From 12aca978a8fb3dd90405d57271b803913f732516 Mon Sep 17 00:00:00 2001 From: William Lallemand Date: Mon, 3 Nov 2025 12:03:05 +0100 Subject: [PATCH] SCRIPTS: build-ssl: allow to build a FIPS version without FIPS build-ssl.sh is always prepending a "v" to the version, preventing to build a FIPS version without FIPS enabled. This patch checks if FIPS is in the version string to chose to add the "v" or not. Example: AWS_LC_VERSION=AWS-LC-FIPS-3.0.0 BUILDSSL_DESTDIR=/opt/awslc-3.0.0 ./scripts/build-ssl.sh --- scripts/build-ssl.sh | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/scripts/build-ssl.sh b/scripts/build-ssl.sh index d90d4d5a0..206227f6e 100755 --- a/scripts/build-ssl.sh +++ b/scripts/build-ssl.sh @@ -136,8 +136,14 @@ build_boringssl () { download_aws_lc () { if [ ! -f "${BUILDSSL_TMPDIR}/aws-lc-${AWS_LC_VERSION}.tar.gz" ]; then + if [ "${AWS_LC_VERSION#*FIPS}" != "${AWS_LC_VERSION}" ]; then + WGETFILE="${AWS_LC_VERSION}.tar.gz" + else + WGETFILE="v${AWS_LC_VERSION}.tar.gz" + fi + wget -q -O "${BUILDSSL_TMPDIR}/aws-lc-${AWS_LC_VERSION}.tar.gz" \ - "https://github.com/aws/aws-lc/archive/refs/tags/v${AWS_LC_VERSION}.tar.gz" + "https://github.com/aws/aws-lc/archive/refs/tags/${WGETFILE}" fi } -- 2.47.3