Expired SSL cert on 3rd party mirror - Kafka

[murray-stripe]

Title: Expired SSL cert on mirror - external dependency - kafka

Description:

The download mirror for the kafka dependency seems to have an expired certificate and from-source builds are not currently possible with an empty bazel cache.

There may not actually be any resolution to this from the Envoy project's side, but creating the ticket for posterity and to note for the maintainers.

Error from browser when attemping to access the Kafka download:

Repro steps:

bazelisk clean --expunge
bazelisk build //...

[akonradi]

I don't see that mirror listed on this Apache mirrors list. This health status probe page also shows it has been unavailable for a while.

[moderation]

Looks like we should switch to the suggested mirror https://mirrors.gigenet.com/apache/kafka/2.4.1/kafka_2.12-2.4.1.tgz

    kafka_server_binary = dict(
        project_name = "Kafka (server binary)",
        project_url = "https://kafka.apache.org",
        version = "2.4.1",
        sha256 = "2177cbd14118999e1d76fec628ca78ace7e6f841219dbc6035027c796bbe1a2a",
        strip_prefix = "kafka_2.12-{version}",
        urls = ["https://mirrors.gigenet.com/apache/kafka/{version}/kafka_2.12-{version}.tgz"],
        use_category = ["test"],
    ),

[htuch]

Agreed, let's just switch mirror, would you be able to submit a PR? Thanks.