Build is failing due to openssl 1.0.2u no longer being available

[pzakha]

Here's the error:

    [NetFetcher: openssl] I | 2020-04-06T15:12:30+00:00 | Downloading from `https://www.openssl.org/source/openssl-1.0.2u.tar.gz'
...
    [NetFetcher: openssl] E | 2020-04-06T15:12:32+00:00 | Download failed - OpenURI::HTTPError!                                                                                        0% (0 KB/sec)

I've tried downloading this version manually and it is no longer present on the openssl site:

$ wget https://www.openssl.org/source/openssl-1.0.2u.tar.gz
--2020-04-06 15:13:31--  https://www.openssl.org/source/openssl-1.0.2u.tar.gz
Resolving www.openssl.org (www.openssl.org)... 23.50.34.206, 2600:1406:4400:2a2::c1e, 2600:1406:4400:295::c1e
Connecting to www.openssl.org (www.openssl.org)|23.50.34.206|:443... connected.
HTTP request sent, awaiting response... 404 Not Found
2020-04-06 15:13:32 ERROR 404: Not Found.

Wikipedia mentions that openssl 1.0.2 end-of-life is 2019-12-31 (https://en.wikipedia.org/wiki/OpenSSL).

I did a quick grep in the repository and it doesn't look like we are explicitly requesting a specific version of openssl, so it must be pulled-in via some other dependency.

[pzakha]

It seems like https://www.openssl.org/source/openssl-1.0.2u.tar.gz is accessible again. It's unclear if openssl.org removed 1.0.2 temporarily from their site to encourage users to upgrade to 1.1.1, or if it was a glitch. It's also unclear if openssl.org will remove 1.0.2 permanently from their downloads some time soon.