OpenSSL 4.0 is in experimental. This package fails to build against it:

| [ 33%] Building C object CMakeFiles/pkcs11-proxy.dir/gck-rpc-tls-psk.c.o
| /usr/bin/cc -Dpkcs11_proxy_EXPORTS  -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/pkcs11-proxy-0.4.1=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 -fPIC   -Wall -MD -MT CMakeFiles/pkcs11-proxy.dir/gck-rpc-tls-psk.c.o -MF CMakeFiles/pkcs11-proxy.dir/gck-rpc-tls-psk.c.o.d -o CMakeFiles/pkcs11-proxy.dir/gck-rpc-tls-psk.c.o -c /build/reproducible-path/pkcs11-proxy-0.4.1/gck-rpc-tls-psk.c
| /build/reproducible-path/pkcs11-proxy-0.4.1/gck-rpc-tls-psk.c: In function ‘gck_rpc_init_tls_psk’:
| /build/reproducible-path/pkcs11-proxy-0.4.1/gck-rpc-tls-psk.c:268:38: error: implicit declaration of function ‘TLSv1_2_method’; did you mean ‘TLS_method’? [-Wimplicit-function-declaration]
|   268 |         state->ssl_ctx = SSL_CTX_new(TLSv1_2_method());
|       |                                      ^~~~~~~~~~~~~~
|       |                                      TLS_method
| /build/reproducible-path/pkcs11-proxy-0.4.1/gck-rpc-tls-psk.c:268:38: error: passing argument 1 of ‘SSL_CTX_new’ makes pointer from integer without a cast [-Wint-conversion]
|   268 |         state->ssl_ctx = SSL_CTX_new(TLSv1_2_method());
|       |                                      ^~~~~~~~~~~~~~~~
|       |                                      |
|       |                                      int
| In file included from /build/reproducible-path/pkcs11-proxy-0.4.1/gck-rpc-tls-psk.h:6,
|                  from /build/reproducible-path/pkcs11-proxy-0.4.1/gck-rpc-tls-psk.c:27:
| /usr/include/openssl/ssl.h:1654:47: note: expected ‘const SSL_METHOD *’ {aka ‘const struct ssl_method_st *’} but argument is of type ‘int’
|  1654 | __owur SSL_CTX *SSL_CTX_new(const SSL_METHOD *meth);
|       |                             ~~~~~~~~~~~~~~~~~~^~~~
| make[3]: *** [CMakeFiles/pkcs11-proxy.dir/build.make:138: CMakeFiles/pkcs11-proxy.dir/gck-rpc-tls-psk.c.o] Error 1
| make[3]: Leaving directory '/build/reproducible-path/pkcs11-proxy-0.4.1/build'
| make[2]: *** [CMakeFiles/Makefile2:93: CMakeFiles/pkcs11-proxy.dir/all] Error 2


Full buildlog
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/pkcs11-proxy_0.4.1-4_amd64-2026-04-19T08:38:54Z

Sebastian

Patch forwarded from Ubuntu in
https://salsa.debian.org/alteholz/pkcs11-proxy/-/merge_requests/4.

We believe that the bug you reported is fixed in the latest version of
pkcs11-proxy, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1138396@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Thorsten Alteholz <debian@alteholz.de> (supplier of updated pkcs11-proxy package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 03 Sep 2026 18:02:03 +0200
Source: pkcs11-proxy
Architecture: source
Version: 0.4.1-5
Distribution: unstable
Urgency: medium
Maintainer: Thorsten Alteholz <debian@alteholz.de>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Closes: 1138396
Changes:
 pkcs11-proxy (0.4.1-5) unstable; urgency=medium
 .
   * add openssl4.patch (Closes: #1138396)
     (Thanks to Finn Gärtner who forwarded the Ubunut patch as MR)
   * debian/control: bump standard to 4.7.4 (no changes)
   * debian/control: remove RRR: and Priority:
Checksums-Sha1:
 39a0f99124eaa16a016968f444d99376f1d93ff0 2106 pkcs11-proxy_0.4.1-5.dsc
 d278baaf650da8b8c4b35bc2875dce799dc7c040 67598 pkcs11-proxy_0.4.1.orig.tar.gz
 542de43f69ee934518909548d42d7baa659871aa 5868 pkcs11-proxy_0.4.1-5.debian.tar.xz
 fd39b104a67bd176f0a93c611576363ffc94a806 7645 pkcs11-proxy_0.4.1-5_amd64.buildinfo
Checksums-Sha256:
 6bb80088255533ee32a07f5e9706fcb2825917fdd86543492fd88e32918ff4ce 2106 pkcs11-proxy_0.4.1-5.dsc
 2fc6c9b3b5558f408187ea7828536dc47b1177405108e5cc032e8d85c4504cae 67598 pkcs11-proxy_0.4.1.orig.tar.gz
 cdec5c480b5fbe2891e2819698e06f00c1305985f12ff645a805c427c4ef527c 5868 pkcs11-proxy_0.4.1-5.debian.tar.xz
 e743e283d18befa820c9b82605dbde02b654c76a607469cf9b832d2d0c2e0af5 7645 pkcs11-proxy_0.4.1-5_amd64.buildinfo
Files:
 3bd712b3b23d069a87dd726ff5fbd418 2106 net optional pkcs11-proxy_0.4.1-5.dsc
 7a604f4b0247b4eb69214a6d5d9c59e7 67598 net optional pkcs11-proxy_0.4.1.orig.tar.gz
 d12f925dcb6b85c8fc2fd99b2a7f1387 5868 net optional pkcs11-proxy_0.4.1-5.debian.tar.xz
 ee0fbfb4b001f1e6fe857e74afac3a9a 7645 net optional pkcs11-proxy_0.4.1-5_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=KaDC
-----END PGP SIGNATURE-----