diff mbox series

[meta-oe,RFC,10/20] boinc-client: fix build with OpenSSL 4.0

Message ID 20260827185324.78997-11-jaipaul.cheernam@est.tech
State New
Headers show
Series Fix OpenSSL 4.0.1 build failures across meta-openembedded | expand

Commit Message

Jaipaul Cheernam Aug. 27, 2026, 6:53 p.m. UTC 
OpenSSL 4.0 returns const X509_NAME* from X509_get_subject_name().
Minimal fix for the const qualifier issue in cert_verify_file.

Upstream-Status: Submitted [https://github.com/BOINC/boinc/pull/7209]
Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
---
 .../0001-Fix-build-with-OpenSSL-4.0.patch     | 41 +++++++++++++++++++
 .../boinc/boinc-client_8.2.15.bb              |  1 +
 2 files changed, 42 insertions(+)
 create mode 100644 meta-oe/recipes-extended/boinc/boinc-client/0001-Fix-build-with-OpenSSL-4.0.patch
diff mbox series

Patch

diff --git a/meta-oe/recipes-extended/boinc/boinc-client/0001-Fix-build-with-OpenSSL-4.0.patch b/meta-oe/recipes-extended/boinc/boinc-client/0001-Fix-build-with-OpenSSL-4.0.patch
new file mode 100644
index 0000000000..71162ac3af
--- /dev/null
+++ b/meta-oe/recipes-extended/boinc/boinc-client/0001-Fix-build-with-OpenSSL-4.0.patch
@@ -0,0 +1,41 @@ 
+From 910aad27e06cf7180599c1dc5649a2dfadae6597 Mon Sep 17 00:00:00 2001
+From: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
+Date: Thu, 27 Aug 2026 09:14:24 +0000
+Subject: [PATCH] lib/crypt: fix const X509_NAME for OpenSSL 4.0
+
+OpenSSL 4.0 returns const X509_NAME* from X509_get_subject_name().
+Cast where X509_NAME_oneline requires non-const.
+
+Upstream-Status: Submitted [https://github.com/BOINC/boinc/pull/7209]
+
+Note: The upstream fix is part of a large 29-commit refactoring PR
+that rewrites the entire crypt.cpp. This is a minimal standalone fix
+for the const X509_NAME issue only.
+
+Signed-off-by: Jaipaul Cheernam <jaipaul.cheernam@est.tech>
+---
+ lib/crypt.cpp | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/lib/crypt.cpp b/lib/crypt.cpp
+index 904fe2736c..a06b453324 100644
+--- a/lib/crypt.cpp
++++ b/lib/crypt.cpp
+@@ -774,7 +774,7 @@ int cert_verify_file(
+     DATA_BLOCK sig_db;
+     BIO *bio;
+     X509 *cert;
+-    X509_NAME *subj;
++    const X509_NAME *subj;
+ 
+     if (signatures->signatures.size() == 0) {
+         printf("No signatures available for file ('%s').\n", origFile);
+@@ -824,7 +824,7 @@ int cert_verify_file(
+             }
+             fflush(stdout);
+             subj = X509_get_subject_name(cert);
+-            X509_NAME_oneline(subj, buf, 256);
++            X509_NAME_oneline((X509_NAME *)subj, buf, 256);
+             // ???
+             //X509_NAME_free(subj);
+             X509_free(cert);
diff --git a/meta-oe/recipes-extended/boinc/boinc-client_8.2.15.bb b/meta-oe/recipes-extended/boinc/boinc-client_8.2.15.bb
index 62aa757a59..2d386d066c 100644
--- a/meta-oe/recipes-extended/boinc/boinc-client_8.2.15.bb
+++ b/meta-oe/recipes-extended/boinc/boinc-client_8.2.15.bb
@@ -39,6 +39,7 @@  TAG = "client_release/8.2/8.2.15"
 SRC_URI = "git://github.com/BOINC/boinc;protocol=https;branch=${BRANCH};tag=${TAG} \
            file://boinc-AM_CONDITIONAL.patch \
            file://0001-scripts-Do-not-check-for-files-on-build-host.patch \
+           file://0001-Fix-build-with-OpenSSL-4.0.patch \
 "
 
 UPSTREAM_CHECK_GITTAGREGEX = "client_release/8.2/(?P<pver>\d+(\.\d+)+)"