Skip to content

Security Providers

Provider Status

Provider HTTP/2 TLSv1.3 Powered By Notes
JVM default Java 9+ Java 11+ OpenJDK
Android default ✅ Android 10+ BoringSSL
GraalVM ✅ OpenJDK Only actively tested with JDK 11, not with 8 target
Bouncy Castle ✅ Bouncy Castle Tracking bug.
Conscrypt ✅ ✅ BoringSSL Activated if Conscrypt is first registered provider.
OpenJSSE ✅ OpenJDK OpenJDK backport.
Corretto ✅ ✅ OpenSSL Amazon’s high-performance provider. Tracking bug.

All providers support HTTP/1.1 and TLSv1.2.