OpenSSL 4.0 is in experimental. This package fails to build against it:

| g++ -Wdate-time -D_FORTIFY_SOURCE=2  -g -ffile-prefix-map=/build/reproducible-path/boxbackup-0.13~~git20231028.g3dd5194+ds=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection  -Wall -Werror=return-type -Werror=delete-non-virtual-dtor -Werror=delete-incomplete -Wno-deprecated-declarations -DBOX_VERSION="\"0.13~~git20231028.g3dd5194+ds-5\"" -DBOX_RELEASE_BUILD -O2 -Iqdbm -Ilib/crypto -Ilib/common -Ilib/win32 -DBOX_MODULE="\"lib/server\"" -c lib/server/SocketStreamTLS.cpp -o release/lib/server/SocketStreamTLS.o
| lib/server/SocketStreamTLS.cpp: In member function ‘void SocketStreamTLS::Handshake(const TLSContext&, bool)’:
| lib/server/SocketStreamTLS.cpp:211:29: warning: unused variable ‘err_reason’ [-Wunused-variable]
|   211 |                         int err_reason = ERR_GET_REASON(ERR_peek_error());
|       |                             ^~~~~~~~~~
| lib/server/SocketStreamTLS.cpp: In member function ‘std::string SocketStreamTLS::GetPeerCommonName()’:
| lib/server/SocketStreamTLS.cpp:472:53: error: invalid conversion from ‘const X509_NAME*’ {aka ‘const X509_name_st*’} to ‘X509_NAME*’ {aka ‘X509_name_st*’} [-fpermissive]
|   472 |         X509_NAME *subject = ::X509_get_subject_name(cert);
|       |                              ~~~~~~~~~~~~~~~~~~~~~~~^~~~~~
|       |                                                     |
|       |                                                     const X509_NAME* {aka const X509_name_st*}
| make[2]: *** [Makefile:706: release/lib/server/SocketStreamTLS.o] Error 1

Full buildlog
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/boxbackup_0.13~~git20231028.g3dd5194+ds-5_amd64-2026-04-19T10:24:24Z

Sebastian

Dear boxbackup maintainers,

I have created a single-line patch which allows boxbackup to build with
both OpenSSL 3.x[1] and OpenSSL 4.0[2].

OpenSSL 4.0 changes X509_get_subject_name() to return a `const X509_NAME
*`. This patch ensures that value gets stored in a const pointer to allow
this package to build with OpenSSL 4.0.

Since the only consumer of this value, X509_NAME_get_text_by_NID(), accepts
a const pointer in both OpenSSL 3.x and 4.0, this allows boxbackup to be
built against both OpenSSL versions.

Best wishes,
Max Gilmour

[1]:
https://launchpad.net/~maxgmr/+archive/ubuntu/plusone/+sourcepub/18494082/+listing-archive-extra
[2]:
https://launchpad.net/~maxgmr/+archive/ubuntu/openssl4-transition/+sourcepub/18494084/+listing-archive-extra

We believe that the bug you reported is fixed in the latest version of
boxbackup, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1137563@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ileana Dumitrescu <ileanadumitrescu95@gmail.com> (supplier of updated boxbackup package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 22 Aug 2026 18:10:43 +0300
Source: boxbackup
Architecture: source
Version: 0.13~~git20231028.g3dd5194+ds-6
Distribution: unstable
Urgency: medium
Maintainer: Ileana Dumitrescu <ileanadumitrescu95@gmail.com>
Changed-By: Ileana Dumitrescu <ileanadumitrescu95@gmail.com>
Closes: 975680 1137563
Changes:
 boxbackup (0.13~~git20231028.g3dd5194+ds-6) unstable; urgency=medium
 .
   * d/control: Bump Standards-Version from 4.7.2 to 4.7.4, remove redundant
     fields, and bump debhelper-compat from 13 to 14.
   * d/copyright: Update debian copyright year to 2026.
   * d/watch: Update from version 4 to 5.
   * d/patches: Add openssl4-const-subject-name.patch (Closes: #1137563)
     and update patches to set Forwarded to not-needed.
   * debian/boxbackup-(server/client).postinst: Generate csrs with sha256
     instead of unusable sha1 csrs (Closes: #975680).
Checksums-Sha1:
 42a4f51dc7a35bc1ffd849ae4032a776bcdfd593 2242 boxbackup_0.13~~git20231028.g3dd5194+ds-6.dsc
 29e0b8b2922cc41f7b4661e6805cafdc5d88943d 72864 boxbackup_0.13~~git20231028.g3dd5194+ds-6.debian.tar.xz
 9b078a5333dedd7e4a2f4fc3872ceb850d32e0be 12014 boxbackup_0.13~~git20231028.g3dd5194+ds-6_amd64.buildinfo
Checksums-Sha256:
 62be5fb5eab2499655ec25575ac45c5bc89618bee069f6715633dee2bf335ada 2242 boxbackup_0.13~~git20231028.g3dd5194+ds-6.dsc
 dbc572319ad489ac8ba1616c68f04926e4b75fbd237b28a4dab5e4e3240b5e08 72864 boxbackup_0.13~~git20231028.g3dd5194+ds-6.debian.tar.xz
 06d4d7727f7501284268ff68019b5c4491d7d5a21801e1bedf05561d5e79f082 12014 boxbackup_0.13~~git20231028.g3dd5194+ds-6_amd64.buildinfo
Files:
 97a0c36d33426f044506bd9dac811027 2242 utils optional boxbackup_0.13~~git20231028.g3dd5194+ds-6.dsc
 76ab925379c7f07827c2b875896e02a0 72864 utils optional boxbackup_0.13~~git20231028.g3dd5194+ds-6.debian.tar.xz
 5324e269ee1f0cbc999ab893b62e5f04 12014 utils optional boxbackup_0.13~~git20231028.g3dd5194+ds-6_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=xFAe
-----END PGP SIGNATURE-----