Package: xmltooling
Version: 3.3.0-3
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: [email protected]
Usertags: openssl-4.0
OpenSSL 4.0 is in experimental. This package fails to build against it:
| libtool: compile: g++ -DHAVE_CONFIG_H -I.. -I.. -I. -Wdate-time
-D_FORTIFY_SOURCE=2 -pthread -I/usr/include/x86_64-linux-gnu -isystem
/usr/include/mit-krb5 -isystem /usr/include/mit-krb5 -Wall -W -pthread -pthread
-I/usr/include -g -O2
-ffile-prefix-map=/build/reproducible-path/xmltooling-3.3.0=.
-fstack-protector-strong -fstack-clash-protection -Wformat
-Werror=format-security -fcf-protection -Wno-deprecated-declarations -c
security/impl/AbstractPKIXTrustEngine.cpp -fPIC -DPIC -o
security/impl/.libs/libxmltooling_la-AbstractPKIXTrustEngine.o
| In file included from ./security/OpenSSLPathValidator.h:31,
| from security/impl/AbstractPKIXTrustEngine.cpp:37:
| ../xmltooling/security/PathValidator.h:71:22: warning: 'virtual bool
xmltooling::PathValidator::validate(XSECCryptoX509*, const
std::vector<XSECCryptoX509*>&, const PathValidatorParams&) const' was hidden
[-Woverloaded-virtual=]
| 71 | virtual bool validate(
| | ^~~~~~~~
| ./security/OpenSSLPathValidator.h:59:22: note: by 'virtual bool
xmltooling::OpenSSLPathValidator::validate(X509*, stack_st_X509*, const
xmltooling::PathValidator::PathValidatorParams&) const'
| 59 | virtual bool validate(
| | ^~~~~~~~
| security/impl/AbstractPKIXTrustEngine.cpp: In member function 'virtual bool
xmltooling::AbstractPKIXTrustEngine::checkEntityNames(X509*, const
xmltooling::CredentialResolver&, const xmltooling::CredentialCriteria&) const':
| security/impl/AbstractPKIXTrustEngine.cpp:219:45: error: invalid conversion
from 'const X509_NAME*' {aka 'const X509_name_st*'} to 'X509_NAME*' {aka
'X509_name_st*'} [-fpermissive]
| 219 | X509_NAME* subject=X509_get_subject_name(certEE);
| | ~~~~~~~~~~~~~~~~~~~~~^~~~~~~~
| | |
| | const X509_NAME* {aka
const X509_name_st*}
| security/impl/AbstractPKIXTrustEngine.cpp:267:49: error: 'ASN1_STRING_data'
was not declared in this scope; did you mean 'ASN1_STRING_set0'?
| 267 | const char* altptr =
(char*)ASN1_STRING_data(check->d.ia5);
| | ^~~~~~~~~~~~~~~~
| | ASN1_STRING_set0
| security/impl/AbstractPKIXTrustEngine.cpp:271:65: warning: comparison of
integer expressions of different signedness:
'std::__cxx11::basic_string<char>::size_type' {aka 'long unsigned int'} and
'const int' [-Wsign-compare]
| 271 | if ((check->type==GEN_DNS &&
n->length()==altlen && !strncasecmp(altptr,n->c_str(),altlen))
| |
~~~~~~~~~~~^~~~~~~~
| security/impl/AbstractPKIXTrustEngine.cpp:275:72: warning: comparison of
integer expressions of different signedness:
'std::__cxx11::basic_string<char>::size_type' {aka 'long unsigned int'} and
'const int' [-Wsign-compare]
| 275 | || (check->type==GEN_URI &&
n->length()==altlen && !strncmp(altptr,n->c_str(),altlen))) {
| |
~~~~~~~~~~~^~~~~~~~
| security/impl/AbstractPKIXTrustEngine.cpp:294:56: error: invalid conversion
from 'const ASN1_STRING*' {aka 'const asn1_string_st*'} to 'ASN1_STRING*' {aka
'asn1_string_st*'} [-fpermissive]
| 294 | ASN1_STRING* tmp =
X509_NAME_ENTRY_get_data(X509_NAME_get_entry(subject, i));
| |
~~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| | |
| | const
ASN1_STRING* {aka const asn1_string_st*}
| security/impl/AbstractPKIXTrustEngine.cpp:303:37: error: 'ASN1_STRING_data'
was not declared in this scope; did you mean 'ASN1_STRING_set0'?
| 303 | memcpy(peer_CN, ASN1_STRING_data(tmp), j);
| | ^~~~~~~~~~~~~~~~
| | ASN1_STRING_set0
| security/impl/AbstractPKIXTrustEngine.cpp:313:33: warning: comparison of
integer expressions of different signedness:
'std::__cxx11::basic_string<char>::size_type' {aka 'long unsigned int'} and
'int' [-Wsign-compare]
| 313 | if (n->length() == j && !strncasecmp(peer_CN,
n->c_str(), j)) {
| | ~~~~~~~~~~~~^~~~
| make[4]: *** [Makefile:1944:
security/impl/libxmltooling_la-AbstractPKIXTrustEngine.lo] Error 1
Full buildlog
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/xmltooling_3.3.0-3_amd64-2026-04-19T10:27:41Z
Sebastian
