** Summary changed: - libnetconf2: FTBFS with openssl 4.0 + Please sync libnetconf2 4.4.14-1 from experimental
** Summary changed: - Please sync libnetconf2 4.4.14-1 from experimental + [FFe] Please sync libnetconf2 4.4.14-1 from experimental ** Description changed: + ## FFe ## + + It fixes FTBFS with openssl 4.0. + + + ❯ seeded-in-ubuntu -b libnetconf2-4 + libnetconf2-4 is not seeded (and may not exist). + + ❯ seeded-in-ubuntu -b libnetconf2-dev + libnetconf2-dev is not seeded (and may not exist). + + ❯ reverse-depends src:libnetconf2 --release stonking + No reverse dependencies found + + ❯ reverse-depends libnetconf2-4 --release stonking + Reverse-Depends + =============== + * libnetconf2-dev + + Packages without architectures listed are reverse-dependencies in: + amd64, amd64v3, arm64, armhf, ppc64el, riscv64, s390x + + ❯ reverse-depends libnetconf2-dev --release stonking + No reverse dependencies found + + + ================================== + Original report + ================================== Imported from Debian bug http://bugs.debian.org/1138483: Package: libnetconf2 Version: 3.7.10-2 Severity: normal Tags: sid control: affects -1 src:openssl User: [email protected] Usertags: openssl-4.0 OpenSSL 4.0 is in experimental. This package fails to build against it: | [ 75%] Building C object CMakeFiles/netconf2.dir/src/session_openssl.c.o | /usr/bin/cc -Dnetconf2_EXPORTS -I/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu/compat -I/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu/src -I/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu/include -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/libnetconf2-3.7.10=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 -Wdate-time -D_FORTIFY_SOURCE=2 -Wall -Wextra -fvisibility=hidden -std=c99 -DNC_ENABLED_SSH_TLS -fPIC -MD -MT CMakeFiles/netconf2.dir/src/session_openssl.c.o -MF CMakeFiles/netconf2.dir/src/session_openssl.c.o.d -o CMakeFiles/netconf2.dir/src/session_openssl.c.o -c /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c: In function ‘nc_tls_get_san_value_type_wrap’: | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:505:15: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 505 | if (ip->length == 4) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:54: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 506 | if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:67: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 506 | if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:80: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 506 | if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:93: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 506 | if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:511:22: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 511 | } else if (ip->length == 16) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:23: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:36: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:49: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:62: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:75: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:88: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:23: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:36: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:49: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:62: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:75: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:89: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:23: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 515 | ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:37: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 515 | ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:51: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 515 | ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:65: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 515 | ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) { | | ^~ | In file included from /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:35: | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:521:80: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 521 | WRN(NULL, "SAN IP address in an unknown format (length is %d).", ip->length); | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/log_p.h:57:123: note: in definition of macro ‘WRN’ | 57 | #define WRN(session, ...) if(ATOMIC_LOAD_RELAXED(verbose_level)>=NC_VERB_WARNING){nc_log_printf(session, NC_VERB_WARNING, __VA_ARGS__);} | | ^~~~~~~~~~~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c: In function ‘nc_tls_move_crls_to_store’: | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:789:5: warning: ‘X509_STORE_get0_objects’ is deprecated: Since OpenSSL 4.0;Use X509_STORE_get1_objects [-Wdeprecated-declarations] | 789 | objs = X509_STORE_get0_objects(src); | | ^~~~ | In file included from /usr/include/openssl/x509.h:494, | from /usr/include/openssl/ssl.h:34, | from /build/reproducible-path/libnetconf2-3.7.10/src/session_wrapper.h:48, | from /build/reproducible-path/libnetconf2-3.7.10/src/session_p.h:36, | from /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:37: | /usr/include/openssl/x509_vfy.h:527:24: note: declared here | 527 | STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs); | | ^~~~~~~~~~~~~~~~~~~~~~~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c: In function ‘nc_server_tls_get_crl_distpoint_uris_wrap’: | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:1370:5: warning: ‘X509_STORE_get0_objects’ is deprecated: Since OpenSSL 4.0;Use X509_STORE_get1_objects [-Wdeprecated-declarations] | 1370 | objs = X509_STORE_get0_objects(cert_store); | | ^~~~ | /usr/include/openssl/x509_vfy.h:527:24: note: declared here | 527 | STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs); | | ^~~~~~~~~~~~~~~~~~~~~~~ | make[3]: *** [CMakeFiles/netconf2.dir/build.make:320: CMakeFiles/netconf2.dir/src/session_openssl.c.o] Error 1 | make[3]: Leaving directory '/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu' Full buildlog - https://breakpoint.cc/openssl-rebuild/logs-4/attempted/libnetconf2_3.7.10-2_amd64-2026-04-19T10:51:08Z + https://breakpoint.cc/openssl-rebuild/logs-4/attempted/libnetconf2_3.7.10-2_amd64-2026-04-19T10:51:08Z Sebastian ** Description changed: ## FFe ## It fixes FTBFS with openssl 4.0. - ❯ seeded-in-ubuntu -b libnetconf2-4 libnetconf2-4 is not seeded (and may not exist). ❯ seeded-in-ubuntu -b libnetconf2-dev libnetconf2-dev is not seeded (and may not exist). ❯ reverse-depends src:libnetconf2 --release stonking No reverse dependencies found ❯ reverse-depends libnetconf2-4 --release stonking Reverse-Depends =============== * libnetconf2-dev Packages without architectures listed are reverse-dependencies in: amd64, amd64v3, arm64, armhf, ppc64el, riscv64, s390x ❯ reverse-depends libnetconf2-dev --release stonking No reverse dependencies found + ## /FFe ## ================================== Original report ================================== Imported from Debian bug http://bugs.debian.org/1138483: Package: libnetconf2 Version: 3.7.10-2 Severity: normal Tags: sid control: affects -1 src:openssl User: [email protected] Usertags: openssl-4.0 OpenSSL 4.0 is in experimental. This package fails to build against it: | [ 75%] Building C object CMakeFiles/netconf2.dir/src/session_openssl.c.o | /usr/bin/cc -Dnetconf2_EXPORTS -I/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu/compat -I/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu/src -I/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu/include -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/libnetconf2-3.7.10=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 -Wdate-time -D_FORTIFY_SOURCE=2 -Wall -Wextra -fvisibility=hidden -std=c99 -DNC_ENABLED_SSH_TLS -fPIC -MD -MT CMakeFiles/netconf2.dir/src/session_openssl.c.o -MF CMakeFiles/netconf2.dir/src/session_openssl.c.o.d -o CMakeFiles/netconf2.dir/src/session_openssl.c.o -c /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c: In function ‘nc_tls_get_san_value_type_wrap’: | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:505:15: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 505 | if (ip->length == 4) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:54: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 506 | if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:67: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 506 | if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:80: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 506 | if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:93: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 506 | if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:511:22: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 511 | } else if (ip->length == 16) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:23: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:36: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:49: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:62: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:75: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:88: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:23: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:36: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:49: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:62: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:75: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:89: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:23: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 515 | ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:37: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 515 | ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:51: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 515 | ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:65: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 515 | ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) { | | ^~ | In file included from /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:35: | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:521:80: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 521 | WRN(NULL, "SAN IP address in an unknown format (length is %d).", ip->length); | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/log_p.h:57:123: note: in definition of macro ‘WRN’ | 57 | #define WRN(session, ...) if(ATOMIC_LOAD_RELAXED(verbose_level)>=NC_VERB_WARNING){nc_log_printf(session, NC_VERB_WARNING, __VA_ARGS__);} | | ^~~~~~~~~~~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c: In function ‘nc_tls_move_crls_to_store’: | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:789:5: warning: ‘X509_STORE_get0_objects’ is deprecated: Since OpenSSL 4.0;Use X509_STORE_get1_objects [-Wdeprecated-declarations] | 789 | objs = X509_STORE_get0_objects(src); | | ^~~~ | In file included from /usr/include/openssl/x509.h:494, | from /usr/include/openssl/ssl.h:34, | from /build/reproducible-path/libnetconf2-3.7.10/src/session_wrapper.h:48, | from /build/reproducible-path/libnetconf2-3.7.10/src/session_p.h:36, | from /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:37: | /usr/include/openssl/x509_vfy.h:527:24: note: declared here | 527 | STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs); | | ^~~~~~~~~~~~~~~~~~~~~~~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c: In function ‘nc_server_tls_get_crl_distpoint_uris_wrap’: | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:1370:5: warning: ‘X509_STORE_get0_objects’ is deprecated: Since OpenSSL 4.0;Use X509_STORE_get1_objects [-Wdeprecated-declarations] | 1370 | objs = X509_STORE_get0_objects(cert_store); | | ^~~~ | /usr/include/openssl/x509_vfy.h:527:24: note: declared here | 527 | STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs); | | ^~~~~~~~~~~~~~~~~~~~~~~ | make[3]: *** [CMakeFiles/netconf2.dir/build.make:320: CMakeFiles/netconf2.dir/src/session_openssl.c.o] Error 1 | make[3]: Leaving directory '/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu' Full buildlog https://breakpoint.cc/openssl-rebuild/logs-4/attempted/libnetconf2_3.7.10-2_amd64-2026-04-19T10:51:08Z Sebastian ** Description changed: ## FFe ## It fixes FTBFS with openssl 4.0. + + I'd like to avoid the delta and let it get blocked on merge. + + While there is an soname bump, it has little to no impact on our + testing. + + The package is release frequently, currently released version is from + Nov 2025. ❯ seeded-in-ubuntu -b libnetconf2-4 libnetconf2-4 is not seeded (and may not exist). ❯ seeded-in-ubuntu -b libnetconf2-dev libnetconf2-dev is not seeded (and may not exist). ❯ reverse-depends src:libnetconf2 --release stonking No reverse dependencies found ❯ reverse-depends libnetconf2-4 --release stonking Reverse-Depends =============== * libnetconf2-dev Packages without architectures listed are reverse-dependencies in: amd64, amd64v3, arm64, armhf, ppc64el, riscv64, s390x ❯ reverse-depends libnetconf2-dev --release stonking No reverse dependencies found ## /FFe ## ================================== Original report ================================== Imported from Debian bug http://bugs.debian.org/1138483: Package: libnetconf2 Version: 3.7.10-2 Severity: normal Tags: sid control: affects -1 src:openssl User: [email protected] Usertags: openssl-4.0 OpenSSL 4.0 is in experimental. This package fails to build against it: | [ 75%] Building C object CMakeFiles/netconf2.dir/src/session_openssl.c.o | /usr/bin/cc -Dnetconf2_EXPORTS -I/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu/compat -I/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu/src -I/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu/include -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/libnetconf2-3.7.10=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 -Wdate-time -D_FORTIFY_SOURCE=2 -Wall -Wextra -fvisibility=hidden -std=c99 -DNC_ENABLED_SSH_TLS -fPIC -MD -MT CMakeFiles/netconf2.dir/src/session_openssl.c.o -MF CMakeFiles/netconf2.dir/src/session_openssl.c.o.d -o CMakeFiles/netconf2.dir/src/session_openssl.c.o -c /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c: In function ‘nc_tls_get_san_value_type_wrap’: | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:505:15: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 505 | if (ip->length == 4) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:54: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 506 | if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:67: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 506 | if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:80: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 506 | if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:93: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 506 | if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:511:22: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 511 | } else if (ip->length == 16) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:23: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:36: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:49: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:62: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:75: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:88: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:23: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:36: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:49: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:62: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:75: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:89: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11], | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:23: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 515 | ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:37: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 515 | ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:51: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 515 | ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) { | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:65: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 515 | ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) { | | ^~ | In file included from /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:35: | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:521:80: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’} | 521 | WRN(NULL, "SAN IP address in an unknown format (length is %d).", ip->length); | | ^~ | /build/reproducible-path/libnetconf2-3.7.10/src/log_p.h:57:123: note: in definition of macro ‘WRN’ | 57 | #define WRN(session, ...) if(ATOMIC_LOAD_RELAXED(verbose_level)>=NC_VERB_WARNING){nc_log_printf(session, NC_VERB_WARNING, __VA_ARGS__);} | | ^~~~~~~~~~~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c: In function ‘nc_tls_move_crls_to_store’: | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:789:5: warning: ‘X509_STORE_get0_objects’ is deprecated: Since OpenSSL 4.0;Use X509_STORE_get1_objects [-Wdeprecated-declarations] | 789 | objs = X509_STORE_get0_objects(src); | | ^~~~ | In file included from /usr/include/openssl/x509.h:494, | from /usr/include/openssl/ssl.h:34, | from /build/reproducible-path/libnetconf2-3.7.10/src/session_wrapper.h:48, | from /build/reproducible-path/libnetconf2-3.7.10/src/session_p.h:36, | from /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:37: | /usr/include/openssl/x509_vfy.h:527:24: note: declared here | 527 | STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs); | | ^~~~~~~~~~~~~~~~~~~~~~~ | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c: In function ‘nc_server_tls_get_crl_distpoint_uris_wrap’: | /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:1370:5: warning: ‘X509_STORE_get0_objects’ is deprecated: Since OpenSSL 4.0;Use X509_STORE_get1_objects [-Wdeprecated-declarations] | 1370 | objs = X509_STORE_get0_objects(cert_store); | | ^~~~ | /usr/include/openssl/x509_vfy.h:527:24: note: declared here | 527 | STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs); | | ^~~~~~~~~~~~~~~~~~~~~~~ | make[3]: *** [CMakeFiles/netconf2.dir/build.make:320: CMakeFiles/netconf2.dir/src/session_openssl.c.o] Error 1 | make[3]: Leaving directory '/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu' Full buildlog https://breakpoint.cc/openssl-rebuild/logs-4/attempted/libnetconf2_3.7.10-2_amd64-2026-04-19T10:51:08Z Sebastian -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2155035 Title: [FFe] Please sync libnetconf2 4.4.14-1 from experimental To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libnetconf2/+bug/2155035/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
