import java.util.concurrent.atomic.AtomicInteger
import java.util.concurrent.atomic.AtomicReference
import javax.net.ssl.SSLException
import javax.net.ssl.SSLHandshakeException
import javax.net.ssl.SSLPeerUnverifiedException
import javax.net.ssl.SSLProtocolException
import javax.net.ssl.SSLSocket
import javax.net.ssl.SSLSocketFactory
import kotlin.test.assertFailsWith
import mockwebserver3.MockResponse
import mockwebserver3.MockWebServer

import java.net.InetAddress
import java.net.ProtocolException
import java.net.SocketTimeoutException
import java.nio.charset.StandardCharsets.UTF_8
import java.time.Duration
import java.util.concurrent.TimeUnit
import javax.net.ssl.HttpsURLConnection
import kotlin.test.assertFailsWith
import mockwebserver3.SocketEffect.CloseSocket
import okhttp3.Headers
import okhttp3.HttpUrl.Companion.toHttpUrl
import okhttp3.OkHttpClient
import okhttp3.Protocol

import assertk.assertions.isInstanceOf
import assertk.assertions.isTrue
import java.io.ByteArrayInputStream
import java.security.cert.CertificateFactory
import java.security.cert.X509Certificate
import javax.net.ssl.SSLSession
import javax.security.auth.x500.X500Principal
import okhttp3.FakeSSLSession
import okhttp3.OkHttpClient
import okhttp3.internal.canParseAsIpAddress
import okhttp3.internal.platform.Platform.Companion.isAndroid

* libvirt-coreos: Download the coreos_production_qemu_image over SSL. ([#34646](https://github.com/kubernetes/kubernetes/pull/34646), [@roberthbailey](https://github.com/roberthbailey))

4u.com
5.azurestaticapps.net
5.bg
5g.in
6.azurestaticapps.net
6.bg
611.to
64-b.it
6g.in
7.azurestaticapps.net
7.bg
8.bg
9.bg
9guacu.br
a.bg
a.prod.fastly.net
a.se
a.ssl.fastly.net
a2hosted.com
aa.no
aaa
aaa.pro
aaa.vodka
aarborte.no
aarp
ab.ca
abashiri.hokkaido.jp
abb
abbott
abbvie
abc
abc.br
abeno.osaka.jp
abiko.chiba.jp

     */
    String getSearchEngineHttpUrl();

    /**
     * Get the value for the key 'search_engine.http.ssl.certificate_authorities'. <br>
     * The value is, e.g.  <br>
     * comment: Path to SSL certificate authorities for secure HTTP connections.
     * @return The value of found property. (NotNull: if not found, exception but basically no way)
     */

* Mount additional paths required for a working CA root, for setups where /etc/ssl/certs doesn't contains certificates but just symlink. ([#59122](https://github.com/kubernetes/kubernetes/pull/59122), [@klausenbusk](https://github.com/klausenbusk))

* kubernetes-worker juju charm: Added support for setting the --enable-ssl-chain-completion option on the ingress proxy.  "action required": if your installation relies on supplying incomplete certificate chains and using OCSP to fill them in, you must set "ingress-ssl-chain-completion" to "true" in your juju configuration. ([#63845](https://github.com/kubernetes/kubernetes/pull/63845), [@paulgear](https://github.com/paulgear))...

4u.com
5.azurestaticapps.net
5.bg
5g.in
6.azurestaticapps.net
6.bg
611.to
64-b.it
6g.in
7.azurestaticapps.net
7.bg
8.bg
9.bg
9guacu.br
a.bg
a.prod.fastly.net
a.se
a.ssl.fastly.net
a2hosted.com
aa.no
aaa
aaa.pro
aaa.vodka
aarborte.no
aarp
ab.ca
abashiri.hokkaido.jp
abb
abbott
abbvie
abc
abc.br
abeno.osaka.jp
abiko.chiba.jp

        final String value = getSearchEngineHttpSslCertificateAuthorities();
        if (value != null) {
            return value;
        }
        return get("elasticsearch.http.ssl.certificate_authorities");
    }

    String getSearchEngineUsername();

    default String getFesenUsername() {
        final String value = getSearchEngineUsername();
        if (value != null) {