Reviewed-by: mbalao, shade

Reviewed-by: mbalao, sgehwolf

--HG--
extra : amend_source : 80de2ae62559b587c8a6df3c459b714ecc0857c1

Reviewed-by: mbalao

Summary: Remove dependency on sun.misc.IOUtils.readFully(InputStream, int, boolean)
Reviewed-by: alanb, mchung, chegar
Contributed-by: NAlexandre Iline <alexandre.iline@oracle.com>

Reviewed-by: mbalao

8236983: [TESTBUG] Remove pointless catch block in test/jdk/sun/security/util/DerValue/BadValue.java
Reviewed-by: mbalao

Reviewed-by: andrew

Reviewed-by: mbalao

Reviewed-by: ahgross, mullan, valeriep

Reviewed-by: mbalao

Reviewed-by: mbalao

Reviewed-by: mullan

Reviewed-by: mbalao

Reviewed-by: mbalao

Reviewed-by: mbalao

8044500: Add kinit options and krb5.conf flags that allow users to obtain renewable tickets and specify ticket lifetimes
Reviewed-by: mbalao

Reviewed-by: xuelei

Reviewed-by: weijun, andrew

Reviewed-by: andrew

Reviewed-by: clanger, andrew

Reviewed-by: clanger, andrew

Summary: Fixing a minor test bug in the SignatureDigestTruncate regression test
Reviewed-by: mullan

8055351: sun/security/provider/DSA/TestAlgParameterGenerator.java failed with interrupted! (timed out?)
Reviewed-by: valeriep, andrew, phh

Summary: The fix sets timeout for the server and the client, and ignore SocketTimeoutException.
Reviewed-by: chegar, phh, andrew
Contributed-by: NJohn Jiang <sha.jiang@oracle.com>

Reviewed-by: xuelei, andrew

8147502: Digest is incorrectly truncated for ECDSA signatures when the bit length of n is less than the field size
Summary: Truncate the digest according to the group order, not the field size
Reviewed-by: shade, andrew

Reviewed-by: vinnie

Summary: internal library enhancements to support ECC implementatation
Reviewed-by: jnimeh, andrew
Contributed-by: NDavid Alvarez <alvdavi@amazon.com>

Summary: Field arithmetic library for crypto algorithms like Poly1305 and X25519
Reviewed-by: xuelei, andrew
Contributed-by: NDavid Alvarez <alvdavi@amazon.com>

Summary: Change SSLSessionContext.getSessionCacheSize to return 20480 by default instead of 0.
Reviewed-by: jnimeh, mullan

Reviewed-by: mullan

Reviewed-by: andrew, shade, dfuchs

Reviewed-by: vinnie

Reviewed-by: mullan

8191844: Remove SECOM root (secomevrootca1)
8189949: Remove Baltimore Cybertrust Code Signing CA
8191031: Remove several Symantec Root CAs
8196141: Add GoDaddy root certificates
8204923: Restore Symantec root verisignclass2g2ca
8195774: Add Entrust root certificates
8199779: Add T-Systems, GlobalSign and Starfield services root certificates
8209506: Add Google Trust Services GlobalSign root certificates
8210432: Add additional TeliaSonera root certificate
8195793: Remove GTE CyberTrust Global Root
8216577: Add GlobalSign's R6 Root certificate
8222137: Remove T-Systems root CA certificate
8223555: Cleanups in cacerts tests
Summary: Integration for JEP 319: Root Certificates
Reviewed-by: clanger, mdoerr

Summary: Add a TrustStoreManager to manage trusted certs.
Reviewed-by: mullan

8220641: [TESTBUG] New test KdcPolicy.java introduced by JDK-8164656 needs same change as JDK-8190690
Summary: Add -Dsun.net.spi.nameservice.provider.1=ns,mock to KdcPolicy.java @run calls
Reviewed-by: shade

Reviewed-by: xuelei, shade

Reviewed-by: xuelei

Summary: Add class CADistrustPolicy and distrust Symantec.
Reviewed-by: weijun