title: How to enable TLSv1.3 for OkHttp 3.12.x on Android 8/9?
body: <p>I'm using OkHttp 3.12.2 on Android 9 (Pixel 2 device) and try to connect to an nginx 1.14.0 running with OpenSSL 1.1.1. The nginx is capable of TLSv1.3, I verified this with Firefox 66.0.2 on Ubuntu 18.04, Chrome 73.0 on Android 9 and ChromeOS 72.0.</p>
  
  <p>However, <strong>OkHttp always negotiates TLSv1.2</strong>. I also tried to set a RESTRICTED_TLS ConnectionSpec, but it didn't help.</p>
  
  <p>I did not find a specific instruction on how to get TLSv1.3 working on Android. I know that only Android 8 and 9 support TLSv1.3 out of the box; I'm fine for now with that restriction.</p>
  
  <p>My experience from earlier TLS migrations is that I don't have to do anything except updating all involved components.</p>