Reviewed-by: wetmore

Reviewed-by: xuelei, weijun, asaha

Reviewed-by: xuelei

Reviewed-by: wetmore

Reviewed-by: weijun

Reviewed-by: xuelei, mullan
Contributed-by: alexandre.boulgakov@oracle.com

Reviewed-by: wetmore, weijun

Reviewed-by: wetmore, weijun, dgu

Reviewed-by: smarks, mullan, wetmore

Reviewed-by: weijun, vinnie, wetmore

7025227: SSLSocketImpl does not close the TCP layer socket if a close notify cannot be sent to the peer
6932403: SSLSocketImpl state issue
Reviewed-by: xuelei

Reviewed-by: valeriep

Summary: Reorg the SSLContext implementation
Reviewed-by: weijun

Reviewed-by: dholmes

Summary: the signature of server key exanage message could be null
Reviewed-by: vinnie

Summary: export the existing "NewSunX509" algorithm implementation using the standard name "PKIX"
Reviewed-by: weijun, wetmore

Summary: update the warning message
Reviewed-by: weijun

Reviewed-by: wetmore

Reviewed-by: xdono

Reviewed-by: wetmore

Reviewed-by: xuelei

Reviewed-by: wetmore, xuelei

Reviewed-by: weijun

6985179: To support Server Name Indication extension for JSSE client
Summary: Introduces the algorithm constraints to support signature and hash algorithm selection. Includes contributions from wetmore and weijung.
Reviewed-by: wetmore, weijun

Reviewed-by: wetmore, weijun

Reviewed-by: xuelei

Summary: RFC 5746 implementation
Reviewed-by: wetmore, weijun

Reviewed-by: darcy, weijun

6771432: createSocket() - smpatch fails using 1.6.0_10 because of "Unconnected sockets not implemented"
6766775: X509 certificate hostname checking is broken in JDK1.6.0_10
Summary: All three bugs are interdependent
Reviewed-by: xuelei

Reviewed-by: valeriep

Summary: the interim fix disables TLS/SSL renegotiation
Reviewed-by: mullan, chegar, wetmore

Reviewed-by: alanb, xuelei

Reviewed-by: wetmore, alanb

Reviewed-by: mullan

Reviewed-by: chegar, valeriep

Summary: A null hostname should be regarded as a loopback address.
Reviewed-by: weijun

Summary: do not try to read zero byte from a InputStream, and do always return immediately for zero byte reading in a InputStream implementation.
Reviewed-by: weijun

Summary: replace sun.misc.Cache with sun.security.util.Cache
Reviewed-by: weijun

6750401: SSL stress test with GF leads to 32 bit max process size in less than 5 minutes,with PCKS11 provider
Summary: This is the JSSE portion of the fix. Main part is in PKCS11.
Reviewed-by: valeriep, xuelei

Summary: SSLServerSocketImpl.checkEnabledSuites() does not release the temporary socket properly
Reviewed-by: wetmore, weijun