Bug#1137387: apache2: FTBFS with openssl 4.0

Package: apache2
Version: 2.4.66-8
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: [email protected]
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| ssl_engine_ocsp.c: In function 'extract_responder_uri':
| ssl_engine_ocsp.c:42:86: error: invalid use of incomplete typedef 'ASN1_IA5STRING' {aka 'struct asn1_string_st'}
|    42 |                                  (char *)value->location->d.uniformResourceIdentifier->data);
|       |                                                                                      ^~
| make[6]: *** [/build/reproducible-path/apache2-2.4.66/build/rules.mk:212: ssl_engine_ocsp.slo] Error 1
| make[6]: *** Waiting for unfinished jobs....
| ssl_util_ssl.c: In function 'modssl_X509_NAME_ENTRY_to_string':
| ssl_util_ssl.c:226:43: warning: passing argument 2 of 'asn1_string_convert' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   226 |     char *result = asn1_string_convert(p, X509_NAME_ENTRY_get_data(xsne), raw);
|       |                                           ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
| ssl_util_ssl.c:205:62: note: expected 'ASN1_STRING *' {aka 'struct asn1_string_st *'} but argument is of type 'const ASN1_STRING *' {aka 'const struct asn1_string_st *'}
|   205 | static char *asn1_string_convert(apr_pool_t *p, ASN1_STRING *asn1str, int raw)
|       |                                                 ~~~~~~~~~~~~~^~~~~~~
| ssl_util_ssl.c: In function 'getIDs':
| ssl_util_ssl.c:376:10: warning: assignment discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   376 |     subj = X509_get_subject_name(x509);
|       |          ^
| ssl_util_ssl.c:379:49: warning: passing argument 2 of 'modssl_X509_NAME_ENTRY_to_string' discards 'const' qualifier from pointer target type [-Wdiscarded-qualifiers]
|   379 |             modssl_X509_NAME_ENTRY_to_string(p, X509_NAME_get_entry(subj, i), 0);
|       |                                                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~~
| ssl_util_ssl.c:223:72: note: expected 'X509_NAME_ENTRY *' {aka 'struct X509_name_entry_st *'} but argument is of type 'const X509_NAME_ENTRY *' {aka 'const struct X509_name_entry_st *'}
|   223 | char *modssl_X509_NAME_ENTRY_to_string(apr_pool_t *p, X509_NAME_ENTRY *xsne,

Full buildlog
	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/apache2_2.4.66-8_amd64-2026-04-19T08:03:53Z

Sebastian