From: William Lallemand <wlallemand@haproxy.com>
Date: Mon, 3 Nov 2025 11:03:05 +0000 (+0100)
Subject: SCRIPTS: build-ssl: allow to build a FIPS version without FIPS
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=12aca978a8fb3dd90405d57271b803913f732516;p=thirdparty%2Fhaproxy.git

SCRIPTS: build-ssl: allow to build a FIPS version without FIPS

build-ssl.sh is always prepending a "v" to the version, preventing to
build a FIPS version without FIPS enabled.

This patch checks if FIPS is in the version string to chose to add the
"v" or not.

Example:

AWS_LC_VERSION=AWS-LC-FIPS-3.0.0 BUILDSSL_DESTDIR=/opt/awslc-3.0.0 ./scripts/build-ssl.sh
---

diff --git a/scripts/build-ssl.sh b/scripts/build-ssl.sh
index d90d4d5a0..206227f6e 100755
--- a/scripts/build-ssl.sh
+++ b/scripts/build-ssl.sh
@@ -136,8 +136,14 @@ build_boringssl () {
 
 download_aws_lc () {
     if [ ! -f "${BUILDSSL_TMPDIR}/aws-lc-${AWS_LC_VERSION}.tar.gz" ]; then
+        if [ "${AWS_LC_VERSION#*FIPS}" != "${AWS_LC_VERSION}" ]; then
+            WGETFILE="${AWS_LC_VERSION}.tar.gz"
+        else
+            WGETFILE="v${AWS_LC_VERSION}.tar.gz"
+        fi
+
         wget -q -O "${BUILDSSL_TMPDIR}/aws-lc-${AWS_LC_VERSION}.tar.gz" \
-          "https://github.com/aws/aws-lc/archive/refs/tags/v${AWS_LC_VERSION}.tar.gz"
+          "https://github.com/aws/aws-lc/archive/refs/tags/${WGETFILE}"
     fi
 }