message.flags = 0;
            message.setFlag(DcerpcConstants.RPC_C_PF_BROADCAST);
            assertTrue(message.isFlagSet(DcerpcConstants.RPC_C_PF_BROADCAST));

            // Test setting an already existing flag
            message.flags = DcerpcConstants.RPC_C_PF_BROADCAST;
            message.setFlag(DcerpcConstants.RPC_C_PF_BROADCAST);
            assertTrue(message.isFlagSet(DcerpcConstants.RPC_C_PF_BROADCAST));

 * Self-signed Signature: 799f1d96c6b6793f228d87d3870304606a6b9a2e59897311ac43d1f513ff8d392bc0f...
 * ```
 *
 * In this example the HTTP client already knows and trusts the last certificate, "Entrust Root
 * Certification Authority - G2". That certificate is used to verify the signature of the

      RangeMapEntry<K, V> rangeMapEntry = mapEntryAboveToTruncate.getValue();
      if (rangeMapEntry.getUpperBound().compareTo(rangeToRemove.upperBound) > 0) {
        // we know ( ] ), and since we dealt with truncating below already,
        // we know [ ( ] )
        putRangeMapEntry(
            rangeToRemove.upperBound,
            rangeMapEntry.getUpperBound(),
            mapEntryAboveToTruncate.getValue().getValue());
      }
    }

      }
    }
  }

  private static boolean shouldHaveKnownHashes(Method method) {
    // The following legacy hashing function methods have been covered by unit testing already.
    ImmutableSet<String> legacyHashingMethodNames =
        ImmutableSet.of("murmur2_64", "fprint96", "highwayFingerprint64", "highwayFingerprint128");

        List<ArtifactRepository> pomRepositories = null;

        Artifact pomArtifact;

        Artifact relocatedArtifact = null;

        // TODO hack: don't rebuild model if it was already loaded during reactor resolution
        RepositorySystemSession repositorySession = legacySupport.getRepositorySession();
        final WorkspaceReader workspace = repositorySession.getWorkspaceReader();
        Model model;

In this case, it would use the certificate for `someapp.example.com`.

<img src="/img/deployment/https/https03.drawio.svg">

The client already **trusts** the entity that generated that TLS certificate (in this case Let's Encrypt, but we'll see about that later), so it can **verify** that the certificate is valid.

        // Note: enc_ndr_short(0) for guid fields is already verified above with times(8)
        verify(mockNdrBuffer, times(2)).enc_ndr_small(0); // clock_seq_hi_and_reserved and clock_seq_low are both 0
        verify(mockNdrBuffer).advance(1 * 6); // domain_guid.node
        verify(mockDeferredNdrBuffer, times(6)).enc_ndr_small(0); // node bytes all 0

        // Note: enc_ndr_referent(null, 1) is already verified above with times(4)
    }

   * this initiates service shutdown and returns immediately. If the service is {@linkplain
   * State#NEW new}, it is {@linkplain State#TERMINATED terminated} without having been started nor
   * stopped. If the service has already been stopped, this method returns immediately without
   * taking action.
   *
   * @return this
   * @since 15.0
   */
  @CanIgnoreReturnValue
  Service stopAsync();

  /**

   *
   * @param socketAddress the socket address to bind the server on
   */
  @Synchronized
  @Throws(IOException::class)
  private fun start(socketAddress: InetSocketAddress) {
    check(!closed) { "close() already called" }

    val alreadyStartedAddress = socketAddress_
    if (alreadyStartedAddress != null) {
      check(socketAddress.address == alreadyStartedAddress.address) {
        "unexpected address"
      }

 * located in).
 * - share + uncpath within it: This is the relevant information for most SMB requests. Both are adjusted by DFS
 * referrals. Nested resources will inherit the information already resolved by the parent resource.
 *
 * Invariant:
 * A directory resource must have a trailing slash/backslash for both URL and UNC path at all times.
 *
 * @author mbechler
 *
 */