connectionSpec - Code Search

android-test/src/androidDeviceTest/java/okhttp/android/test/alpn/AlpnOverrideTest.kt

    client =
      client
        .newBuilder()
        .sslSocketFactory(CustomSSLSocketFactory(client.sslSocketFactory), client.x509TrustManager!!)
        .connectionSpecs(
          listOf(
            ConnectionSpec
              .Builder(ConnectionSpec.MODERN_TLS)
              .supportsTlsExtensions(false)
              .build(),
          ),
        ).eventListener(
          object : EventListener() {

Created: Fri Apr 03 11:42:14 GMT 2026

- Last Modified: Mon Jan 26 07:38:51 GMT 2026

- 2.8K bytes

- Click Count (0)

github.com/square/okhttp

okhttp/src/jvmTest/kotlin/okhttp3/internal/connection/RetryConnectionTest.kt

  }

  @Test fun someFallbacksSupported() {
    val sslV3 =
      ConnectionSpec
        .Builder(ConnectionSpec.MODERN_TLS)
        .tlsVersions(TlsVersion.SSL_3_0)
        .build()
    val routePlanner = factory.newRoutePlanner(client)
    val route = factory.newRoute()
    val connectionSpecs = listOf(ConnectionSpec.MODERN_TLS, ConnectionSpec.COMPATIBLE_TLS, sslV3)
    val enabledSocketTlsVersions =
      arrayOf(

Created: Fri Apr 03 11:42:14 GMT 2026

- Last Modified: Wed Mar 19 19:25:20 GMT 2025

- 4.3K bytes

- Click Count (0)

github.com/square/okhttp

okhttp/api/jvm/okhttp.api

}

public final class okhttp3/ConnectionSpec {
	public static final field CLEARTEXT Lokhttp3/ConnectionSpec;
	public static final field COMPATIBLE_TLS Lokhttp3/ConnectionSpec;
	public static final field Companion Lokhttp3/ConnectionSpec$Companion;
	public static final field MODERN_TLS Lokhttp3/ConnectionSpec;
	public static final field RESTRICTED_TLS Lokhttp3/ConnectionSpec;

Created: Fri Apr 03 11:42:14 GMT 2026

- Last Modified: Tue Mar 10 21:47:20 GMT 2026

- 72.3K bytes

- Click Count (0)

github.com/square/okhttp

docs/changelogs/changelog_2x.md

    `ConnectionSpec` class.

    To disable TLS fallback:

    ```java
    client.setConnectionSpecs(Arrays.asList(
        ConnectionSpec.MODERN_TLS, ConnectionSpec.CLEARTEXT));
    ```

    To disable cleartext connections, permitting `https` URLs only:

    ```java
    client.setConnectionSpecs(Arrays.asList(
        ConnectionSpec.MODERN_TLS, ConnectionSpec.COMPATIBLE_TLS));

Created: Fri Apr 03 11:42:14 GMT 2026

- Last Modified: Sun Feb 06 02:19:09 GMT 2022

- 26.6K bytes

- Click Count (0)

github.com/square/okhttp

okhttp/src/jvmTest/kotlin/okhttp3/SessionReuseTest.kt

    }

    val sessionIds = mutableListOf<String>()

    enableTls()

    val tlsVersion = TlsVersion.forJavaName(tlsVersion)
    val spec =
      ConnectionSpec
        .Builder(ConnectionSpec.MODERN_TLS)
        .tlsVersions(tlsVersion)
        .build()

    var reuseSession = false

    val sslContext = handshakeCertificates.sslContext()

Created: Fri Apr 03 11:42:14 GMT 2026

- Last Modified: Sat Nov 01 12:18:11 GMT 2025

- 5.9K bytes

- Click Count (1)

github.com/square/okhttp

okhttp/src/commonJvmAndroid/kotlin/okhttp3/Address.kt

   * contains minimally [Protocol.HTTP_1_1].
   */
  @get:JvmName("protocols")
  val protocols: List<Protocol> = protocols.toImmutableList()

  @get:JvmName("connectionSpecs")
  val connectionSpecs: List<ConnectionSpec> =
    connectionSpecs.toImmutableList()

  @JvmName("-deprecated_url")
  @Deprecated(
    message = "moved to val",
    replaceWith = ReplaceWith(expression = "url"),

Created: Fri Apr 03 11:42:14 GMT 2026

- Last Modified: Wed Mar 19 19:25:20 GMT 2025

- 7.3K bytes

- Click Count (0)

github.com/square/okhttp

samples/guide/src/main/java/okhttp3/recipes/CustomCipherSuites.java

        CipherSuite.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
        CipherSuite.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
        CipherSuite.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384);
    final ConnectionSpec spec = new ConnectionSpec.Builder(ConnectionSpec.MODERN_TLS)
        .cipherSuites(customCipherSuites.toArray(new CipherSuite[0]))
        .build();

    X509TrustManager trustManager = defaultTrustManager();

Created: Fri Apr 03 11:42:14 GMT 2026

- Last Modified: Thu Mar 14 21:57:42 GMT 2019

- 6.5K bytes

- Click Count (0)

github.com/square/okhttp

docs/features/https.md

By default, OkHttp will attempt a `MODERN_TLS` connection.  However by configuring the client connectionSpecs you can allow a fall back to `COMPATIBLE_TLS` connection if the modern configuration fails.

```java
OkHttpClient client = new OkHttpClient.Builder()
    .connectionSpecs(Arrays.asList(ConnectionSpec.MODERN_TLS, ConnectionSpec.COMPATIBLE_TLS))
    .build();
```

Created: Fri Apr 03 11:42:14 GMT 2026

- Last Modified: Sun Mar 15 09:01:42 GMT 2026

- 10.5K bytes

- Click Count (0)

github.com/square/okhttp

okhttp/api/android/okhttp.api

}

public final class okhttp3/ConnectionSpec {
	public static final field CLEARTEXT Lokhttp3/ConnectionSpec;
	public static final field COMPATIBLE_TLS Lokhttp3/ConnectionSpec;
	public static final field Companion Lokhttp3/ConnectionSpec$Companion;
	public static final field MODERN_TLS Lokhttp3/ConnectionSpec;
	public static final field RESTRICTED_TLS Lokhttp3/ConnectionSpec;

Created: Fri Apr 03 11:42:14 GMT 2026

- Last Modified: Tue Mar 10 21:47:20 GMT 2026

- 72.3K bytes

- Click Count (0)

github.com/square/okhttp

samples/tlssurvey/src/main/kotlin/okhttp3/survey/Clients.kt

  Client(
    userAgent = "OkHttp",
    version = OkHttp.VERSION,
    enabled =
      ConnectionSpec.MODERN_TLS.cipherSuites!!.map {
        ianaSuites.fromJavaName(it.javaName)
      },
    supported =
      ConnectionSpec.COMPATIBLE_TLS.cipherSuites!!.map {
        ianaSuites.fromJavaName(it.javaName)
      },
  )

fun historicOkHttp(version: String): Client {
  val enabled =

Created: Fri Apr 03 11:42:14 GMT 2026

- Last Modified: Wed Mar 19 19:25:20 GMT 2025

- 2.4K bytes

- Click Count (0)

Search Options