[Bug 2155031] Re: xmlsec1: FTBFS with openssl 4.0

[Ravi Kant Sharma]

** Tags added: rls-ss-incoming

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to xmlsec1 in Ubuntu.
https://bugs.launchpad.net/bugs/2155031

Title:
  xmlsec1: FTBFS with openssl 4.0

Status in xmlsec1 package in Ubuntu:
  New
Status in xmlsec1 package in Debian:
  Fix Released

Bug description:
  Imported from Debian bug http://bugs.debian.org/1138479:

  Package: xmlsec1
  Version: 1.3.10-2
  Severity: normal
  Tags: sid
  control: affects -1 src:openssl
  User: pkg-openssl-devel at lists.alioth.debian.org
  Usertags: openssl-4.0

  OpenSSL 4.0 is in experimental. This package fails to build against
  it:

  | libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I../.. -DPACKAGE=\"xmlsec1\" -I../../include -I../../include -D__XMLSEC_FUNCTION__=__func__ -DXMLSEC_OPENSSL3_ENGINES=1 -DXMLSEC_NO_FTP=1 -DXMLSEC_NO_HTTP=1 -DXMLSEC_NO_MD5=1 -DXMLSEC_NO_MLDSA=1 -DXMLSEC_NO_SLHDSA=1 -DXMLSEC_NO_GOST=1 -DXMLSEC_NO_GOST2012=1 -DXMLSEC_NO_CRYPTO_DYNAMIC_LOADING=1 -DXMLSEC_CRYPTO_OPENSSL=1 -I/usr/include/libxml2 -I/usr/include/libxml2 -Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/xmlsec1-1.3.10=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -fno-strict-overflow -fno-strict-aliasing -O -std=c99 -pedantic -pedantic-errors -W -Wall -Wextra -fno-inline -Wnull-dereference -Wdouble-promotion -Wformat=2 -Wformat-security -Wformat-nonliteral -Wconversion -Wunused -Wshadow -Wpointer-arith -Wcast-align -Wwrite-strings -Wmissing-prototypes -Wnested-externs -Wredundant-decls -Wformat-overflow=2 -Wformat-signedness -fno-builtin-memset -c x509.c  -fPIC -DPIC -o .libs/libxmlsec1_openssl_la-x509.o
  | x509.c: In function 'xmlSecOpenSSLX509SKIWrite':
  | x509.c:1018:9: error: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  |  1018 |     ext = X509_get_ext(cert, index);
  |       |         ^
  | x509.c: In function 'xmlSecOpenSSLKeyDataX509Write':
  | x509.c:1303:61: error: passing argument 1 of 'xmlSecOpenSSLX509NameWrite' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  |  1303 |             x509Value->subject = xmlSecOpenSSLX509NameWrite(X509_get_subject_name(cert));
  |       |                                                             ^~~~~~~~~~~~~~~~~~~~~~~~~~~
  | x509.c:1156:39: note: expected 'X509_NAME *' {aka 'struct X509_name_st *'} but argument is of type 'const X509_NAME *' {aka 'const struct X509_name_st *'}
  |  1156 | xmlSecOpenSSLX509NameWrite(X509_NAME* nm) {
  |       |                            ~~~~~~~~~~~^~
  | x509.c:1315:64: error: passing argument 1 of 'xmlSecOpenSSLX509NameWrite' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  |  1315 |             x509Value->issuerName = xmlSecOpenSSLX509NameWrite(X509_get_issuer_name(cert));
  |       |                                                                ^~~~~~~~~~~~~~~~~~~~~~~~~~
  | x509.c:1156:39: note: expected 'X509_NAME *' {aka 'struct X509_name_st *'} but argument is of type 'const X509_NAME *' {aka 'const struct X509_name_st *'}
  |  1156 | xmlSecOpenSSLX509NameWrite(X509_NAME* nm) {
  |       |                            ~~~~~~~~~~~^~
  | x509.c: In function 'xmlSecOpenSSLX509CertDebugDump':
  | x509.c:1860:35: error: passing argument 1 of 'xmlSecOpenSSLX509NameToString' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  |  1860 |     xmlSecOpenSSLX509NameToString(X509_get_subject_name(cert), buf, sizeof(buf));
  |       |                                   ^~~~~~~~~~~~~~~~~~~~~~~~~~~
  | x509.c:1824:42: note: expected 'X509_NAME *' {aka 'struct X509_name_st *'} but argument is of type 'const X509_NAME *' {aka 'const struct X509_name_st *'}
  |  1824 | xmlSecOpenSSLX509NameToString(X509_NAME* name, char* buf, int bufLen) {
  |       |                               ~~~~~~~~~~~^~~~
  | x509.c:1862:35: error: passing argument 1 of 'xmlSecOpenSSLX509NameToString' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  |  1862 |     xmlSecOpenSSLX509NameToString(X509_get_issuer_name(cert), buf, sizeof(buf));
  |       |                                   ^~~~~~~~~~~~~~~~~~~~~~~~~~
  | x509.c:1824:42: note: expected 'X509_NAME *' {aka 'struct X509_name_st *'} but argument is of type 'const X509_NAME *' {aka 'const struct X509_name_st *'}
  |  1824 | xmlSecOpenSSLX509NameToString(X509_NAME* name, char* buf, int bufLen) {
  |       |                               ~~~~~~~~~~~^~~~
  | x509.c: In function 'xmlSecOpenSSLX509CertDebugXmlDump':
  | x509.c:1885:35: error: passing argument 1 of 'xmlSecOpenSSLX509NameToString' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  |  1885 |     xmlSecOpenSSLX509NameToString(X509_get_subject_name(cert), buf, sizeof(buf));
  |       |                                   ^~~~~~~~~~~~~~~~~~~~~~~~~~~
  | x509.c:1824:42: note: expected 'X509_NAME *' {aka 'struct X509_name_st *'} but argument is of type 'const X509_NAME *' {aka 'const struct X509_name_st *'}
  |  1824 | xmlSecOpenSSLX509NameToString(X509_NAME* name, char* buf, int bufLen) {
  |       |                               ~~~~~~~~~~~^~~~
  | x509.c:1891:35: error: passing argument 1 of 'xmlSecOpenSSLX509NameToString' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
  |  1891 |     xmlSecOpenSSLX509NameToString(X509_get_issuer_name(cert), buf, sizeof(buf));
  |       |                                   ^~~~~~~~~~~~~~~~~~~~~~~~~~
  | x509.c:1824:42: note: expected 'X509_NAME *' {aka 'struct X509_name_st *'} but argument is of type 'const X509_NAME *' {aka 'const struct X509_name_st *'}
  |  1824 | xmlSecOpenSSLX509NameToString(X509_NAME* name, char* buf, int bufLen) {
  |       |                               ~~~~~~~~~~~^~~~
  | make[5]: *** [Makefile:801: libxmlsec1_openssl_la-x509.lo] Error 1

  Full buildlog
   	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/xmlsec1_1.3.10-2_amd64-2026-04-19T10:13:08Z

  Sebastian

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xmlsec1/+bug/2155031/+subscriptions