AWS-LC-FIPS 3.0.0 reports "1.40.0" as its version string

[wlallemand]

Problem:

AWS-LC-FIPS 3.0.0 reports "1.40.0" as its version string, indeed openssl/base.h contains:

#define AWSLC_VERSION_NUMBER_STRING "1.40.0"

Where AWS-LC-FIPS 2.0.17 has the right string:

#define AWSLC_VERSION_NUMBER_STRING "2.0.17"

Is this something intentional, will the new 3.0 branch keep the version string corresponding to its non-FIPS version?

[torben-hansen]

Hi!

We modified the version string in PR #1888. The current source code link from the FIPS 3.0 staging branch https://github.com/aws/aws-lc/blob/fips-2024-09-27/include/openssl/base.h#L125.

I think what must have happened is that you checked out the source code using the release tag AWS-LC-FIPS 3.0. Unfortunately, for a few days, the tag AWS-LC-FIPS 3.0 was pointing to the wrong commit. Apologies.

To fix your locally checked out code, I believe you have to delete the tag and check out the release again.