master
8368041: Enhance TLS certificate handling
8044609: javax.net.debug options not working and documented as expected
8291509: Minor cleanup could be done in sun.security
8366577: Deprecate java.net.Socket::setPerformancePreferences
8372526: Add support for ZLIB TLS Certificate Compression
8345277: TLSv1.2 - unable to sign a secp256r1 key with ecdsa_secp384r1_sha384
8353578: Refactor existing usage of internal HKDF impl to use the KDF API
8196584: TLS 1.3 Implementation
8214418: half-closed SSLEngine status may cause application dead loop
8187443: Forest Consolidation: Move files to unified layout
8268193: Improve requests of certificates
8232581: Improve TLS verification
8344366: Remove Security Manager dependencies from javax.net.ssl and sun.security.ssl packages
8386600: Fix comparison checks in DHasKEM
8281236: (D)TLS key exchange named groups
8259223: Simplify boolean expression in the SunJSSE provider
8301626: Capture Named Group information in TLSHandshakeEvent
8373275: Improve DTLS handshaking
8386681: Remove RawKeySpec
8380569: Update comments for X25519MLKEM768 per draft RFC in HybridProvider once spec becomes standardized
8373408: SHA1withECDSA is not required for ECDHE and ECDSA
8373426: Remove ffdhe6144 and ffdhe8192 from default list of TLS named groups
8171279: Support X25519 and X448 in TLS
8349910: Implement JEP 517: HTTP/3 for the HTTP Client API
8387124: Incomplete algorithm decomposition for TLS 1.3 cipher suites in SSLAlgorithmDecomposer
8329548: Change KeyUpdate messages from TLS 1.3
8314323: Implement JEP 527: TLS 1.3 Hybrid Key Exchange
8349583: Add mechanism to disable signature schemes based on their TLS scope
8366364: Return enabled signature schemes with SSLConfiguration#getSSLParameters() call
8386203: Use CRC32C checksum instead of Adler32 for stateless session ticket
8370656: Re-examine use of InterruptedIOException in sun.security.ssl code
8215712: Parsing extension failure may alert decode_error
8368520: TLS 1.3 KeyUpdate fails with SunPKCS11 provider
8270105: Fix ServerKeyExchange copyright
8371333: Optimize static initialization of SSLContextImpl classes and improve logging
8379191: SunX509KeyManagerImpl alias chooser methods returns null for EC_EC
8226374: Restrict TLS signature schemes and named groups