) {
    // No TLS extensions if the socket class is custom.
    if (matchesSocket(sslSocket)) {
      val bcSocket = sslSocket as BCSSLSocket

      val sslParameters = bcSocket.parameters

      // Enable ALPN.
      sslParameters.applicationProtocols = Platform.alpnProtocolNames(protocols).toTypedArray()

      bcSocket.parameters = sslParameters
    }
  }

  companion object {
    val factory =

      if (isAndroid) {
        findAndroidPlatform()
      } else {
        findJvmPlatform()
      }

    private fun findAndroidPlatform(): Platform {
      AndroidLog.enable()
      return Android10Platform.buildIfSupported() ?: AndroidPlatform.buildIfSupported()!!
    }

    private fun findJvmPlatform(): Platform {
      if (isConscryptPreferred) {

    the OkHttp version in custom `User-Agent` headers.

 *  Fix: Don't crash when running as a plugin in Android Studio Canary 4.1. To enable
    platform-specific TLS features OkHttp must detect whether it's running in a JVM or in Android.
    The upcoming Android Studio runs in a JVM but has classes from Android and that confused OkHttp!

    platform.assumeNotAndroid()

    // Accessing an URL protocol that was not enabled. The URL protocol mailto is not tested and
    // might not work as expected. It can be enabled by adding the --enable-url-protocols=mailto
    // option to the native-image command.
    platform.assumeNotGraalVMImage()
    val javaNetUrl = URL("mailto:******@****.***")
    assertThat(javaNetUrl.toHttpUrlOrNull()).isNull()
  }

Args = -H:+AddAllCharsets -H:EnableURLProtocols=http,https --enable-https --features=okhttp3.internal.graal.OkHttpFeature...

    val settings = Settings()
    settings[Settings.HEADER_TABLE_SIZE] = 8096
    assertThat(settings.headerTableSize).isEqualTo(8096)
    assertThat(settings.getEnablePush(true)).isTrue()
    settings[Settings.ENABLE_PUSH] = 1
    assertThat(settings.getEnablePush(false)).isTrue()
    settings.clear()
    assertThat(settings.getMaxConcurrentStreams()).isEqualTo(Int.MAX_VALUE)
    settings[Settings.MAX_CONCURRENT_STREAMS] = 75

      null
    }
  }

  override fun trustManager(sslSocketFactory: SSLSocketFactory): X509TrustManager? {
    // Not supported due to access checks on JDK 9+:
    // java.lang.reflect.InaccessibleObjectException: Unable to make member of class
    // sun.security.ssl.SSLSocketFactoryImpl accessible:  module java.base does not export
    // sun.security.ssl to unnamed module @xxx
    throw UnsupportedOperationException(

            trustManager,
            cert,
          ) as TrustAnchor
        trustAnchor.trustedCert
      } catch (e: IllegalAccessException) {
        throw AssertionError("unable to get issues and signature", e)
      } catch (_: InvocationTargetException) {
        null
      }
    }
  }

  companion object {
    val isSupported: Boolean =
      when {

          java-version: 11

      - name: Configure JDK
        uses: actions/setup-java@v4
        with:
          distribution: 'zulu'
          java-version: 17

      - name: Enable KVM group perms
        # https://github.blog/changelog/2023-02-23-hardware-accelerated-android-virtualization-on-actions-windows-and-linux-larger-hosted-runners/
        run: |

    frame.writeInt(0) // Settings are always on the connection stream 0.
    frame.writeShort(1) // SETTINGS_HEADER_TABLE_SIZE
    frame.writeInt(reducedTableSizeBytes)
    frame.writeShort(2) // SETTINGS_ENABLE_PUSH
    frame.writeInt(0)
    reader.nextFrame(
      requireSettings = false,
      object : BaseTestHandler() {
        override fun settings(
          clearPrevious: Boolean,
          settings: Settings,