Switch from OpenSSL to BoringSSL for tests (#596)

We should not test whether a specific variant of getting SSL works.
Instead we can verify that one well supported one works.

Author: helly25

.github/workflows/tests.yml

@@ -61,9 +61,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        # TODO: This doesn't work with arm64 Macs yet. That is due to openssl being x86 only here.
-        # Since macos-14+ requires "-large" we have to disable this for now.
-        os: [ubuntu-latest]
+        os: [macos-latest, ubuntu-latest]
         bazel_version: [latest] # rules_rust bzlmod support is experimental and needs latest version as of now (20230912).
         bzlmod: [true, false]
     runs-on: ${{ matrix.os }}

tests/MODULE.bazel

@@ -23,11 +23,13 @@ local_path_override(
 bazel_dep(name = "bazel_skylib", version = "1.8.2")
 bazel_dep(name = "platforms", version = "1.0.0")
 bazel_dep(name = "rules_cc", version = "0.2.8")
+bazel_dep(name = "rules_foreign_cc", version = "0.15.0")
 bazel_dep(name = "rules_go", version = "0.50.1", repo_name = "io_bazel_rules_go")
+bazel_dep(name = "rules_license", version = "1.0.0")
 bazel_dep(name = "rules_rust", version = "0.67.0")
-bazel_dep(name = "rules_foreign_cc", version = "0.15.0")
 bazel_dep(name = "rules_shell", version = "0.6.1")
 bazel_dep(name = "abseil-cpp", version = "20250814.1", repo_name = "com_google_absl")
+bazel_dep(name = "boringssl", version = "0.20251002.0")
 
 # TODO: Remove when protobuf is released with a version of rules_python that supports 8.x
 bazel_dep(name = "rules_python", version = "1.6.3")

tests/WORKSPACE

@@ -267,11 +267,10 @@ http_archive(
 )
 
 http_archive(
-    name = "openssl",
-    build_file = "//openssl:openssl.bazel",
-    sha256 = "f6fb3079ad15076154eda9413fed42877d668e7069d9b87396d0804fdb3f4c90",
-    strip_prefix = "openssl-1.1.1c",
-    urls = ["https://www.openssl.org/source/openssl-1.1.1c.tar.gz"],
+    name = "boringssl",
+    sha256 = "f96733fc3df03d4195db656d1b7b8c174c33f95d052f811f0ecc8f4e4e3db332",
+    strip_prefix = "boringssl-0.20251002.0",
+    urls = ["https://github.com/google/boringssl/releases/download/0.20251002.0/boringssl-0.20251002.0.tar.gz"],
 )
 
 http_archive(

tests/WORKSPACE.bzlmod

@@ -4,14 +4,6 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "http_archive")
 
 # Well known repos; present here only for testing.
 
-http_archive(
-    name = "openssl",
-    build_file = "//openssl:openssl.bazel",
-    sha256 = "f6fb3079ad15076154eda9413fed42877d668e7069d9b87396d0804fdb3f4c90",
-    strip_prefix = "openssl-1.1.1c",
-    urls = ["https://www.openssl.org/source/openssl-1.1.1c.tar.gz"],
-)
-
 _ALL_CONTENT = """\
 filegroup(
     name = "all_srcs",