Reviewed-by: wetmore, weijun

Reviewed-by: wetmore, weijun, dgu

Reviewed-by: smarks, mullan, wetmore

Reviewed-by: weijun, vinnie, wetmore

7025227: SSLSocketImpl does not close the TCP layer socket if a close notify cannot be sent to the peer
6932403: SSLSocketImpl state issue
Reviewed-by: xuelei

Reviewed-by: valeriep

Summary: Reorg the SSLContext implementation
Reviewed-by: weijun

Reviewed-by: dholmes

Summary: the signature of server key exanage message could be null
Reviewed-by: vinnie

Summary: export the existing "NewSunX509" algorithm implementation using the standard name "PKIX"
Reviewed-by: weijun, wetmore

Summary: update the warning message
Reviewed-by: weijun

Reviewed-by: wetmore

Reviewed-by: xdono

Reviewed-by: wetmore

Reviewed-by: xuelei

Reviewed-by: wetmore, xuelei

Reviewed-by: weijun

6985179: To support Server Name Indication extension for JSSE client
Summary: Introduces the algorithm constraints to support signature and hash algorithm selection. Includes contributions from wetmore and weijung.
Reviewed-by: wetmore, weijun

Reviewed-by: wetmore, weijun

Reviewed-by: xuelei

Summary: RFC 5746 implementation
Reviewed-by: wetmore, weijun

Reviewed-by: darcy, weijun

6771432: createSocket() - smpatch fails using 1.6.0_10 because of "Unconnected sockets not implemented"
6766775: X509 certificate hostname checking is broken in JDK1.6.0_10
Summary: All three bugs are interdependent
Reviewed-by: xuelei

Reviewed-by: valeriep

Summary: the interim fix disables TLS/SSL renegotiation
Reviewed-by: mullan, chegar, wetmore

Reviewed-by: alanb, xuelei

Reviewed-by: wetmore, alanb

Reviewed-by: mullan

Reviewed-by: chegar, valeriep

Summary: A null hostname should be regarded as a loopback address.
Reviewed-by: weijun

Summary: do not try to read zero byte from a InputStream, and do always return immediately for zero byte reading in a InputStream implementation.
Reviewed-by: weijun

Summary: replace sun.misc.Cache with sun.security.util.Cache
Reviewed-by: weijun

6750401: SSL stress test with GF leads to 32 bit max process size in less than 5 minutes,with PCKS11 provider
Summary: This is the JSSE portion of the fix. Main part is in PKCS11.
Reviewed-by: valeriep, xuelei

Summary: SSLServerSocketImpl.checkEnabledSuites() does not release the temporary socket properly
Reviewed-by: wetmore, weijun

Summary: the inputStream.read(byte[], int, 0) is not always return zero.
Reviewed-by: wetmore, weijun

Summary: Update copyright year for files that have been modified in 2008
Reviewed-by: ohair, tbell

Summary: checking certificate key length for RSA_EXPORT key exchange
Reviewed-by: wetmore, mullan

Summary: Support SSL sockets SOLINGER
Reviewed-by: chegar

Summary: record length count error
Reviewed-by: weijun

Reviewed-by: alanb, iris, lmalvent, bristor, peterjones, darcy, wetmore