# java11 should always be included as we only support Oracle Java 11 in
# FIPS 140-2 mode. 
# We also want to test with the bundled JDK so that we proactively find
# issues that might later be backported to JDK11. Current bundled JDK is
# openjdk16

ES_RUNTIME_JAVA:
  - java11

    CipherSuite.TLS_AES_128_CCM_8_SHA256,
  )

/**
 * A TLS 1.3 only Connection Spec. This will be eventually be exposed
 * as part of MODERN_TLS or folded into the default OkHttp client once published and
 * available in JDK11 or Conscrypt.
 */
private val TLS_13 =
  ConnectionSpec
    .Builder(true)
    .cipherSuites(*TLS13_CIPHER_SUITES.toTypedArray())
    .tlsVersions(TlsVersion.TLS_1_3)
    .build()

private val TLS_12 =

        // Thread.interrupt can throw arbitrary exceptions due to the nio InterruptibleChannel API
        // This will make sure that tasks don't get stuck busy waiting.
        // Some of this is fixed in jdk11 (see https://bugs.openjdk.org/browse/JDK-8198692) but
        // not all.  See the test cases for examples on how this can happen.
        try {
          ((Thread) currentRunner).interrupt();
        } finally {

            param("env.JAVA_HOME", javaHome(BuildToolBuildJvm, Os.LINUX))
            // https://github.com/gradle/gradle-private/issues/4504
            param("env.JDK8", javaHome(OpenJdk8, Os.LINUX))
            param("env.JDK11", javaHome(OpenJdk11, Os.LINUX))
            param("env.JDK17", javaHome(OpenJdk17, Os.LINUX))
            // Keep 21 and 25 for tests requiring it specifically: https://github.com/gradle/gradle/pull/35410#discussion_r2460835304