diff --git a/var/spack/repos/builtin/packages/openssl/package.py b/var/spack/repos/builtin/packages/openssl/package.py
index da444e30cd..862ccd1788 100644
--- a/var/spack/repos/builtin/packages/openssl/package.py
+++ b/var/spack/repos/builtin/packages/openssl/package.py
@@ -20,7 +20,7 @@ class Openssl(Package):  # Uses Fake Autotools, should subclass Package
     homepage = "https://www.openssl.org"
 
     # URL must remain http:// so Spack can bootstrap curl
-    url = "https://www.openssl.org/source/openssl-1.1.1d.tar.gz"
+    url = "http://www.openssl.org/source/openssl-1.1.1d.tar.gz"
     list_url = "https://www.openssl.org/source/old/"
     list_depth = 1
 
diff --git a/var/spack/repos/builtin/packages/zlib/package.py b/var/spack/repos/builtin/packages/zlib/package.py
index 58db86f6b2..f8af00163b 100644
--- a/var/spack/repos/builtin/packages/zlib/package.py
+++ b/var/spack/repos/builtin/packages/zlib/package.py
@@ -21,7 +21,7 @@ class Zlib(MakefilePackage, Package):
 
     homepage = "https://zlib.net"
     # URL must remain http:// so Spack can bootstrap curl
-    url = "https://zlib.net/fossils/zlib-1.2.11.tar.gz"
+    url = "http://zlib.net/fossils/zlib-1.2.11.tar.gz"
 
     version("1.2.13", sha256="b3a24de97a8fdbc835b9833169501030b8977031bcb54b3b3ac13740f846ab30")
     version(