[rpms/radsecproxy] main: Add upstream patch for OpenSSL 4.0 support

[Robert Scheck <robert@fedoraproject.org>]

A new commit has been pushed.

Repo   : rpms/radsecproxy
Branch : main
Commit : 7edb316a46ba1a465e00494516d36318fc43dcbd
Author : Robert Scheck <robert@fedoraproject.org>
Date   : 2026-06-18T01:55:08+02:00
Stats  : +44/-2 in 2 file(s)
URL    : https://src.fedoraproject.org/rpms/radsecproxy/c/7edb316a46ba1a465e00494516d36318fc43dcbd?branch=main

Log:
Add upstream patch for OpenSSL 4.0 support

---
diff --git a/radsecproxy-1.11.2-openssl-4.0.patch b/radsecproxy-1.11.2-openssl-4.0.patch
new file mode 100644
index 0000000..57a9158
--- /dev/null
+++ b/radsecproxy-1.11.2-openssl-4.0.patch
@@ -0,0 +1,38 @@
+From acbe243054d736acb583d15fd0650eff5b655c8a Mon Sep 17 00:00:00 2001
+From: Fabian Mauchle <fabian.mauchle@switch.ch>
+Date: Wed, 10 Jun 2026 11:01:45 +0200
+Subject: [PATCH] maintain compatibility with OpenSSL 4
+
+---
+ tlscommon.c | 8 +++++++-
+ 1 file changed, 7 insertions(+), 1 deletion(-)
+
+diff --git a/tlscommon.c b/tlscommon.c
+index 4a2b8e0..fdf4ac6 100644
+--- a/tlscommon.c
++++ b/tlscommon.c
+@@ -116,7 +116,7 @@ void sslinit(void) {
+  * 
+  * @param name The X509_Name to be printed.
+  */
+-static char *print_x509_name(X509_NAME *name) {
++static char *print_x509_name(const X509_NAME *name) {
+     BIO *bio;
+     char *buf;
+ 
+@@ -904,9 +904,15 @@ static int certattr_matchothername(GENERAL_NAME *gn, struct certattrmatch *match
+ 
+ static int certattr_matchcn(X509 *cert, struct certattrmatch *match) {
+     int loc;
++#if OPENSSL_VERSION_NUMBER >= 0x30000000
++    const X509_NAME *nm;
++    const X509_NAME_ENTRY *e;
++    const ASN1_STRING *t;
++#else
+     X509_NAME *nm;
+     X509_NAME_ENTRY *e;
+     ASN1_STRING *t;
++#endif
+ 
+     nm = X509_get_subject_name(cert);
+     loc = -1;

diff --git a/radsecproxy.spec b/radsecproxy.spec
index 5bdc608..252678b 100644
--- a/radsecproxy.spec
+++ b/radsecproxy.spec
@@ -1,7 +1,7 @@
 Summary:        Generic RADIUS proxy with RadSec support
 Name:           radsecproxy
 Version:        1.11.2
-Release:        5%{?dist}
+Release:        6%{?dist}
 License:        BSD-3-Clause
 URL:            https://radsecproxy.github.io/
 Source0:        https://github.com/radsecproxy/radsecproxy/releases/download/%{version}/%{name}-%{version}.tar.gz
@@ -12,6 +12,7 @@ Source4:        %{name}.service
 Source5:        %{name}.logrotate
 Source6:        %{name}.tmpfilesd
 Source7:        %{name}.sysusersd
+Patch0:         https://github.com/radsecproxy/radsecproxy/commit/acbe243054d736acb583d15fd0650eff5b655c8a.patch#/radsecproxy-1.11.2-openssl-4.0.patch
 BuildRequires:  gnupg2
 BuildRequires:  gcc
 BuildRequires:  make
@@ -30,7 +31,7 @@ at the same time to be small, efficient and easy to configure.
 
 %prep
 %{gpgverify} --keyring='%{SOURCE2}' --signature='%{SOURCE1}' --data='%{SOURCE0}'
-%setup -q
+%autosetup -p1
 
 %build
 %configure
@@ -82,6 +83,9 @@ make check
 %dir %attr(0750,%{name},%{name}) %{_localstatedir}/log/%{name}/
 
 %changelog
+* Thu Jun 18 2026 Robert Scheck <robert@fedoraproject.org> 1.11.2-6
+- Add upstream patch for OpenSSL 4.0 support
+
 * Fri Jun 12 2026 Yaakov Selkowitz <yselkowi@redhat.com> - 1.11.2-5
 - Rebuilt for openssl 4.0