AWS-LC-FIPS-2.0.11 release preparation (#1614)

## What's Changed

* Backport X509 certificate verification optimizations to
AWS-LC-FIPS-2.x by @samuel40791765 in
#1611
  * 31d5dce
  * 4e32cc5
  * 9bed1c9


By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license and the ISC license.

crypto/fipsmodule/service_indicator/service_indicator_test.cc

@@ -4051,7 +4051,7 @@ TEST(ServiceIndicatorTest, DRBG) {
 // Since this is running in FIPS mode it should end in FIPS
 // Update this when the AWS-LC version number is modified
 TEST(ServiceIndicatorTest, AWSLCVersionString) {
-  ASSERT_STREQ(awslc_version_string(), "AWS-LC FIPS 2.0.10");
+  ASSERT_STREQ(awslc_version_string(), "AWS-LC FIPS 2.0.11");
 }
 
 #else
@@ -4094,6 +4094,6 @@ TEST(ServiceIndicatorTest, BasicTest) {
 // Since this is not running in FIPS mode it shouldn't end in FIPS
 // Update this when the AWS-LC version number is modified
 TEST(ServiceIndicatorTest, AWSLCVersionString) {
-  ASSERT_STREQ(awslc_version_string(), "AWS-LC 2.0.10");
+  ASSERT_STREQ(awslc_version_string(), "AWS-LC 2.0.11");
 }
 #endif // AWSLC_FIPS

include/openssl/base.h

@@ -214,7 +214,7 @@ extern "C" {
 // ServiceIndicatorTest.AWSLCVersionString
 // Note: there are two versions of this test. Only one test is compiled
 // depending on FIPS mode.
-#define AWSLC_VERSION_NUMBER_STRING "2.0.10"
+#define AWSLC_VERSION_NUMBER_STRING "2.0.11"
 
 #if defined(BORINGSSL_SHARED_LIBRARY)