Your message dated Mon, 24 Aug 2026 23:14:14 +0200
with message-id <[email protected]>
and subject line Re: Bug#1138316: closed by Debian FTP Masters
<[email protected]> (reply to Mattias Ellert
<[email protected]>) (Bug#1138316: fixed in myproxy 6.2.20-2)
has caused the Debian Bug report #1138316,
regarding myproxy: FTBFS with openssl 4.0
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1138316: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1138316
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: myproxy
Version: 6.2.20-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: [email protected]
Usertags: openssl-4.0
OpenSSL 4.0 is in experimental. This package fails to build against it:
| libtool: compile: gcc -DPACKAGE_NAME=\"myproxy\"
-DPACKAGE_TARNAME=\"myproxy\" -DPACKAGE_VERSION=\"6.2.20\"
"-DPACKAGE_STRING=\"myproxy 6.2.20\"" -DPACKAGE_BUGREPORT=\"\"
-DPACKAGE_URL=\"\" -DPACKAGE=\"myproxy\" -DVERSION=\"6.2.20\" -DHAVE_STDIO_H=1
-DHAVE_STDLIB_H=1 -DHAVE_STRING_H=1 -DHAVE_INTTYPES_H=1 -DHAVE_STDINT_H=1
-DHAVE_STRINGS_H=1 -DHAVE_SYS_STAT_H=1 -DHAVE_SYS_TYPES_H=1 -DHAVE_UNISTD_H=1
-DSTDC_HEADERS=1 -DHAVE_DLFCN_H=1 -DLT_OBJDIR=\".libs/\" -DHAVE_REGEX_H=1
-DHAVE_REGCOMP=1 -DHAVE_SETENV=1 -DHAVE_UNSETENV=1 -DHAVE_GETOPT_H=1
-DHAVE_GETOPT_LONG=1 -DHAVE_SYS_SOCKET_H=1 -DHAVE_SOCKLEN_T=1
-DHAVE_DECL_FACILITYNAMES=1 -DHAVE_GLOBUS_GSI_PROXY_HANDLE_SET_EXTENSIONS=1
-DHAVE_OCSP=1 -DHAVE_LIBSASL2=1 -DBUILD_GSSAPI_PLUGIN=1 -DHAVE_GSSAPI_H=1
-DHAVE_SECURITY_PAM_APPL_H=1 -DHAVE_LIBDL=1 -DHAVE_LIBPAM=1
-DHAVE_PTHREAD_SIGMASK=1 -DHAVE_PIDFILE=1 -DHAVE_LDAP_H=1 -DHAVE_LIBLBER=1
-DHAVE_LIBLDAP=1 -DHAVE_VOMS=1 -I. -I/usr/include/globus -I/usr/include
-I/usr/include/voms -I/usr/include/glite/security/voms -I/usr/include
-I/usr/include/sasl -Wdate-time -D_FORTIFY_SOURCE=2 -g -O2
-Werror=implicit-function-declaration
-ffile-prefix-map=/build/reproducible-path/myproxy-6.2.20=.
-fstack-protector-strong -fstack-clash-protection -Wformat
-Werror=format-security -fcf-protection -c certauth_extensions.c -fPIC -DPIC
-o .libs/certauth_extensions.o
| certauth_extensions.c: In function 'assign_serial_number':
| certauth_extensions.c:364:30: error: invalid use of incomplete typedef
'ASN1_INTEGER' {aka 'struct asn1_string_st'}
| 364 | serial = BN_bin2bn( current->data, current->length, serial );
| | ^~
| certauth_extensions.c:364:45: error: invalid use of incomplete typedef
'ASN1_INTEGER' {aka 'struct asn1_string_st'}
| 364 | serial = BN_bin2bn( current->data, current->length, serial );
| | ^~
| certauth_extensions.c: In function 'generate_certificate':
| certauth_extensions.c:525:11: warning: assignment discards 'const' qualifier
from pointer target type [-Wdiscarded-qualifiers]
| 525 | subject = X509_get_subject_name(cert);
| | ^
| certauth_extensions.c:543:10: warning: assignment discards 'const' qualifier
from pointer target type [-Wdiscarded-qualifiers]
| 543 | ne = X509_NAME_get_entry(subject, i);
| | ^
| certauth_extensions.c:544:11: warning: assignment discards 'const' qualifier
from pointer target type [-Wdiscarded-qualifiers]
| 544 | str = X509_NAME_ENTRY_get_data(ne);
| | ^
| certauth_extensions.c:545:11: warning: assignment discards 'const' qualifier
from pointer target type [-Wdiscarded-qualifiers]
| 545 | obj = X509_NAME_ENTRY_get_object(ne);
| | ^
| certauth_extensions.c:548:15: error: invalid use of incomplete typedef
'ASN1_STRING' {aka 'struct asn1_string_st'}
| 548 | (str->type == V_ASN1_PRINTABLESTRING)) {
| | ^~
| certauth_extensions.c:550:14: error: invalid use of incomplete typedef
'ASN1_STRING' {aka 'struct asn1_string_st'}
| 550 | str->type = V_ASN1_IA5STRING;
| | ^~
| certauth_extensions.c:553:15: error: invalid use of incomplete typedef
'ASN1_STRING' {aka 'struct asn1_string_st'}
| 553 | (str->type == V_ASN1_PRINTABLESTRING)) {
| | ^~
| certauth_extensions.c:555:14: error: invalid use of incomplete typedef
'ASN1_STRING' {aka 'struct asn1_string_st'}
| 555 | str->type = V_ASN1_IA5STRING;
| | ^~
| certauth_extensions.c: In function 'handle_certificate':
| certauth_extensions.c:1133:3: warning: 'RSA_get0_key' is deprecated: Since
OpenSSL 3.0 [-Wdeprecated-declarations]
| 1133 | RSA_get0_key(EVP_PKEY_get0_RSA(pkey), NULL, &e, NULL);
| | ^~~~~~~~~~~~
| In file included from /usr/include/openssl/x509.h:38,
| from /usr/include/globus/globus_gsi_system_config.h:28,
| from myproxy_common.h:57,
| from certauth_extensions.c:6:
| /usr/include/openssl/rsa.h:228:28: note: declared here
| 228 | OSSL_DEPRECATEDIN_3_0 void RSA_get0_key(const RSA *r,
| | ^~~~~~~~~~~~
| certauth_extensions.c:1133:3: warning: 'EVP_PKEY_get0_RSA' is deprecated:
Since OpenSSL 3.0 [-Wdeprecated-declarations]
| 1133 | RSA_get0_key(EVP_PKEY_get0_RSA(pkey), NULL, &e, NULL);
| | ^~~~~~~~~~~~
| In file included from /usr/include/openssl/x509.h:31:
| /usr/include/openssl/evp.h:1303:22: note: declared here
| 1303 | const struct rsa_st *EVP_PKEY_get0_RSA(const EVP_PKEY *pkey);
| | ^~~~~~~~~~~~~~~~~
| certauth_extensions.c:1142:3: warning: 'RSA_size' is deprecated: Since
OpenSSL 3.0 [-Wdeprecated-declarations]
| 1142 | keysize = RSA_size(EVP_PKEY_get0_RSA(pkey))*8;
| | ^~~~~~~
| /usr/include/openssl/rsa.h:215:27: note: declared here
| 215 | OSSL_DEPRECATEDIN_3_0 int RSA_size(const RSA *rsa);
| | ^~~~~~~~
| certauth_extensions.c:1142:3: warning: 'EVP_PKEY_get0_RSA' is deprecated:
Since OpenSSL 3.0 [-Wdeprecated-declarations]
| 1142 | keysize = RSA_size(EVP_PKEY_get0_RSA(pkey))*8;
| | ^~~~~~~
| /usr/include/openssl/evp.h:1303:22: note: declared here
| 1303 | const struct rsa_st *EVP_PKEY_get0_RSA(const EVP_PKEY *pkey);
| | ^~~~~~~~~~~~~~~~~
| certauth_extensions.c:1161:3: warning: 'ASN1_digest' is deprecated: Since
OpenSSL 3.0 [-Wdeprecated-declarations]
| 1161 | ASN1_digest((i2d_of_void*)i2d_PUBKEY, EVP_sha1(), (char*)pkey, md,
&md_len);
| | ^~~~~~~~~~~
| /usr/include/openssl/x509.h:828:5: note: declared here
| 828 | int ASN1_digest(i2d_of_void *i2d, const EVP_MD *type, char *data,
| | ^~~~~~~~~~~
| make[2]: *** [Makefile:1237: certauth_extensions.lo] Error 1
|
Full buildlog
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/myproxy_6.2.20-1_amd64-2026-04-19T07:38:34Z
Sebastian
--- End Message ---
--- Begin Message ---
Source: myproxy
Source-Version: 6.2.20-2
Done: Mattias Ellert <[email protected]>
On 2026-08-24 14:21:10 [+0200], Mattias Ellert wrote:
> I can reproduce your result if I build myproxy against openssl 4 and
> using the package's other dependencies from testing. However, many of
> the dependencies in turn depend on openssl themselves, so this results
> binaries that use both openssl 4 (from the compilation) and openssl 3
> (from dependencies) at the same time. This causes breakage. If I first
> rebuild the depenencies with openssl 4 and then build mypraxy using
> these packages the package builds fine, including the tests.
>
> So there is no bug here, just a package build order issue.
In that case I'm sorry and beg for forgiveness :)
I'm closing that bug on your behalf.
> Mattias Ellert
Sebastian
--- End Message ---
