}

        return new SpnegoContext(tc.getConfig(), setupTargetName(tc, host, new NtlmContext(tc, this, doSigning)));
    }

    private static SSPContext setupTargetName(CIFSContext tc, String host, NtlmContext ntlmContext) {
        if (host != null && tc.getConfig().isSendNTLMTargetName()) {
            ntlmContext.setTargetName(String.format("cifs/%s", host));
        }
        return ntlmContext;
    }

    @Override

    val encoded = encodeQuery("google.com", TYPE_A)
    assertThat(encoded).isEqualTo("AAABAAABAAAAAAAABmdvb2dsZQNjb20AAAEAAQ")
  }

  private fun encodeQuery(
    host: String,
    type: Int,
  ): String = DnsRecordCodec.encodeQuery(host, type).base64Url().replace("=", "")

  @Test
  fun testGoogleDotComEncodingWithIPv6() {
    val encoded = encodeQuery("google.com", TYPE_AAAA)

  /**
   * Don't call through to the proxy selector if we don't have a host name.
   * https://github.com/square/okhttp/issues/5770
   */
  @Test fun proxySelectorNotCalledForNullHost() {
    // The string '>' is okay in a hostname in HttpUrl, which does very light hostname validation.
    // It is not okay in URI, and so it's stripped and we get a URI with a null host.
    val bogusHostname = ">"
    val address =

     *
     * @param url the SMB URL of the named pipe
     * @param pipeType the type of the pipe
     * @throws MalformedURLException if the URL is malformed
     * @throws UnknownHostException if the host cannot be resolved
     */
    public SmbNamedPipe(final String url, final int pipeType) throws MalformedURLException, UnknownHostException {
        super(url);
        this.pipeType = pipeType;

     * @throws SmbException if an SMB error occurs
     * @throws MalformedURLException if the URL is not properly formatted
     * @throws UnknownHostException if the host cannot be resolved
     */

    public SmbFileOutputStream(final String url) throws SmbException, MalformedURLException, UnknownHostException {
        this(url, false);
    }

    /**

      // If the domain is present, it must domain match. Otherwise we have a host-only cookie.
      val urlHost = url.host
      if (domain == null) {
        domain = urlHost
      } else if (!domainMatch(urlHost, domain)) {
        return null // No domain match? This is either incompetence or malice!
      }

      // If the domain is a suffix of the url host, it must not be a public suffix.
      if (urlHost.length != domain.length &&

            return new TestCredentials(this.domain, this.anonymous, this.guest, this.subject, this.failOnRefresh);
        }

        @Override
        public SSPContext createContext(CIFSContext tc, String targetDomain, String host, byte[] initialToken, boolean doSigning)
                throws SmbException {
            // Validate required argument and interact with the provided CIFSContext
            if (tc == null) {

changes we've made over time to OkHttp's default TLS options.

[OkHttp 3.14][OkHttp314]
------------------------

_2019-03-14_

Remove 2 TLSv1.3 cipher suites that are neither available on OkHttp’s host platforms nor enabled in releases of Chrome and Firefox.

##### RESTRICTED_TLS cipher suites

 * TLS_AES_128_GCM_SHA256[¹][tlsv13_only]
 * TLS_AES_256_GCM_SHA384[¹][tlsv13_only]

        final int domainLength = domain.length;
        byte[] server = {};
        final String host = tc.getNameServiceClient().getLocalHost().getHostName();
        if (host != null) {
            try {
                server = host.getBytes(UNI_ENCODING);
            } catch (final IOException ex) {
                log.debug("Failed to get host bytes", ex);
            }
        }
        final int serverLength = server.length;

import org.junit.Assert.assertEquals
import org.junit.Test

class IdnaTest {
  @Test
  fun testHostnameFunction() {
    assertEquals("xn--n3h.net", "https://☃.net/robots.txt".toHttpUrl().host)
  }