master
8261880: Change nested classes in java.base to static nested classes where possible
8244336: Restrict algorithms at JCE layer
8215281: Use String.isEmpty() when applicable in java.base
8270946: X509CertImpl.getFingerprint should not return the empty String
8255150: Add utility methods to check long indexes and ranges
8187443: Forest Consolidation: Move files to unified layout
8215994: JDK 12 l10n resource file update - msg drop 10
8272243: Improve DER parsing
8269618: Better session identification
8328608: Multiple NewSessionTicket support for TLS
8279842: HTTPS Channel Binding support for Java GSS/Kerberos
8240848: ArrayIndexOutOfBoundsException buf for TextCallbackHandler
8249906: Enhance opening JARs
8375549: ConcurrentModificationException if jdk.crypto.disabledAlgorithms has multiple entries with known oid
8240997: Remove more "hack" word in security codes
8296787: Unify debug printing format of X.509 cert serial numbers
8296072: CertAttrSet::encode and DerEncoder::derEncode should write into DerOutputStream 8296167: test/langtools/tools/jdeps/jdkinternals/ShowReplacement.java failing after JDK-8296072
8274221: More definite BER encodings
8249783: Simplify DerValue and DerInputStream
8381519: Enhance Der Value Handling
8349583: Add mechanism to disable signature schemes based on their TLS scope
8266459: Implement JEP 411: Deprecate the Security Manager for Removal
8288508: Enhance ECDSA usage
8250968: Symlinks attributes not preserved when using jarsigner on zip files
8244148: keytool -printcert and -printcrl should support the -trustcacerts and -keystore options
8209901: Canonical file handling
8279800: isAssignableFrom checks in AlgorithmParametersSpi.engineGetParameterSpec appear to be backwards
8233884: Avoid looking up standard charsets in security libraries
8380672: Improve certification checking
8231139: Improved keystore support
8275887: jarsigner prints invalid digest/signature algorithm warnings if keysize is weak/disabled
8267543: Post JEP 411 refactoring: security
8340327: A common framework to support public key algorithms with standard parameter sets
8298387: Implement JEP 497: Quantum-Resistant Module-Lattice-Based Digital Signature Algorithm
8229999: Apply java.io.Serial annotations to security types in java.base
8268427: Improve AlgorithmConstraints:checkAlgorithm performance
8194251: Deadlock between UsageTracker and System.getProperty() when using a malformed security policy
8268506: More Manifest Digests
8242151: Improve OID mapping and reuse among JDK security providers for aliases registration
8302111: Serialization considerations
8374555: No need for visible input warning in s.s.u.Password when not reading from System.in
8148371: Remove policytool
8201815: Use Mozilla Public Suffix List
8354469: Keytool exposes the password in plain text when command is piped using | grep
8263658: Use the blessed modifier order in java.base
8194717: JDK10 L10n resource file update - msgdrop 10
8228623: Update copyright year to 2019 for several java properties file
8295723: security/infra/wycheproof/RunWycheproof.java fails with Assertion Error
8217997: Better socket support
8381796: Enhance Certificate parsing
8377833: Enhance Jar file processing