master
8368041: Enhance TLS certificate handling
8254631: Better support ALPN byte wire values in SunJSSE
8196584: TLS 1.3 Implementation
8207009: TLS 1.3 half-close and synchronization issues
8349583: Add mechanism to disable signature schemes based on their TLS scope
8236039: JSSE Client does not accept status_request extension in CertificateRequest messages for TLS 1.3
8206925: Support the certificate_authorities extension
8349594: Enhance TLS protocol support
8222678: Improve TLS negotiation
8215443: The use of TransportContext.fatal() leads to bad coding style
8270317: Large Allocation in CipherSuite
8214418: half-closed SSLEngine status may cause application dead loop
8187443: Forest Consolidation: Move files to unified layout
8268193: Improve requests of certificates
8307383: Enhance DTLS connections
8232581: Improve TLS verification
8171279: Support X25519 and X448 in TLS
8301700: Increase the default TLS Diffie-Hellman group size from 1024-bit to 2048-bit
8226374: Restrict TLS signature schemes and named groups
8224829: AsyncSSLSocketClose.java has timing issue
8267729: Improve TLS client handshaking
8214098: sun.security.ssl.HandshakeHash.T12HandshakeHash constructor check backwards
8207317: SSLEngine negotiation fail exception behavior changed from fail-fast to fail-lazy
8373275: Improve DTLS handshaking
8275811: Incorrect instance to dispose
8140466: ChaCha20 and Poly1305 TLS Cipher Suites
8257545: SunJSSE FIPS regression in key exchange after JDK-8171279 11u backport
8294474: Better AES support
8218889: Improperly use of the Optional API
8295723: security/infra/wycheproof/RunWycheproof.java fails with Assertion Error
8206176: Remove the temporary tls13VN field
8269618: Better session identification
8217579: TLS_EMPTY_RENEGOTIATION_INFO_SCSV is disabled after 8211883
8168261: Use server cipher suites preference by default
8256660: Disable DTLS 1.0
8245417: Improve certificate chain handling
8217633: Configurable extensions with system properties
8237589: Fix copyright header formatting
8310106: sun.security.ssl.SSLHandshake.getHandshakeProducer() incorrectly checks handshakeConsumers
8242141: New System Properties to configure the TLS signature schemes
8241248: NullPointerException in sun.security.ssl.HKDF.extract(HKDF.java:93)
8315422: getSoTimeout() would be in try block in SSLSocketImpl
8277970: Test jdk/sun/security/ssl/SSLSessionImpl/NoInvalidateSocketException.java fails with "tag mismatch"
8259662: Don't wrap SocketExceptions into SSLExceptions in SSLSocketImpl
8355779: When no "signature_algorithms_cert" extension is present we do not apply certificate scope constraints to algorithms in "signature_algorithms" extension
8340321: Disable SHA-1 in TLS/DTLS 1.2 handshake signatures
8242151: Improve OID mapping and reuse among JDK security providers for aliases registration
8065422: Trailing dot in hostname causes TLS handshake to fail with SNI disabled
8312383: Log X509ExtendedKeyManager implementation class name in TLS/SSL connection