Public bug reported: Imported from Debian bug http://bugs.debian.org/1138374:
Package: freeradius Version: 3.2.8+dfsg-1 Severity: normal Tags: sid control: affects -1 src:openssl User: [email protected] Usertags: openssl-4.0 OpenSSL 4.0 is in experimental. This package fails to build against it: | build/make/jlibtool --silent --mode=compile gcc -o build/objs/src/main/tls.lo -c -MD -Wdate-time -D_FORTIFY_SOURCE=2 -I. -Isrc -include src/freeradius-devel/autoconf.h -include src/freeradius-devel/build.h -include src/freeradius-devel/features.h -include src/freeradius-devel/radpaths.h -fno-strict-aliasing -Wno-date-time -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/freeradius-3.2.8+dfsg=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wall -std=c99 -D_GNU_SOURCE -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -DNDEBUG -DIS_MODULE=1 -DWITH_EAPCLIENT -DBUILT_WITH_CPPFLAGS=\"-Wdate-time -D_FORTIFY_SOURCE=2\" -DBUILT_WITH_CFLAGS=\"-I. -Isrc -include src/freeradius-devel/autoconf.h -include src/freeradius-devel/build.h -include src/freeradius-devel/features.h -include src/freeradius-devel/radpaths.h -fno-strict-aliasing -Wno-date-time -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/freeradius-3.2.8+dfsg=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wall -std=c99 -D_GNU_SOURCE -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -DNDEBUG -DIS_MODULE=1\" -DBUILT_WITH_LDFLAGS=\" -Wl,-z,relro -Wl,-z,now \" -DBUILT_WITH_LIBS=\"-lcrypto -lssl -ltalloc -latomic -lcap -lresolv -ldl -lpthread -lreadline\" -Isrc/modules/rlm_eap/libeap src/main/tls.c | In file included from src/main/tls.c:55: | src/main/tls.c: In function ‘ocsp_parse_cert_url’: | src/main/tls.c:2540:64: error: invalid use of incomplete typedef ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’} | 2540 | if (OCSP_parse_url((char *) ad->location->d.ia5->data, host_out, | | ^~ | src/main/tls.c: In function ‘cbtls_verify’: | src/main/tls.c:3022:48: error: invalid use of incomplete typedef ‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’} | 3022 | (lookup <= 1) && sn && ((size_t) sn->length < (sizeof(buf) / 2))) { | | ^~ | src/main/tls.c:3026:35: error: invalid use of incomplete typedef ‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’} | 3026 | for (i = 0; i < sn->length; i++) { | | ^~ | src/main/tls.c:3027:60: error: invalid use of incomplete typedef ‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’} | 3027 | sprintf(p, "%02x", (unsigned int)sn->data[i]); | | ^~ | src/main/tls.c:3040:22: error: invalid use of incomplete typedef ‘ASN1_TIME’ {aka ‘struct asn1_string_st’} | 3040 | (asn_time->length < (int) sizeof(buf))) { | | ^~ | src/main/tls.c:3041:45: error: invalid use of incomplete typedef ‘ASN1_TIME’ {aka ‘struct asn1_string_st’} | 3041 | memcpy(buf, (char*) asn_time->data, asn_time->length); | | ^~ | src/main/tls.c:3041:61: error: invalid use of incomplete typedef ‘ASN1_TIME’ {aka ‘struct asn1_string_st’} | 3041 | memcpy(buf, (char*) asn_time->data, asn_time->length); | | ^~ | src/main/tls.c:3042:29: error: invalid use of incomplete typedef ‘ASN1_TIME’ {aka ‘struct asn1_string_st’} | 3042 | buf[asn_time->length] = '\0'; | | ^~ | src/main/tls.c:3053:22: error: invalid use of incomplete typedef ‘ASN1_TIME’ {aka ‘struct asn1_string_st’} | 3053 | (asn_time->length < (int) sizeof(buf))) { | | ^~ | src/main/tls.c:3054:45: error: invalid use of incomplete typedef ‘ASN1_TIME’ {aka ‘struct asn1_string_st’} | 3054 | memcpy(buf, (char*) asn_time->data, asn_time->length); | | ^~ | src/main/tls.c:3054:61: error: invalid use of incomplete typedef ‘ASN1_TIME’ {aka ‘struct asn1_string_st’} | 3054 | memcpy(buf, (char*) asn_time->data, asn_time->length); | | ^~ | src/main/tls.c:3055:29: error: invalid use of incomplete typedef ‘ASN1_TIME’ {aka ‘struct asn1_string_st’} | 3055 | buf[asn_time->length] = '\0'; | | ^~ | src/main/tls.c:3083:9: warning: ‘X509_NAME_get_text_by_NID’ is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations] | 3083 | X509_NAME_get_text_by_NID(X509_get_subject_name(client_cert), | | ^~~~~~~~~~~~~~~~~~~~~~~~~ | In file included from /usr/include/openssl/ssl.h:34, | from src/freeradius-devel/missing.h:87, | from src/freeradius-devel/libradius.h:71, | from src/freeradius-devel/radiusd.h:29, | from src/main/tls.c:28: | /usr/include/openssl/x509.h:1041:27: note: declared here | 1041 | OSSL_DEPRECATEDIN_4_0 int X509_NAME_get_text_by_NID(const X509_NAME *name, | | ^~~~~~~~~~~~~~~~~~~~~~~~~ | src/main/tls.c:3132:26: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers] | 3132 | if ((ext = X509_get_ext(client_cert, loc)) && | | ^ | src/main/tls.c:3240:29: warning: assignment discards ‘const’ qualifier from pointer target type [-Wdiscarded-qualifiers] | 3240 | obj = X509_EXTENSION_get_object(ext); | | ^ | make[2]: *** [scripts/boiler.mk:643: build/objs/src/main/tls.lo] Error 1 Full buildlog https://breakpoint.cc/openssl-rebuild/logs-4/attempted/freeradius_3.2.8+dfsg-1_amd64-2026-04-19T08:33:37Z Sebastian ** Affects: freeradius (Ubuntu) Importance: Undecided Status: New ** Affects: freeradius (Debian) Importance: Undecided Status: New ** Tags: ftbfs openssl-4.0 ** Bug watch added: Debian Bug tracker #1138374 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138374 ** Changed in: freeradius (Debian) Remote watch: None => Debian Bug tracker #1138374 ** Tags added: ftbfs openssl-4.0 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2154922 Title: freeradius: FTBFS with openssl 4.0 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/freeradius/+bug/2154922/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
