Added in [API level 9](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels) Summary: [Ctors](https://developer.android.com/reference/javax/net/ssl/SSLParameters#pubctors) \| [Methods](https://developer.android.com/reference/javax/net/ssl/SSLParameters#pubmethods) \| [Inherited Methods](https://developer.android.com/reference/javax/net/ssl/SSLParameters#inhmethods)

# SSLParameters

` public class SSLParameters `   
` extends https://developer.android.com/reference/java/lang/Object ` ` `

|---|---|
| [java.lang.Object](https://developer.android.com/reference/java/lang/Object) ||
| ↳ | javax.net.ssl.SSLParameters |

<br />

*** ** * ** ***

Encapsulates parameters for an SSL/TLS connection. The parameters are the list of ciphersuites to be accepted in an SSL/TLS handshake, the list of protocols to be allowed, the endpoint identification algorithm during SSL/TLS handshaking, the Server Name Indication (SNI), the algorithm constraints and whether SSL/TLS servers should request or require client authentication, etc.

SSLParameters can be created via the constructors in this class. Objects can also be obtained using the `getSSLParameters()` methods in `https://developer.android.com/reference/javax/net/ssl/SSLSocket#getSSLParameters()` and `https://developer.android.com/reference/javax/net/ssl/SSLServerSocket#getSSLParameters()` and `https://developer.android.com/reference/javax/net/ssl/SSLEngine#getSSLParameters()` or the `https://developer.android.com/reference/javax/net/ssl/SSLContext#getDefaultSSLParameters()` and `https://developer.android.com/reference/javax/net/ssl/SSLContext#getSupportedSSLParameters()` methods in `SSLContext`.

SSLParameters can be applied to a connection via the methods `https://developer.android.com/reference/javax/net/ssl/SSLSocket#setSSLParameters(javax.net.ssl.SSLParameters)` and `https://developer.android.com/reference/javax/net/ssl/SSLServerSocket#setSSLParameters(javax.net.ssl.SSLParameters)` and `https://developer.android.com/reference/javax/net/ssl/SSLEngine#setSSLParameters(javax.net.ssl.SSLParameters)`.
**See also:**

- `https://developer.android.com/reference/javax/net/ssl/SSLSocket`
- `https://developer.android.com/reference/javax/net/ssl/SSLEngine`
- `https://developer.android.com/reference/javax/net/ssl/SSLContext`

## Summary

| ### Public constructors ||
|---|---|
| ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#SSLParameters()() ` Constructs SSLParameters. |
| ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#SSLParameters(java.lang.String[])(https://developer.android.com/reference/java/lang/String cipherSuites) ` Constructs SSLParameters from the specified array of ciphersuites. |
| ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#SSLParameters(java.lang.String[],%20java.lang.String[])(https://developer.android.com/reference/java/lang/String cipherSuites, https://developer.android.com/reference/java/lang/String protocols) ` Constructs SSLParameters from the specified array of ciphersuites and protocols. |

| ### Public methods ||
|---|---|
| ` https://developer.android.com/reference/java/security/AlgorithmConstraints` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#getAlgorithmConstraints()() ` Returns the cryptographic algorithm constraints. |
| ` https://developer.android.com/reference/java/lang/String` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#getApplicationProtocols()() ` Returns a prioritized array of application-layer protocol names that can be negotiated over the SSL/TLS protocols. |
| ` https://developer.android.com/reference/java/lang/String` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#getCipherSuites()() ` Returns a copy of the array of ciphersuites or null if none have been set. |
| ` https://developer.android.com/reference/java/lang/String` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#getEndpointIdentificationAlgorithm()() ` Gets the endpoint identification algorithm. |
| ` https://developer.android.com/reference/java/lang/String` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#getNamedGroups()() ` Returns a prioritized array of key exchange named groups names that can be used over the SSL/TLS/DTLS protocols. |
| ` boolean` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#getNeedClientAuth()() ` Returns whether client authentication should be required. |
| ` https://developer.android.com/reference/java/lang/String` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#getProtocols()() ` Returns a copy of the array of protocols or null if none have been set. |
| ` final https://developer.android.com/reference/java/util/Collection<https://developer.android.com/reference/javax/net/ssl/SNIMatcher>` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#getSNIMatchers()() ` Returns a `https://developer.android.com/reference/java/util/Collection` containing all `https://developer.android.com/reference/javax/net/ssl/SNIMatcher`s of the Server Name Indication (SNI) parameter, or null if none has been set. |
| ` final https://developer.android.com/reference/java/util/List<https://developer.android.com/reference/javax/net/ssl/SNIServerName>` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#getServerNames()() ` Returns a `https://developer.android.com/reference/java/util/List` containing all `https://developer.android.com/reference/javax/net/ssl/SNIServerName`s of the Server Name Indication (SNI) parameter, or null if none has been set. |
| ` final boolean` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#getUseCipherSuitesOrder()() ` Returns whether the local cipher suites preference should be honored. |
| ` boolean` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#getWantClientAuth()() ` Returns whether client authentication should be requested. |
| ` void` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#setAlgorithmConstraints(java.security.AlgorithmConstraints)(https://developer.android.com/reference/java/security/AlgorithmConstraints constraints) ` Sets the cryptographic algorithm constraints, which will be used in addition to any configured by the runtime environment. |
| ` void` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#setApplicationProtocols(java.lang.String[])(https://developer.android.com/reference/java/lang/String protocols) ` Sets the prioritized array of application-layer protocol names that can be negotiated over the SSL/TLS protocols. |
| ` void` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#setCipherSuites(java.lang.String[])(https://developer.android.com/reference/java/lang/String cipherSuites) ` Sets the array of ciphersuites. |
| ` void` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#setEndpointIdentificationAlgorithm(java.lang.String)(https://developer.android.com/reference/java/lang/String algorithm) ` Sets the endpoint identification algorithm. |
| ` void` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#setNamedGroups(java.lang.String[])(https://developer.android.com/reference/java/lang/String namedGroups) ` Sets the prioritized array of key exchange named groups names that can be used over the SSL/TLS/DTLS protocols. |
| ` void` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#setNeedClientAuth(boolean)(boolean needClientAuth) ` Sets whether client authentication should be required. |
| ` void` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#setProtocols(java.lang.String[])(https://developer.android.com/reference/java/lang/String protocols) ` Sets the array of protocols. |
| ` final void` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#setSNIMatchers(java.util.Collection<javax.net.ssl.SNIMatcher>)(https://developer.android.com/reference/java/util/Collection<https://developer.android.com/reference/javax/net/ssl/SNIMatcher> matchers) ` Sets the `https://developer.android.com/reference/javax/net/ssl/SNIMatcher`s of the Server Name Indication (SNI) parameter. |
| ` final void` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#setServerNames(java.util.List<javax.net.ssl.SNIServerName>)(https://developer.android.com/reference/java/util/List<https://developer.android.com/reference/javax/net/ssl/SNIServerName> serverNames) ` Sets the desired `https://developer.android.com/reference/javax/net/ssl/SNIServerName`s of the Server Name Indication (SNI) parameter. |
| ` final void` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#setUseCipherSuitesOrder(boolean)(boolean honorOrder) ` Sets whether the local cipher suites preference should be honored. |
| ` void` | ` https://developer.android.com/reference/javax/net/ssl/SSLParameters#setWantClientAuth(boolean)(boolean wantClientAuth) ` Sets whether client authentication should be requested. |

### Inherited methods

From class ` https://developer.android.com/reference/java/lang/Object ` ` https://developer.android.com/reference/java/lang/Object` ` https://developer.android.com/reference/java/lang/Object#clone()() `

Creates and returns a copy of this object.
` boolean` ` https://developer.android.com/reference/java/lang/Object#equals(java.lang.Object)(https://developer.android.com/reference/java/lang/Object obj) `

Indicates whether some other object is "equal to" this one.
` void` ` https://developer.android.com/reference/java/lang/Object#finalize()() `

Called by the garbage collector on an object when garbage collection determines that there are no more references to the object.
` final https://developer.android.com/reference/java/lang/Class<?>` ` https://developer.android.com/reference/java/lang/Object#getClass()() `

Returns the runtime class of this `Object`.
` int` ` https://developer.android.com/reference/java/lang/Object#hashCode()() `

Returns a hash code value for the object.
` final void` ` https://developer.android.com/reference/java/lang/Object#notify()() `

Wakes up a single thread that is waiting on this object's monitor.
` final void` ` https://developer.android.com/reference/java/lang/Object#notifyAll()() `

Wakes up all threads that are waiting on this object's monitor.
` https://developer.android.com/reference/java/lang/String` ` https://developer.android.com/reference/java/lang/Object#toString()() `

Returns a string representation of the object.
` final void` ` https://developer.android.com/reference/java/lang/Object#wait(long,%20int)(long timeoutMillis, int nanos) `

Causes the current thread to wait until it is awakened, typically by being *notified* or *interrupted*, or until a certain amount of real time has elapsed.
` final void` ` https://developer.android.com/reference/java/lang/Object#wait(long)(long timeoutMillis) `

Causes the current thread to wait until it is awakened, typically by being *notified* or *interrupted*, or until a certain amount of real time has elapsed.
` final void` ` https://developer.android.com/reference/java/lang/Object#wait()() `

Causes the current thread to wait until it is awakened, typically by being *notified* or *interrupted*.

## Public constructors

### SSLParameters

Added in [API level 9](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public SSLParameters ()
```

Constructs SSLParameters.

The values of cipherSuites, protocols, cryptographic algorithm constraints, endpoint identification algorithm, server names and server name matchers are set to `null`, useCipherSuitesOrder, wantClientAuth and needClientAuth are set to `false`.

<br />

### SSLParameters

Added in [API level 9](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public SSLParameters (String[] cipherSuites)
```

Constructs SSLParameters from the specified array of ciphersuites.

Calling this constructor is equivalent to calling the no-args constructor followed by `setCipherSuites(cipherSuites);`.

<br />

| Parameters ||
|---|---|
| `cipherSuites` | `String`: the array of ciphersuites (or null) <br /> |

### SSLParameters

Added in [API level 9](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public SSLParameters (String[] cipherSuites, 
                String[] protocols)
```

Constructs SSLParameters from the specified array of ciphersuites and protocols.

Calling this constructor is equivalent to calling the no-args constructor followed by `setCipherSuites(cipherSuites); setProtocols(protocols);`.

<br />

| Parameters ||
|---|---|
| `cipherSuites` | `String`: the array of ciphersuites (or null) <br /> |
| `protocols` | `String`: the array of protocols (or null) <br /> |

## Public methods

### getAlgorithmConstraints

Added in [API level 24](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public AlgorithmConstraints getAlgorithmConstraints ()
```

Returns the cryptographic algorithm constraints.

<br />

| Returns ||
|---|---|
| `https://developer.android.com/reference/java/security/AlgorithmConstraints` | the cryptographic algorithm constraints, or null if the constraints have not been set <br /> |

**See also:**

- `https://developer.android.com/reference/javax/net/ssl/SSLParameters#setAlgorithmConstraints(java.security.AlgorithmConstraints)`

### getApplicationProtocols

Added in [API level 29](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public String[] getApplicationProtocols ()
```

Returns a prioritized array of application-layer protocol names that can be negotiated over the SSL/TLS protocols.

The array could be empty (zero-length), in which case protocol indications will not be used.

This method will return a new array each time it is invoked.

<br />

| Returns ||
|---|---|
| `https://developer.android.com/reference/java/lang/String` | a non-null, possibly zero-length array of application protocol `String`s. The array is ordered based on protocol preference, with `protocols[0]` being the most preferred. <br /> |

**See also:**

- `https://developer.android.com/reference/javax/net/ssl/SSLParameters#setApplicationProtocols(java.lang.String[])`

### getCipherSuites

Added in [API level 9](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public String[] getCipherSuites ()
```

Returns a copy of the array of ciphersuites or null if none have been set.

<br />

| Returns ||
|---|---|
| `https://developer.android.com/reference/java/lang/String` | a copy of the array of ciphersuites or null if none have been set. <br /> |

### getEndpointIdentificationAlgorithm

Added in [API level 24](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public String getEndpointIdentificationAlgorithm ()
```

Gets the endpoint identification algorithm.

<br />

| Returns ||
|---|---|
| `https://developer.android.com/reference/java/lang/String` | the endpoint identification algorithm, or null if none has been set. <br /> |

**See also:**

- `https://developer.android.com/reference/javax/net/ssl/X509ExtendedTrustManager`
- `https://developer.android.com/reference/javax/net/ssl/SSLParameters#setEndpointIdentificationAlgorithm(java.lang.String)`

### getNamedGroups

Added in [API level 37](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public String[] getNamedGroups ()
```

Returns a prioritized array of key exchange named groups names that can be used over the SSL/TLS/DTLS protocols.

Note that the standard list of key exchange named groups are defined in the [Named Groups](https://docs.oracle.com/en/java/javase/17/docs/specs/security/standard-names.html#named-groups) section of the Java Security Standard Algorithm Names Specification. Providers may support named groups not defined in this list or may not use the recommended name for a certain named group.

The set of named groups that will be used over the SSL/TLS/DTLS connections is determined by the returned array of this method and the underlying provider-specific default named groups.

If the returned array is `null`, then the underlying provider-specific default named groups will be used over the SSL/TLS/DTLS connections.

If the returned array is empty (zero-length), then the named group negotiation mechanism is turned off for SSL/TLS/DTLS protocols, and the connections may not be able to be established if the negotiation mechanism is required by a certain SSL/TLS/DTLS protocol. This parameter will override the underlying provider-specific default name groups.

If the returned array is not `null` or empty (zero-length), then the named groups in the returned array will be used over the SSL/TLS/DTLS connections. This parameter will override the underlying provider-specific default named groups.

This method returns the most recent value passed to `https://developer.android.com/reference/javax/net/ssl/SSLParameters#setNamedGroups(java.lang.String[])` if that method has been called and otherwise returns the default named groups for connection populated objects, or `null` for pre-populated objects.

<br />

##### API Note:

- Note that a provider may not have been updated to support this method and in that case may return `null` instead of the default named groups for connection populated objects.

##### Implementation Note:

- The SunJSSE provider supports this method.

##### Implementation Note:

- Note that applications may use the {@systemProperty jdk.tls.namedGroups} system property with the SunJSSE provider to override the provider-specific default named groups.

| Returns ||
|---|---|
| `https://developer.android.com/reference/java/lang/String` | an array of key exchange named group names `Strings` or `null` if none have been set. For non-null returns, this method will return a new array each time it is invoked. The array is ordered based on named group preference, with the first entry being the most preferred. Providers should ignore unknown named group names while establishing the SSL/TLS/DTLS connections. <br /> |

**See also:**

- `https://developer.android.com/reference/javax/net/ssl/SSLParameters#setNamedGroups(java.lang.String[])`

### getNeedClientAuth

Added in [API level 9](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public boolean getNeedClientAuth ()
```

Returns whether client authentication should be required.

<br />

| Returns ||
|---|---|
| `boolean` | whether client authentication should be required. <br /> |

### getProtocols

Added in [API level 9](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public String[] getProtocols ()
```

Returns a copy of the array of protocols or null if none have been set.

<br />

| Returns ||
|---|---|
| `https://developer.android.com/reference/java/lang/String` | a copy of the array of protocols or null if none have been set. <br /> |

### getSNIMatchers

Added in [API level 24](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public final Collection<SNIMatcher> getSNIMatchers ()
```

Returns a `https://developer.android.com/reference/java/util/Collection` containing all `https://developer.android.com/reference/javax/net/ssl/SNIMatcher`s of the Server Name Indication (SNI) parameter, or null if none has been set.

This method is only useful to `https://developer.android.com/reference/javax/net/ssl/SSLSocket`s or `https://developer.android.com/reference/javax/net/ssl/SSLEngine`s operating in server mode.

For better interoperability, providers generally will not define default matchers so that by default servers will ignore the SNI extension and continue the handshake.

<br />

| Returns ||
|---|---|
| `https://developer.android.com/reference/java/util/Collection<https://developer.android.com/reference/javax/net/ssl/SNIMatcher>` | null or an immutable collection of non-null `https://developer.android.com/reference/javax/net/ssl/SNIMatcher`s <br /> |

**See also:**

- `https://developer.android.com/reference/javax/net/ssl/SNIMatcher`
- `https://developer.android.com/reference/javax/net/ssl/SSLParameters#setSNIMatchers(java.util.Collection<javax.net.ssl.SNIMatcher>)`

### getServerNames

Added in [API level 24](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public final List<SNIServerName> getServerNames ()
```

Returns a `https://developer.android.com/reference/java/util/List` containing all `https://developer.android.com/reference/javax/net/ssl/SNIServerName`s of the Server Name Indication (SNI) parameter, or null if none has been set.

This method is only useful to `https://developer.android.com/reference/javax/net/ssl/SSLSocket`s or `https://developer.android.com/reference/javax/net/ssl/SSLEngine`s operating in client mode.

For SSL/TLS connections, the underlying SSL/TLS provider may specify a default value for a certain server name type. In client mode, it is recommended that, by default, providers should include the server name indication whenever the server can be located by a supported server name type.

It is recommended that providers initialize default Server Name Indications when creating `SSLSocket`/`SSLEngine`s. In the following examples, the server name could be represented by an instance of `https://developer.android.com/reference/javax/net/ssl/SNIHostName` which has been initialized with the hostname "www.example.com" and type `https://developer.android.com/reference/javax/net/ssl/StandardConstants#SNI_HOST_NAME`.

```
    Socket socket =
        sslSocketFactory.createSocket("www.example.com", 443);
```
or

```
    SSLEngine engine =
        sslContext.createSSLEngine("www.example.com", 443);
```

<br />

<br />

| Returns ||
|---|---|
| `https://developer.android.com/reference/java/util/List<https://developer.android.com/reference/javax/net/ssl/SNIServerName>` | null or an immutable list of non-null `https://developer.android.com/reference/javax/net/ssl/SNIServerName`s <br /> |

**See also:**

- `https://developer.android.com/reference/java/util/List`
- `https://developer.android.com/reference/javax/net/ssl/SSLParameters#setServerNames(java.util.List<javax.net.ssl.SNIServerName>)`

### getUseCipherSuitesOrder

Added in [API level 24](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public final boolean getUseCipherSuitesOrder ()
```

Returns whether the local cipher suites preference should be honored.

<br />

| Returns ||
|---|---|
| `boolean` | whether local cipher suites order in `#getCipherSuites` should be honored during SSL/TLS handshaking. <br /> |

**See also:**

- `https://developer.android.com/reference/javax/net/ssl/SSLParameters#setUseCipherSuitesOrder(boolean)`

### getWantClientAuth

Added in [API level 9](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public boolean getWantClientAuth ()
```

Returns whether client authentication should be requested.

<br />

| Returns ||
|---|---|
| `boolean` | whether client authentication should be requested. <br /> |

### setAlgorithmConstraints

Added in [API level 24](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public void setAlgorithmConstraints (AlgorithmConstraints constraints)
```

Sets the cryptographic algorithm constraints, which will be used in addition to any configured by the runtime environment.

If the `constraints` parameter is non-null, every cryptographic algorithm, key and algorithm parameters used in the SSL/TLS handshake must be permitted by the constraints.

<br />

| Parameters ||
|---|---|
| `constraints` | `AlgorithmConstraints`: the algorithm constraints (or null) <br /> |

### setApplicationProtocols

Added in [API level 29](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public void setApplicationProtocols (String[] protocols)
```

Sets the prioritized array of application-layer protocol names that can be negotiated over the SSL/TLS protocols.

If application-layer protocols are supported by the underlying SSL/TLS implementation, this method configures which values can be negotiated by protocols such as [RFC 7301](http://www.ietf.org/rfc/rfc7301.txt), the Application Layer Protocol Negotiation (ALPN).

If this end of the connection is expected to offer application protocol values, all protocols configured by this method will be sent to the peer.

If this end of the connection is expected to select the application protocol value, the `protocols` configured by this method are compared with those sent by the peer. The first matched value becomes the negotiated value. If none of the `protocols` were actually requested by the peer, the underlying protocol will determine what action to take. (For example, ALPN will send a `"no_application_protocol"` alert and terminate the connection.)

<br />

<br />

##### Implementation Requirements:

- This method will make a copy of the `protocols` array.

| Parameters ||
|---|---|
| `protocols` | `String`: an ordered array of application protocols, with `protocols[0]` being the most preferred. If the array is empty (zero-length), protocol indications will not be used. <br /> |

| Throws ||
|---|---|
| `https://developer.android.com/reference/java/lang/IllegalArgumentException` | if protocols is null, or if any element in a non-empty array is null or an empty (zero-length) string |

**See also:**

- `https://developer.android.com/reference/javax/net/ssl/SSLParameters#getApplicationProtocols()`

### setCipherSuites

Added in [API level 9](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public void setCipherSuites (String[] cipherSuites)
```

Sets the array of ciphersuites.

<br />

| Parameters ||
|---|---|
| `cipherSuites` | `String`: the array of ciphersuites (or null) <br /> |

### setEndpointIdentificationAlgorithm

Added in [API level 24](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public void setEndpointIdentificationAlgorithm (String algorithm)
```

Sets the endpoint identification algorithm.

If the `algorithm` parameter is non-null or non-empty, the endpoint identification/verification procedures must be handled during SSL/TLS handshaking. This is to prevent on-path attacks.

<br />

| Parameters ||
|---|---|
| `algorithm` | `String`: The standard string name of the endpoint identification algorithm (or null). See Appendix A in the [Java Cryptography Architecture API Specification \& Reference](https://docs.oracle.com/javase/8/docs/technotes/guides/security/crypto/CryptoSpec.html#AppA) for information about standard algorithm names. <br /> |

**See also:**

- `https://developer.android.com/reference/javax/net/ssl/X509ExtendedTrustManager`

### setNamedGroups

Added in [API level 37](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public void setNamedGroups (String[] namedGroups)
```

Sets the prioritized array of key exchange named groups names that can be used over the SSL/TLS/DTLS protocols.

Note that the standard list of key exchange named groups are defined in the [Named Groups](https://docs.oracle.com/en/java/javase/17/docs/specs/security/standard-names.html#named-groups) section of the Java Security Standard Algorithm Names Specification. Providers may support named groups not defined in this list or may not use the recommended name for a certain named group.

The set of named groups that will be used over the SSL/TLS/DTLS connections is determined by the input parameter `namedGroups` array and the underlying provider-specific default named groups. See `https://developer.android.com/reference/javax/net/ssl/SSLParameters#getNamedGroups()` for specific details on how the parameters are used in SSL/TLS/DTLS connections.

<br />

##### API Note:

- Note that a provider may not have been updated to support this method and in that case may ignore the named groups that are set.

##### Implementation Note:

- The SunJSSE provider supports this method.

| Parameters ||
|---|---|
| `namedGroups` | `String`: an ordered array of key exchange named group names with the first entry being the most preferred, or `null`. This method will make a copy of this array. Providers should ignore unknown named group scheme names while establishing the SSL/TLS/DTLS connections. <br /> |

| Throws ||
|---|---|
| `https://developer.android.com/reference/java/lang/IllegalArgumentException` | if any element in the `namedGroups` array is a duplicate, `null` or [blank](https://developer.android.com/reference/java/lang/String#isBlank()). |

**See also:**

- `https://developer.android.com/reference/javax/net/ssl/SSLParameters#getNamedGroups()`

### setNeedClientAuth

Added in [API level 9](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public void setNeedClientAuth (boolean needClientAuth)
```

Sets whether client authentication should be required. Calling this method clears the `wantClientAuth` flag.

<br />

| Parameters ||
|---|---|
| `needClientAuth` | `boolean`: whether client authentication should be required <br /> |

### setProtocols

Added in [API level 9](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public void setProtocols (String[] protocols)
```

Sets the array of protocols.

<br />

| Parameters ||
|---|---|
| `protocols` | `String`: the array of protocols (or null) <br /> |

### setSNIMatchers

Added in [API level 24](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public final void setSNIMatchers (Collection<SNIMatcher> matchers)
```

Sets the `https://developer.android.com/reference/javax/net/ssl/SNIMatcher`s of the Server Name Indication (SNI) parameter.

This method is only useful to `https://developer.android.com/reference/javax/net/ssl/SSLSocket`s or `https://developer.android.com/reference/javax/net/ssl/SSLEngine`s operating in server mode.

Note that the `matchers` collection is cloned to protect against subsequent modification.

<br />

| Parameters ||
|---|---|
| `matchers` | `Collection`: the collection of `https://developer.android.com/reference/javax/net/ssl/SNIMatcher`s (or null) <br /> |

| Throws ||
|---|---|
| `https://developer.android.com/reference/java/lang/IllegalArgumentException` | if the `matchers` contains more than one name of the same name type |
| `https://developer.android.com/reference/java/lang/NullPointerException` | if the `matchers` contains `null` element |

**See also:**

- `https://developer.android.com/reference/java/util/Collection`
- `https://developer.android.com/reference/javax/net/ssl/SNIMatcher`
- `https://developer.android.com/reference/javax/net/ssl/SSLParameters#getSNIMatchers()`

### setServerNames

Added in [API level 24](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public final void setServerNames (List<SNIServerName> serverNames)
```

Sets the desired `https://developer.android.com/reference/javax/net/ssl/SNIServerName`s of the Server Name Indication (SNI) parameter.

This method is only useful to `https://developer.android.com/reference/javax/net/ssl/SSLSocket`s or `https://developer.android.com/reference/javax/net/ssl/SSLEngine`s operating in client mode.

Note that the `serverNames` list is cloned to protect against subsequent modification.

<br />

| Parameters ||
|---|---|
| `serverNames` | `List`: the list of desired `https://developer.android.com/reference/javax/net/ssl/SNIServerName`s (or null) <br /> |

| Throws ||
|---|---|
| `https://developer.android.com/reference/java/lang/IllegalArgumentException` | if the `serverNames` contains more than one name of the same name type |
| `https://developer.android.com/reference/java/lang/NullPointerException` | if the `serverNames` contains `null` element |

**See also:**

- `https://developer.android.com/reference/javax/net/ssl/SNIServerName`
- `https://developer.android.com/reference/javax/net/ssl/SSLParameters#getServerNames()`

### setUseCipherSuitesOrder

Added in [API level 24](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public final void setUseCipherSuitesOrder (boolean honorOrder)
```

Sets whether the local cipher suites preference should be honored.

<br />

| Parameters ||
|---|---|
| `honorOrder` | `boolean`: whether local cipher suites order in `#getCipherSuites` should be honored during SSL/TLS handshaking. <br /> |

**See also:**

- `https://developer.android.com/reference/javax/net/ssl/SSLParameters#getUseCipherSuitesOrder()`

### setWantClientAuth

Added in [API level 9](https://developer.android.com/guide/topics/manifest/uses-sdk-element#ApiLevels)

```
public void setWantClientAuth (boolean wantClientAuth)
```

Sets whether client authentication should be requested. Calling this method clears the `needClientAuth` flag.

<br />

| Parameters ||
|---|---|
| `wantClientAuth` | `boolean`: whether client authentication should be requested <br /> |