diff --git a/WORKSPACE b/WORKSPACE
index 0fc42261..76584685 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -142,17 +142,12 @@ http_archive(
 load("@com_google_nisaba//bazel:workspace.bzl", "nisaba_public_repositories")
 
 nisaba_public_repositories()
-
 http_archive(
-    name = "boringssl",  # Must match upstream workspace name.
-    # Gitiles creates gzip files with an embedded timestamp, so we cannot use
-    # sha256 to validate the archives.  We must rely on the commit hash and
-    # https. Commits must come from the master-with-bazel branch.
-    urls = ["https://codeload.github.com/google/boringssl/zip/master-with-bazel"],
-    strip_prefix = "boringssl-master-with-bazel",
-    type = "zip",
+    name = "boringssl",
+    sha256 = "5d299325d1db8b2f2db3d927c7bc1f9fcbd05a3f9b5c8239fa527c09bf97f995",  # Last updated 2022-10-19
+    strip_prefix = "boringssl-0acfcff4be10514aacb98eb8ab27bb60136d131b",
+    urls = ["https://github.com/google/boringssl/archive/0acfcff4be10514aacb98eb8ab27bb60136d131b.tar.gz"],
 )
-
 # -------------------------------------------------------------------------
 # Protocol buffer matches (should be part of gmock and gtest, but not yet):
 #   https://github.com/inazarenko/protobuf-matchers