Package: openvpn3-client
Version: 27+dfsg-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: [email protected]
Usertags: openssl-4.0
OpenSSL 4.0 is in experimental. This package fails to build against it:
| c++ -Isrc/client/openvpn3-service-client.p -Isrc/client -I../src/client
-I../openvpn3-core -I/usr/include -Isrc -I../src -I. -I..
-I../subprojects/fmt-11.2.0/include -Isrc/dco -I/usr/include/jsoncpp
-I/usr/include/gio-unix-2.0 -I/usr/include/libmount -I/usr/include/blkid
-I/usr/include/glib-2.0 -I/usr/lib/x86_64-linux-gnu/glib-2.0/include
-I/usr/include/sysprof-6 -I/usr/include/libnl3 -I/usr/include/uuid
-fdiagnostics-color=always -D_GLIBCXX_ASSERTIONS=1 -D_FILE_OFFSET_BITS=64 -Wall
-Winvalid-pch -Werror -std=c++17 -Wno-non-virtual-dtor
-DOVPN_TINYXML2_HAS_ERROR_NAME -DOVPN_TINYXML2_HAS_ERROR_STR -g -O2
-ffile-prefix-map=/build/reproducible-path/openvpn3-client-27+dfsg=.
-fstack-protector-strong -fstack-clash-protection -Wformat
-Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2
-pthread -DFMT_HEADER_ONLY -MD -MQ
src/client/openvpn3-service-client.p/openvpn3-service-client.cpp.o -MF
src/client/openvpn3-service-client.p/openvpn3-service-client.cpp.o.d -o
src/client/openvpn3-service-client.p/openvpn3-service-client.cpp.o -c
../src/client/openvpn3-service-client.cpp
| In file included from ../openvpn3-core/openvpn/openssl/ssl/sslctx.hpp:77,
| from ../openvpn3-core/openvpn/init/engineinit.hpp:23,
| from ../openvpn3-core/openvpn/init/initprocess.hpp:24,
| from ../openvpn3-core/client/ovpncli.cpp:78,
| from ../src/client/core-client.hpp:43,
| from ../src/client/openvpn3-service-client.cpp:60:
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp: In function
‘std::string openvpn::OpenSSLPKI::x509_get_field(X509*, int)’:
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp:142:49: error: invalid
conversion from ‘const X509_NAME*’ {aka ‘const X509_name_st*’} to
‘X509_NAME*’ {aka ‘X509_name_st*’} [-fpermissive]
| 142 | X509_NAME *x509_name = X509_get_subject_name(cert);
| | ~~~~~~~~~~~~~~~~~~~~~^~~~~~
| | |
| | const X509_NAME* {aka
const X509_name_st*}
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp:146:51: error: invalid
conversion from ‘const X509_NAME_ENTRY*’ {aka ‘const
X509_name_entry_st*’} to ‘X509_NAME_ENTRY*’ {aka
‘X509_name_entry_st*’} [-fpermissive]
| 146 | X509_NAME_ENTRY *ent = X509_NAME_get_entry(x509_name, i);
| | ~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~
| | |
| | const
X509_NAME_ENTRY* {aka const X509_name_entry_st*}
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp:149:56: error: invalid
conversion from ‘const ASN1_STRING*’ {aka ‘const asn1_string_st*’} to
‘ASN1_STRING*’ {aka ‘asn1_string_st*’} [-fpermissive]
| 149 | ASN1_STRING *val = X509_NAME_ENTRY_get_data(ent);
| | ~~~~~~~~~~~~~~~~~~~~~~~~^~~~~
| | |
| | const
ASN1_STRING* {aka const asn1_string_st*}
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp:167:47: error: invalid
conversion from ‘const X509_EXTENSION*’ {aka ‘const
X509_extension_st*’} to ‘X509_EXTENSION*’ {aka ‘X509_extension_st*’}
[-fpermissive]
| 167 | X509_EXTENSION *ext = X509_get_ext(cert, i);
| | ~~~~~~~~~~~~^~~~~~~~~
| | |
| | const X509_EXTENSION*
{aka const X509_extension_st*}
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp: In function
‘std::string openvpn::OpenSSLPKI::x509_get_serial_hex(X509*)’:
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp:228:33: error: invalid
use of incomplete type ‘const ASN1_INTEGER’ {aka ‘const struct
asn1_string_st’}
| 228 | return render_hex_sep(asn1_i->data, asn1_i->length, ':', false);
| | ^~
| In file included from /usr/include/openssl/crypto.h:38,
| from ../openvpn3-core/openvpn/crypto/definitions.hpp:16,
| from ../openvpn3-core/openvpn/crypto/cryptoalgs.hpp:26,
| from ../openvpn3-core/openvpn/crypto/cryptodc.hpp:27,
| from
../openvpn3-core/openvpn/transport/client/transbase.hpp:27,
| from ../openvpn3-core/openvpn/tun/client/tunbase.hpp:24,
| from
../openvpn3-core/openvpn/tun/linux/client/tunnetlink.hpp:24,
| from ../src/client/core-client.hpp:41:
| /usr/include/openssl/types.h:57:16: note: forward declaration of
‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’}
| 57 | typedef struct asn1_string_st ASN1_INTEGER;
| | ^~~~~~~~~~~~~~
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp:228:47: error: invalid
use of incomplete type ‘const ASN1_INTEGER’ {aka ‘const struct
asn1_string_st’}
| 228 | return render_hex_sep(asn1_i->data, asn1_i->length, ':', false);
| | ^~
| /usr/include/openssl/types.h:57:16: note: forward declaration of
‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’}
| 57 | typedef struct asn1_string_st ASN1_INTEGER;
| | ^~~~~~~~~~~~~~
| ../openvpn3-core/openvpn/openssl/ssl/sslctx.hpp: In static member function
‘static void
openvpn::OpenSSLContext::load_serial_number_into_authcert(openvpn::AuthCert&,
X509*)’:
| ../openvpn3-core/openvpn/openssl/ssl/sslctx.hpp:1807:15: error: invalid use
of incomplete type ‘const ASN1_INTEGER’ {aka ‘const struct
asn1_string_st’}
| 1807 | if (ai->type == V_ASN1_NEG_INTEGER) // negative serial number
is considered to be undefined
| | ^~
| /usr/include/openssl/types.h:57:16: note: forward declaration of
‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’}
| 57 | typedef struct asn1_string_st ASN1_INTEGER;
| | ^~~~~~~~~~~~~~
| ninja: build stopped: subcommand failed.
|
Full buildlog
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/openvpn3-client_27+dfsg-1_amd64-2026-04-19T11:28:29Z
Sebastian
