GRADLEW=./gradlew --parallel --scan --build-cache -Dorg.elasticsearch.build.cache.url=https://gradle-enterprise.elastic.co/cache/
            GRADLEW_BAT=./gradlew.bat --parallel --scan --build-cache -Dorg.elasticsearch.build.cache.url=https://gradle-enterprise.elastic.co/cache/
    publishers:
# Disable Junit publisher for now since it's causing OOME on our Jenkins instance
#      - junit:

        "sha256/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=",
      )
    assertEquals(
      "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=".decodeBase64(),
      pin.hash,
    )
    assertEquals("sha256", pin.hashAlgorithm)
    assertEquals("**.example.co.uk", pin.pattern)
    Assertions.assertTrue(pin.matchesHostname("www.example.co.uk"))
    Assertions.assertTrue(pin.matchesHostname("gopher.example.co.uk"))

  }

  /**
   * Returns the portion of this domain name that is one level beneath the {@linkplain
   * #isPublicSuffix() public suffix}. For example, for {@code x.adwords.google.co.uk} it returns
   * {@code google.co.uk}, since {@code co.uk} is a public suffix. Similarly, for {@code
   * myblog.blogspot.com} it returns the same domain, {@code myblog.blogspot.com}, since {@code
   * blogspot.com} is a public suffix.
   *

co.it
co.je
co.jp
co.ke
co.kr
co.krd
co.lc
co.ls
co.ma
co.me
co.mg
co.mu
co.mw
co.mz
co.na
co.network
co.ni
co.nl
co.no
co.nz
co.om
co.pl
co.place
co.pn
co.pw
co.ro
co.rs
co.rw
co.ss
co.st
co.sz
co.technology
co.th
co.tj
co.tm
co.tt
co.tz
co.ua
co.ug
co.uk

   */
  @Test fun verifyNonAsciiSubjectAlt() {
    // Expecting actual:
    //  ["bar.com", "花子.co.jp"]
    // to contain exactly (and in same order):
    //  ["bar.com", "������.co.jp"]
    platform.assumeNotBouncyCastle()

    // CN=foo.com, subjectAlt=bar.com, subjectAlt=花子.co.jp
    // (hanako.co.jp in kanji)
    val session =
      session(
        """
        -----BEGIN CERTIFICATE-----

xj.cn
xz.cn
yn.cn
zj.cn
hk.cn
mo.cn
tw.cn

// co : https://www.iana.org/domains/root/db/co.html
// https://www.cointernet.com.co/registra
// https://www.cointernet.com.co/como-funciona-un-dominio-restringido
// Confirmed by registry <******@****.***.co> 2024-11-18
co
com.co
edu.co
gov.co
mil.co
net.co
nom.co
org.co

// com : https://www.iana.org/domains/root/db/com.html
com

bị
bởi
cả
các
cái
cần
càng
chỉ
chiếc
cho
chứ
chưa
chuyện
có
có thể
cứ
của
cùng
cũng
đã
đang
đây
để
đến nỗi
đều
điều
do
đó
được
dưới
gì
khi
không
là
lại
lên
lúc
mà
mỗi
một cách
này
nên
nếu
ngay
nhiều
như
nhưng
những
nơi
nữa
phải
qua
ra
rằng
rằng
rất
rất
rồi
sau
sẽ

==================================

Layout and Syntax
-----------------

CI is run by Jenkins at [elasticsearch-ci](https://elasticsearch-ci.elastic.co/).
Jobs live in the [jobs.t](jobs.t) directory, these are defined in YML using a syntax 
simmilar to [JJB](https://elasticsearch-ci.elastic.co/view/Elasticsearch%20master/).
Macros are not allowed, and each job must be defined in its own file.

co.it
co.je
co.jp
co.ke
co.kr
co.krd
co.lc
co.ls
co.ma
co.me
co.mg
co.mu
co.mw
co.mz
co.na
co.network
co.ni
co.nl
co.no
co.nz
co.om
co.pl
co.place
co.pn
co.pw
co.ro
co.rs
co.rw
co.ss
co.st
co.sz
co.technology
co.th
co.tj
co.tm
co.tt
co.tz
co.ua
co.ug
co.uk

  final Map<String, String> artifactoryCredentials = vault.logical()
    .read("secret/elasticsearch-ci/artifactory.elstc.co")
    .getData()
  logger.info("Using elastic artifactory repos")
  Closure configCache = {
    return {
      name "artifactory-gradle-release"
      url "https://artifactory.elstc.co/artifactory/gradle-release"
      credentials {
        username artifactoryCredentials.get("username")