import okhttp3.Protocol

/**
 * Platform using OpenJSSE (https://github.com/openjsse/openjsse) if installed as the first
 * Security Provider.
 *
 * Requires org.openjsse:openjsse >= 1.1.0 on the classpath.
 */
class OpenJSSEPlatform private constructor() : Platform() {
  private val provider: Provider =
    org.openjsse.net.ssl
      .OpenJSSE()

      val bc = BouncyCastlePlatform.buildIfSupported()

      if (bc != null) {
        return bc
      }
    }

    if (isOpenJSSEPreferred) {
      val openJSSE = OpenJSSEPlatform.buildIfSupported()

      if (openJSSE != null) {
        return openJSSE
      }
    }

    // An Oracle JDK 9 like OpenJDK, or JDK 8 251+.
    val jdk9 = Jdk9Platform.buildIfSupported()

    if (jdk9 != null) {
      return jdk9

[Conscrypt]: https://www.conscrypt.org/
[Corretto]: https://github.com/corretto/amazon-corretto-crypto-provider
[GraalVM]: https://www.graalvm.org/
[OpenJDK]: https://openjdk.java.net/groups/security/
[OpenJSSE]: https://github.com/openjsse/openjsse
[OpenSSL]: https://www.openssl.org/
[bug5592]: https://github.com/square/okhttp/issues/5592

tasks.withType<Test> {
  useJUnitPlatform()
  jvmArgs("-Dokhttp.platform=$platform")

  if (platform == "loom") {
    jvmArgs("-Djdk.tracePinnedThreads=short")
  }
  if (platform == "openjsse") {
    if (testJavaVersion > 8) {
      throw GradleException("OpenJSSE is only supported on Java 8")
    }
  }

  val javaToolchains = project.extensions.getByType<JavaToolchainService>()
  javaLauncher.set(javaToolchains.launcherFor {

          if (!OpenJSSEPlatform.isSupported) {
            System.err.println("Warning: OpenJSSE not available")
          }

          if (System.getProperty("javax.net.debug") == null) {
            System.setProperty("javax.net.debug", "")
          }

          Security.insertProviderAt(OpenJSSE(), 1)

import org.junit.jupiter.api.BeforeEach
import org.junit.jupiter.api.Disabled
import org.junit.jupiter.api.Test
import org.junit.jupiter.api.extension.RegisterExtension
import org.openjsse.sun.security.ssl.SSLSocketFactoryImpl
import org.openjsse.sun.security.ssl.SSLSocketImpl

class OpenJSSETest {
  @JvmField @RegisterExtension
  var platform = PlatformRule()

  @JvmField @RegisterExtension

  testImplementation(libs.conscrypt.openjdk)
  testImplementation(libs.junit.jupiter.engine)
  testImplementation(libs.junit.vintage.engine)

  androidTestImplementation(projects.okhttpTestingSupport) {
    exclude("org.openjsse", "openjsse")
    exclude("org.conscrypt", "conscrypt-openjdk-uber")
    exclude("software.amazon.cryptools", "AmazonCorrettoCryptoProvider")
  }
  androidTestImplementation(libs.assertk)

        implementation(projects.okhttpUrlconnection)

        if (platform == "conscrypt") {
          implementation(libs.conscrypt.openjdk)
        } else if (platform == "openjsse") {
          implementation(libs.openjsse)
        }
      }
    }

    if (testJavaVersion >= 17) {
      val androidHostTest by getting {
        dependencies {
          implementation(libs.androidx.junit)

  providers:
    runs-on: ubuntu-latest
    if: github.ref == 'refs/heads/master' || contains(github.event.pull_request.labels.*.name, 'providers')
    strategy:
      matrix:
        include:
          - provider: openjsse
            java-version: 8
          - provider: bouncycastle
            java-version: 21
          - provider: corretto
            java-version: 21
          - provider: conscrypt

mockserver-client = { module = "org.mock-server:mockserver-client-java-no-dependencies", version.ref = "mockserver-client" }
native-image-svm = { module = "org.graalvm.nativeimage:svm", version.ref = "graalvm" }
openjsse = { module = "org.openjsse:openjsse", version.ref = "openjsse" }
playservices-safetynet = { module = "com.google.android.gms:play-services-safetynet", version.ref = "playservices-safetynet" }