[rpms/syslog-ng] rawhide: Backport patch for OpenSSL 4.0 from upstream

[rpms/syslog-ng] rawhide: Backport patch for OpenSSL 4.0 from upstream

[Benjamin A. Beasley]

A new commit has been pushed.

Repo   : rpms/syslog-ng
Branch : rawhide
Commit : 59f9bd030bda0698aad0579713033c3b4de5c404
Author : Benjamin A. Beasley <code@musicinmybrain.net>
Date   : 2026-06-24T07:13:53+01:00
Stats  : +36/-0 in 2 file(s)
URL    : https://src.fedoraproject.org/rpms/syslog-ng/c/59f9bd030bda0698aad0579713033c3b4de5c404?branch=rawhide

Log:
Backport patch for OpenSSL 4.0 from upstream

---
diff --git a/5688.patch b/5688.patch
new file mode 100644
index 0000000..1a1ca09
--- /dev/null
+++ b/5688.patch
@@ -0,0 +1,28 @@
+From c5602daad14bf3c1f51bfaf7fbfcf684b8f45034 Mon Sep 17 00:00:00 2001
+From: Hofi <hofione@gmail.com>
+Date: Mon, 4 May 2026 10:40:57 +0200
+Subject: [PATCH] tls-verifier: use dedicated ASN1_STRING field accessors
+ instead of direct member access
+
+Signed-off-by: Hofi <hofione@gmail.com>
+---
+ lib/transport/tls-verifier.c | 4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+diff --git a/lib/transport/tls-verifier.c b/lib/transport/tls-verifier.c
+index d5d5993502b..23dfd3bc2f2 100644
+--- a/lib/transport/tls-verifier.c
++++ b/lib/transport/tls-verifier.c
+@@ -220,10 +220,10 @@ tls_verify_certificate_name(X509 *cert, const gchar *host_name)
+                 {
+                   gchar dotted_ip[64] = {0};
+                   int addr_family = AF_INET;
+-                  if (gen_name->d.iPAddress->length == 16)
++                  if (ASN1_STRING_length(gen_name->d.iPAddress) == 16)
+                     addr_family = AF_INET6;
+ 
+-                  if (inet_ntop(addr_family, gen_name->d.iPAddress->data, dotted_ip, sizeof(dotted_ip)))
++                  if (inet_ntop(addr_family, ASN1_STRING_get0_data(gen_name->d.iPAddress), dotted_ip, sizeof(dotted_ip)))
+                     {
+                       g_strlcpy(pattern_buf, dotted_ip, sizeof(pattern_buf));
+                       found = TRUE;

diff --git a/syslog-ng.spec b/syslog-ng.spec
index be5f347..101f92b 100644
--- a/syslog-ng.spec
+++ b/syslog-ng.spec
@@ -19,6 +19,13 @@ Source1: syslog-ng.conf
 Source2: syslog-ng.logrotate
 Source3: syslog-ng.service
 
+# tls-verifier: use dedicated ASN1_STRING field accessors instead of direct
+# member access
+# https://github.com/syslog-ng/syslog-ng/pull/5688
+#
+# Fixes failure to build with OpenSSL 4.0.
+Patch: https://github.com/syslog-ng/syslog-ng/pull/5688.patch
+
 BuildRequires: make
 BuildRequires: bison
 BuildRequires: cyrus-sasl-devel
@@ -656,6 +663,7 @@ fi
 %changelog
 * Wed Jun 24 2026 Benjamin A. Beasley <code@musicinmybrain.net> - 4.11.0-5
 - Rebuilt for abseil-cpp 20260526.0
+- Backport patch for OpenSSL 4.0 from upstream
 
 * Tue Jun 16 2026 Peter Czanik <peter@czanik.hu> - 4.11.0-4
 - disable riemann-c-client temporarily (grpc uses old, riemann the new