Diff of the two buildlogs:

--
--- b1/build.log	2025-02-23 01:00:49.212049337 +0000
+++ b2/build.log	2025-02-23 01:09:07.957477960 +0000
@@ -1,6 +1,6 @@
 I: pbuilder: network access will be disabled during build
-I: Current time: Fri Mar 27 19:21:35 -12 2026
-I: pbuilder-time-stamp: 1774682495
+I: Current time: Sun Feb 23 15:00:54 +14 2025
+I: pbuilder-time-stamp: 1740272454
 I: Building the build Environment
 I: extracting base tarball [/var/cache/pbuilder/unstable-reproducible-base.tgz]
 I: copying local configuration
@@ -29,54 +29,86 @@
 dpkg-source: info: applying 0001-Fix-compilation-with-GCC-15.patch
 I: using fakeroot in build.
 I: Installing the build-deps
-I: user script /srv/workspace/pbuilder/86210/tmp/hooks/D02_print_environment starting
+I: user script /srv/workspace/pbuilder/59276/tmp/hooks/D01_modify_environment starting
+debug: Running on ionos2-i386.
+I: Changing host+domainname to test build reproducibility
+I: Adding a custom variable just for the fun of it...
+I: Changing /bin/sh to bash
+'/bin/sh' -> '/bin/bash'
+lrwxrwxrwx 1 root root 9 Feb 23 01:01 /bin/sh -> /bin/bash
+I: Setting pbuilder2's login shell to /bin/bash
+I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other
+I: user script /srv/workspace/pbuilder/59276/tmp/hooks/D01_modify_environment finished
+I: user script /srv/workspace/pbuilder/59276/tmp/hooks/D02_print_environment starting
 I: set
-  BUILDDIR='/build/reproducible-path'
-  BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other'
-  BUILDUSERNAME='pbuilder1'
-  BUILD_ARCH='i386'
-  DEBIAN_FRONTEND='noninteractive'
-  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=22 '
-  DISTRIBUTION='unstable'
-  HOME='/root'
-  HOST_ARCH='i386'
+  BASH=/bin/sh
+  BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath
+  BASH_ALIASES=()
+  BASH_ARGC=()
+  BASH_ARGV=()
+  BASH_CMDS=()
+  BASH_LINENO=([0]="12" [1]="0")
+  BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.
+  BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment")
+  BASH_VERSINFO=([0]="5" [1]="2" [2]="37" [3]="1" [4]="release" [5]="i686-pc-linux-gnu")
+  BASH_VERSION='5.2.37(1)-release'
+  BUILDDIR=/build/reproducible-path
+  BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other'
+  BUILDUSERNAME=pbuilder2
+  BUILD_ARCH=i386
+  DEBIAN_FRONTEND=noninteractive
+  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=10 '
+  DIRSTACK=()
+  DISTRIBUTION=unstable
+  EUID=0
+  FUNCNAME=([0]="Echo" [1]="main")
+  GROUPS=()
+  HOME=/root
+  HOSTNAME=i-capture-the-hostname
+  HOSTTYPE=i686
+  HOST_ARCH=i386
   IFS=' 	
   '
-  INVOCATION_ID='704b0d4d9de5472786ffe14eeacc468d'
-  LANG='C'
-  LANGUAGE='en_US:en'
-  LC_ALL='C'
-  LD_LIBRARY_PATH='/usr/lib/libeatmydata'
-  LD_PRELOAD='libeatmydata.so'
-  MAIL='/var/mail/root'
-  OPTIND='1'
-  PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games'
-  PBCURRENTCOMMANDLINEOPERATION='build'
-  PBUILDER_OPERATION='build'
-  PBUILDER_PKGDATADIR='/usr/share/pbuilder'
-  PBUILDER_PKGLIBDIR='/usr/lib/pbuilder'
-  PBUILDER_SYSCONFDIR='/etc'
-  PPID='86210'
-  PS1='# '
-  PS2='> '
+  INVOCATION_ID=ee13af0ff66e4f72bfa6f5e98c16def3
+  LANG=C
+  LANGUAGE=de_CH:de
+  LC_ALL=C
+  LD_LIBRARY_PATH=/usr/lib/libeatmydata
+  LD_PRELOAD=libeatmydata.so
+  MACHTYPE=i686-pc-linux-gnu
+  MAIL=/var/mail/root
+  OPTERR=1
+  OPTIND=1
+  OSTYPE=linux-gnu
+  PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path
+  PBCURRENTCOMMANDLINEOPERATION=build
+  PBUILDER_OPERATION=build
+  PBUILDER_PKGDATADIR=/usr/share/pbuilder
+  PBUILDER_PKGLIBDIR=/usr/lib/pbuilder
+  PBUILDER_SYSCONFDIR=/etc
+  PIPESTATUS=([0]="0")
+  POSIXLY_CORRECT=y
+  PPID=59276
   PS4='+ '
-  PWD='/'
-  SHELL='/bin/bash'
-  SHLVL='2'
-  SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.TZUupi6W/pbuilderrc_gIPh --distribution unstable --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.TZUupi6W/b1 --logfile b1/build.log canl-c_3.0.0-6.dsc'
-  SUDO_GID='112'
-  SUDO_UID='107'
-  SUDO_USER='jenkins'
-  TERM='unknown'
-  TZ='/usr/share/zoneinfo/Etc/GMT+12'
-  USER='root'
-  _='/usr/bin/systemd-run'
-  http_proxy='http://213.165.73.152:3128'
+  PWD=/
+  SHELL=/bin/bash
+  SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix
+  SHLVL=3
+  SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.TZUupi6W/pbuilderrc_IBfl --distribution unstable --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.TZUupi6W/b2 --logfile b2/build.log canl-c_3.0.0-6.dsc'
+  SUDO_GID=112
+  SUDO_UID=107
+  SUDO_USER=jenkins
+  TERM=unknown
+  TZ=/usr/share/zoneinfo/Etc/GMT-14
+  UID=0
+  USER=root
+  _='I: set'
+  http_proxy=http://46.16.76.132:3128
 I: uname -a
-  Linux ionos16-i386 6.1.0-31-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.128-1 (2025-02-07) x86_64 GNU/Linux
+  Linux i-capture-the-hostname 6.1.0-31-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.128-1 (2025-02-07) x86_64 GNU/Linux
 I: ls -l /bin
-  lrwxrwxrwx 1 root root 7 Nov 22  2024 /bin -> usr/bin
-I: user script /srv/workspace/pbuilder/86210/tmp/hooks/D02_print_environment finished
+  lrwxrwxrwx 1 root root 7 Nov 22 14:40 /bin -> usr/bin
+I: user script /srv/workspace/pbuilder/59276/tmp/hooks/D02_print_environment finished
  -> Attempting to satisfy build-dependencies
  -> Creating pbuilder-satisfydepends-dummy package
 Package: pbuilder-satisfydepends-dummy
@@ -261,7 +293,7 @@
 Get: 125 http://deb.debian.org/debian unstable/main i386 texlive-latex-recommended all 2024.20250114-1 [8760 kB]
 Get: 126 http://deb.debian.org/debian unstable/main i386 texlive-pictures all 2024.20250114-1 [17.1 MB]
 Get: 127 http://deb.debian.org/debian unstable/main i386 texlive-latex-extra all 2024.20250114-1 [24.7 MB]
-Fetched 143 MB in 1s (101 MB/s)
+Fetched 143 MB in 2s (61.5 MB/s)
 Preconfiguring packages ...
 Selecting previously unselected package m4.
 (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 19761 files and directories currently installed.)
@@ -688,8 +720,8 @@
 Setting up tzdata (2025a-2) ...
 
 Current default time zone: 'Etc/UTC'
-Local time is now:      Sat Mar 28 07:22:03 UTC 2026.
-Universal Time is now:  Sat Mar 28 07:22:03 UTC 2026.
+Local time is now:      Sun Feb 23 01:02:46 UTC 2025.
+Universal Time is now:  Sun Feb 23 01:02:46 UTC 2025.
 Run 'dpkg-reconfigure tzdata' if you wish to change it.
 
 Setting up autotools-dev (20220109.1) ...
@@ -819,7 +851,11 @@
 fakeroot is already the newest version (1.37-1).
 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
 I: Building the package
-I: Running cd /build/reproducible-path/canl-c-3.0.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S  > ../canl-c_3.0.0-6_source.changes
+I: user script /srv/workspace/pbuilder/59276/tmp/hooks/A99_set_merged_usr starting
+Not re-configuring usrmerge for unstable
+I: user script /srv/workspace/pbuilder/59276/tmp/hooks/A99_set_merged_usr finished
+hostname: Name or service not known
+I: Running cd /build/reproducible-path/canl-c-3.0.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S  > ../canl-c_3.0.0-6_source.changes
 dpkg-buildpackage: info: source package canl-c
 dpkg-buildpackage: info: source version 3.0.0-6
 dpkg-buildpackage: info: source distribution unstable
@@ -848,36 +884,36 @@
    debian/rules override_dh_auto_configure
 make[1]: Entering directory '/build/reproducible-path/canl-c-3.0.0'
 ./configure --root= --libdir=lib/i386-linux-gnu
-Checking cppunit ... (using default /usr)
-Checking globus-gssapi-gsi ... (using default /opt/globus)
-Checking myproxy ... (using default /opt/globus)
-Looking for some caffein ... (using default /usr/java/latest)
-Checking gsoap ... (using default /usr)
-Checking libcrypto ... /usr
 Checking gridsite-openssl ... (using default /usr)
+Checking activemq-cpp ... (using default /opt/activemq-cpp-library)
 Checking classads ... (using default /usr)
 Checking libcares ... /usr
-Checking activemq-cpp ... (using default /opt/activemq-cpp-library)
 Checking voms-2.0 ... (using default /usr)
-Checking expat ... (using default /usr)
 Checking gsoap++ ... (using default /usr)
+Looking for some caffein ... (using default /usr/java/latest)
+Checking libcrypto ... /usr
+Checking gsoap ... (using default /usr)
+Checking myproxy ... (using default /opt/globus)
+Checking globus-gssapi-gsi ... (using default /opt/globus)
+Checking expat ... (using default /usr)
+Checking cppunit ... (using default /usr)
 Writing config.status
 
 Building modules: canl.c
 Mode: single module
 
 Required externals:
-	texlive-latex-extra: -
-	texlive-fonts-recommended: -
+	tetex-latex: -
 	libtool: -
+	krb5-devel: -
+	cares: /usr
 	texlive-latex-recommended: -
+	texlive-latex-extra: -
 	flex: -
-	bison: -
 	pkgconfig: -
-	tetex-latex: -
-	krb5-devel: -
-	cares: /usr
+	texlive-fonts-recommended: -
 	openssl: -
+	bison: -
 LIBCARES_CFLAGS=
 LIBCARES_LIBS=-lcares 
 
@@ -888,63 +924,58 @@
    debian/rules override_dh_auto_build
 make[1]: Entering directory '/build/reproducible-path/canl-c-3.0.0'
 CFLAGS="-g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2" FORCE_SOURCE_DATE=1 dh_auto_build
-	make -j22
+	make -j10
 make[2]: Entering directory '/build/reproducible-path/canl-c-3.0.0'
 ./src/gen_err_desc.pl ./src/canl_error_codes ./src/canl_error_desc > canl_err_desc.c
 ./src/gen_err_codes.pl < ./src/canl_error_codes > canl_err.h
 mkdir namespaces_parse
-mkdir signing_policy_parse
 (cd namespaces_parse; \
  bison -y -d  .././src/proxy/namespaces_parse.y && \
  mv y.tab.c ../namespaces_parse.c && \
  mv y.tab.h ../namespaces_parse.h)
-printf "\134def\134version{3.0.0}\n" > ver.tex
+mkdir signing_policy_parse
 (cd signing_policy_parse; \
  bison -y -d  .././src/proxy/signing_policy_parse.y && \
  mv y.tab.c ../signing_policy_parse.c && \
  mv y.tab.h ../signing_policy_parse.h)
+printf "\134def\134version{3.0.0}\n" > ver.tex
+libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c canl_err_desc.c -fPIC -I./src   -I. -o canl_err_desc.lo
 libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl.c -fPIC -I./src   -I. -o canl.lo
-libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_err.c -fPIC -I./src   -I. -o canl_err.lo
-libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_dns.c -fPIC -I./src   -I. -o canl_dns.lo
-libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_ssl.c -fPIC -I./src   -I. -o canl_ssl.lo
-libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_cert.c -fPIC -I./src   -I. -o canl_cert.lo
-.././src/proxy/namespaces_parse.y:39.1-14: warning: POSIX Yacc does not support %error-verbose [-Wyacc]
-   39 | %error-verbose
+.././src/proxy/signing_policy_parse.y:41.1-14: warning: POSIX Yacc does not support %error-verbose [-Wyacc]
+   41 | %error-verbose
+      | ^~~~~~~~~~~~~~
+.././src/proxy/signing_policy_parse.y:41.1-14: warning: deprecated directive: '%error-verbose', use '%define parse.error verbose' [-Wdeprecated]
+   41 | %error-verbose
+      | ^~~~~~~~~~~~~~
+      | %define parse.error verbose
+.././src/proxy/signing_policy_parse.y:42.1-12: warning: POSIX Yacc does not support %pure-parser [-Wyacc]
+   42 | .././src/proxy/namespaces_parse.y:39.1-14: warning: POSIX Yacc does not support %error-verbose [-Wyacc]
+%p   39 | %error-verbose
       | ^~~~~~~~~~~~~~
 .././src/proxy/namespaces_parse.y:39.1-14: warning: deprecated directive: '%error-verbose', use '%define parse.error verbose' [-Wdeprecated]
    39 | %error-verbose
       | ^~~~~~~~~~~~~~
       | %define parse.error verbose
-.././src/proxy/namespaces_parse.y:40.1-12: warning: POSIX Yacc does not support %pure-parser [-Wyacc]
+u.././src/proxy/namespaces_parse.y:40.1-12: warning: POSIX Yacc does not support %pure-parser [-Wyacc]
    40 | %pure-parser
       | ^~~~~~~~~~~~
-.././src/proxy/signing_policy_parse.y:41.././src/proxy/namespaces_parse.y.1-14:40: .1warning: -12POSIX Yacc does not support %error-verbose:  [libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_cred.c -fPIC -I./src   -I. -o canl_cred.lo
-warning:-Wyacc ]
-deprecated directive: '%pure-parser', use '%define api.pure' [-Wdeprecated]
+.././src/proxy/namespaces_parse.y:40.1-12: warning: deprecated directive: '%pure-parser', use '%define api.pure' [-Wdeprecated]
    40 | %pure-parser
-      | ^   41 | ~%~e~r~r~or~-~v~er~b~os~e
-
-      |       | ^%define api.pure~~
-~~~~~~~~~~~
-.././src/proxy/signing_policy_parse.y:41.././src/proxy/namespaces_parse.y:41.1.14-25-14: : warning: warning: POSIX Yacc does not support string literalsdeprecated directive: '%error-verbose', use '%define parse.error verbose' [ [-Wyacc]
--Wdeprecated]
-   41 | %name-   41 | pr%efeirx=r"onram-evspearcebso"s
-e      |              ^
-~~~      | ~~^~~~~~~~~~~
-~~~.././src/proxy/namespaces_parse.y~:41~.1~-25: ~warning:~ ~POSIX Yacc does not support %name-prefix=
- [-Wyacc      | ]
-%define parse.error verbose
+      | ^~~~~~~~~~~~
+      | %define api.pure
+r.././src/proxy/namespaces_parse.y:41.14-25: warning: POSIX Yacc does not support string literals [-Wyacc]
    41 | %name-prefix="namespaces"
-      | ^~~~~~~~~~~~~~~~.././src/proxy/signing_policy_parse.y~~~:42~~.1~~-12~~: 
-warning: POSIX Yacc does not support %pure-parser.././src/proxy/namespaces_parse.y [:41.1-25-Wyacc: warning:] 
-deprecated directive: '%name-prefix="namespaces"', use '%define api.prefix {namespaces}' [-Wdeprecated]
-   42 |    41 | %%npamuer-per-efpiax=r"snaemres
-pa      | ce^s"~
-~      | ~^~~~~~~~~~~~~~~~~~~~~
-~~~~~~~~~.././src/proxy/signing_policy_parse.y~~~:42
-      | .1%define api.prefix {namespaces}-12
-: warning: deprecated directive: '%pure-parser', use '%define api.pure' [-Wdeprecated]
-libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_ocsp.c -fPIC -I./src   -I. -o canl_ocsp.lo
+      |              ^~~~~~~~~~~~
+.././src/proxy/namespaces_parse.y:41.1-25: warning: POSIX Yacc does not support %name-prefix= [-Wyacc]
+   41 | %name-prefix="namespae-pces"
+      | ^~~~~~~~~~~~~~~~~~~~~~~~~
+ar.././src/proxy/namespaces_parse.ys:41.1-25: warning: deprecated directive: '%name-prefix="namespaces"', use '%define api.prefix {namespaces}' [-Wdeprecated]
+   41 | %name-prefix="namespaces"
+      | ^~~~~~~~~~~~~~~~~~~~~~~~~
+      | %define api.prefix {namespaces}
+er
+      | ^~~~~~~~~~~~
+.././src/proxy/signing_policy_parse.y:42.1-12: warning: deprecated directive: '%pure-parser', use '%define api.pure' [-Wdeprecated]
    42 | %pure-parser
       | ^~~~~~~~~~~~
       | %define api.pure
@@ -954,112 +985,33 @@
 .././src/proxy/signing_policy_parse.y:43.1-22: warning: POSIX Yacc does not support %name-prefix= [-Wyacc]
    43 | %name-prefix="signing"
       | ^~~~~~~~~~~~~~~~~~~~~~
-libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/doio.c -fPIC -I./src   -I. -o doio.lo
 .././src/proxy/signing_policy_parse.y:43.1-22: warning: deprecated directive: '%name-prefix="signing"', use '%define api.prefix {signing}' [-Wdeprecated]
    43 | %name-prefix="signing"
       | ^~~~~~~~~~~~~~~~~~~~~~
       | %define api.prefix {signing}
+libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_err.c -fPIC -I./src   -I. -o canl_err.lo
+libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_dns.c -fPIC -I./src   -I. -o canl_dns.lo
+libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_ssl.c -fPIC -I./src   -I. -o canl_ssl.lo
+libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_cert.c -fPIC -I./src   -I. -o canl_cert.lo
+libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_cred.c -fPIC -I./src   -I. -o canl_cred.lo
+libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_ocsp.c -fPIC -I./src   -I. -o canl_ocsp.lo
+.././src/proxy/namespaces_parse.y: warning: fix-its can be applied.  Rerun with option '--update'. [-Wother]
+rm -r namespaces_parse
+libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/doio.c -fPIC -I./src   -I. -o doio.lo
+.././src/proxy/signing_policy_parse.y: warning: fix-its can be applied.  Rerun with option '--update'. [-Wother]
+rm -r signing_policy_parse
 libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/evaluate.c -fPIC -I./src   -I. -o evaluate.lo
-libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/list.c -fPIC -I./src   -I. -o list.lo
-libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/normalize.c -fPIC -I./src   -I. -o normalize.lo
-libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/scutils.c -fPIC -I./src   -I. -o scutils.lo
-libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/sslutils.c -fPIC -I./src   -I. -o sslutils.lo
-libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/data.c -fPIC -I./src   -I. -o data.lo
-TEXINPUTS=".:./doc/src//:" pdflatex ./doc/src/canl.tex
-libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c canl_err_desc.c -fPIC -I./src   -I. -o canl_err_desc.lo
-This is pdfTeX, Version 3.141592653-2.6-1.40.26 (TeX Live 2025/dev/Debian) (preloaded format=pdflatex)
- restricted \write18 enabled.
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_ssl.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/canl_ssl.o
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_cred.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/canl_cred.o
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/normalize.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/normalize.o
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_err.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/canl_err.o
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_dns.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/canl_dns.o
 libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c canl_err_desc.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/canl_err_desc.o
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/list.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/list.o
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/canl.o
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_dns.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/canl_dns.o
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_ssl.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/canl_ssl.o
 libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_cert.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/canl_cert.o
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/sslutils.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/sslutils.o
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_err.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/canl_err.o
 libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_ocsp.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/canl_ocsp.o
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/data.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/data.o
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/canl.o
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/evaluate.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/evaluate.o
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/scutils.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/scutils.o
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_cred.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/canl_cred.o
 libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/doio.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/doio.o
-.././src/proxy/namespaces_parse.y: warning: fix-its can be applied.  Rerun with option '--update'. [-Wother]
-rm -r namespaces_parse
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/scutils.c -fPIC -I./src -I. -o scutils.o >/dev/null 2>&1
-libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c namespaces_parse.c -fPIC -I./src   -I. -o namespaces_parse.lo
-cp `echo ./src/proxy/namespaces_lex.l | sed -e 's/\.l$/.c.in/'` namespaces_lex.c
-entering extended mode
-(./doc/src/canl.texlibtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c namespaces_lex.c -fPIC -I./src   -I. -o namespaces_lex.lo
-
-LaTeX2e <2024-11-01> patch level 1
-L3 programming layer <2024-12-25>
-(./doc/src/emi.cls
-Document Class: emi 2011/03/24 EMI LaTeX Class
-EMI LaTeX class -- 2011/03/24
-(/usr/share/texlive/texmf-dist/tex/latex/base/article.cls
-Document Class: article 2024/06/29 v1.4n Standard LaTeX document class
-(/usr/share/texlive/texmf-dist/tex/latex/base/size11.clo)).././src/proxy/signing_policy_parse.y: warning: fix-its can be applied.  Rerun with option '--update'. [-Wother]
-rm -r signing_policy_parse
-
-(/usr/share/texlive/texmf-dist/tex/latex/lastpage/lastpage.stylibtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c signing_policy_parse.c -fPIC -I./src   -I. -o signing_policy_parse.lo
-cp `echo ./src/proxy/signing_policy_lex.l | sed -e 's/\.l$/.c.in/'` signing_policy_lex.c
-
-(/usr/share/texlive/texmf-dist/tex/latex/lastpage/lastpage2e.stylibtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c signing_policy_lex.c -fPIC -I./src   -I. -o signing_policy_lex.lo
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/data.c -fPIC -I./src -I. -o data.o >/dev/null 2>&1
-
-(/usr/share/texlive/texmf-dist/tex/latex/lastpage/lastpagemodern.sty)libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/list.c -fPIC -I./src -I. -o list.o >/dev/null 2>&1
- 
-)) (/usr/share/texlive/texmf-dist/tex/latex/tools/tabularx.sty
-(/usr/share/texlive/texmf-dist/tex/latex/tools/array.sty))libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/doio.c -fPIC -I./src -I. -o doio.o >/dev/null 2>&1
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/normalize.c -fPIC -I./src -I. -o normalize.o >/dev/null 2>&1
-
-(/usr/share/texlive/texmf-dist/tex/latex/pslatex/pslatex.stylibtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c namespaces_parse.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/namespaces_parse.o
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c namespaces_lex.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/namespaces_lex.o
-)
-(/usr/share/texlive/texmf-dist/tex/latex/psnfss/times.sty)
-(/usr/share/texlive/texmf-dist/tex/latex/tools/verbatim.sty)
-(/usr/share/texlive/texmf-dist/tex/latex/geometry/geometry.sty
-(/usr/share/texlive/texmf-dist/tex/latex/graphics/keyval.sty)
-(/usr/share/texlive/texmf-dist/tex/generic/iftex/ifvtex.sty
-(/usr/share/texlive/texmf-dist/tex/generic/iftex/iftex.sty))libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c signing_policy_parse.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/signing_policy_parse.o
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c signing_policy_lex.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/signing_policy_lex.o
-)
-(/usr/share/texlive/texmf-dist/tex/latex/url/url.sty)
-(/usr/share/texlive/texmf-dist/tex/latex/caption/caption.sty
-(/usr/share/texlive/texmf-dist/tex/latex/caption/caption3.sty)<stdout>:1294:16: warning: 'input' defined but not used [-Wunused-function]
-<stdout>:1252:17: warning: 'yyunput' defined but not used [-Wunused-function]
-)
-(/usr/share/texlive/texmf-dist/tex/latex/base/fontenc.sty)
-(/usr/share/texlive/texmf-dist/tex/latex/psnfss/helvet.sty)
-(/usr/share/texlive/texmf-dist/tex/latex/multirow/multirow.sty)
-(/usr/share/texlive/texmf-dist/tex/latex/hyperref/hyperref.sty
-(/usr/share/texlive/texmf-dist/tex/latex/kvsetkeys/kvsetkeys.sty)
-(/usr/share/texlive/texmf-dist/tex/generic/kvdefinekeys/kvdefinekeys.sty)libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c canl_err_desc.c -fPIC -I./src -I. -o canl_err_desc.o >/dev/null 2>&1
-
-(/usr/share/texlive/texmf-dist/tex/generic/pdfescape/pdfescape.sty
-(/usr/share/texlive/texmf-dist/tex/generic/ltxcmds/ltxcmds.sty)
-(/usr/share/texlive/texmf-dist/tex/generic/pdftexcmds/pdftexcmds.sty
-(/usr/share/texlive/texmf-dist/tex/generic/infwarerr/infwarerr.sty))<stdout>:1325:16: warning: 'input' defined but not used [-Wunused-function]
-<stdout>:1283:17: warning: 'yyunput' defined but not used [-Wunused-function]
-)
-(/usr/share/texlive/texmf-dist/tex/latex/hycolor/hycolor.sty)./src/canl_err.c: In function 'update_error_msg.isra':
-./src/canl_err.c:189:17: warning: '__builtin_strncpy' specified bound 512 equals destination size [-Wstringop-truncation]
-  189 |                 strncpy(code_str, new_str,
-      |                 ^
-./src/canl_err.c:181:17: warning: '__builtin_strncpy' specified bound 512 equals destination size [-Wstringop-truncation]
-  181 |                 strncpy(code_str, new_str,
-      |                 ^
-./src/canl_err.c:173:17: warning: '__builtin_strncpy' specified bound 512 equals destination size [-Wstringop-truncation]
-  173 |                 strncpy(code_str, new_str,
-      |                 ^
-
-(/usr/share/texlive/texmf-dist/tex/latex/hyperref/nameref.sty./src/canl_err.c:149:5: warning: '__builtin_strncat' specified bound depends on the length of the source argument [-Wstringop-overflow=]
-  149 |     strncat(new_error, code_str, code_len + 1);
-      |     ^
-./src/canl_err.c:133:16: note: length computed here
-  133 |     code_len = strlen(code_str);
-      |                ^~~~~~~~~~~~~~~~
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/evaluate.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/evaluate.o
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/doio.c -fPIC -I./src -I. -o doio.o >/dev/null 2>&1
 ./src/canl_dns.c: In function 'canl_asyn_getservbyname':
 ./src/canl_dns.c:108:5: warning: 'ares_init' is deprecated: Use ares_init_options instead [-Wdeprecated-declarations]
   108 |     if ( ares_init(&channel) != ARES_SUCCESS )
@@ -1087,12 +1039,85 @@
 /usr/include/ares.h:910:58: note: declared here
   910 | CARES_EXTERN CARES_DEPRECATED_FOR(ares_process_fds) void ares_process(
       |                                                          ^~~~~~~~~~~~
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c canl_err_desc.c -fPIC -I./src -I. -o canl_err_desc.o >/dev/null 2>&1
+libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/list.c -fPIC -I./src   -I. -o list.lo
+./src/canl_err.c: In function 'update_error_msg.isra':
+./src/canl_err.c:189:17: warning: '__builtin_strncpy' specified bound 512 equals destination size [-Wstringop-truncation]
+  189 |                 strncpy(code_str, new_str,
+      |                 ^
+./src/canl_err.c:181:17: warning: '__builtin_strncpy' specified bound 512 equals destination size [-Wstringop-truncation]
+  181 |                 strncpy(code_str, new_str,
+      |                 ^
+./src/canl_err.c:173:17: warning: '__builtin_strncpy' specified bound 512 equals destination size [-Wstringop-truncation]
+  173 |                 strncpy(code_str, new_str,
+      |                 ^
+./src/canl_err.c:149:5: warning: '__builtin_strncat' specified bound depends on the length of the source argument [-Wstringop-overflow=]
+  149 |     strncat(new_error, code_str, code_len + 1);
+      |     ^
+./src/canl_err.c:133:16: note: length computed here
+  133 |     code_len = strlen(code_str);
+      |                ^~~~~~~~~~~~~~~~
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_dns.c -fPIC -I./src -I. -o canl_dns.o >/dev/null 2>&1
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_cert.c -fPIC -I./src -I. -o canl_cert.o >/dev/null 2>&1
+./src/proxy/evaluate.c: In function 'read_pathrestriction':
+./src/proxy/evaluate.c:356:5: warning: '__builtin_strncpy' output may be truncated copying 8 bytes from a string of length 8 [-Wstringop-truncation]
+  356 |     strncpy(signing + 1, hash, 8);
+      |     ^
+./src/proxy/evaluate.c:357:5: warning: '__builtin_strncpy' output may be truncated copying 8 bytes from a string of length 8 [-Wstringop-truncation]
+  357 |     strncpy(namespace + 1, hash, 8);
+      |     ^
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_err.c -fPIC -I./src -I. -o canl_err.o >/dev/null 2>&1
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/list.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/list.o
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/evaluate.c -fPIC -I./src -I. -o evaluate.o >/dev/null 2>&1
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl.c -fPIC -I./src -I. -o canl.o >/dev/null 2>&1
+libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/normalize.c -fPIC -I./src   -I. -o normalize.lo
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_ocsp.c -fPIC -I./src -I. -o canl_ocsp.o >/dev/null 2>&1
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/list.c -fPIC -I./src -I. -o list.o >/dev/null 2>&1
+libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/scutils.c -fPIC -I./src   -I. -o scutils.lo
+libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/sslutils.c -fPIC -I./src   -I. -o sslutils.lo
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/normalize.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/normalize.o
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_cred.c -fPIC -I./src -I. -o canl_cred.o >/dev/null 2>&1
+libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/data.c -fPIC -I./src   -I. -o data.lo
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/normalize.c -fPIC -I./src -I. -o normalize.o >/dev/null 2>&1
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/scutils.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/scutils.o
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/sslutils.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/sslutils.o
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_ssl.c -fPIC -I./src -I. -o canl_ssl.o >/dev/null 2>&1
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/scutils.c -fPIC -I./src -I. -o scutils.o >/dev/null 2>&1
+libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c namespaces_parse.c -fPIC -I./src   -I. -o namespaces_parse.lo
+cp `echo ./src/proxy/namespaces_lex.l | sed -e 's/\.l$/.c.in/'` namespaces_lex.c
+libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c signing_policy_parse.c -fPIC -I./src   -I. -o signing_policy_parse.lo
+cp `echo ./src/proxy/signing_policy_lex.l | sed -e 's/\.l$/.c.in/'` signing_policy_lex.c
+TEXINPUTS=".:./doc/src//:" pdflatex ./doc/src/canl.tex
+libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c namespaces_lex.c -fPIC -I./src   -I. -o namespaces_lex.lo
+libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c signing_policy_lex.c -fPIC -I./src   -I. -o signing_policy_lex.lo
+This is pdfTeX, Version 3.141592653-2.6-1.40.26 (TeX Live 2025/dev/Debian) (preloaded format=pdflatex)
+ restricted \write18 enabled.
+entering extended mode
+(./doc/src/canl.tex
+LaTeX2e <2024-11-01> patch level 1
+L3 programming layer <2024-12-25>
+(./doc/src/emi.cls
+Document Class: emi 2011/03/24 EMI LaTeX Class
+EMI LaTeX class -- 2011/03/24
+(/usr/share/texlive/texmf-dist/tex/latex/base/article.cls
+Document Class: article 2024/06/29 v1.4n Standard LaTeX document class
+(/usr/share/texlive/texmf-dist/tex/latex/base/size11.clolibtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/data.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/data.o
+))
+(/usr/share/texlive/texmf-dist/tex/latex/lastpage/lastpage.sty
+(/usr/share/texlive/texmf-dist/tex/latex/lastpage/lastpage2e.sty
+(/usr/share/texlive/texmf-dist/tex/latex/lastpage/lastpagemodern.sty) 
+)) (/usr/share/texlive/texmf-dist/tex/latex/tools/tabularx.sty
+(/usr/share/texlive/texmf-dist/tex/latex/tools/array.sty))
+(/usr/share/texlive/texmf-dist/tex/latex/pslatex/pslatex.stylibtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c namespaces_parse.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/namespaces_parse.o
+)libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/data.c -fPIC -I./src -I. -o data.o >/dev/null 2>&1
 
-(/usr/share/texlive/texmf-dist/tex/latex/refcount/refcount.sty)
-(/usr/share/texlive/texmf-dist/tex/generic/gettitlestring/gettitlestring.sty
-(/usr/share/texlive/texmf-dist/tex/latex/kvoptions/kvoptions.sty)))
-(/usr/share/texlive/texmf-dist/tex/latex/etoolbox/etoolbox.sty)./src/proxy/sslutils.c: In function 'ERR_set_continue_needed':
-./src/proxy/sslutils.c:404:5: warning: 'ERR_get_state' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
+(/usr/share/texlive/texmf-dist/tex/latex/psnfss/times.sty)
+(/usr/share/texlive/texmf-dist/tex/latex/tools/verbatim.sty)libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c signing_policy_parse.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/signing_policy_parse.o
+
+(/usr/share/texlive/texmf-dist/tex/latex/geometry/geometry.sty
+(/usr/share/texlive/texmf-dist/tex/latex/graphics/keyval.sty)./src/proxy/sslutils.c: In function 'ERR_set_continue_needed':
+
+(/usr/share/texlive/texmf-dist/tex/generic/iftex/ifvtex.sty./src/proxy/sslutils.c:404:5: warning: 'ERR_get_state' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
   404 |     es = ERR_get_state();
       |     ^~
 In file included from ./src/proxy/sslutils.h:130,
@@ -1100,9 +1125,9 @@
 /usr/include/openssl/err.h:491:34: note: declared here
   491 | OSSL_DEPRECATEDIN_3_0 ERR_STATE *ERR_get_state(void);
       |                                  ^~~~~~~~~~~~~
+./src/proxy/sslutils.c: In function 'ERR_load_prxyerr_strings':
 
-(/usr/share/texlive/texmf-dist/tex/generic/stringenc/stringenc.sty./src/proxy/sslutils.c: In function 'ERR_load_prxyerr_strings':
-./src/proxy/sslutils.c:438:41: warning: unused variable 'egd_path' [-Wunused-variable]
+(/usr/share/texlive/texmf-dist/tex/generic/iftex/iftex.sty./src/proxy/sslutils.c:438:41: warning: unused variable 'egd_path' [-Wunused-variable]
   438 |     char *                              egd_path;
       |                                         ^~~~~~~~
 ./src/proxy/sslutils.c: In function 'proxy_genreq':
@@ -1115,14 +1140,14 @@
 /usr/include/openssl/rsa.h:264:30: note: declared here
   264 | OSSL_DEPRECATEDIN_0_9_8 RSA *RSA_generate_key(int bits, unsigned long e, void
       |                              ^~~~~~~~~~~~~~~~
-)./src/proxy/sslutils.c:738:5: warning: 'EVP_PKEY_assign' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
+./src/proxy/sslutils.c:738:5: warning: 'EVP_PKEY_assign' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
   738 |     if (!EVP_PKEY_assign_RSA(pkey,rsa))
       |     ^~
 In file included from /usr/include/openssl/x509.h:29:
 /usr/include/openssl/evp.h:1345:5: note: declared here
  1345 | int EVP_PKEY_assign(EVP_PKEY *pkey, int type, void *key);
       |     ^~~~~~~~~~~~~~~
-./src/proxy/sslutils.c:812:9: warning: 'RSA_free' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
+)./src/proxy/sslutils.c:812:9: warning: 'RSA_free' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
   812 |         RSA_free(rsa);
       |         ^~~~~~~~
 /usr/include/openssl/rsa.h:304:28: note: declared here
@@ -1135,9 +1160,8 @@
 /usr/include/openssl/x509.h:826:5: note: declared here
   826 | int ASN1_digest(i2d_of_void *i2d, const EVP_MD *type, char *data,
       |     ^~~~~~~~~~~
-
-(/usr/share/texlive/texmf-dist/tex/latex/hyperref/pd1enc.def./src/proxy/sslutils.c: In function 'proxy_sign_ext':
-./src/proxy/sslutils.c:1111:7: warning: 'ASN1_digest' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
+./src/proxy/sslutils.c: In function 'proxy_sign_ext':
+)./src/proxy/sslutils.c:1111:7: warning: 'ASN1_digest' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
  1111 |       ASN1_digest((i2d_of_void*)i2d_PUBKEY, EVP_sha1(), (char *) new_public_key, md, &len);
       |       ^~~~~~~~~~~
 /usr/include/openssl/x509.h:826:5: note: declared here
@@ -1146,8 +1170,7 @@
 ./src/proxy/sslutils.c:1028:41: warning: unused variable 'user_cert_info' [-Wunused-variable]
  1028 |     X509_CINF *                         user_cert_info;
       |                                         ^~~~~~~~~~~~~~
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_err.c -fPIC -I./src -I. -o canl_err.o >/dev/null 2>&1
-)./src/proxy/sslutils.c: In function 'proxy_marshal_bp':
+./src/proxy/sslutils.c: In function 'proxy_marshal_bp':
 ./src/proxy/sslutils.c:1444:5: warning: 'PEM_write_bio_RSAPrivateKey' is deprecated: Since OpenSSL 3.0 [-Wdeprecated-declarations]
  1444 |     if (!PEM_write_bio_RSAPrivateKey(bp,
       |     ^~
@@ -1163,56 +1186,73 @@
 /usr/include/openssl/evp.h:1363:22: note: declared here
  1363 | const struct rsa_st *EVP_PKEY_get0_RSA(const EVP_PKEY *pkey);
       |                      ^~~~~~~~~~~~~~~~~
-./src/proxy/evaluate.c: In function 'read_pathrestriction':
-./src/proxy/evaluate.c:356:5: warning: '__builtin_strncpy' output may be truncated copying 8 bytes from a string of length 8 [-Wstringop-truncation]
-  356 |     strncpy(signing + 1, hash, 8);
-      |     ^
-./src/proxy/evaluate.c:357:5: warning: '__builtin_strncpy' output may be truncated copying 8 bytes from a string of length 8 [-Wstringop-truncation]
-  357 |     strncpy(namespace + 1, hash, 8);
-      |     ^
-
-(/usr/share/texlive/texmf-dist/tex/generic/intcalc/intcalc.sty)
-(/usr/share/texlive/texmf-dist/tex/latex/hyperref/puenc.def./src/proxy/sslutils.c: In function 'proxy_verify_callback':
+./src/proxy/sslutils.c: In function 'proxy_verify_callback':
 ./src/proxy/sslutils.c:1878:41: warning: unused variable 'cert' [-Wunused-variable]
  1878 |     X509 *                              cert = NULL;
       |                                         ^~~~
-./src/proxy/sslutils.c: In function 'proxy_load_user_key':
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c namespaces_lex.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/namespaces_lex.o
+)./src/proxy/sslutils.c: In function 'proxy_load_user_key':
 ./src/proxy/sslutils.c:3179:41: warning: unused variable 'ucertpkey' [-Wunused-variable]
  3179 |     EVP_PKEY *                          ucertpkey;
       |                                         ^~~~~~~~~
-)libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/evaluate.c -fPIC -I./src -I. -o evaluate.o >/dev/null 2>&1
-
-(/usr/share/texlive/texmf-dist/tex/generic/bitset/bitset.sty./src/proxy/sslutils.c: In function 'lcmaps_type_of_proxy':
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c signing_policy_lex.c -fPIC -I./src -I.  -fPIC -DPIC -o .libs/signing_policy_lex.o
 
-(/usr/share/texlive/texmf-dist/tex/generic/bigintcalc/bigintcalc.sty./src/proxy/sslutils.c:4071:41: warning: variable 'retval' set but not used [-Wunused-but-set-variable]
+(/usr/share/texlive/texmf-dist/tex/latex/url/url.sty)
+(/usr/share/texlive/texmf-dist/tex/latex/caption/caption.sty
+(/usr/share/texlive/texmf-dist/tex/latex/caption/caption3.sty./src/proxy/sslutils.c: In function 'lcmaps_type_of_proxy':
+./src/proxy/sslutils.c:4071:41: warning: variable 'retval' set but not used [-Wunused-but-set-variable]
  4071 |     int                                 retval = 0;
       |                                         ^~~~~~
-))./src/proxy/sslutils.c: In function 'grid_verifyPathLenConstraints':
+./src/proxy/sslutils.c: In function 'grid_verifyPathLenConstraints':
 ./src/proxy/sslutils.c:4314:9: warning: variable 'retval' set but not used [-Wunused-but-set-variable]
  4314 |     int retval = 0;
       |         ^~~~~~
-
-(/usr/share/texlive/texmf-dist/tex/latex/base/atbegshi-ltx.sty)./src/proxy/sslutils.c:4313:11: warning: unused variable 'error_msg' [-Wunused-variable]
+./src/proxy/sslutils.c:4313:11: warning: unused variable 'error_msg' [-Wunused-variable]
  4313 |     char *error_msg = NULL;
       |           ^~~~~~~~~
-./src/proxy/sslutils.c:4307:11: warning: unused variable 'oper' [-Wunused-variable]
+)./src/proxy/sslutils.c:4307:11: warning: unused variable 'oper' [-Wunused-variable]
  4307 |     char *oper = "grid_verifyPathLenConstraints";
       |           ^~~~
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c namespaces_parse.c -fPIC -I./src -I. -o namespaces_parse.o >/dev/null 2>&1
 )
-(/usr/share/texlive/texmf-dist/tex/latex/hyperref/hpdftex.def
-(/usr/share/texlive/texmf-dist/tex/latex/base/atveryend-ltx.stylibtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_cert.c -fPIC -I./src -I. -o canl_cert.o >/dev/null 2>&1
-)libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_dns.c -fPIC -I./src -I. -o canl_dns.o >/dev/null 2>&1
+(/usr/share/texlive/texmf-dist/tex/latex/base/fontenc.sty)
+(/usr/share/texlive/texmf-dist/tex/latex/psnfss/helvet.sty)
+(/usr/share/texlive/texmf-dist/tex/latex/multirow/multirow.sty)
+(/usr/share/texlive/texmf-dist/tex/latex/hyperref/hyperref.sty
+(/usr/share/texlive/texmf-dist/tex/latex/kvsetkeys/kvsetkeys.sty)
+(/usr/share/texlive/texmf-dist/tex/generic/kvdefinekeys/kvdefinekeys.sty)
+(/usr/share/texlive/texmf-dist/tex/generic/pdfescape/pdfescape.sty
+(/usr/share/texlive/texmf-dist/tex/generic/ltxcmds/ltxcmds.sty)<stdout>:1325:16: warning: 'input' defined but not used [-Wunused-function]
+<stdout>:1283:17: warning: 'yyunput' defined but not used [-Wunused-function]
+
+(/usr/share/texlive/texmf-dist/tex/generic/pdftexcmds/pdftexcmds.sty<stdout>:1294:16: warning: 'input' defined but not used [-Wunused-function]
+<stdout>:1252:17: warning: 'yyunput' defined but not used [-Wunused-function]
 
+(/usr/share/texlive/texmf-dist/tex/generic/infwarerr/infwarerr.sty)))
+(/usr/share/texlive/texmf-dist/tex/latex/hycolor/hycolor.sty)
+(/usr/share/texlive/texmf-dist/tex/latex/hyperref/nameref.sty
+(/usr/share/texlive/texmf-dist/tex/latex/refcount/refcount.sty)
+(/usr/share/texlive/texmf-dist/tex/generic/gettitlestring/gettitlestring.sty
+(/usr/share/texlive/texmf-dist/tex/latex/kvoptions/kvoptions.sty)))
+(/usr/share/texlive/texmf-dist/tex/latex/etoolbox/etoolbox.sty)
+(/usr/share/texlive/texmf-dist/tex/generic/stringenc/stringenc.sty)
+(/usr/share/texlive/texmf-dist/tex/latex/hyperref/pd1enc.def)
+(/usr/share/texlive/texmf-dist/tex/generic/intcalc/intcalc.sty)
+(/usr/share/texlive/texmf-dist/tex/latex/hyperref/puenc.def)
+(/usr/share/texlive/texmf-dist/tex/generic/bitset/bitset.sty
+(/usr/share/texlive/texmf-dist/tex/generic/bigintcalc/bigintcalc.sty))
+(/usr/share/texlive/texmf-dist/tex/latex/base/atbegshi-ltx.sty))
+(/usr/share/texlive/texmf-dist/tex/latex/hyperref/hpdftex.def
+(/usr/share/texlive/texmf-dist/tex/latex/base/atveryend-ltx.sty)
 (/usr/share/texlive/texmf-dist/tex/latex/rerunfilecheck/rerunfilecheck.sty
-(/usr/share/texlive/texmf-dist/tex/generic/uniquecounter/uniquecounter.sty)))
-(/usr/share/texlive/texmf-dist/tex/latex/graphics/graphicx.sty
+(/usr/share/texlive/texmf-dist/tex/generic/uniquecounter/uniquecounter.sty)libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c signing_policy_parse.c -fPIC -I./src -I. -o signing_policy_parse.o >/dev/null 2>&1
+))
+(/usr/share/texlive/texmf-dist/tex/latex/graphics/graphicx.stylibtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c namespaces_parse.c -fPIC -I./src -I. -o namespaces_parse.o >/dev/null 2>&1
+
 (/usr/share/texlive/texmf-dist/tex/latex/graphics/graphics.sty
 (/usr/share/texlive/texmf-dist/tex/latex/graphics/trig.sty)
 (/usr/share/texlive/texmf-dist/tex/latex/graphics-cfg/graphics.cfg)
 (/usr/share/texlive/texmf-dist/tex/latex/graphics-def/pdftex.def)))
-(/usr/share/texlive/texmf-dist/tex/latex/graphics/color.stylibtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c signing_policy_parse.c -fPIC -I./src -I. -o signing_policy_parse.o >/dev/null 2>&1
-
+(/usr/share/texlive/texmf-dist/tex/latex/graphics/color.sty
 (/usr/share/texlive/texmf-dist/tex/latex/graphics-cfg/color.cfg)
 (/usr/share/texlive/texmf-dist/tex/latex/graphics/mathcolor.ltx)))
 (./doc/src/definitions.tex
@@ -1227,23 +1267,21 @@
 (/usr/share/texlive/texmf-dist/tex/latex/amsmath/amstext.sty
 (/usr/share/texlive/texmf-dist/tex/latex/amsmath/amsgen.sty))
 (/usr/share/texlive/texmf-dist/tex/latex/amsmath/amsbsy.sty)
-(/usr/share/texlive/texmf-dist/tex/latex/amsmath/amsopn.sty))libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_ocsp.c -fPIC -I./src -I. -o canl_ocsp.o >/dev/null 2>&1
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl.c -fPIC -I./src -I. -o canl.o >/dev/null 2>&1
-
+(/usr/share/texlive/texmf-dist/tex/latex/amsmath/amsopn.sty))
 (/usr/share/texlive/texmf-dist/tex/latex/l3backend/l3backend-pdftex.def)
 No file canl.aux.
-(/usr/share/texlive/texmf-dist/tex/latex/psnfss/omspzccm.fd)
+(/usr/share/texlive/texmf-dist/tex/latex/psnfss/omspzccm.fd)libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c namespaces_lex.c -fPIC -I./src -I. -o namespaces_lex.o >/dev/null 2>&1
+
 *geometry* driver: auto-detecting
 *geometry* detected driver: pdftex
 (/usr/share/texlive/texmf-dist/tex/context/base/mkii/supp-pdf.mkii
 [Loading MPS to PDF converter (version 2006.09.02).]
 ) (/usr/share/texlive/texmf-dist/tex/latex/epstopdf-pkg/epstopdf-base.sty
 (/usr/share/texlive/texmf-dist/tex/latex/grfext/grfext.sty)
-(/usr/share/texlive/texmf-dist/tex/latex/latexconfig/epstopdf-sys.cfg)libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_cred.c -fPIC -I./src -I. -o canl_cred.o >/dev/null 2>&1
-)
+(/usr/share/texlive/texmf-dist/tex/latex/latexconfig/epstopdf-sys.cfg))
 (/usr/share/texlive/texmf-dist/tex/latex/psnfss/ot1ptmcm.fd)
 (/usr/share/texlive/texmf-dist/tex/latex/psnfss/omlptmcm.fd)
-(/usr/share/texlive/texmf-dist/tex/latex/psnfss/omxpsycm.fd)libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c namespaces_lex.c -fPIC -I./src -I. -o namespaces_lex.o >/dev/null 2>&1
+(/usr/share/texlive/texmf-dist/tex/latex/psnfss/omxpsycm.fd)libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c signing_policy_lex.c -fPIC -I./src -I. -o signing_policy_lex.o >/dev/null 2>&1
 
 Overfull \hbox (2.08923pt too wide) detected at line 47
 [] 
@@ -1396,8 +1434,7 @@
 
 LaTeX Warning: Reference `LastPage' on page 13 undefined on input line 217.
 
-[13]libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c signing_policy_lex.c -fPIC -I./src -I. -o signing_policy_lex.o >/dev/null 2>&1
-)
+[13])
 
 Overfull \vbox (11.38092pt too high) has occurred while \output is active
 
@@ -1431,7 +1468,6 @@
 TEXINPUTS=".:./doc/src//:" pdflatex ./doc/src/canl.tex
 This is pdfTeX, Version 3.141592653-2.6-1.40.26 (TeX Live 2025/dev/Debian) (preloaded format=pdflatex)
  restricted \write18 enabled.
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/canl_ssl.c -fPIC -I./src -I. -o canl_ssl.o >/dev/null 2>&1
 entering extended mode
 (./doc/src/canl.tex
 LaTeX2e <2024-11-01> patch level 1
@@ -1471,7 +1507,8 @@
 (/usr/share/texlive/texmf-dist/tex/latex/hyperref/nameref.sty
 (/usr/share/texlive/texmf-dist/tex/latex/refcount/refcount.sty)
 (/usr/share/texlive/texmf-dist/tex/generic/gettitlestring/gettitlestring.sty
-(/usr/share/texlive/texmf-dist/tex/latex/kvoptions/kvoptions.sty)))
+(/usr/share/texlive/texmf-dist/tex/latex/kvoptions/kvoptions.sty)libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/sslutils.c -fPIC -I./src -I. -o sslutils.o >/dev/null 2>&1
+))
 (/usr/share/texlive/texmf-dist/tex/latex/etoolbox/etoolbox.sty)
 (/usr/share/texlive/texmf-dist/tex/generic/stringenc/stringenc.sty)
 (/usr/share/texlive/texmf-dist/tex/latex/hyperref/pd1enc.def)
@@ -1484,8 +1521,7 @@
 (/usr/share/texlive/texmf-dist/tex/latex/base/atveryend-ltx.sty)
 (/usr/share/texlive/texmf-dist/tex/latex/rerunfilecheck/rerunfilecheck.sty
 (/usr/share/texlive/texmf-dist/tex/generic/uniquecounter/uniquecounter.sty)))
-(/usr/share/texlive/texmf-dist/tex/latex/graphics/graphicx.stylibtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./src/proxy/sslutils.c -fPIC -I./src -I. -o sslutils.o >/dev/null 2>&1
-
+(/usr/share/texlive/texmf-dist/tex/latex/graphics/graphicx.sty
 (/usr/share/texlive/texmf-dist/tex/latex/graphics/graphics.sty
 (/usr/share/texlive/texmf-dist/tex/latex/graphics/trig.sty)
 (/usr/share/texlive/texmf-dist/tex/latex/graphics-cfg/graphics.cfg)
@@ -1700,7 +1736,8 @@
 (/usr/share/texlive/texmf-dist/tex/latex/listings/listings.sty
 (/usr/share/texlive/texmf-dist/tex/latex/listings/lstpatch.sty)
 (/usr/share/texlive/texmf-dist/tex/latex/listings/lstmisc.sty)
-(/usr/share/texlive/texmf-dist/tex/latex/listings/listings.cfg)) (./ver.tex))
+(/usr/share/texlive/texmf-dist/tex/latex/listings/listings.cfg))libtool --mode=link gcc -Wl,-z,relro -Wl,-z,now -rpath /usr/lib/i386-linux-gnu -version-info 4:0:0 canl_err_desc.lo canl.lo canl_err.lo canl_dns.lo canl_ssl.lo canl_cert.lo canl_cred.lo canl_ocsp.lo doio.lo evaluate.lo list.lo normalize.lo scutils.lo sslutils.lo data.lo namespaces_parse.lo namespaces_lex.lo signing_policy_parse.lo signing_policy_lex.lo -lcares  -lssl -lcrypto -ldl -lpthread -o libcanl_c.la
+ (./ver.tex))
 (/usr/share/texlive/texmf-dist/tex/latex/amsmath/amsmath.sty
 For additional information on amsmath, use the `?' option.
 (/usr/share/texlive/texmf-dist/tex/latex/amsmath/amstext.sty
@@ -1738,8 +1775,7 @@
 [2]) (./canl.toc)
 
 Overfull \vbox (11.38092pt too high) has occurred while \output is active
-[3] (./doc/src/canl-introduction.texlibtool --mode=link gcc -Wl,-z,relro -Wl,-z,now -rpath /usr/lib/i386-linux-gnu -version-info 4:0:0 canl_err_desc.lo canl.lo canl_err.lo canl_dns.lo canl_ssl.lo canl_cert.lo canl_cred.lo canl_ocsp.lo doio.lo evaluate.lo list.lo normalize.lo scutils.lo sslutils.lo data.lo namespaces_parse.lo namespaces_lex.lo signing_policy_parse.lo signing_policy_lex.lo -lcares  -lssl -lcrypto -ldl -lpthread -o libcanl_c.la
-
+[3] (./doc/src/canl-introduction.tex
 
 LaTeX Warning: Marginpar on page 4 moved.
 
@@ -1820,14 +1856,11 @@
 
 
 Overfull \vbox (11.38092pt too high) has occurred while \output is active
-[13]libtool: link: gcc -shared  -fPIC -DPIC  .libs/canl_err_desc.o .libs/canl.o .libs/canl_err.o .libs/canl_dns.o .libs/canl_ssl.o .libs/canl_cert.o .libs/canl_cred.o .libs/canl_ocsp.o .libs/doio.o .libs/evaluate.o .libs/list.o .libs/normalize.o .libs/scutils.o .libs/sslutils.o .libs/data.o .libs/namespaces_parse.o .libs/namespaces_lex.o .libs/signing_policy_parse.o .libs/signing_policy_lex.o   -lcares -lssl -lcrypto -ldl -lpthread  -Wl,-z -Wl,relro -Wl,-z -Wl,now   -Wl,-soname -Wl,libcanl_c.so.4 -o .libs/libcanl_c.so.4.0.0
-)
+[13])
 
 Overfull \vbox (11.38092pt too high) has occurred while \output is active
 [14] 
 enddocument/afterlastpage (AED): lastpage setting LastPage.
-libtool: link: (cd ".libs" && rm -f "libcanl_c.so.4" && ln -s "libcanl_c.so.4.0.0" "libcanl_c.so.4")
-libtool: link: (cd ".libs" && rm -f "libcanl_c.so" && ln -s "libcanl_c.so.4.0.0" "libcanl_c.so")
 (./canl.aux) )
 (see the transcript file for additional information)</usr/share/texlive/texmf-d
 ist/fonts/type1/urw/courier/ucrr8a.pfb></usr/share/texlive/texmf-dist/fonts/typ
@@ -1836,6 +1869,9 @@
 pfb>
 Output written on canl.pdf (14 pages, 99352 bytes).
 Transcript written on canl.log.
+libtool: link: gcc -shared  -fPIC -DPIC  .libs/canl_err_desc.o .libs/canl.o .libs/canl_err.o .libs/canl_dns.o .libs/canl_ssl.o .libs/canl_cert.o .libs/canl_cred.o .libs/canl_ocsp.o .libs/doio.o .libs/evaluate.o .libs/list.o .libs/normalize.o .libs/scutils.o .libs/sslutils.o .libs/data.o .libs/namespaces_parse.o .libs/namespaces_lex.o .libs/signing_policy_parse.o .libs/signing_policy_lex.o   -lcares -lssl -lcrypto -ldl -lpthread  -Wl,-z -Wl,relro -Wl,-z -Wl,now   -Wl,-soname -Wl,libcanl_c.so.4 -o .libs/libcanl_c.so.4.0.0
+libtool: link: (cd ".libs" && rm -f "libcanl_c.so.4" && ln -s "libcanl_c.so.4.0.0" "libcanl_c.so.4")
+libtool: link: (cd ".libs" && rm -f "libcanl_c.so" && ln -s "libcanl_c.so.4.0.0" "libcanl_c.so")
 libtool: link: ar cr .libs/libcanl_c.a  canl_err_desc.o canl.o canl_err.o canl_dns.o canl_ssl.o canl_cert.o canl_cred.o canl_ocsp.o doio.o evaluate.o list.o normalize.o scutils.o sslutils.o data.o namespaces_parse.o namespaces_lex.o signing_policy_parse.o signing_policy_lex.o
 libtool: link: ranlib .libs/libcanl_c.a
 libtool: link: ( cd ".libs" && rm -f "libcanl_c.la" && ln -s "../libcanl_c.la" "libcanl_c.la" )
@@ -1843,8 +1879,8 @@
 libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./examples/canl_sample_client.c -I./src -I. -o canl_sample_client.lo
 libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./examples/grid-proxy-init.c -Wall -g -I./src -I. -o canl_proxy_init.lo
 libtool --mode=compile gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./examples/delegation.c -Wall -g -I./src -I. -o canl_delegation.lo
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./examples/canl_sample_server.c -Wall -g -I./src -I.  -fPIC -DPIC -o .libs/canl_sample_server.o
 libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./examples/canl_sample_client.c -I./src -I.  -fPIC -DPIC -o .libs/canl_sample_client.o
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./examples/canl_sample_server.c -Wall -g -I./src -I.  -fPIC -DPIC -o .libs/canl_sample_server.o
 libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./examples/grid-proxy-init.c -Wall -g -I./src -I.  -fPIC -DPIC -o .libs/canl_proxy_init.o
 libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./examples/delegation.c -Wall -g -I./src -I.  -fPIC -DPIC -o .libs/canl_delegation.o
 ./examples/canl_sample_client.c: In function 'main':
@@ -1855,18 +1891,18 @@
 ./examples/canl_sample_server.c:24:11: warning: variable 'ca_dir' set but not used [-Wunused-but-set-variable]
    24 |     char *ca_dir = NULL;
       |           ^~~~~~
-libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./examples/grid-proxy-init.c -Wall -g -I./src -I. -o canl_proxy_init.o >/dev/null 2>&1
 libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./examples/delegation.c -Wall -g -I./src -I. -o canl_delegation.o >/dev/null 2>&1
+libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./examples/grid-proxy-init.c -Wall -g -I./src -I. -o canl_proxy_init.o >/dev/null 2>&1
 libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./examples/canl_sample_client.c -I./src -I. -o canl_sample_client.o >/dev/null 2>&1
 libtool: compile:  gcc -Wall -g -I./src/proxy -I. -g -O2 -Werror=implicit-function-declaration -ffile-prefix-map=/build/reproducible-path/canl-c-3.0.0=. -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -c ./examples/canl_sample_server.c -Wall -g -I./src -I. -o canl_sample_server.o >/dev/null 2>&1
+libtool --mode=link gcc -Wl,-z,relro -Wl,-z,now canl_proxy_init.lo -L. -lcanl_c -o proxy
+libtool --mode=link gcc -Wl,-z,relro -Wl,-z,now canl_delegation.lo -L. -lcanl_c -lcrypto  -o delegation
 libtool --mode=link gcc -Wl,-z,relro -Wl,-z,now canl_sample_client.lo -L. -lcanl_c -o client
 libtool --mode=link gcc -Wl,-z,relro -Wl,-z,now canl_sample_server.lo -L. -lcanl_c -o server
-libtool --mode=link gcc -Wl,-z,relro -Wl,-z,now canl_delegation.lo -L. -lcanl_c -lcrypto  -o delegation
-libtool --mode=link gcc -Wl,-z,relro -Wl,-z,now canl_proxy_init.lo -L. -lcanl_c -o proxy
-libtool: link: gcc -Wl,-z -Wl,relro -Wl,-z -Wl,now .libs/canl_sample_client.o -o .libs/client  -L. /build/reproducible-path/canl-c-3.0.0/.libs/libcanl_c.so 
-libtool: link: gcc -Wl,-z -Wl,relro -Wl,-z -Wl,now .libs/canl_sample_server.o -o .libs/server  -L. /build/reproducible-path/canl-c-3.0.0/.libs/libcanl_c.so 
 libtool: link: gcc -Wl,-z -Wl,relro -Wl,-z -Wl,now .libs/canl_proxy_init.o -o .libs/proxy  -L. /build/reproducible-path/canl-c-3.0.0/.libs/libcanl_c.so 
 libtool: link: gcc -Wl,-z -Wl,relro -Wl,-z -Wl,now .libs/canl_delegation.o -o .libs/delegation  -L. /build/reproducible-path/canl-c-3.0.0/.libs/libcanl_c.so -lcrypto 
+libtool: link: gcc -Wl,-z -Wl,relro -Wl,-z -Wl,now .libs/canl_sample_client.o -o .libs/client  -L. /build/reproducible-path/canl-c-3.0.0/.libs/libcanl_c.so 
+libtool: link: gcc -Wl,-z -Wl,relro -Wl,-z -Wl,now .libs/canl_sample_server.o -o .libs/server  -L. /build/reproducible-path/canl-c-3.0.0/.libs/libcanl_c.so 
 make[2]: Leaving directory '/build/reproducible-path/canl-c-3.0.0'
 make[1]: Leaving directory '/build/reproducible-path/canl-c-3.0.0'
    dh_auto_test
@@ -1875,7 +1911,7 @@
    debian/rules override_dh_auto_install
 make[1]: Entering directory '/build/reproducible-path/canl-c-3.0.0'
 dh_auto_install
-	make -j22 install DESTDIR=/build/reproducible-path/canl-c-3.0.0/debian/tmp AM_UPDATE_INFO_DIR=no
+	make -j10 install DESTDIR=/build/reproducible-path/canl-c-3.0.0/debian/tmp AM_UPDATE_INFO_DIR=no
 make[2]: Entering directory '/build/reproducible-path/canl-c-3.0.0'
 mkdir -p /build/reproducible-path/canl-c-3.0.0/debian/tmp/usr/bin
 mkdir -p /build/reproducible-path/canl-c-3.0.0/debian/tmp/usr/lib/i386-linux-gnu
@@ -1938,12 +1974,12 @@
    dh_gencontrol
    dh_md5sums
    dh_builddeb
+dpkg-deb: building package 'libcanl-c-examples-dbgsym' in '../libcanl-c-examples-dbgsym_3.0.0-6_i386.deb'.
 dpkg-deb: building package 'libcanl-c4t64-dbgsym' in '../libcanl-c4t64-dbgsym_3.0.0-6_i386.deb'.
-dpkg-deb: building package 'libcanl-c4t64' in '../libcanl-c4t64_3.0.0-6_i386.deb'.
-dpkg-deb: building package 'libcanl-c-dev' in '../libcanl-c-dev_3.0.0-6_i386.deb'.
 dpkg-deb: building package 'libcanl-c-examples' in '../libcanl-c-examples_3.0.0-6_i386.deb'.
-dpkg-deb: building package 'libcanl-c-examples-dbgsym' in '../libcanl-c-examples-dbgsym_3.0.0-6_i386.deb'.
 dpkg-deb: building package 'libcanl-c-doc' in '../libcanl-c-doc_3.0.0-6_all.deb'.
+dpkg-deb: building package 'libcanl-c-dev' in '../libcanl-c-dev_3.0.0-6_i386.deb'.
+dpkg-deb: building package 'libcanl-c4t64' in '../libcanl-c4t64_3.0.0-6_i386.deb'.
  dpkg-genbuildinfo --build=binary -O../canl-c_3.0.0-6_i386.buildinfo
  dpkg-genchanges --build=binary -O../canl-c_3.0.0-6_i386.changes
 dpkg-genchanges: info: binary-only upload (no source code included)
@@ -1951,12 +1987,14 @@
 dpkg-buildpackage: info: binary-only upload (no source included)
 dpkg-genchanges: info: not including original source code in upload
 I: copying local configuration
+I: user script /srv/workspace/pbuilder/59276/tmp/hooks/B01_cleanup starting
+I: user script /srv/workspace/pbuilder/59276/tmp/hooks/B01_cleanup finished
 I: unmounting dev/ptmx filesystem
 I: unmounting dev/pts filesystem
 I: unmounting dev/shm filesystem
 I: unmounting proc filesystem
 I: unmounting sys filesystem
 I: cleaning the build env 
-I: removing directory /srv/workspace/pbuilder/86210 and its subdirectories
-I: Current time: Fri Mar 27 19:23:48 -12 2026
-I: pbuilder-time-stamp: 1774682628
+I: removing directory /srv/workspace/pbuilder/59276 and its subdirectories
+I: Current time: Sun Feb 23 15:09:06 +14 2025
+I: pbuilder-time-stamp: 1740272947