sslSocketFactory: SSLSocketFactory?,
    x509TrustManager: X509TrustManager?,
  ): Interceptor.Chain {
    check(exchange == null) { "sslSocketFactory can't be adjusted in a network interceptor" }

    if (sslSocketFactory != null && x509TrustManager != null) {
      val newCertificateChainCleaner = CertificateChainCleaner.get(x509TrustManager)
      return copy(
        sslSocketFactory = sslSocketFactory,

    }

    object X509TrustManagerOverride : Override<X509TrustManager?> {
      override val paramName: String = "sslSocketFactory"

      override fun Interceptor.Chain.value(): X509TrustManager? = x509TrustManagerOrNull

      override fun Interceptor.Chain.withOverride(value: X509TrustManager?): Interceptor.Chain =
        withSslSocketFactory(Platform.get().newSslSocketFactory(value!!), value)

     */
    fun withSslSocketFactory(
      sslSocketFactory: SSLSocketFactory?,
      x509TrustManager: X509TrustManager?,
    ): Chain

    /**
     * Returns the [X509TrustManager] for the OkHttpClient, or an override from the Call.Chain.
     */
    val x509TrustManagerOrNull: X509TrustManager?

    /**
     * Returns the [HostnameVerifier] for the OkHttpClient, or an override from the Call.Chain.

      }

      private fun trustManagerForCertificates(inputStream: InputStream): X509TrustManager {
        ... // Full source omitted. See sample.
      }
    ```
=== ":material-language-java: Java"
    ```java
      private final OkHttpClient client;

      public CustomTrust() {
        X509TrustManager trustManager;
        SSLSocketFactory sslSocketFactory;
        try {

        TODO()
      }

      override fun withSslSocketFactory(
        sslSocketFactory: SSLSocketFactory?,
        x509TrustManager: X509TrustManager?,
      ): Interceptor.Chain {
        TODO()
      }

      override fun withHostnameVerifier(hostnameVerifier: HostnameVerifier): Interceptor.Chain {
        TODO()
      }

With a server that holds a certificate and a client that trusts it we have enough for an HTTPS
handshake. The best part of this example is that we don't need to make our test code insecure with a
a fake `HostnameVerifier` or `X509TrustManager`.

Certificate Authorities
-----------------------

The above example uses a self-signed certificate. This is convenient for testing but not

	public final fun sslSocketFactory ()Ljavax/net/ssl/SSLSocketFactory;
	public final fun webSocketCloseTimeout ()I
	public final fun writeTimeoutMillis ()I
	public final fun x509TrustManager ()Ljavax/net/ssl/X509TrustManager;
}

public final class okhttp3/OkHttpClient$Builder {
	public final fun -addInterceptor (Lkotlin/jvm/functions/Function1;)Lokhttp3/OkHttpClient$Builder;

	public final fun sslSocketFactory ()Ljavax/net/ssl/SSLSocketFactory;
	public final fun webSocketCloseTimeout ()I
	public final fun writeTimeoutMillis ()I
	public final fun x509TrustManager ()Ljavax/net/ssl/X509TrustManager;
}

public final class okhttp3/OkHttpClient$Builder {
	public final fun -addInterceptor (Lkotlin/jvm/functions/Function1;)Lokhttp3/OkHttpClient$Builder;