Package com.google.api.gax.httpjson

Class HttpJsonConscryptUtils

java.lang.Object
com.google.api.gax.httpjson.HttpJsonConscryptUtils
@InternalApi public class HttpJsonConscryptUtils extends Object
Utility class for creating and configuring NetHttpTransport instances.

  • Field Summary

    Fields
    Modifier and Type
    Field
    Description
    static final String[]
    DEFAULT_CONSCRYPT_NAMED_GROUPS
    Default TLS 1.3 named groups configured when Conscrypt security provider is present, organized in client preference order: Standard ML-KEM algorithms: Prioritized first for quantum resistance.

  • Method Summary

    Modifier and Type
    Method
    Description
    static com.google.api.client.http.javanet.NetHttpTransport.Builder
    configureConscryptSecurityProvider(com.google.api.client.http.javanet.NetHttpTransport.Builder builder)
    Configures the given NetHttpTransport.Builder with Conscrypt as the security provider by default if Conscrypt is available.

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • Field Details

    • DEFAULT_CONSCRYPT_NAMED_GROUPS

      public static final String[] DEFAULT_CONSCRYPT_NAMED_GROUPS
      Default TLS 1.3 named groups configured when Conscrypt security provider is present, organized in client preference order:
      1. Standard ML-KEM algorithms: Prioritized first for quantum resistance.
      2. Draft Kyber algorithms: Retained as a fallback for legacy draft PQC deployments.
      3. Classical curves: Fallback for endpoints without PQC support.

      In TLS 1.3, the client offers key exchange groups via the supported_groups ClientHello extension in preference order. The server selects the first group it supports.

      For details on Conscrypt's supported TLS algorithms, see Conscrypt CAPABILITIES.md.

  • Method Details

    • configureConscryptSecurityProvider

      public static com.google.api.client.http.javanet.NetHttpTransport.Builder configureConscryptSecurityProvider(com.google.api.client.http.javanet.NetHttpTransport.Builder builder)
      Configures the given NetHttpTransport.Builder with Conscrypt as the security provider by default if Conscrypt is available. Users can customize the NetHttpTransport.Builder to use a different security provider.
      Parameters:
      builder - the NetHttpTransport.Builder to configure
      Returns:
      the configured NetHttpTransport.Builder