
Security Providers
==================

## Provider Status

| Provider            | Issues                                                | Link                                                        | Usage Guidance |
| ------------------- | ----------------------------------------------------- | ----------------------------------------------------------- | -------------- |
| Bouncy Castle       | [#5698](https://github.com/square/okhttp/issues/5698) | https://www.bouncycastle.org/java.html                      | Clean-Room JSSE implementation |
| Conscrypt - Android | ✅                                                    |  https://www.conscrypt.org/                                 | TLS 1.3 via BoringSSL. Activated if Conscrypt is first registered provider. |
| Conscrypt - OpenJDK | ✅                                                    | https://www.conscrypt.org/                                  | TLS 1.3 via BoringSSL. Activated if Conscrypt is first registered provider. |
| OpenJSSE            | ✅ Missing HTTP/2                                     | https://github.com/openjsse/openjsse                        | Supports TLS 1.3 on Java SE 8 |
| Corretto            | [#5592](https://github.com/square/okhttp/issues/5592) | https://github.com/corretto/amazon-corretto-crypto-provider | Amazon high-performance cryptographic implementations backed by OpenSSL |




Security Providers
==================

## Provider Status

| Provider         | HTTP/2  | TLSv1.3      | Powered By      | Notes                                                        |
| :--------------- | :------ | :----------- | :-------------- | :----------------------------------------------------------- |
| JVM default      | Java 9+ | Java 11+     | [OpenJDK]       |                                                              |
| Android default  | ✅      | Android 10+  | [BoringSSL]     |                                                              |
| [Bouncy Castle]  | ✅      |              | [Bouncy Castle] | [Tracking bug.][bug5698]                                     |
| [Conscrypt]      | ✅      | ✅           | [BoringSSL]     | Activated if Conscrypt is first registered provider.         |
| [OpenJSSE]       |         | ✅           | [OpenJDK]       | OpenJDK backport.                                            |
| [Corretto]       | ✅      | ✅           | [OpenSSL]       | Amazon's high-performance provider. [Tracking bug.][bug5592] |

All providers support HTTP/1.1 and TLSv1.2.


[BoringSSL]: https://boringssl.googlesource.com/boringssl/
[Bouncy Castle]: https://www.bouncycastle.org/java.html
[Conscrypt]: https://www.conscrypt.org/
[Corretto]: https://github.com/corretto/amazon-corretto-crypto-provider
[OpenJDK]: https://openjdk.java.net/groups/security/
[OpenJSSE]: https://github.com/openjsse/openjsse
[OpenSSL]: https://www.openssl.org/
[bug5592]: https://github.com/square/okhttp/issues/5592
[bug5698]: https://github.com/square/okhttp/issues/5698

Add HTTP/2 and TLSv1.3 columns to our security providers doc
Add HTTP/2 and TLSv1.3 columns to our security providers doc
