OpenSSL 4.0 is in experimental. This package fails to build against it:
| libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../.. -DPACKAGE=\"xmlsec1\" -I../../include -I../../include -D__XMLSEC_FUNCTION__=__func__ -DXMLSEC_OPENSSL3_ENGINES=1 -DXMLSEC_NO_FTP=1 -DXMLSEC_NO_HTTP=1 -DXMLSEC_NO_MD5=1 -DXMLSEC_NO_MLDSA=1 -DXMLSEC_NO_SLHDSA=1 -DXMLSEC_NO_GOST=1 -DXMLSEC_NO_GOST2012=1 -DXMLSEC_NO_CRYPTO_DYNAMIC_LOADING=1 -DXMLSEC_CRYPTO_OPENSSL=1 -I/usr/include/libxml2 -I/usr/include/libxml2 -Wdate-time -D_FORTIFY_SOURCE=2 -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/xmlsec1-1.3.10=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -fno-strict-overflow -fno-strict-aliasing -O -std=c99 -pedantic -pedantic-errors -W -Wall -Wextra -fno-inline -Wnull-dereference -Wdouble-promotion -Wformat=2 -Wformat-security -Wformat-nonliteral -Wconversion -Wunused -Wshadow -Wpointer-arith -Wcast-align -Wwrite-strings -Wmissing-prototypes -Wnested-externs -Wredundant-decls -Wformat-overflow=2 -Wformat-signedness -fno-builtin-memset -c x509.c -fPIC -DPIC -o .libs/libxmlsec1_openssl_la-x509.o
| x509.c: In function 'xmlSecOpenSSLX509SKIWrite':
| x509.c:1018:9: error: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
| 1018 | ext = X509_get_ext(cert, index);
| | ^
| x509.c: In function 'xmlSecOpenSSLKeyDataX509Write':
| x509.c:1303:61: error: passing argument 1 of 'xmlSecOpenSSLX509NameWrite' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
| 1303 | x509Value->subject = xmlSecOpenSSLX509NameWrite(X509_get_subject_name(cert));
| | ^~~~~~~~~~~~~~~~~~~~~~~~~~~
| x509.c:1156:39: note: expected 'X509_NAME *' {aka 'struct X509_name_st *'} but argument is of type 'const X509_NAME *' {aka 'const struct X509_name_st *'}
| 1156 | xmlSecOpenSSLX509NameWrite(X509_NAME* nm) {
| | ~~~~~~~~~~~^~
| x509.c:1315:64: error: passing argument 1 of 'xmlSecOpenSSLX509NameWrite' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
| 1315 | x509Value->issuerName = xmlSecOpenSSLX509NameWrite(X509_get_issuer_name(cert));
| | ^~~~~~~~~~~~~~~~~~~~~~~~~~
| x509.c:1156:39: note: expected 'X509_NAME *' {aka 'struct X509_name_st *'} but argument is of type 'const X509_NAME *' {aka 'const struct X509_name_st *'}
| 1156 | xmlSecOpenSSLX509NameWrite(X509_NAME* nm) {
| | ~~~~~~~~~~~^~
| x509.c: In function 'xmlSecOpenSSLX509CertDebugDump':
| x509.c:1860:35: error: passing argument 1 of 'xmlSecOpenSSLX509NameToString' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
| 1860 | xmlSecOpenSSLX509NameToString(X509_get_subject_name(cert), buf, sizeof(buf));
| | ^~~~~~~~~~~~~~~~~~~~~~~~~~~
| x509.c:1824:42: note: expected 'X509_NAME *' {aka 'struct X509_name_st *'} but argument is of type 'const X509_NAME *' {aka 'const struct X509_name_st *'}
| 1824 | xmlSecOpenSSLX509NameToString(X509_NAME* name, char* buf, int bufLen) {
| | ~~~~~~~~~~~^~~~
| x509.c:1862:35: error: passing argument 1 of 'xmlSecOpenSSLX509NameToString' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
| 1862 | xmlSecOpenSSLX509NameToString(X509_get_issuer_name(cert), buf, sizeof(buf));
| | ^~~~~~~~~~~~~~~~~~~~~~~~~~
| x509.c:1824:42: note: expected 'X509_NAME *' {aka 'struct X509_name_st *'} but argument is of type 'const X509_NAME *' {aka 'const struct X509_name_st *'}
| 1824 | xmlSecOpenSSLX509NameToString(X509_NAME* name, char* buf, int bufLen) {
| | ~~~~~~~~~~~^~~~
| x509.c: In function 'xmlSecOpenSSLX509CertDebugXmlDump':
| x509.c:1885:35: error: passing argument 1 of 'xmlSecOpenSSLX509NameToString' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
| 1885 | xmlSecOpenSSLX509NameToString(X509_get_subject_name(cert), buf, sizeof(buf));
| | ^~~~~~~~~~~~~~~~~~~~~~~~~~~
| x509.c:1824:42: note: expected 'X509_NAME *' {aka 'struct X509_name_st *'} but argument is of type 'const X509_NAME *' {aka 'const struct X509_name_st *'}
| 1824 | xmlSecOpenSSLX509NameToString(X509_NAME* name, char* buf, int bufLen) {
| | ~~~~~~~~~~~^~~~
| x509.c:1891:35: error: passing argument 1 of 'xmlSecOpenSSLX509NameToString' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
| 1891 | xmlSecOpenSSLX509NameToString(X509_get_issuer_name(cert), buf, sizeof(buf));
| | ^~~~~~~~~~~~~~~~~~~~~~~~~~
| x509.c:1824:42: note: expected 'X509_NAME *' {aka 'struct X509_name_st *'} but argument is of type 'const X509_NAME *' {aka 'const struct X509_name_st *'}
| 1824 | xmlSecOpenSSLX509NameToString(X509_NAME* name, char* buf, int bufLen) {
| | ~~~~~~~~~~~^~~~
| make[5]: *** [Makefile:801: libxmlsec1_openssl_la-x509.lo] Error 1
Full buildlog
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/xmlsec1_1.3.10-2_amd64-2026-04-19T10:13:08Z
Sebastian