Reviewed-by: valeriep

Summary: Updated the test to use reflection and skip when SunPKCS11 provider not present.
Reviewed-by: weijun

Summary: Modified to accept '+' as valid character.
Reviewed-by: weijun

Reviewed-by: valeriep

Summary: Reorg the SSLContext implementation
Reviewed-by: weijun

Reviewed-by: dholmes

Reviewed-by: valeriep

Reviewed-by: xuelei

Reviewed-by: xuelei

Summary: the signature of server key exanage message could be null
Reviewed-by: vinnie

Summary: export the existing "NewSunX509" algorithm implementation using the standard name "PKIX"
Reviewed-by: weijun, wetmore

Reviewed-by: valeriep

Summary: Add support for RSA_X_509 mechanism and aliasing of "RSA" to "RSA/ECB/PKCS1Padding".
Reviewed-by: wetmore

7020531: test: java/security/cert/CertificateFactory/openssl/OpenSSLCert.java file not closed after run
Reviewed-by: alanb, smarks

Reviewed-by: mullan

Summary: Enhanced SunPKCS11 provider to support AES/CTR/NoPadding transformation.
Reviewed-by: vinnie

Reviewed-by: valeriep

7016897: Copyright header correction : test/sun/security/provider/SeedGenerator/SeedGeneratorChoice.java
Reviewed-by: vinnie

Summary: add new BasicReason and improve trust anchor searching method during cert path validation
Reviewed-by: mullan

Reviewed-by: wetmore

Reviewed-by: weijun

Reviewed-by: xdono

Summary: Modified configuration parsing code to support "~".
Reviewed-by: weijun

Reviewed-by: valeriep

Reviewed-by: wetmore, andrew, vinnie

Reviewed-by: wetmore

7004168: jarsigner -verify checks for KeyUsage codesigning ext on all certs instead of just signing cert
Reviewed-by: mullan

Reviewed-by: mullan

Reviewed-by: xuelei

Reviewed-by: valeriep

Reviewed-by: valeriep

Summary: Changed to use TBD value instead of FAIL
Reviewed-by: weijun

6687725: Internal PKCS5Padding impl should throw IllegalBlockSizeException and not BadPaddingException
Summary: Changed to throw IllegalBlockSizeException when the data length isn't multiples of block size
Reviewed-by: wetmore

Reviewed-by: valeriep

Reviewed-by: valeriep

Reviewed-by: valeriep

Reviewed-by: valeriep

6985179: To support Server Name Indication extension for JSSE client
Summary: Introduces the algorithm constraints to support signature and hash algorithm selection. Includes contributions from wetmore and weijung.
Reviewed-by: wetmore, weijun

Reviewed-by: wetmore, weijun

6984764: kerberos fails if service side keytab is generated using JDK ktab
Reviewed-by: valeriep