Package: rauc
Version: 1.15.2-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: [email protected]
Usertags: openssl-4.0
OpenSSL 4.0 is in experimental. This package fails to build against it:
| cc -Ilibrauc.a.p -I. -I.. -I../include -I/usr/include/x86_64-linux-gnu
-I/usr/include/p11-kit-1 -I/usr/include/libnl3 -I/usr/include/json-glib-1.0
-I/usr/include/glib-2.0 -I/usr/lib/x86_64-linux-gnu/glib-2.0/include
-I/usr/include/libmount -I/usr/include/blkid -I/usr/include/sysprof-6
-I/usr/include/dbus-1.0 -I/usr/lib/x86_64-linux-gnu/dbus-1.0/include
-I/usr/include/gio-unix-2.0 -I/usr/include/libfdisk -I/usr/include/uuid
-fdiagnostics-color=always -D_FILE_OFFSET_BITS=64 -Wall -Winvalid-pch -Wextra
-std=gnu11 '-DGLIB_VERSION_MAX_ALLOWED=G_ENCODE_VERSION(2,64)'
'-DGLIB_VERSION_MIN_REQUIRED=G_ENCODE_VERSION(2,64)' -Walloca -Warray-bounds
-Wcast-align -Wcast-align=strict -Wdate-time -Wformat=2 -Wformat-nonliteral
-Wformat-security -Wformat-truncation=2 -Wimplicit-function-declaration
-Winit-self -Winline -Wint-conversion -Winvalid-utf8 -Wjump-misses-init
-Wlogical-op -Wmissing-declarations -Wmissing-format-attribute
-Wmissing-include-dirs -Wmissing-noreturn -Wmissing-prototypes -Wnested-externs
-Wold-style-definition -Wpacked -Wpointer-arith -Wredundant-decls -Wreturn-type
-Wshadow -Wsign-compare -Wstrict-aliasing -Wstrict-overflow -Wstrict-prototypes
-Wswitch-default -Wswitch-enum -Wtrampolines -Wundef -Wunused-but-set-variable
-Wuse-after-free=3 -Wwrite-strings -Wno-unused-parameter
-Wno-error=unused-parameter -Wno-error=deprecated-declarations -fdata-sections
-ffunction-sections -fno-strict-aliasing '-DG_LOG_DOMAIN="rauc"' -D_GNU_SOURCE
-include /build/reproducible-path/rauc-1.15.2/obj-x86_64-linux-gnu/config.h -g
-O2 -Werror=implicit-function-declaration
-ffile-prefix-map=/build/reproducible-path/rauc-1.15.2=.
-fstack-protector-strong -fstack-clash-protection -Wformat
-Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 -fPIC
-pthread -isystem /usr/include/mit-krb5 -isystem /usr/include/mit-krb5 -include
/build/reproducible-path/rauc-1.15.2/obj-x86_64-linux-gnu/version.h -MD -MQ
librauc.a.p/src_signature.c.o -MF librauc.a.p/src_signature.c.o.d -o
librauc.a.p/src_signature.c.o -c ../src/signature.c
| ../src/signature.c: In function ‘get_pkcs11_engine’:
| ../src/signature.c:140:9: warning: ‘ENGINE_load_builtin_engines’ is
deprecated: ENGINE_load_builtin_engines API symbol is removed. Define
OPENSSL_ENGINE_STUBS to mask linker errors. [-Wdeprecated-declarations]
| 140 | ENGINE_load_builtin_engines();
| | ^~~~~~~~~~~~~~~~~~~~~~~~~~~
| In file included from ../src/signature.c:9:
| /usr/include/openssl/engine.h:437:1: note: declared here
| 437 | ENGINE_VOID_FUNC_NOARGS(ENGINE_load_builtin_engines)
| | ^~~~~~~~~~~~~~~~~~~~~~~
| ../src/signature.c:142:9: warning: ‘ENGINE_by_id’ is deprecated:
ENGINE_by_id API symbol is removed. Define OPENSSL_ENGINE_STUBS to mask linker
errors. [-Wdeprecated-declarations]
| 142 | e = ENGINE_by_id("pkcs11");
| | ^
| /usr/include/openssl/engine.h:421:1: note: declared here
| 421 | ENGINE_FUNC(ENGINE *, ENGINE_by_id, (const char *id), NULL)
| | ^~~~~~~~~~~
| ../src/signature.c:155:17: warning: ‘ENGINE_ctrl_cmd_string’ is
deprecated: ENGINE_ctrl_cmd_string API symbol is removed. Define
OPENSSL_ENGINE_STUBS to mask linker errors. [-Wdeprecated-declarations]
| 155 | if (!ENGINE_ctrl_cmd_string(e, "MODULE_PATH", env,
0)) {
| | ^~
| /usr/include/openssl/engine.h:601:1: note: declared here
| 601 | ENGINE_FUNC(int, ENGINE_ctrl_cmd_string,
| | ^~~~~~~~~~~
| ../src/signature.c:165:9: warning: ‘ENGINE_init’ is deprecated:
ENGINE_init API symbol is removed. Define OPENSSL_ENGINE_STUBS to mask linker
errors. [-Wdeprecated-declarations]
| 165 | if (ENGINE_init(e) == 0) {
| | ^~
| /usr/include/openssl/engine.h:905:1: note: declared here
| 905 | ENGINE_FUNC(int, ENGINE_init, (ENGINE *e), 0)
| | ^~~~~~~~~~~
| ../src/signature.c:177:17: warning: ‘ENGINE_ctrl_cmd_string’ is
deprecated: ENGINE_ctrl_cmd_string API symbol is removed. Define
OPENSSL_ENGINE_STUBS to mask linker errors. [-Wdeprecated-declarations]
| 177 | if (!ENGINE_ctrl_cmd_string(e, "PIN", env, 0)) {
| | ^~
| /usr/include/openssl/engine.h:601:1: note: declared here
| 601 | ENGINE_FUNC(int, ENGINE_ctrl_cmd_string,
| | ^~~~~~~~~~~
| ../src/signature.c:190:9: warning: ‘ENGINE_finish’ is deprecated:
ENGINE_finish API symbol is removed. Define OPENSSL_ENGINE_STUBS to mask linker
errors. [-Wdeprecated-declarations]
| 190 | ENGINE_finish(e);
| | ^~~~~~~~~~~~~
| /usr/include/openssl/engine.h:914:1: note: declared here
| 914 | ENGINE_FUNC(int, ENGINE_finish, (ENGINE *e), 0)
| | ^~~~~~~~~~~
| ../src/signature.c:192:9: warning: ‘ENGINE_free’ is deprecated:
ENGINE_free API symbol is removed. Define OPENSSL_ENGINE_STUBS to mask linker
errors. [-Wdeprecated-declarations]
| 192 | ENGINE_free(e);
| | ^~~~~~~~~~~
| /usr/include/openssl/engine.h:617:1: note: declared here
| 617 | ENGINE_FUNC(int, ENGINE_free, (ENGINE *e), 0)
| | ^~~~~~~~~~~
| ../src/signature.c: In function ‘load_key_pkcs11’:
| ../src/signature.c:251:9: warning: ‘ENGINE_load_private_key’ is
deprecated: ENGINE_load_private_key API symbol is removed. Define
OPENSSL_ENGINE_STUBS to mask linker errors. [-Wdeprecated-declarations]
| 251 | res = ENGINE_load_private_key(e, url, NULL, NULL);
| | ^~~
| /usr/include/openssl/engine.h:928:1: note: declared here
| 928 | ENGINE_FUNC(EVP_PKEY *, ENGINE_load_private_key,
| | ^~~~~~~~~~~
| ../src/signature.c: In function ‘load_cert_pkcs11’:
| ../src/signature.c:391:9: warning: ‘ENGINE_ctrl_cmd’ is deprecated:
ENGINE_ctrl_cmd API symbol is removed. Define OPENSSL_ENGINE_STUBS to mask
linker errors. [-Wdeprecated-declarations]
| 391 | if (!ENGINE_ctrl_cmd(e, "LOAD_CERT_CTRL", 0, &parms, NULL, 0)
|| (parms.cert == NULL)) {
| | ^~
| /usr/include/openssl/engine.h:570:1: note: declared here
| 570 | ENGINE_FUNC(int, ENGINE_ctrl_cmd, (ENGINE *e, const char *cmd_name,
long i, void *p, void (*f)(void), int cmd_optional), 0)
| | ^~~~~~~~~~~
| ../src/signature.c: In function ‘cms_sign’:
| ../src/signature.c:681:25: warning: ‘X509_cmp_current_time’ is
deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
| 681 | if (X509_cmp_current_time(expiry_time) == 1
&& X509_cmp_time(expiry_time, &comp) == -1) {
| | ^~
| In file included from /usr/include/openssl/cms.h:29,
| from ../src/signature.c:2:
| /usr/include/openssl/x509.h:694:27: note: declared here
| 694 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_current_time(const ASN1_TIME *s);
| | ^~~~~~~~~~~~~~~~~~~~~
| ../src/signature.c:681:25: warning: ‘X509_cmp_time’ is deprecated: Since
OpenSSL 4.0 [-Wdeprecated-declarations]
| 681 | if (X509_cmp_current_time(expiry_time) == 1
&& X509_cmp_time(expiry_time, &comp) == -1) {
| | ^~
| /usr/include/openssl/x509.h:693:27: note: declared here
| 693 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_time(const ASN1_TIME *s, const
time_t *t);
| | ^~~~~~~~~~~~~
| ../src/signature.c: In function ‘cms_check_signer_cns’:
| ../src/signature.c:1172:45: warning: initialization discards ‘const’
qualifier from pointer target type [-Wdiscarded-qualifiers]
| 1172 | X509_NAME *current_signer =
X509_get_subject_name(sk_X509_value(signers, i));
| | ^~~~~~~~~~~~~~~~~~~~~
| ../src/signature.c: In function ‘cms_get_unverified_manifest’:
| ../src/signature.c:1403:24: error: invalid use of incomplete typedef
‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 1403 | if (!(*content)->data || ((*content)->length <= 0)) {
| | ^~
| ../src/signature.c:1403:45: error: invalid use of incomplete typedef
‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 1403 | if (!(*content)->data || ((*content)->length <= 0)) {
| | ^~
| ../src/signature.c:1412:37: error: invalid use of incomplete typedef
‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 1412 | tmp = g_bytes_new((*content)->data, (*content)->length);
| | ^~
| ../src/signature.c:1412:55: error: invalid use of incomplete typedef
‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 1412 | tmp = g_bytes_new((*content)->data, (*content)->length);
| | ^~
| ../src/signature.c: In function ‘cms_verify_bytes’:
| ../src/signature.c:1518:20: warning: assignment discards ‘const’
qualifier from pointer target type [-Wdiscarded-qualifiers]
| 1518 | so = X509_ATTRIBUTE_get0_type(xa, 0);
| | ^
| ninja: build stopped: subcommand failed.
Full buildlog
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/rauc_1.15.2-1_amd64-2026-04-19T09:27:15Z
Sebastian
