TLSv1.3 does not support renegotiation at all, however it has an extension for post-handshake authentication that java has not implemented. Unfortunately servers using http/2 are required not to support it! Additional information can be found here: https://bugs.openjdk.java.net/browse/JDK-8206923