WIP: bssl-compat on bazel 1.35

WORKSPACE

@@ -5,6 +5,12 @@ local_repository(
     path = "bssl-compat",
 )
 
+new_local_repository(
+    name = "llvm",
+    path = "/opt/llvm",
+    build_file = "//bazel/external:llvm.BUILD",
+)
+
 load("//bazel:api_binding.bzl", "envoy_api_binding")
 
 envoy_api_binding()

bazel/BUILD

@@ -572,12 +572,12 @@ config_setting(
 # Alias pointing to the selected version of BoringSSL:
 alias(
     name = "boringssl",
-    actual = "@envoy//bssl-compat:ssl"
+    actual = "@bssl-compat//:ssl"
 )
-
+    
 alias(
     name = "boringcrypto",
-    actual = "@envoy//bssl-compat:crypto"
+    actual = "@bssl-compat//:crypto"
 )
 
 config_setting(

bazel/external/llvm.BUILD

@@ -0,0 +1,20 @@
+load("@rules_cc//cc:defs.bzl", "cc_library")
+
+licenses(["notice"])  # Apache 2
+
+# libclang-cpp from llvm, used by the bssl-compat prefixer tool.
+cc_library(
+    name = "libclang-cpp",
+    srcs = glob(["lib/libclang-cpp.*"]),
+    hdrs = glob(["include/**/*"]),
+    includes = ["include"],
+    linkopts = ["-lstdc++"],
+    visibility = ["//visibility:public"],
+)
+
+# The clang compiler built-in headers (stdef.h, limits.h etc)
+filegroup(
+    name = "clang-headers",
+    srcs = glob(["lib/clang/*/include/**/*.h"]),
+    visibility = ["//visibility:public"],
+)

bazel/repositories.bzl

@@ -140,11 +140,11 @@ def envoy_dependencies(skip_targets = []):
     # Binding to an alias pointing to the bssl-compat layer
     native.bind(
         name = "ssl",
-        actual = "@envoy//bssl-compat:ssl",
+        actual = "@bssl-compat//:ssl",
     )
     native.bind(
         name = "crypto",
-        actual = "@envoy//bssl-compat:crypto",
+        actual = "@bssl-compat//:crypto",
     )
 
     # The long repo names (`com_github_fmtlib_fmt` instead of `fmtlib`) are