Public bug reported:

Imported from Debian bug http://bugs.debian.org/1138487:

Package: xmltooling
Version: 3.3.0-3
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: [email protected]
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| libtool: compile:  g++ -DHAVE_CONFIG_H -I.. -I.. -I. -Wdate-time 
-D_FORTIFY_SOURCE=2 -pthread -I/usr/include/x86_64-linux-gnu -isystem 
/usr/include/mit-krb5 -isystem /usr/include/mit-krb5 -Wall -W -pthread -pthread 
-I/usr/include -g -O2 
-ffile-prefix-map=/build/reproducible-path/xmltooling-3.3.0=. 
-fstack-protector-strong -fstack-clash-protection -Wformat 
-Werror=format-security -fcf-protection -Wno-deprecated-declarations -c 
security/impl/AbstractPKIXTrustEngine.cpp  -fPIC -DPIC -o 
security/impl/.libs/libxmltooling_la-AbstractPKIXTrustEngine.o
| In file included from ./security/OpenSSLPathValidator.h:31,
|                  from security/impl/AbstractPKIXTrustEngine.cpp:37:
| ../xmltooling/security/PathValidator.h:71:22: warning: 'virtual bool 
xmltooling::PathValidator::validate(XSECCryptoX509*, const 
std::vector<XSECCryptoX509*>&, const PathValidatorParams&) const' was hidden 
[-Woverloaded-virtual=]
|    71 |         virtual bool validate(
|       |                      ^~~~~~~~
| ./security/OpenSSLPathValidator.h:59:22: note:   by 'virtual bool 
xmltooling::OpenSSLPathValidator::validate(X509*, stack_st_X509*, const 
xmltooling::PathValidator::PathValidatorParams&) const'
|    59 |         virtual bool validate(
|       |                      ^~~~~~~~
| security/impl/AbstractPKIXTrustEngine.cpp: In member function 'virtual bool 
xmltooling::AbstractPKIXTrustEngine::checkEntityNames(X509*, const 
xmltooling::CredentialResolver&, const xmltooling::CredentialCriteria&) const':
| security/impl/AbstractPKIXTrustEngine.cpp:219:45: error: invalid conversion 
from 'const X509_NAME*' {aka 'const X509_name_st*'} to 'X509_NAME*' {aka 
'X509_name_st*'} [-fpermissive]
|   219 |     X509_NAME* subject=X509_get_subject_name(certEE);
|       |                        ~~~~~~~~~~~~~~~~~~~~~^~~~~~~~
|       |                                             |
|       |                                             const X509_NAME* {aka 
const X509_name_st*}
| security/impl/AbstractPKIXTrustEngine.cpp:267:49: error: 'ASN1_STRING_data' 
was not declared in this scope; did you mean 'ASN1_STRING_set0'?
|   267 |                     const char* altptr = 
(char*)ASN1_STRING_data(check->d.ia5);
|       |                                                 ^~~~~~~~~~~~~~~~
|       |                                                 ASN1_STRING_set0
| security/impl/AbstractPKIXTrustEngine.cpp:271:65: warning: comparison of 
integer expressions of different signedness: 
'std::__cxx11::basic_string<char>::size_type' {aka 'long unsigned int'} and 
'const int' [-Wsign-compare]
|   271 |                         if ((check->type==GEN_DNS && 
n->length()==altlen && !strncasecmp(altptr,n->c_str(),altlen))
|       |                                                      
~~~~~~~~~~~^~~~~~~~
| security/impl/AbstractPKIXTrustEngine.cpp:275:72: warning: comparison of 
integer expressions of different signedness: 
'std::__cxx11::basic_string<char>::size_type' {aka 'long unsigned int'} and 
'const int' [-Wsign-compare]
|   275 |                                 || (check->type==GEN_URI && 
n->length()==altlen && !strncmp(altptr,n->c_str(),altlen))) {
|       |                                                             
~~~~~~~~~~~^~~~~~~~
| security/impl/AbstractPKIXTrustEngine.cpp:294:56: error: invalid conversion 
from 'const ASN1_STRING*' {aka 'const asn1_string_st*'} to 'ASN1_STRING*' {aka 
'asn1_string_st*'} [-fpermissive]
|   294 |             ASN1_STRING* tmp = 
X509_NAME_ENTRY_get_data(X509_NAME_get_entry(subject, i));
|       |                                
~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|       |                                                        |
|       |                                                        const 
ASN1_STRING* {aka const asn1_string_st*}
| security/impl/AbstractPKIXTrustEngine.cpp:303:37: error: 'ASN1_STRING_data' 
was not declared in this scope; did you mean 'ASN1_STRING_set0'?
|   303 |                     memcpy(peer_CN, ASN1_STRING_data(tmp), j);
|       |                                     ^~~~~~~~~~~~~~~~
|       |                                     ASN1_STRING_set0
| security/impl/AbstractPKIXTrustEngine.cpp:313:33: warning: comparison of 
integer expressions of different signedness: 
'std::__cxx11::basic_string<char>::size_type' {aka 'long unsigned int'} and 
'int' [-Wsign-compare]
|   313 |                 if (n->length() == j && !strncasecmp(peer_CN, 
n->c_str(), j)) {
|       |                     ~~~~~~~~~~~~^~~~
| make[4]: *** [Makefile:1944: 
security/impl/libxmltooling_la-AbstractPKIXTrustEngine.lo] Error 1

Full buildlog
        
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/xmltooling_3.3.0-3_amd64-2026-04-19T10:27:41Z
 
Sebastian

** Affects: xmltooling (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: xmltooling (Debian)
     Importance: Undecided
         Status: New


** Tags: ftbfs openssl-4.0

** Bug watch added: Debian Bug tracker #1138487
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138487

** Changed in: xmltooling (Debian)
 Remote watch: None => Debian Bug tracker #1138487

** Tags added: ftbfs openssl-4.0

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2155038

Title:
  xmltooling: FTBFS with openssl 4.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xmltooling/+bug/2155038/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to