Bug#1138423: openssh: FTBFS with openssl 4.0

Package: openssh
Version: 1:10.3p1-1
Severity: normal
Tags: sid
control: affects -1 src:openssl
User: [email protected]
Usertags: openssl-4.0

OpenSSL 4.0 is in experimental. This package fails to build against it:

| cc -g -O2 -Werror=3Dimplicit-function-declaration -ffile-prefix-map=3D/bu=
ild/reproducible-path/openssh-10.3p1=3D. -fstack-protector-strong -fstack-c=
lash-protection -Wformat -Werror=3Dformat-security -fcf-protection -pipe -W=
no-error=3Dformat-truncation -Wall -Wextra -Wpointer-arith -Wuninitialized =
-Wsign-compare -Wformat-security -Wsizeof-pointer-memaccess -Wno-pointer-si=
gn -Wno-unused-parameter -Wno-unused-result -Wimplicit-fallthrough -Wmislea=
ding-indentation -fno-strict-aliasing -D_FORTIFY_SOURCE=3D2 -ftrapv -fzero-=
call-used-regs=3Dused -ftrivial-auto-var-init=3Dzero -fno-builtin-memset -f=
stack-protector-strong -Wdate-time -D_FORTIFY_SOURCE=3D2 -g -O2 -Werror=3Di=
mplicit-function-declaration -ffile-prefix-map=3D/build/reproducible-path/o=
penssh-10.3p1=3D. -fstack-protector-strong -fstack-clash-protection -Wforma=
t -Werror=3Dformat-security -fcf-protection -DSSH_EXTRAVERSION=3D\"Debian-1=
\"   -I. -I../.. -I"/build/reproducible-path/openssh-10.3p1/debian/build-de=
b/openbsd-compat/include" -Wdate-time -D_FORTIFY_SOURCE=3D2 -D_XOPEN_SOURCE=
=3D600 -D_BSD_SOURCE -D_DEFAULT_SOURCE -D_GNU_SOURCE -I/usr/include/editlin=
e  -DOPENSSL_API_COMPAT=3D0x10100000L  -isystem /usr/include/mit-krb5 -isys=
tem /usr/include/mit-krb5 -isystem /usr/include/mit-krb5 -DSSHDIR=3D\"/etc/=
ssh\" -D_PATH_SSH_PROGRAM=3D\"/usr/bin/ssh\" -D_PATH_SSH_ASKPASS_DEFAULT=3D=
\"/usr/bin/ssh-askpass\" -D_PATH_SFTP_SERVER=3D\"/usr/lib/openssh/sftp-serv=
er\" -D_PATH_SSH_KEY_SIGN=3D\"/usr/lib/openssh/ssh-keysign\" -D_PATH_SSHD_S=
ESSION=3D\"/usr/lib/openssh/sshd-session\" -D_PATH_SSHD_AUTH=3D\"/usr/lib/o=
penssh/sshd-auth\" -D_PATH_SSH_PKCS11_HELPER=3D\"/usr/lib/openssh/ssh-pkcs1=
1-helper\" -D_PATH_SSH_SK_HELPER=3D\"/usr/lib/openssh/ssh-sk-helper\" -D_PA=
TH_SSH_PIDDIR=3D\"/run\" -D_PATH_PRIVSEP_CHROOT_DIR=3D\"/run/sshd\" -DHAVE_=
CONFIG_H -c ../../ssh-sk-client.c -o ssh-sk-client.o
| cc -o ssh ssh.o readconf.o clientloop.o sshtty.o sshconnect.o sshconnect2=
=2Eo mux.o ssh-pkcs11.o ssh-sk-client.o -L. -Lopenbsd-compat/ -Wl,-z,relro =
-Wl,-z,now -Wl,-z,relro -Wl,-z,now -Wl,-z,noexecstack -fstack-protector-str=
ong -Wl,--as-needed -Wl,-z,relro -Wl,-z,now  -lssh -lopenbsd-compat -lmd  -=
lselinux -L/usr/lib/x86_64-linux-gnu/mit-krb5 -lgssapi_krb5 -lcrypto  -lz
| /usr/bin/x86_64-linux-gnu-ld.bfd: openbsd-compat//libopenbsd-compat.a(ope=
nssl-compat.o): in function `ssh_libcrypto_init':
| ./debian/build-deb/openbsd-compat/../../../openbsd-compat/openssl-compat.=
c:80:(.text+0x69): undefined reference to `ENGINE_load_builtin_engines'
| /usr/bin/x86_64-linux-gnu-ld.bfd: ./debian/build-deb/openbsd-compat/../..=
/../openbsd-compat/openssl-compat.c:81:(.text+0x6e): undefined reference to=
 `ENGINE_register_all_complete'
| collect2: error: ld returned 1 exit status
| make[2]: *** [Makefile:223: ssh] Error 1


Full buildlog
 	https://breakpoint.cc/openssl-rebuild/logs-4/attempted/openssh_10.3p1-1_a=
md64-2026-04-19T12:07:47Z

Sebastian