’ {aka ‘struct
asn1_string_st’}
| 399 | memcpy(nonce->data, buf + i, (size_t)nonce->length);
| | ^~
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c:399:47: error:
invalid use of incomplete typedef ‘ASN1_INTEGER’ {aka ‘struct
asn1_string_st’}
| 399 | memcpy(nonce->data, buf + i, (size_t)nonce->length);
| | ^~
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c: In function
‘X509_attribute_chain_append_object’:
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c:1635:20: warning:
assignment discards ‘const’ qualifier from pointer target type
[-Wdiscarded-qualifiers]
| 1635 | object = X509_ATTRIBUTE_get0_object(attr);
| | ^
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c: In function
‘verify_timestamp_token’:
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c:2199:33: error:
invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct
asn1_string_st’}
| 2199 | const u_char *p = (*pos)->data;
| | ^~
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c:2200:62: error:
invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct
asn1_string_st’}
| 2200 | TS_TST_INFO *token = d2i_TS_TST_INFO(NULL, &p,
(*pos)->length);
| | ^~
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c:2232:44: error:
invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct
asn1_string_st’}
| 2232 | BIO_write(bhash, si->enc_digest->data,
si->enc_digest->length);
| | ^~
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c:2232:66: error:
invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct
asn1_string_st’}
| 2232 | BIO_write(bhash, si->enc_digest->data,
si->enc_digest->length);
| | ^~
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c:2238:35: error:
invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct
asn1_string_st’}
| 2238 | if (memcmp(mdbuf, hash->data, (size_t)hash->length)) {
| | ^~
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c:2238:55: error:
invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct
asn1_string_st’}
| 2238 | if (memcmp(mdbuf, hash->data, (size_t)hash->length)) {
| | ^~
| /build/reproducible-path/osslsigncode-2.13/osslsigncode.c:2242:65: error:
invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct
asn1_string_st’}
| 2242 | print_hash("\tReceived message digest", "",
hash->data, hash->length);
| | ^~
…
Full buildlog
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/osslsigncode_2.13-1_amd64-2026-04-19T07:30:03Z
Sebastian
--- End Message ---
--- Begin Message ---
Source: osslsigncode
Source-Version: 2.13-2
Done: Stephen Kitt <[email protected]>
We believe that the bug you reported is fixed in the latest version of
osslsigncode, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Stephen Kitt <[email protected]> (supplier of updated osslsigncode package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 08 Jun 2026 12:15:32 +0200
Source: osslsigncode
Architecture: source
Version: 2.13-2
Distribution: unstable
Urgency: medium
Maintainer: Stephen Kitt <[email protected]>
Changed-By: Stephen Kitt <[email protected]>
Closes: 1128217 1138486
Changes:
osslsigncode (2.13-2) unstable; urgency=medium
.
* Drop the obsolete libcurl4-openssl-dev build dependency. Thanks to
Michał Trojnara for spotting this! Closes: #1128217.
* Apply upstream patch to avoid relying on OpenSSL data structure
internals. This allows building with OpenSSL 4.0. Closes: #1138486.
* Standards-Version 4.7.4, no change required.
Checksums-Sha1:
c105d4c1c574eeabda94b4a443a29614b3051d71 1944 osslsigncode_2.13-2.dsc
a3453deb8ce018cc77ba2d80e53ce4de50fef92d 15612
osslsigncode_2.13-2.debian.tar.xz
0c3cc698e80e7d411ca8235f2bdeb1a7cf4172f5 8168
osslsigncode_2.13-2_source.buildinfo
Checksums-Sha256:
94f03b674984547fadbec98fc1eea180015a0633a9e15ee53ef877fc776418ef 1944
osslsigncode_2.13-2.dsc
338422de9f614c409ad233b0986b837e89548124e7896bee38840b942120fb14 15612
osslsigncode_2.13-2.debian.tar.xz
8c65925f6e1dfff39885fdb9d13d8590d01ed57f3e4341c7c6bae40f802404c7 8168
osslsigncode_2.13-2_source.buildinfo
Files:
d92d16089321aeb871d019b983f70f66 1944 otherosfs optional
osslsigncode_2.13-2.dsc
761eff144c30eaa1c5fc7475c3fc4ed0 15612 otherosfs optional
osslsigncode_2.13-2.debian.tar.xz
dd874f47376dbdedcbbf972c94706b5a 8168 otherosfs optional
osslsigncode_2.13-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=O0lK
-----END PGP SIGNATURE-----
pgpV22d22EhJ1.pgp
Description: PGP signature
--- End Message ---
