[Bug 2154861] Re: tpm2-tss: FTBFS with openssl 4.0

[Bug Watch Updater]

** Changed in: tpm2-tss (Debian)
   Importance: Undecided => Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to tpm2-tss in Ubuntu.
https://bugs.launchpad.net/bugs/2154861

Title:
  tpm2-tss: FTBFS with openssl 4.0

Status in tpm2-tss package in Ubuntu:
  New
Status in tpm2-tss package in Debian:
  New

Bug description:
  Imported from Debian bug http://bugs.debian.org/1138314:

  Package: tpm2-tss
  Version: 4.1.3-6
  Severity: normal
  Tags: sid
  control: affects -1 src:openssl
  User: pkg-openssl-devel at lists.alioth.debian.org
  Usertags: openssl-4.0

  OpenSSL 4.0 is in experimental. This package fails to build against
  it:

  | libtool: compile:  gcc -DHAVE_CONFIG_H -I. -Wdate-time -D_FORTIFY_SOURCE=2 -I./src -I./include/tss2 -I./test/fuzz/tcti -O2 -std=c99 -Wall -Wextra -Wformat-security -fstack-protector-all -fpic -fPIC -Wno-missing-braces -Wstrict-overflow=5 -I./src/tss2-fapi -I/usr/include/json-c -I/usr/include/uuid -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/tpm2-tss-4.1.3=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c src/tss2-fapi/ifapi_curl.c  -fPIC -DPIC -o src/tss2-fapi/.libs/libtss2_fapi_la-ifapi_curl.o
  | src/tss2-fapi/ifapi_curl.c: In function 'get_crl_from_cert':
  | src/tss2-fapi/ifapi_curl.c:91:63: error: invalid use of incomplete typedef 'ASN1_IA5STRING' {aka 'struct asn1_string_st'}
  |    91 |                 url = (unsigned char *)strdup((char *)asn1_str->data);
  |       |                                                               ^~
  | src/tss2-fapi/ifapi_curl.c: In function 'is_self_signed':
  | src/tss2-fapi/ifapi_curl.c:125:25: warning: initialization discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  |   125 |     X509_NAME *issuer = X509_get_issuer_name(cert);
  |       |                         ^~~~~~~~~~~~~~~~~~~~
  | src/tss2-fapi/ifapi_curl.c:126:26: warning: initialization discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  |   126 |     X509_NAME *subject = X509_get_subject_name(cert);
  |       |                          ^~~~~~~~~~~~~~~~~~~~~
  | src/tss2-fapi/ifapi_curl.c: In function 'ifapi_curl_verify_ek_cert':
  | src/tss2-fapi/ifapi_curl.c:192:22: error: invalid use of incomplete typedef 'ASN1_IA5STRING' {aka 'struct asn1_string_st'}
  |   192 |             url = uri->data;
  |       |                      ^~
  | make[3]: *** [Makefile:19850: src/tss2-fapi/libtss2_fapi_la-ifapi_curl.lo] Error 1

  Full buildlog
   	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/tpm2-tss_4.1.3-6_amd64-2026-04-19T08:26:20Z

  Sebastian

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/tpm2-tss/+bug/2154861/+subscriptions