OpenSSL 4.0 is in experimental. This package fails to build against it:
| /usr/bin/x86_64-linux-gnu-ld.bfd: src/key.o: in function `key_load_pkcs11':
| ./tools/cert_create/src/key.c:217:(.text+0x2f5): undefined reference to `ENGINE_load_builtin_engines'
| /usr/bin/x86_64-linux-gnu-ld.bfd: ./tools/cert_create/src/key.c:218:(.text+0x301): undefined reference to `ENGINE_by_id'
| /usr/bin/x86_64-linux-gnu-ld.bfd: ./tools/cert_create/src/key.c:224:(.text+0x315): undefined reference to `ENGINE_init'
| /usr/bin/x86_64-linux-gnu-ld.bfd: ./tools/cert_create/src/key.c:231:(.text+0x342): undefined reference to `ENGINE_ctrl_cmd_string'
| /usr/bin/x86_64-linux-gnu-ld.bfd: ./tools/cert_create/src/key.c:237:(.text+0x359): undefined reference to `ENGINE_load_private_key'
| /usr/bin/x86_64-linux-gnu-ld.bfd: ./tools/cert_create/src/key.c:241:(.text+0x3dc): undefined reference to `ENGINE_free'
| collect2: error: ld returned 1 exit status
| make[2]: *** [Makefile:86: cert_create] Error 1

Full buildlog
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/arm-trusted-firmware_2.12.1+dfsg-1_amd64-2026-04-19T12:49:55Z

Sebastian

control: tags -1 -patch

have no patch yet…

Sebastian

Dear Maintainer,

The patch fixes the build issue, but it is not a real fix. provider impl is not a drop in, I filed a bug for the upstream to fix.