#1140502 sudo: FTBFS with openssl 4.0

Package:
src:sudo
Source:
src:sudo
Submitter:
Sebastian Andrzej Siewior
Date:
2026-06-21 19:17:01 UTC
Severity:
normal
Tags:
#1140502#5
Date:
2026-06-21 16:56:32 UTC
From:
To:
OpenSSL 4.0 is in experimental. This package fails to build against it:
| /bin/bash ../../libtool --tag=disable-static --mode=compile x86_64-linux-gnu-gcc -c -o hostcheck.lo -I../../../include -I../.. -I../../../lib/iolog -Wdate-time -D_FORTIFY_SOURCE=2 -DSUDO_DEVEL -DZLIB_CONST -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/sudo-1.9.17p2=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wall -pedantic -fvisibility=hidden -Wmissing-prototypes -Wno-unknown-pragmas -Wpointer-arith -Wshadow -Wsign-compare -Wwrite-strings -Wvla -Walloca -Wtrampolines -Wimplicit-fallthrough  -fPIE -fstack-protector-strong -fstack-clash-protection -fcf-protection ../../../lib/iolog/hostcheck.c
| libtool: compile:  x86_64-linux-gnu-gcc -c -I../../../include -I../.. -I../../../lib/iolog -Wdate-time -D_FORTIFY_SOURCE=2 -DSUDO_DEVEL -DZLIB_CONST -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/sudo-1.9.17p2=. -fstack-protector-strong -fstack-clash-protection -Wformat -Werror=format-security -fcf-protection -Wall -pedantic -fvisibility=hidden -Wmissing-prototypes -Wno-unknown-pragmas -Wpointer-arith -Wshadow -Wsign-compare -Wwrite-strings -Wvla -Walloca -Wtrampolines -Wimplicit-fallthrough -fstack-protector-strong -fstack-clash-protection -fcf-protection ../../../lib/iolog/hostcheck.c  -fPIC -DPIC -o .libs/hostcheck.o
| ../../../lib/iolog/hostcheck.c: In function 'matches_common_name':
| ../../../lib/iolog/hostcheck.c:203:27: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   203 |         common_name_entry = X509_NAME_get_entry(X509_get_subject_name((X509 *) cert), common_name_loc);
|       |                           ^
| ../../../lib/iolog/hostcheck.c:209:26: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   209 |         common_name_asn1 = X509_NAME_ENTRY_get_data(common_name_entry);
|       |                          ^
| ../../../lib/iolog/hostcheck.c: In function 'matches_subject_alternative_name':
| ../../../lib/iolog/hostcheck.c:326:41: error: invalid use of incomplete typedef 'ASN1_OCTET_STRING' {aka 'struct asn1_string_st'}
|   326 |             if(current_name->d.iPAddress->length == 4) {
|       |                                         ^~
| ../../../lib/iolog/hostcheck.c:333:49: error: invalid use of incomplete typedef 'ASN1_OCTET_STRING' {aka 'struct asn1_string_st'}
|   333 |             } else if (current_name->d.iPAddress->length == 16) {
|       |                                                 ^~
| make[3]: *** [Makefile:499: hostcheck.lo] Error 1
| make[3]: Leaving directory '/build/reproducible-path/sudo-1.9.17p2/build-simple/lib/iolog'

Full buildlog
https://breakpoint.cc/openssl-rebuild/logs-4/attempted/sudo_1.9.17p2-7_amd64-2026-06-21T12:49:54Z

Sebastian