Public bug reported:

Imported from Debian bug http://bugs.debian.org/1138395:

Package: duo-unix
Version: 1.11.3-1.2
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: [email protected]
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I../compat -Wdate-time 
-D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration 
-ffile-prefix-map=/build/reproducible-path/duo-unix-1.11.3=. 
-fstack-protector-strong -fstack-clash-protection -Wformat 
-Werror=format-security -fcf-protection -Wall -D_FORTIFY_SOURCE=2 
-fstack-protector-strong -c https.c  -fPIC -DPIC -o .libs/https.o
| https.c: In function '_SSL_check_server_cert':
| https.c:123:25: error: implicit declaration of function 'ASN1_STRING_data'; 
did you mean 'ASN1_STRING_set0'? [-Wimplicit-function-declaration]
|   123 |             p = (char *)ASN1_STRING_data(altname->d.ia5);
|       |                         ^~~~~~~~~~~~~~~~
|       |                         ASN1_STRING_set0
| https.c:123:17: warning: cast to pointer from integer of different size 
[-Wint-to-pointer-cast]
|   123 |             p = (char *)ASN1_STRING_data(altname->d.ia5);
|       |                 ^
| https.c:133:18: warning: assignment discards 'const' qualifier from pointer 
target type [-Wdiscarded-qualifiers]
|   133 |         (subject = X509_get_subject_name(cert)) != NULL) {
|       |                  ^
| https.c:139:22: warning: assignment discards 'const' qualifier from pointer 
target type [-Wdiscarded-qualifiers]
|   139 |             if ((tmp = X509_NAME_ENTRY_get_data(
|       |                      ^
| https.c:142:21: warning: cast to pointer from integer of different size 
[-Wint-to-pointer-cast]
|   142 |                 p = (char *)ASN1_STRING_data(tmp);
|       |                     ^
| https.c: In function 'https_send':
| https.c:682:5: warning: 'HMAC_CTX_new' is deprecated: Since OpenSSL 3.0 
[-Wdeprecated-declarations]
|   682 |     if ((hmac = HMAC_CTX_new()) == NULL) {
|       |     ^~
| In file included from https.c:26:
| /usr/include/openssl/hmac.h:33:33: note: declared here
|    33 | OSSL_DEPRECATEDIN_3_0 HMAC_CTX *HMAC_CTX_new(void);
|       |                                 ^~~~~~~~~~~~
| https.c:688:5: warning: 'HMAC_Init' is deprecated: Since OpenSSL 1.1.0 
[-Wdeprecated-declarations]
|   688 |     HMAC_Init(hmac, skey, strlen(skey), EVP_sha1());
|       |     ^~~~~~~~~
| /usr/include/openssl/hmac.h:38:36: note: declared here
|    38 | OSSL_DEPRECATEDIN_1_1_0 __owur int HMAC_Init(HMAC_CTX *ctx,
|       |                                    ^~~~~~~~~
| https.c:689:5: warning: 'HMAC_Update' is deprecated: Since OpenSSL 3.0 
[-Wdeprecated-declarations]
|   689 |     HMAC_Update(hmac, (unsigned char *)p, strlen(p));
|       |     ^~~~~~~~~~~
| /usr/include/openssl/hmac.h:46:27: note: declared here
|    46 | OSSL_DEPRECATEDIN_3_0 int HMAC_Update(HMAC_CTX *ctx, const unsigned 
char *data,
|       |                           ^~~~~~~~~~~
| https.c:690:5: warning: 'HMAC_Final' is deprecated: Since OpenSSL 3.0 
[-Wdeprecated-declarations]
|   690 |     HMAC_Final(hmac, MD, NULL);
|       |     ^~~~~~~~~~
| /usr/include/openssl/hmac.h:48:27: note: declared here
|    48 | OSSL_DEPRECATEDIN_3_0 int HMAC_Final(HMAC_CTX *ctx, unsigned char *md,
|       |                           ^~~~~~~~~~
| https.c:691:5: warning: 'HMAC_CTX_free' is deprecated: Since OpenSSL 3.0 
[-Wdeprecated-declarations]
|   691 |     HMAC_CTX_free(hmac);
|       |     ^~~~~~~~~~~~~
| /usr/include/openssl/hmac.h:35:28: note: declared here
|    35 | OSSL_DEPRECATEDIN_3_0 void HMAC_CTX_free(HMAC_CTX *ctx);
|       |                            ^~~~~~~~~~~~~
| make[3]: *** [Makefile:517: https.lo] Error 1

Full buildlog
        
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/duo-unix_1.11.3-1.2_amd64-2026-04-19T09:20:55Z
 
Sebastian

** Affects: duo-unix (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: duo-unix (Debian)
     Importance: Undecided
         Status: New


** Tags: ftbfs openssl-4.0

** Bug watch added: Debian Bug tracker #1138395
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138395

** Changed in: duo-unix (Debian)
 Remote watch: None => Debian Bug tracker #1138395

** Tags added: ftbfs openssl-4.0

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2154942

Title:
  duo-unix: FTBFS with openssl 4.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/duo-unix/+bug/2154942/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to