#1138403 zeroc-ice: FTBFS with openssl 4.0

Package:
zeroc-ice
Source:
zeroc-ice
Submitter:
Sebastian Andrzej Siewior
Date:
2026-08-01 14:33:02 UTC
Severity:
normal
Tags:
#1138403#5
Date:
2026-05-30 16:08:21 UTC
From:
To:
OpenSSL 4.0 is in experimental. This package fails to build against it:

| x86_64-linux-gnu-g++ -g -O2 -ffile-prefix-map=/build/reproducible-path/zeroc-ice-3.7.10=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -MT src/IceSSL/build/x86_64-linux-gnu/shared/pic/OpenSSLCertificateI.o -MMD -MP -MF  src/IceSSL/build/x86_64-linux-gnu/shared/pic/OpenSSLCertificateI.Td -Wall -Wextra -Wredundant-decls -Wshadow -Wdeprecated -pthread -DNDEBUG -Isrc -Isrc/IceSSL/generated -Iinclude -Iinclude/generated -DICE_BUILDING_SRC -DICESSL_API_EXPORTS -DICESSL_OPENSSL_API_EXPORTS -fPIC -fvisibility=hidden -Wdate-time -D_FORTIFY_SOURCE=2 -c src/IceSSL/OpenSSLCertificateI.cpp -o src/IceSSL/build/x86_64-linux-gnu/shared/pic/OpenSSLCertificateI.o
| src/IceSSL/OpenSSLCertificateI.cpp: In function ‘std::vector<std::pair<int, std::__cxx11::basic_string<char> > > {anonymous}::convertGeneralNames(GENERAL_NAMES*)’:
| src/IceSSL/OpenSSLCertificateI.cpp:81:27: error: invalid use of incomplete type ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|    81 |             if (str && str->type == V_ASN1_IA5STRING && str->data && str->length > 0)
|       |                           ^~
| In file included from /usr/include/openssl/crypto.h:38,
|                  from /usr/include/openssl/bio.h:32,
|                  from /usr/include/openssl/x509v3.h:26,
|                  from include/IceSSL/OpenSSL.h:10,
|                  from src/IceSSL/OpenSSLCertificateI.cpp:6:
| /usr/include/openssl/types.h:57:16: note: forward declaration of ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|    57 | typedef struct asn1_string_st ASN1_INTEGER;
|       |                ^~~~~~~~~~~~~~
| src/IceSSL/OpenSSLCertificateI.cpp:81:60: error: invalid use of incomplete type ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|    81 |             if (str && str->type == V_ASN1_IA5STRING && str->data && str->length > 0)
|       |                                                            ^~
| /usr/include/openssl/types.h:57:16: note: forward declaration of ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|    57 | typedef struct asn1_string_st ASN1_INTEGER;
|       |                ^~~~~~~~~~~~~~
| src/IceSSL/OpenSSLCertificateI.cpp:81:73: error: invalid use of incomplete type ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|    81 |             if (str && str->type == V_ASN1_IA5STRING && str->data && str->length > 0)
|       |                                                                         ^~
| /usr/include/openssl/types.h:57:16: note: forward declaration of ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|    57 | typedef struct asn1_string_st ASN1_INTEGER;
|       |                ^~~~~~~~~~~~~~
| src/IceSSL/OpenSSLCertificateI.cpp:83:68: error: invalid use of incomplete type ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|    83 |                 p.second = string(reinterpret_cast<const char*>(str->data), str->length);
|       |                                                                    ^~
| /usr/include/openssl/types.h:57:16: note: forward declaration of ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|    57 | typedef struct asn1_string_st ASN1_INTEGER;
|       |                ^~~~~~~~~~~~~~
| src/IceSSL/OpenSSLCertificateI.cpp:83:80: error: invalid use of incomplete type ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|    83 |                 p.second = string(reinterpret_cast<const char*>(str->data), str->length);
|       |                                                                                ^~
| /usr/include/openssl/types.h:57:16: note: forward declaration of ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|    57 | typedef struct asn1_string_st ASN1_INTEGER;
|       |                ^~~~~~~~~~~~~~
| src/IceSSL/OpenSSLCertificateI.cpp:90:27: error: invalid use of incomplete type ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|    90 |             if (str && str->type == V_ASN1_IA5STRING && str->data && str->length > 0)
|       |                           ^~
| /usr/include/openssl/types.h:57:16: note: forward declaration of ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|    57 | typedef struct asn1_string_st ASN1_INTEGER;
|       |                ^~~~~~~~~~~~~~
| src/IceSSL/OpenSSLCertificateI.cpp:90:60: error: invalid use of incomplete type ‘ASN1_IA5STRING’ {aka ‘struct asn1_string_st’}
|    90 |             if (str && str->type == V_ASN1_IA5STRING && str->data && str->length > 0)
|       |                                                            ^~
…

Full buildlog
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/zeroc-ice_3.7.10-4_amd64-2026-04-19T14:04:59Z

Sebastian
#1138403#12
Date:
2026-07-31 05:48:48 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
mumble, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1138403@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Christopher Knadle <Chris.Knadle@coredump.us> (supplier of updated mumble package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 28 Jul 2026 17:07:23 -0400
Source: mumble
Architecture: source
Version: 1.5.857-2
Distribution: unstable
Urgency: medium
Maintainer: Debian VoIP Team <pkg-voip-maintainers@lists.alioth.debian.org>
Changed-By: Christopher Knadle <Chris.Knadle@coredump.us>
Closes: 1138403
Changes:
 mumble (1.5.857-2) unstable; urgency=medium
 .
   * debian/control:
     - Update Standards-Version to 4.7.4 (no changes needed)
     - Remove build-depends on libzeroc-ice-dev while Ice is disabled
   * debian/mumble-server.install:
     - Comment out installing MumbleServer.ice while Ice is disabled
   * debian/mumble-server.doc-base:
     - Comment entire file while Ice is disabled
   * debian/mumble-server-docs:
     - Comment out Ice/ while Ice is disabled
   * debian/NEWS:
     - Add entry explaining removal of Ice support with links to online
       references to relevant details
   * debian/patches:
     - Add 96-fix-ftbfs-openssl4.diff to fix FTBFS with OpenSSL 4.0
       (Closes: #1138403)
   * debian/rules:
     - Add "Dice=OFF" to disable Ice support due to Bug#1136923 until a fix
       can be found for the FTBFS due to deprecation of SliceChecksumDict in
       src:zeroc-ice
     - Comment out slice2html call in override_dh_auto_build routine while
       Ice support is disabled
Checksums-Sha1:
 9b9a650c15df200b12c91af5bf0da4299b8100ed 2745 mumble_1.5.857-2.dsc
 1821a06f73cc7c3635c13044cfd4e33b5c8c8146 26101864 mumble_1.5.857.orig.tar.gz
 ce9bbf218ec2967f2c51352935a1910b2cf176b3 228 mumble_1.5.857.orig.tar.gz.asc
 1c115fa64abdb3f72770aa751ae235246cbf10cb 50488 mumble_1.5.857-2.debian.tar.xz
 a02a5d579243e36f7e68753f5f115372b6a555ec 5508 mumble_1.5.857-2_source.buildinfo
Checksums-Sha256:
 4217ee3a3e14259026bb0f6280fdd8cc800e380d74e47d96385b95b4224e7ac1 2745 mumble_1.5.857-2.dsc
 e062ee0cb22f99283d21e9266b44587b92995f29141c6381c533a1803e9c3b47 26101864 mumble_1.5.857.orig.tar.gz
 c36ed56be8dd5b30a87289f66392c083299329229826aca7ddadca25e0b3b6dd 228 mumble_1.5.857.orig.tar.gz.asc
 dd462b846fcf892c892004d5d5e6b7d3625044728c42d582d9dba0e9f98f1015 50488 mumble_1.5.857-2.debian.tar.xz
 d42378b86f90f4d0ac103e0d3f0d0fe1f2882ad5d90ddc13e3c5ce8363608bf8 5508 mumble_1.5.857-2_source.buildinfo
Files:
 a6b6e98dc863d322d532afb37ec938cc 2745 sound optional mumble_1.5.857-2.dsc
 991fc07b642490f4e8199dac584b6880 26101864 sound optional mumble_1.5.857.orig.tar.gz
 530663c46f5477fd261ac4cbad0595ff 228 sound optional mumble_1.5.857.orig.tar.gz.asc
 f4fcddb94364660758a63c6d4ed611f4 50488 sound optional mumble_1.5.857-2.debian.tar.xz
 22e39494f4a55b0762841a19b07c828e 5508 sound optional mumble_1.5.857-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=ly9G
-----END PGP SIGNATURE-----