override fun newSSLContext(): SSLContext = SSLContext.getInstance("TLS", provider)

  override fun platformTrustManager(): X509TrustManager {
    val factory =
      TrustManagerFactory.getInstance(
        "PKIX",
        BouncyCastleJsseProvider.PROVIDER_NAME,
      )
    factory.init(null as KeyStore?)
    val trustManagers = factory.trustManagers!!
    check(trustManagers.size == 1 && trustManagers[0] is X509TrustManager) {

crypto.SHA3_256: {2, 16, 840, 1, 101, 3, 4, 2, 8}, crypto.SHA3_384: {2, 16, 840, 1, 101, 3, 4, 2, 9}, crypto.SHA3_512: {2, 16, 840, 1, 101, 3, 4, 2, 10}, } for h, oid := range prefixes { want, err := asn1.Marshal(struct { HashAlgorithm pkix.AlgorithmIdentifier Hash []byte }{ HashAlgorithm: pkix.AlgorithmIdentifier{ Algorithm: oid, Parameters: asn1.NullRawValue, }, Hash: make([]byte, h.Size()), }) if err != nil { t.Fatal(err) } want = want[:len(want)-h.Size()] got := hashPrefixes[h.String()] if !bytes.Equal(got,...