From 806c0af5ee008ace06dbf1623765ff97edb89e33 Mon Sep 17 00:00:00 2001
From: dmiller <dmiller@e0a8ed71-7df4-0310-8962-fdc924857419>
Date: Fri, 19 Jun 2026 00:05:22 +0000
Subject: [PATCH] Fix disparity in const between OpenSSL 3 and 4

---
 ncat/ncat_ssl.c | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/ncat/ncat_ssl.c b/ncat/ncat_ssl.c
index a27b537fc..b68866376 100644
--- a/ncat/ncat_ssl.c
+++ b/ncat/ncat_ssl.c
@@ -81,6 +81,12 @@
 #define FUNC_ASN1_STRING_length(_s) ((_s)->length)
 #endif
 
+#if OPENSSL_VERSION_NUMBER >= 0x40000000L
+#define OPENSSL4_CONST const
+#else
+#define OPENSSL4_CONST
+#endif
+
 #if OPENSSL_VERSION_NUMBER >= 0x30000000L
 #include <openssl/provider.h>
 /* Deprecated in OpenSSL 3.0 */
@@ -267,7 +273,7 @@ static int wildcard_match(const char *pattern, const char *hostname, int len)
 static int cert_match_dnsname(X509 *cert, const char *hostname,
     unsigned int *num_checked)
 {
-    const X509_EXTENSION *ext;
+    OPENSSL4_CONST X509_EXTENSION *ext;
     STACK_OF(GENERAL_NAME) *gen_names;
     const X509V3_EXT_METHOD *method;
     const unsigned char *data;