8144093: JEP 244/8051498 - TLS Application-Layer Protocol Negotiation Extension
8170282: Enable ALPN parameters to be supplied during the TLS handshake
8145849: ALPN: getHandshakeApplicationProtocol() always return null
8158978: ALPN not working when values are set directly on a SSLServerSocket
8171443: (spec) An ALPN callback function may also ignore ALPN
Reviewed-by: xuelei, coffeys, rhalade, andrew

Reviewed-by: weijun, sgehwolf

Reviewed-by: jnimeh
Contributed-by: verghese@amazon.com

Reviewed-by: xuelei, andrew

Reviewed-by: bae, bmathiske

Reviewed-by: valeriep

Reviewed-by: alanb, ahgross, chegar, igerasim

8147502: Digest is incorrectly truncated for ECDSA signatures when the bit length of n is less than the field size
Summary: Truncate the digest according to the group order, not the field size
Reviewed-by: shade, andrew

Summary: Move dependencies into the com.sun.crypto.provider package
Reviewed-by: shade

--HG--
rename : src/share/classes/jdk/internal/util/Preconditions.java => src/share/classes/com/sun/crypto/provider/Preconditions.java

Summary: Do not close the session holding the Wrapper Key while in use. Delete the Wrapper Key when no longer needed.
Reviewed-by: valeriep

Summary: Extract cryptographic keys within NSS PKCS11 software tokens for memory management purposes.
Reviewed-by: valeriep

Summary: Updated SunPKCS11 provider with SunJCE provider behavior
Reviewed-by: xuelei

8135248: Add utility methods to check indexes and ranges
8142493: Utility methods to check indexes and ranges doesn't specify behavior when function produces null
8146458: Improve exception reporting for Objects.checkIndex/checkFromToIndex/checkFromIndexSize
8155794: Move Objects.checkIndex BiFunction accepting methods to an internal package
Summary: Do bounds check per encryption/decryption call instead of per block
Reviewed-by: mbalao

Reviewed-by: phh, mbalao, bae

Reviewed-by: ascarpino, ssahoo, skoivu

Reviewed-by: mullan, ahgross, rhalade, mbalao, andrew

Reviewed-by: xuelei, ahgross, jnimeh, mullan, rhalade

Summary: New implementation of ECDH and ECDSA forsome prime-order curves
Reviewed-by: ascarpino, andrew
Contributed-by: NDavid Alvarez <alvdavi@amazon.com>

Reviewed-by: vinnie

Summary: internal library enhancements to support ECC implementatation
Reviewed-by: jnimeh, andrew
Contributed-by: NDavid Alvarez <alvdavi@amazon.com>

Summary: Field arithmetic library for crypto algorithms like Poly1305 and X25519
Reviewed-by: xuelei, andrew
Contributed-by: NDavid Alvarez <alvdavi@amazon.com>

Summary: Minor code/comment improvements
Reviewed-by: xuelei

Summary: Make some field arithmetic operations for X25519/X448 more resilient against side-channel attacks
Reviewed-by: ascarpino

Summary: Change SSLSessionContext.getSessionCacheSize to return 20480 by default instead of 0.
Reviewed-by: jnimeh, mullan

Reviewed-by: andrew, shade, dfuchs

Reviewed-by: vinnie

Summary: Files were missed in the commit of the 8129988 backport
Reviewed-by: shade

Summary: Add a TrustStoreManager to manage trusted certs.
Reviewed-by: mullan

Reviewed-by: xuelei

Summary: Convert <code></code> ad <tt></tt> to {@code }, <xmp></xmp> to <pre>{@code }</pre>.
Reviewed-by: mullan

Summary: Add class CADistrustPolicy and distrust Symantec.
Reviewed-by: weijun

Summary: Terminate cipher lists with TLS_EMPTY_RENEGOTIATION_INFO_SCSV.
Reviewed-by: jnimeh, clanger

Reviewed-by: weijun, mullan, chegar

Reviewed-by: andrew

Summary: TLS v1.2 algorithms for key and MAC derivation added to SunPKCS11 crypto provider. 8210912 fix is included as part of this changeset.
Reviewed-by: valeriep

Reviewed-by: coffeys

8027781: New jarsigner timestamp warning is grammatically incorrect
8159805: sun/security/tools/jarsigner/warnings/NoTimestampTest.java fails after JDK-8027781
Reviewed-by: weijun, coffeys, mullan

Reviewed-by: weijun, igerasim

Reviewed-by: ascarpino, mschoene

Reviewed-by: coffeys