Your message dated Tue, 14 Jul 2026 10:34:37 +0000
with message-id <[email protected]>
and subject line Bug#1138333: fixed in radsecproxy 1.11.3-1
has caused the Debian Bug report #1138333,
regarding radsecproxy: FTBFS with openssl 4.0
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1138333: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138333
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: radsecproxy
Version: 1.11.2-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: [email protected]
Usertags: openssl-4.0
OpenSSL 4.0 is in experimental. This package fails to build against it:
| gcc -DPACKAGE_NAME=\"radsecproxy\" -DPACKAGE_TARNAME=\"radsecproxy\"
-DPACKAGE_VERSION=\"1.11.2\" -DPACKAGE_STRING=\"radsecproxy\ 1.11.2\"
-DPACKAGE_BUGREPORT=\"https://radsecproxy.github.io\"; -DPACKAGE_URL=\"\"
-DPACKAGE=\"radsecproxy\" -DVERSION=\"1.11.2\" -DHAVE_MALLOPT=1
-DHAVE_LIBNETTLE=1 -DHAVE_LIBRESOLV=1 -I. -DSYSCONFDIR=\"/etc\" -Wdate-time
-D_FORTIFY_SOURCE=2 -g -Wall -Werror -fno-strict-aliasing -I/usr/include -Wall
-pedantic -Wno-long-long -pthread -DRADPROT_UDP -DRADPROT_TCP -DRADPROT_TLS
-DRADPROT_DTLS -g -O2 -Werror=implicit-function-declaration
-ffile-prefix-map=/build/reproducible-path/radsecproxy-1.11.2=.
-fstack-protector-strong -fstack-clash-protection -Wformat
-Werror=format-security -fcf-protection -c -o tlscommon.o tlscommon.c
| tlscommon.c: In function ‘verify_cb’:
| tlscommon.c:168:35: error: passing argument 1 of ‘print_x509_name’
discards ‘const’ qualifier from pointer target type
[-Werror=discarded-qualifiers]
| 168 | buf = print_x509_name(X509_get_subject_name(err_cert));
| | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| tlscommon.c:119:41: note: expected ‘X509_NAME *’ {aka ‘struct
X509_name_st *’} but argument is of type ‘const X509_NAME *’ {aka
‘const struct X509_name_st *’}
| 119 | static char *print_x509_name(X509_NAME *name) {
| | ~~~~~~~~~~~^~~~
| tlscommon.c:176:39: error: passing argument 1 of ‘print_x509_name’
discards ‘const’ qualifier from pointer target type
[-Werror=discarded-qualifiers]
| 176 | buf = print_x509_name(X509_get_issuer_name(err_cert));
| | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| tlscommon.c:119:41: note: expected ‘X509_NAME *’ {aka ‘struct
X509_name_st *’} but argument is of type ‘const X509_NAME *’ {aka
‘const struct X509_name_st *’}
| 119 | static char *print_x509_name(X509_NAME *name) {
| | ~~~~~~~~~~~^~~~
| tlscommon.c: In function ‘certattr_matchcn’:
| tlscommon.c:911:8: error: assignment discards ‘const’ qualifier from
pointer target type [-Werror=discarded-qualifiers]
| 911 | nm = X509_get_subject_name(cert);
| | ^
| tlscommon.c:918:11: error: assignment discards ‘const’ qualifier from
pointer target type [-Werror=discarded-qualifiers]
| 918 | e = X509_NAME_get_entry(nm, loc);
| | ^
| tlscommon.c:919:11: error: assignment discards ‘const’ qualifier from
pointer target type [-Werror=discarded-qualifiers]
| 919 | t = X509_NAME_ENTRY_get_data(e);
| | ^
| tlscommon.c: In function ‘getcertsubject’:
| tlscommon.c:1077:28: error: passing argument 1 of ‘print_x509_name’
discards ‘const’ qualifier from pointer target type
[-Werror=discarded-qualifiers]
| 1077 | return print_x509_name(X509_get_subject_name(cert));
| | ^~~~~~~~~~~~~~~~~~~~~~~~~~~
| tlscommon.c:119:41: note: expected ‘X509_NAME *’ {aka ‘struct
X509_name_st *’} but argument is of type ‘const X509_NAME *’ {aka
‘const struct X509_name_st *’}
| 119 | static char *print_x509_name(X509_NAME *name) {
| | ~~~~~~~~~~~^~~~
| tlscommon.c: In function ‘reverifycert’:
| tlscommon.c:1891:31: error: passing argument 1 of ‘print_x509_name’
discards ‘const’ qualifier from pointer target type
[-Werror=discarded-qualifiers]
| 1891 | buf =
print_x509_name(X509_get_subject_name(X509_STORE_CTX_get_current_cert(ctx)));
| |
^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| tlscommon.c:119:41: note: expected ‘X509_NAME *’ {aka ‘struct
X509_name_st *’} but argument is of type ‘const X509_NAME *’ {aka
‘const struct X509_name_st *’}
| 119 | static char *print_x509_name(X509_NAME *name) {
| | ~~~~~~~~~~~^~~~
| cc1: all warnings being treated as errors
Full buildlog
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/radsecproxy_1.11.2-1_amd64-2026-04-19T07:43:03Z
Sebastian
--- End Message ---
--- Begin Message ---
Source: radsecproxy
Source-Version: 1.11.3-1
Done: Sven Hartge <[email protected]>
We believe that the bug you reported is fixed in the latest version of
radsecproxy, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Sven Hartge <[email protected]> (supplier of updated radsecproxy package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 14 Jul 2026 09:02:42 +0200
Source: radsecproxy
Architecture: source
Version: 1.11.3-1
Distribution: unstable
Urgency: medium
Maintainer: Sven Hartge <[email protected]>
Changed-By: Sven Hartge <[email protected]>
Closes: 1138333
Changes:
radsecproxy (1.11.3-1) unstable; urgency=medium
.
* New upstream version 1.11.3, fixes FTBFS with OpenSSL 4.0
(Closes: #1138333)
* Add the possibility to easily start radsecproxy using
instanced systemd units, keeping the default startup
as default.
* Salsa-CI: Adapt to licenserecon now being in the default CI jobs.
* Salsa-CI: Enable wrap-and-sort test
* Salsa-CI: Disable build-package-twice test and
disable source-cleanup test. Both give false positive
failures at the moment
* Update Policy compliance to 4.7.4
* Adapt patch to new upstream
* Wrap-and-sort debian files
* Update for dh-compat level 14 and remove Rules-Requires-Root
* Explicitly use debhelper single-binary mode
* Use sysusers.d config files to create radsecproxy user, remove
dependency on addusers.
Checksums-Sha1:
7622c7583977c3c2b04e996ef27f780d150d74ce 1592 radsecproxy_1.11.3-1.dsc
c211ec157449616b42b53fb9d942f039310d6df6 280785 radsecproxy_1.11.3.orig.tar.gz
b127dd958dfcc5a903b2f7b0554f1febbfad54e6 833 radsecproxy_1.11.3.orig.tar.gz.asc
68b21295e495383abd048a656259e09133d9539a 15916
radsecproxy_1.11.3-1.debian.tar.xz
4f6fbe3bedd3f48f8827a3fbaac570aef9b67c9a 5529
radsecproxy_1.11.3-1_amd64.buildinfo
Checksums-Sha256:
f93c34354776ddbe8688d369e2ec9f044ab3406244437a131aa24c0cc4fc17aa 1592
radsecproxy_1.11.3-1.dsc
386b8f56950098e33f4c0aa9f2b65dde3db7b46ee4362466e64643463f554ada 280785
radsecproxy_1.11.3.orig.tar.gz
d0b41d950cbdc5b0f31dc908066dd05eb8f4b5a1d12629cfa7544cc0b7186032 833
radsecproxy_1.11.3.orig.tar.gz.asc
2b0d48cbf7fb8d6889823d46023135d50d993d4c81d3b08d880fa009ffb74183 15916
radsecproxy_1.11.3-1.debian.tar.xz
ec35ff6527bb36a798e55d512be96a50d5051dd9a80f359a726fd53b8ca0ff5a 5529
radsecproxy_1.11.3-1_amd64.buildinfo
Files:
b9387e70e67b57e4d965e27953d539c7 1592 net optional radsecproxy_1.11.3-1.dsc
d3de297d1574be398917733b289a784c 280785 net optional
radsecproxy_1.11.3.orig.tar.gz
756843592b90beea7a1033e2ddc3d1a3 833 net optional
radsecproxy_1.11.3.orig.tar.gz.asc
60c7c47fdb1f490e33989423e8de5287 15916 net optional
radsecproxy_1.11.3-1.debian.tar.xz
76e0c14afba52feec7a806c53002e92a 5529 net optional
radsecproxy_1.11.3-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQQmmGg4gLaoSj0ERgL7tPDoCoAiLwUCalYMNQAKCRD7tPDoCoAi
LyvRAP0UFc8+DB8TUbOEawPacFsnQPuDj9UB0GLmpbIv1zckJAD/ZHqPPFBBBc5i
dvRMigb6MhnHZ+9iBFO4PSuRyGDe6Qk=
=ObF9
-----END PGP SIGNATURE-----
pgpP0lpzXAiCv.pgp
Description: PGP signature
--- End Message ---
