Public bug reported:

Imported from Debian bug http://bugs.debian.org/1138369:

Package: openvpn3-client
Version: 27+dfsg-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: [email protected]
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| c++ -Isrc/client/openvpn3-service-client.p -Isrc/client -I../src/client 
-I../openvpn3-core -I/usr/include -Isrc -I../src -I. -I.. 
-I../subprojects/fmt-11.2.0/include -Isrc/dco -I/usr/include/jsoncpp 
-I/usr/include/gio-unix-2.0 -I/usr/include/libmount -I/usr/include/blkid 
-I/usr/include/glib-2.0 -I/usr/lib/x86_64-linux-gnu/glib-2.0/include 
-I/usr/include/sysprof-6 -I/usr/include/libnl3 -I/usr/include/uuid 
-fdiagnostics-color=always -D_GLIBCXX_ASSERTIONS=1 -D_FILE_OFFSET_BITS=64 -Wall 
-Winvalid-pch -Werror -std=c++17 -Wno-non-virtual-dtor 
-DOVPN_TINYXML2_HAS_ERROR_NAME -DOVPN_TINYXML2_HAS_ERROR_STR -g -O2 
-ffile-prefix-map=/build/reproducible-path/openvpn3-client-27+dfsg=. 
-fstack-protector-strong -fstack-clash-protection -Wformat 
-Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 
-pthread -DFMT_HEADER_ONLY -MD -MQ 
src/client/openvpn3-service-client.p/openvpn3-service-client.cpp.o -MF 
src/client/openvpn3-service-client.p/openvpn3-service-client.cpp.o.d -o 
src/client/openvpn3-service-client.p/openvpn3-service-client.cpp.o -c 
../src/client/openvpn3-service-client.cpp
| In file included from ../openvpn3-core/openvpn/openssl/ssl/sslctx.hpp:77,
|                  from ../openvpn3-core/openvpn/init/engineinit.hpp:23,
|                  from ../openvpn3-core/openvpn/init/initprocess.hpp:24,
|                  from ../openvpn3-core/client/ovpncli.cpp:78,
|                  from ../src/client/core-client.hpp:43,
|                  from ../src/client/openvpn3-service-client.cpp:60:
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp: In function 
‘std::string openvpn::OpenSSLPKI::x509_get_field(X509*, int)’:
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp:142:49: error: invalid 
conversion from ‘const X509_NAME*’ {aka ‘const X509_name_st*’} to 
‘X509_NAME*’ {aka ‘X509_name_st*’} [-fpermissive]
|   142 |     X509_NAME *x509_name = X509_get_subject_name(cert);
|       |                            ~~~~~~~~~~~~~~~~~~~~~^~~~~~
|       |                                                 |
|       |                                                 const X509_NAME* {aka 
const X509_name_st*}
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp:146:51: error: invalid 
conversion from ‘const X509_NAME_ENTRY*’ {aka ‘const 
X509_name_entry_st*’} to ‘X509_NAME_ENTRY*’ {aka 
‘X509_name_entry_st*’} [-fpermissive]
|   146 |         X509_NAME_ENTRY *ent = X509_NAME_get_entry(x509_name, i);
|       |                                ~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~
|       |                                                   |
|       |                                                   const 
X509_NAME_ENTRY* {aka const X509_name_entry_st*}
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp:149:56: error: invalid 
conversion from ‘const ASN1_STRING*’ {aka ‘const asn1_string_st*’} to 
‘ASN1_STRING*’ {aka ‘asn1_string_st*’} [-fpermissive]
|   149 |             ASN1_STRING *val = X509_NAME_ENTRY_get_data(ent);
|       |                                ~~~~~~~~~~~~~~~~~~~~~~~~^~~~~
|       |                                                        |
|       |                                                        const 
ASN1_STRING* {aka const asn1_string_st*}
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp:167:47: error: invalid 
conversion from ‘const X509_EXTENSION*’ {aka ‘const 
X509_extension_st*’} to ‘X509_EXTENSION*’ {aka ‘X509_extension_st*’} 
[-fpermissive]
|   167 |             X509_EXTENSION *ext = X509_get_ext(cert, i);
|       |                                   ~~~~~~~~~~~~^~~~~~~~~
|       |                                               |
|       |                                               const X509_EXTENSION* 
{aka const X509_extension_st*}
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp: In function 
‘std::string openvpn::OpenSSLPKI::x509_get_serial_hex(X509*)’:
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp:228:33: error: invalid 
use of incomplete type ‘const ASN1_INTEGER’ {aka ‘const struct 
asn1_string_st’}
|   228 |     return render_hex_sep(asn1_i->data, asn1_i->length, ':', false);
|       |                                 ^~
| In file included from /usr/include/openssl/crypto.h:38,
|                  from ../openvpn3-core/openvpn/crypto/definitions.hpp:16,
|                  from ../openvpn3-core/openvpn/crypto/cryptoalgs.hpp:26,
|                  from ../openvpn3-core/openvpn/crypto/cryptodc.hpp:27,
|                  from 
../openvpn3-core/openvpn/transport/client/transbase.hpp:27,
|                  from ../openvpn3-core/openvpn/tun/client/tunbase.hpp:24,
|                  from 
../openvpn3-core/openvpn/tun/linux/client/tunnetlink.hpp:24,
|                  from ../src/client/core-client.hpp:41:
| /usr/include/openssl/types.h:57:16: note: forward declaration of 
‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’}
|    57 | typedef struct asn1_string_st ASN1_INTEGER;
|       |                ^~~~~~~~~~~~~~
| ../openvpn3-core/openvpn/openssl/pki/x509certinfo.hpp:228:47: error: invalid 
use of incomplete type ‘const ASN1_INTEGER’ {aka ‘const struct 
asn1_string_st’}
|   228 |     return render_hex_sep(asn1_i->data, asn1_i->length, ':', false);
|       |                                               ^~
| /usr/include/openssl/types.h:57:16: note: forward declaration of 
‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’}
|    57 | typedef struct asn1_string_st ASN1_INTEGER;
|       |                ^~~~~~~~~~~~~~
| ../openvpn3-core/openvpn/openssl/ssl/sslctx.hpp: In static member function 
‘static void 
openvpn::OpenSSLContext::load_serial_number_into_authcert(openvpn::AuthCert&, 
X509*)’:
| ../openvpn3-core/openvpn/openssl/ssl/sslctx.hpp:1807:15: error: invalid use 
of incomplete type ‘const ASN1_INTEGER’ {aka ‘const struct 
asn1_string_st’}
|  1807 |         if (ai->type == V_ASN1_NEG_INTEGER) // negative serial number 
is considered to be undefined
|       |               ^~
| /usr/include/openssl/types.h:57:16: note: forward declaration of 
‘ASN1_INTEGER’ {aka ‘struct asn1_string_st’}
|    57 | typedef struct asn1_string_st ASN1_INTEGER;
|       |                ^~~~~~~~~~~~~~
| ninja: build stopped: subcommand failed.
| 

Full buildlog
        
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/openvpn3-client_27+dfsg-1_amd64-2026-04-19T11:28:29Z

Sebastian

** Affects: openvpn3-client (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: openvpn3-client (Debian)
     Importance: Undecided
         Status: New


** Tags: ftbfs openssl-4.0

** Bug watch added: Debian Bug tracker #1138369
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138369

** Changed in: openvpn3-client (Debian)
 Remote watch: None => Debian Bug tracker #1138369

** Tags added: ftbfs openssl-4.0

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2154917

Title:
  openvpn3-client: FTBFS with openssl 4.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openvpn3-client/+bug/2154917/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to