[Bug 2154996] Re: pkcs11-helper: FTBFS with openssl 4.0
Ravi Kant Sharma
2154996 at bugs.launchpad.net
Thu Jun 4 11:08:46 UTC 2026
MP https://code.launchpad.net/~ravi-
sharma/ubuntu/+source/pkcs11-helper/+git/pkcs11-helper/+merge/505979
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to pkcs11-helper in Ubuntu.
https://bugs.launchpad.net/bugs/2154996
Title:
pkcs11-helper: FTBFS with openssl 4.0
Status in pkcs11-helper package in Ubuntu:
New
Status in pkcs11-helper package in Debian:
New
Bug description:
Imported from Debian bug http://bugs.debian.org/1138448:
Package: pkcs11-helper
Version: 1.31.0-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: pkg-openssl-devel at lists.alioth.debian.org
Usertags: openssl-4.0
OpenSSL 4.0 is in experimental. This package fails to build against
it:
| libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -I../include -I../include -Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pkcs11-helper-1.31.0=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c pkcs11h-crypto.c -o pkcs11h-crypto.o >/dev/null 2>&1
| /bin/bash ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I.. -I../include -I../include -Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pkcs11-helper-1.31.0=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c -o _pkcs11h-crypto-openssl.lo _pkcs11h-crypto-openssl.c
| libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -I../include -I../include -Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pkcs11-helper-1.31.0=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -c _pkcs11h-crypto-openssl.c -fPIC -DPIC -o .libs/_pkcs11h-crypto-openssl.o
| _pkcs11h-crypto-openssl.c: In function '__pkcs11h_crypto_openssl_certificate_get_expiration':
| _pkcs11h-crypto-openssl.c:150:17: warning: 'X509_cmp_current_time' is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
| 150 | X509_cmp_current_time (notBefore) <= 0 &&
| | ^~~~~~~~~~~~~~~~~~~~~
| In file included from _pkcs11h-crypto-openssl.c:56:
| /usr/include/openssl/x509.h:694:27: note: declared here
| 694 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_current_time(const ASN1_TIME *s);
| | ^~~~~~~~~~~~~~~~~~~~~
| _pkcs11h-crypto-openssl.c:151:17: warning: 'X509_cmp_current_time' is deprecated: Since OpenSSL 4.0 [-Wdeprecated-declarations]
| 151 | X509_cmp_current_time (notAfter) >= 0 &&
| | ^~~~~~~~~~~~~~~~~~~~~
| /usr/include/openssl/x509.h:694:27: note: declared here
| 694 | OSSL_DEPRECATEDIN_4_0 int X509_cmp_current_time(const ASN1_TIME *s);
| | ^~~~~~~~~~~~~~~~~~~~~
| _pkcs11h-crypto-openssl.c:152:25: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
| 152 | notAfter->length >= 12
| | ^~
| _pkcs11h-crypto-openssl.c:157:40: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
| 157 | tm1.tm_year = (notAfter->data[ 0] - '0') * 10 + (notAfter->data[ 1] - '0') + 100;
| | ^~
| _pkcs11h-crypto-openssl.c:157:74: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
| 157 | tm1.tm_year = (notAfter->data[ 0] - '0') * 10 + (notAfter->data[ 1] - '0') + 100;
| | ^~
| _pkcs11h-crypto-openssl.c:158:40: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
| 158 | tm1.tm_mon = (notAfter->data[ 2] - '0') * 10 + (notAfter->data[ 3] - '0') - 1;
| | ^~
| _pkcs11h-crypto-openssl.c:158:74: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
| 158 | tm1.tm_mon = (notAfter->data[ 2] - '0') * 10 + (notAfter->data[ 3] - '0') - 1;
| | ^~
| _pkcs11h-crypto-openssl.c:159:40: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
| 159 | tm1.tm_mday = (notAfter->data[ 4] - '0') * 10 + (notAfter->data[ 5] - '0');
| | ^~
| _pkcs11h-crypto-openssl.c:159:74: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
| 159 | tm1.tm_mday = (notAfter->data[ 4] - '0') * 10 + (notAfter->data[ 5] - '0');
| | ^~
| _pkcs11h-crypto-openssl.c:160:40: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
| 160 | tm1.tm_hour = (notAfter->data[ 6] - '0') * 10 + (notAfter->data[ 7] - '0');
| | ^~
| _pkcs11h-crypto-openssl.c:160:74: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
| 160 | tm1.tm_hour = (notAfter->data[ 6] - '0') * 10 + (notAfter->data[ 7] - '0');
| | ^~
| _pkcs11h-crypto-openssl.c:161:40: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
| 161 | tm1.tm_min = (notAfter->data[ 8] - '0') * 10 + (notAfter->data[ 9] - '0');
| | ^~
| _pkcs11h-crypto-openssl.c:161:74: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
| 161 | tm1.tm_min = (notAfter->data[ 8] - '0') * 10 + (notAfter->data[ 9] - '0');
| | ^~
| _pkcs11h-crypto-openssl.c:162:40: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
| 162 | tm1.tm_sec = (notAfter->data[10] - '0') * 10 + (notAfter->data[11] - '0');
| | ^~
| _pkcs11h-crypto-openssl.c:162:74: error: invalid use of incomplete typedef 'ASN1_TIME' {aka 'const struct asn1_string_st'}
| 162 | tm1.tm_sec = (notAfter->data[10] - '0') * 10 + (notAfter->data[11] - '0');
| | ^~
| make[4]: *** [Makefile:620: _pkcs11h-crypto-openssl.lo] Error 1
| make[4]: Leaving directory '/build/reproducible-path/pkcs11-helper-1.31.0/lib'
Full buildlog
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/pkcs11-helper_1.31.0-1_amd64-2026-04-19T14:15:29Z
Sebastian
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pkcs11-helper/+bug/2154996/+subscriptions
More information about the foundations-bugs
mailing list