val localCertificates = readCertificateList(source)
          val tlsVersion =
            if (!source.exhausted()) {
              TlsVersion.forJavaName(source.readUtf8LineStrict())
            } else {
              TlsVersion.SSL_3_0
            }
          handshake = Handshake.get(tlsVersion, cipherSuite, peerCertificates, localCertificates)
        } else {
          handshake = null

}

public final class okhttp3/TlsVersion : java/lang/Enum {
	public static final field Companion Lokhttp3/TlsVersion$Companion;
	public static final field SSL_3_0 Lokhttp3/TlsVersion;
	public static final field TLS_1_0 Lokhttp3/TlsVersion;
	public static final field TLS_1_1 Lokhttp3/TlsVersion;
	public static final field TLS_1_2 Lokhttp3/TlsVersion;
	public static final field TLS_1_3 Lokhttp3/TlsVersion;

          )
        }
      }

      val certificatePinner = address.certificatePinner!!

      val handshake =
        Handshake(
          unverifiedHandshake.tlsVersion,
          unverifiedHandshake.cipherSuite,
          unverifiedHandshake.localCertificates,
        ) {
          certificatePinner.certificateChainCleaner!!.clean(
            unverifiedHandshake.peerCertificates,

		cipherSuites, err := cliflag.TLSCipherSuites(s.CipherSuites)
		if err != nil {
			return err
		}
		c.CipherSuites = cipherSuites
	}

	var err error
	c.MinTLSVersion, err = cliflag.TLSVersion(s.MinTLSVersion)
	if err != nil {
		return err
	}

	// load SNI certs
	namedTLSCerts := make([]dynamiccertificates.SNICertKeyContentProvider, 0, len(s.SNICertKeys))
	for _, nck := range s.SNICertKeys {

				if tlsCipherSuites[i] == cipherID {
					klog.InfoS("Use of insecure cipher detected.", "cipher", cipherName)
				}
			}
		}
	}

	minTLSVersion, err := cliflag.TLSVersion(kc.TLSMinVersion)
	if err != nil {
		return nil, err
	}

	if minTLSVersion == tls.VersionTLS13 {
		if len(tlsCipherSuites) != 0 {