void testConcurrentNonceGeneration() throws InterruptedException {
        // Given
        int threadCount = 10;
        int noncesPerThread = 1000;
        ConcurrentHashMap<String, Integer> nonceMap = new ConcurrentHashMap<>();
        AtomicInteger collisions = new AtomicInteger(0);
        CountDownLatch latch = new CountDownLatch(threadCount);

    }

    @CanIgnoreReturnValue
    String consumeTokenIfPresent(CharMatcher matcher) {
      checkState(hasMore());
      int startPosition = position;
      position = matcher.negate().indexIn(input, startPosition);
      return hasMore() ? input.substring(startPosition, position) : input.substring(startPosition);
    }

    String consumeToken(CharMatcher matcher) {
      int startPosition = position;

The **TLS certificates** are **associated with a domain name**, not with an IP address.

So, to renew the certificates, the renewal program needs to **prove** to the authority (Let's Encrypt) that it indeed **"owns" and controls that domain**.

To do that, and to accommodate different application needs, there are several ways it can do it. Some popular ways are:

* **Modify some DNS records**.

    /**
     * Displays the web config management index page.
     *
     * @param form the search form for filtering
     * @return HTML response for the web config list page
     */
    @Execute
    @Secured({ ROLE, ROLE + VIEW })
    public HtmlResponse index(final SearchForm form) {
        return asListHtml();
    }

    /**

    void testVariousSecurityModesAndCapabilities(String securityModeHex, String capabilitiesHex) throws Exception {
        // Given
        int securityMode = Integer.decode(securityModeHex);
        int capabilities = (int) Long.parseLong(capabilitiesHex.substring(2), 16);
        Smb2SessionSetupRequest req = new Smb2SessionSetupRequest(mockContext, securityMode, capabilities, 0, null);

                } else if ("fess_user".equals(index)) {
                    index = fessConfig.getIndexUserIndex();
                } else if ("fess_basic_config".equals(index) && !"fess_config".equals(fessConfig.getIndexConfigIndex())) {
                    index = "basic_" + fessConfig.getIndexConfigIndex();
                }
                final String alias = index;

            }

            @Override
            public String getMailReturnPath() {
                return "******@****.***";
            }

            @Override
            public Integer getCrawlerSystemMonitorIntervalAsInteger() {
                return 60000;
            }
        };
        ComponentUtil.register(fessConfig, "fessConfig");

  // http://gee.cs.oswego.edu/cgi-bin/viewcvs.cgi/jsr166/src/main/java/util/concurrent/

  /** The queued items */
  final E[] items;

  /** items index for next take, poll or remove */
  int takeIndex;

  /** items index for next put, offer, or add. */
  int putIndex;

  /** Number of items in the queue */
  private int count;

  /*

// https://github.com/klauspost/compress/tree/master/s2#s2-compression
// This ensures integrity and reduces the size typically by at least 50%.
//
// All stream elements are msgpack encoded.
//
// 1 Integer, metacacheStreamVersion of the writer.
// This can be used for managing breaking changes.
//
// For each element:
// 1. Bool. If false at end of stream.
// 2. String. Name of object. Directories contains a trailing slash.

	endpoint   Endpoint
	restClient *rest.Client
	gridConn   *grid.Subroute
	diskID     atomic.Pointer[string]

	diskInfoCache *cachevalue.Cache[DiskInfo]
}

// Retrieve location indexes.
func (client *storageRESTClient) GetDiskLoc() (poolIdx, setIdx, diskIdx int) {
	return client.endpoint.PoolIdx, client.endpoint.SetIdx, client.endpoint.DiskIdx
}