return when {
      majorVersion != null && majorVersion >= 9 ->
        SSLContext.getInstance("TLS")
      else ->
        try {
          // Based on SSLSocket.getApplicationProtocol check we should
          // have TLSv1.3 if we request it.
          // See https://www.oracle.com/java/technologies/javase/8u261-relnotes.html
          SSLContext.getInstance("TLSv1.3")

        var closed = false

        override fun close() {
          closed = true
        }

        override fun read(
          sink: Buffer,
          byteCount: Long,
        ): Long {
          check(!closed)
          return data.read(sink, byteCount)
        }

        override fun timeout(): Timeout {
          return Timeout.NONE
        }
      }
    return source.buffer().asResponseBody(null, -1)

    val isSupported: Boolean =
      when {
        !isAndroid -> false
        Build.VERSION.SDK_INT >= 30 -> false // graylisted methods are banned
        else -> {
          // Fail Fast
          check(
            Build.VERSION.SDK_INT >= 21,
          ) { "Expected Android API level 21+ but was ${Build.VERSION.SDK_INT}" }

          true
        }
      }

  @Test
  fun testTlsv13Works() {
    // https://docs.oracle.com/en/java/javase/14/security/java-secure-socket-extension-jsse-reference-guide.html
    // TODO test jdk.tls.client.enableSessionTicketExtension
    // TODO check debugging information

    enableTls()

    server.enqueue(MockResponse(body = "abc"))

    val request = Request(server.url("/"))

    val response = client.newCall(request).execute()

    response.use {

        with:
          distribution: 'zulu'
          java-version: 17

      - name: Setup Gradle
        uses: gradle/actions/setup-gradle@v3

      - name: Run Checks
        run: ./gradlew check -PandroidBuild=true -PgraalBuild=true -x test -x test

  testopenjdk11:
    permissions:
      checks: write # for mikepenz/action-junit-report
    runs-on: ubuntu-latest

    steps:
      - name: Checkout

        .build()
    assertThat(request.tag<Any>()).isSameAs(objectTag)
    assertThat(request.tag(Any::class)).isSameAs(objectTag)
    assertThat(request.tag(String::class)).isSameAs(stringTag)

    // TODO check for Jvm or handle Long/long correctly
//    assertThat(request.tag(Long::class)).isSameAs(longTag)
  }

  /** Confirm that we don't accidentally share the backing map between objects. */
  @Test

          assertThat(expected.message!!).contains("this is not a CA certificate")
        }
        else -> throw expected
      }
    }
  }

  /**
   * Attack the CA intermediates check by presenting unrelated chains to the handshake vs.
   * certificate pinner.
   *
   * This chain is valid but not pinned:
   *
   * ```
   *   attackerCa
   *    -> phonyVictim
   * ```
   *
   *

            if (headerNameIndex in 2..7) {
              // Only search a subset of the static header table. Most entries have an empty value, so
              // it's unnecessary to waste cycles looking at them. This check is built on the
              // observation that the header entries we care about are in adjacent pairs, and we
              // always know the first index of the pair.

107B6         ; mapped                 ; 01C0          # 14.0 MODIFIER LETTER DENTAL CLICK
107B7         ; mapped                 ; 01C1          # 14.0 MODIFIER LETTER LATERAL CLICK
107B8         ; mapped                 ; 01C2          # 14.0 MODIFIER LETTER ALVEOLAR CLICK
107B9         ; mapped                 ; 1DF0A         # 14.0 MODIFIER LETTER RETROFLEX CLICK WITH RETROFLEX HOOK

circle circus.museum cisco ciscofreak.com cistron.nl citadel citi citic city city.hu cityeats civilaviation.aero civilisation.museum civilization.museum civilwar.museum ck.ua cl cl.it claims clan.rip cleaning clerk.app clerkstage.app cleverapps.io click clicketcloud.com clickrising.net clinic clinique clinton.museum clock.museum clothing cloud cloud-fr1.unispace.io cloud.fedoraproject.org cloud.goog cloud.interhostsolutions.be cloud.jelastic.open.tim.it cloud.nospamproxy.com cloud66.ws cloud66.zone...