OpenSSL 4.0 is in experimental. This package fails to build against it:
| [ 75%] Building C object CMakeFiles/netconf2.dir/src/session_openssl.c.o
| /usr/bin/cc -Dnetconf2_EXPORTS -I/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu/compat -I/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu/src -I/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu/include -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/libnetconf2-3.7.10=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wdate-time -D_FORTIFY_SOURCE=2 -Wdate-time -D_FORTIFY_SOURCE=2 -Wall -Wextra -fvisibility=hidden -std=c99 -DNC_ENABLED_SSH_TLS -fPIC -MD -MT CMakeFiles/netconf2.dir/src/session_openssl.c.o -MF CMakeFiles/netconf2.dir/src/session_openssl.c.o.d -o CMakeFiles/netconf2.dir/src/session_openssl.c.o -c /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c: In function ‘nc_tls_get_san_value_type_wrap’:
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:505:15: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 505 | if (ip->length == 4) {
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:54: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 506 | if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) {
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:67: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 506 | if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) {
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:80: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 506 | if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) {
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:506:93: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 506 | if (asprintf(san_value, "%d.%d.%d.%d", ip->data[0], ip->data[1], ip->data[2], ip->data[3]) == -1) {
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:511:22: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 511 | } else if (ip->length == 16) {
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:23: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5],
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:36: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5],
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:49: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5],
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:62: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5],
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:75: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5],
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:513:88: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 513 | ip->data[0], ip->data[1], ip->data[2], ip->data[3], ip->data[4], ip->data[5],
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:23: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11],
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:36: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11],
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:49: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11],
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:62: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11],
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:75: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11],
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:514:89: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 514 | ip->data[6], ip->data[7], ip->data[8], ip->data[9], ip->data[10], ip->data[11],
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:23: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 515 | ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) {
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:37: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 515 | ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) {
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:51: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 515 | ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) {
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:515:65: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 515 | ip->data[12], ip->data[13], ip->data[14], ip->data[15]) == -1) {
| | ^~
| In file included from /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:35:
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:521:80: error: invalid use of incomplete typedef ‘ASN1_OCTET_STRING’ {aka ‘struct asn1_string_st’}
| 521 | WRN(NULL, "SAN IP address in an unknown format (length is %d).", ip->length);
| | ^~
| /build/reproducible-path/libnetconf2-3.7.10/src/log_p.h:57:123: note: in definition of macro ‘WRN’
| 57 | #define WRN(session, ...) if(ATOMIC_LOAD_RELAXED(verbose_level)>=NC_VERB_WARNING){nc_log_printf(session, NC_VERB_WARNING, __VA_ARGS__);}
| | ^~~~~~~~~~~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c: In function ‘nc_tls_move_crls_to_store’:
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:789:5: warning: ‘X509_STORE_get0_objects’ is deprecated: Since OpenSSL 4.0;Use X509_STORE_get1_objects [-Wdeprecated-declarations]
| 789 | objs = X509_STORE_get0_objects(src);
| | ^~~~
| In file included from /usr/include/openssl/x509.h:494,
| from /usr/include/openssl/ssl.h:34,
| from /build/reproducible-path/libnetconf2-3.7.10/src/session_wrapper.h:48,
| from /build/reproducible-path/libnetconf2-3.7.10/src/session_p.h:36,
| from /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:37:
| /usr/include/openssl/x509_vfy.h:527:24: note: declared here
| 527 | STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
| | ^~~~~~~~~~~~~~~~~~~~~~~
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c: In function ‘nc_server_tls_get_crl_distpoint_uris_wrap’:
| /build/reproducible-path/libnetconf2-3.7.10/src/session_openssl.c:1370:5: warning: ‘X509_STORE_get0_objects’ is deprecated: Since OpenSSL 4.0;Use X509_STORE_get1_objects [-Wdeprecated-declarations]
| 1370 | objs = X509_STORE_get0_objects(cert_store);
| | ^~~~
| /usr/include/openssl/x509_vfy.h:527:24: note: declared here
| 527 | STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(const X509_STORE *xs);
| | ^~~~~~~~~~~~~~~~~~~~~~~
| make[3]: *** [CMakeFiles/netconf2.dir/build.make:320: CMakeFiles/netconf2.dir/src/session_openssl.c.o] Error 1
| make[3]: Leaving directory '/build/reproducible-path/libnetconf2-3.7.10/obj-x86_64-linux-gnu'
Full buildlog
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/libnetconf2_3.7.10-2_amd64-2026-04-19T10:51:08Z
Sebastian