Public bug reported:

Imported from Debian bug http://bugs.debian.org/1138448:

Package: pkcs11-helper
Version: 1.31.0-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: [email protected]
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I../include -I../include 
-Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration 
-ffile-prefix-map=/build/reproducible-path/pkcs11-helper-1.31.0=. 
-fstack-protector-strong -fstack-clash-protection -Wformat 
-Werror=format-security -fcf-protection -c pkcs11h-crypto.c -o pkcs11h-crypto.o 
>/dev/null 2>&1
| /bin/bash ../libtool  --tag=CC   --mode=compile gcc -DHAVE_CONFIG_H -I. -I..  
-I../include -I../include -Wdate-time -D_FORTIFY_SOURCE=2  -g -O2 
-Werror=implicit-function-declaration 
-ffile-prefix-map=/build/reproducible-path/pkcs11-helper-1.31.0=. 
-fstack-protector-strong -fstack-clash-protection -Wformat 
-Werror=format-security -fcf-protection  -c -o _pkcs11h-crypto-openssl.lo 
_pkcs11h-crypto-openssl.c
| libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I../include -I../include 
-Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration 
-ffile-prefix-map=/build/reproducible-path/pkcs11-helper-1.31.0=. 
-fstack-protector-strong -fstack-clash-protection -Wformat 
-Werror=format-security -fcf-protection -c _pkcs11h-crypto-openssl.c  -fPIC 
-DPIC -o .libs/_pkcs11h-crypto-openssl.o
| _pkcs11h-crypto-openssl.c: In function 
'__pkcs11h_crypto_openssl_certificate_get_expiration':
| _pkcs11h-crypto-openssl.c:150:17: warning: 'X509_cmp_current_time' is 
deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|   150 |                 X509_cmp_current_time (notBefore) <= 0 &&
|       |                 ^~~~~~~~~~~~~~~~~~~~~
| In file included from _pkcs11h-crypto-openssl.c:56:
| /usr/include/openssl/x509.h:694:27: note: declared here
|   694 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_current_time(const ASN1_TIME *s);
|       |                           ^~~~~~~~~~~~~~~~~~~~~
| _pkcs11h-crypto-openssl.c:151:17: warning: 'X509_cmp_current_time' is 
deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
|   151 |                 X509_cmp_current_time (notAfter) >= 0 &&
|       |                 ^~~~~~~~~~~~~~~~~~~~~
| /usr/include/openssl/x509.h:694:27: note: declared here
|   694 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_current_time(const ASN1_TIME *s);
|       |                           ^~~~~~~~~~~~~~~~~~~~~
| _pkcs11h-crypto-openssl.c:152:25: error: invalid use of incomplete typedef 
'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   152 |                 notAfter->length >= 12
|       |                         ^~
| _pkcs11h-crypto-openssl.c:157:40: error: invalid use of incomplete typedef 
'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   157 |                 tm1.tm_year = (notAfter->data[ 0] - '0') * 10 + 
(notAfter->data[ 1] - '0') + 100;
|       |                                        ^~
| _pkcs11h-crypto-openssl.c:157:74: error: invalid use of incomplete typedef 
'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   157 |                 tm1.tm_year = (notAfter->data[ 0] - '0') * 10 + 
(notAfter->data[ 1] - '0') + 100;
|       |                                                                       
   ^~
| _pkcs11h-crypto-openssl.c:158:40: error: invalid use of incomplete typedef 
'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   158 |                 tm1.tm_mon  = (notAfter->data[ 2] - '0') * 10 + 
(notAfter->data[ 3] - '0') - 1;
|       |                                        ^~
| _pkcs11h-crypto-openssl.c:158:74: error: invalid use of incomplete typedef 
'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   158 |                 tm1.tm_mon  = (notAfter->data[ 2] - '0') * 10 + 
(notAfter->data[ 3] - '0') - 1;
|       |                                                                       
   ^~
| _pkcs11h-crypto-openssl.c:159:40: error: invalid use of incomplete typedef 
'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   159 |                 tm1.tm_mday = (notAfter->data[ 4] - '0') * 10 + 
(notAfter->data[ 5] - '0');
|       |                                        ^~
| _pkcs11h-crypto-openssl.c:159:74: error: invalid use of incomplete typedef 
'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   159 |                 tm1.tm_mday = (notAfter->data[ 4] - '0') * 10 + 
(notAfter->data[ 5] - '0');
|       |                                                                       
   ^~
| _pkcs11h-crypto-openssl.c:160:40: error: invalid use of incomplete typedef 
'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   160 |                 tm1.tm_hour = (notAfter->data[ 6] - '0') * 10 + 
(notAfter->data[ 7] - '0');
|       |                                        ^~
| _pkcs11h-crypto-openssl.c:160:74: error: invalid use of incomplete typedef 
'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   160 |                 tm1.tm_hour = (notAfter->data[ 6] - '0') * 10 + 
(notAfter->data[ 7] - '0');
|       |                                                                       
   ^~
| _pkcs11h-crypto-openssl.c:161:40: error: invalid use of incomplete typedef 
'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   161 |                 tm1.tm_min  = (notAfter->data[ 8] - '0') * 10 + 
(notAfter->data[ 9] - '0');
|       |                                        ^~
| _pkcs11h-crypto-openssl.c:161:74: error: invalid use of incomplete typedef 
'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   161 |                 tm1.tm_min  = (notAfter->data[ 8] - '0') * 10 + 
(notAfter->data[ 9] - '0');
|       |                                                                       
   ^~
| _pkcs11h-crypto-openssl.c:162:40: error: invalid use of incomplete typedef 
'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   162 |                 tm1.tm_sec  = (notAfter->data[10] - '0') * 10 + 
(notAfter->data[11] - '0');
|       |                                        ^~
| _pkcs11h-crypto-openssl.c:162:74: error: invalid use of incomplete typedef 
'ASN1_TIME' {aka 'const struct asn1_string_st'}
|   162 |                 tm1.tm_sec  = (notAfter->data[10] - '0') * 10 + 
(notAfter->data[11] - '0');
|       |                                                                       
   ^~
| make[4]: *** [Makefile:620: _pkcs11h-crypto-openssl.lo] Error 1
| make[4]: Leaving directory '/build/reproducible-path/pkcs11-helper-1.31.0/lib'


Full buildlog
        
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/pkcs11-helper_1.31.0-1_amd64-2026-04-19T14:15:29Z

Sebastian

** Affects: pkcs11-helper (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: pkcs11-helper (Debian)
     Importance: Undecided
         Status: New

** Bug watch added: Debian Bug tracker #1138448
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138448

** Changed in: pkcs11-helper (Debian)
 Remote watch: None => Debian Bug tracker #1138448

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2154996

Title:
  pkcs11-helper: FTBFS with openssl 4.0

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pkcs11-helper/+bug/2154996/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to