.build()
    assertThat(headers.parseChallenges("WWW-Authenticate")).containsExactly(
      Challenge("Digest", mapOf()),
    )
  }

  @Disabled("TODO(jwilson): reject parameters that use invalid characters")
  @Test
  fun doubleQuoteInToken() {
    val headers =
      Headers.Builder()
        .add("WWW-Authenticate", "Digest,,,, Basic ,,,realm=my\"realm")
        .build()

  @Test fun `sequence algorithm`() {
    val bytes = "300d06092a864886f70d01010b0500".decodeHex()
    val algorithmIdentifier =
      AlgorithmIdentifier(
        algorithm = SHA256_WITH_RSA_ENCRYPTION,
        parameters = null,
      )
    assertThat(CertificateAdapters.algorithmIdentifier.fromDer(bytes))
      .isEqualTo(algorithmIdentifier)
    assertThat(CertificateAdapters.algorithmIdentifier.toDer(algorithmIdentifier))

      algorithmParameters,
      decompose = {
        listOf(
          it.algorithm,
          it.parameters,
        )
      },
      construct = {
        AlgorithmIdentifier(
          algorithm = it[0] as String,
          parameters = it[1],
        )
      },
    )

  /**
   * ```
   * BasicConstraints ::= SEQUENCE {

          val message = record.message
          val parameters = record.parameters

          if (parameters != null && !message.startsWith("Raw") && !message.startsWith("Plaintext")) {
            if (verbose) {
              println(record.message)
              println(record.parameters[0])
            }

            // JSSE logs additional messages as parameters that are not referenced in the log message.

            clientEventsList.add(record.message)

            if (record.loggerName == "javax.net.ssl") {
              val parameters = record.parameters

              if (parameters != null) {
                clientEventsList.add(parameters.first().toString())
              }
            }
          }
        }
      }

      override fun flush() {
      }

        is RSAPrivateKey ->
          AlgorithmIdentifier(
            algorithm = SHA256_WITH_RSA_ENCRYPTION,
            parameters = null,
          )
        else ->
          AlgorithmIdentifier(
            algorithm = SHA256_WITH_ECDSA,
            parameters = ByteString.EMPTY,
          )
      }
    }

    private fun generateKeyPair(): KeyPair {

    multipartReader.use {
      while (true) {
        val part = multipartReader.nextPart() ?: break
        process(part.headers, part.body)
      }
    }
    ```

 *  New: `MediaType.parameter()` gets a parameter like `boundary` from a media type like
    `multipart/mixed; boundary="abc"`.

 *  New: `Authenticator.JAVA_NET_AUTHENTICATOR` forwards authentication requests to

    data to the override URL. For example, you could add a `request-body-sha256` query parameter so
    requests with the same POST data get the same cache entry.

 *  New: `HttpLoggingInterceptor.redactQueryParams()` configures the query parameters to redact
    in logs. For best security, don't put sensitive information in query parameters.

 *  New: `ConnectionPool.setPolicy()` configures a minimum connection pool size for a target

 *
 * See [NativeCrypto.java][conscrypt_providers] which lists the cipher suites supported by
 * Conscrypt.
 *
 * [iana_tls_parameters]: https://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml
 * [sslengine]: https://developer.android.com/reference/javax/net/ssl/SSLEngine.html
 * [oracle_providers]: https://docs.oracle.com/javase/10/security/oracle-providers.htm

 * your application's HTTP calls.
 *
 * All start/connect/acquire events will eventually receive a matching end/release event, either
 * successful (non-null parameters), or failed (non-null throwable). The first common parameters of
 * each event pair are used to link the event in case of concurrent or repeated events e.g.
 * `dnsStart(call, domainName)` → `dnsEnd(call, domainName, inetAddressList)`.
 *