Kong Bazel Build process source URL overrides?

[jeremyjpj0916]

For folks where network prevents reaching some public facing packages, how does one add a mirror for dependencies bazel pulls as part of the Kong build? Lets take openssl for example:

#17 60.06 (07:58:36) WARNING: Download from https://www.openssl.org/source/openssl-3.2.1.tar.gz failed: class javax.net.ssl.SSLHandshakeException PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Which is blocked due to fw. How do I point bazel at other mirrors of that tarball to override using the default dependency URL so bazel can incorporate my own mirrors into the build flow? Was simple url swapping back in the .sh kong-build-tools days.

Related Q I asked here: #11453 (comment)

[jeremyjpj0916]

Ooo, actually I may have answered my own question with a little extra digging.

kong/build/openresty/openssl/openssl_repositories.bzl

Line 18 in 5f4d0c6

"https://github.com/openssl/openssl/releases/download/openssl-" + version + "/openssl-" + version + ".tar.gz",

Seems there is a place and a github mirror is present, meaning if the first URL fails, then bazel tries the backup in github right? Hence why the build just gave me a warning but did not fail out right? I imagine if both urls failed then a warning becomes a full on error?

Which my fw does not block github.com sources so we should be okay then!