Reviewed-by: dfuchs, alanb, erikj

8147502: Digest is incorrectly truncated for ECDSA signatures when the bit length of n is less than the field size
Summary: Truncate the digest according to the group order, not the field size
Reviewed-by: shade, andrew

Reviewed-by: naoto, rpatil

8215982: (tz) Upgrade time-zone data to tzdata2018i
8225580: tzdata2018i integration causes test failures on jdk-13
Reviewed-by: andrew, naoto

8215982: (tz) Upgrade time-zone data to tzdata2018i
8225580: tzdata2018i integration causes test failures on jdk-13
Reviewed-by: andrew, naoto

8157792: After Integrating tzdata2016d the test/sun/util/calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and "Asia/Qyzylorda" Timezones
Reviewed-by: peytoia

8157792: After Integrating tzdata2016d the test/sun/util/calendar/zi/TestZoneInfo310.java fails for "Asia/Oral" and "Asia/Qyzylorda" Timezones
Reviewed-by: peytoia

8209775: ISO 4217 Amendment #169 update
Reviewed-by: naoto, andrew

8202026: ISO 4217 amendment 166
8204269: ISO 4217 amendment 167
Reviewed-by: naoto, andrew
Contributed-by: li.jiang@oracle.com

Reviewed-by: alanb, peytoia, naoto, phh

Reviewed-by: vinnie

Summary: internal library enhancements to support ECC implementatation
Reviewed-by: jnimeh, andrew
Contributed-by: NDavid Alvarez <alvdavi@amazon.com>

Reviewed-by: naoto, rgoel

Reviewed-by: naoto

Summary: Field arithmetic library for crypto algorithms like Poly1305 and X25519
Reviewed-by: xuelei, andrew
Contributed-by: NDavid Alvarez <alvdavi@amazon.com>

Summary: Revert 8221166.
Reviewed-by: clanger

Summary: Change SSLSessionContext.getSessionCacheSize to return 20480 by default instead of 0.
Reviewed-by: jnimeh, mullan

Reviewed-by: mullan

Reviewed-by: andrew, shade, dfuchs

Reviewed-by: vinnie

Reviewed-by: mullan

8191844: Remove SECOM root (secomevrootca1)
8189949: Remove Baltimore Cybertrust Code Signing CA
8191031: Remove several Symantec Root CAs
8196141: Add GoDaddy root certificates
8204923: Restore Symantec root verisignclass2g2ca
8195774: Add Entrust root certificates
8199779: Add T-Systems, GlobalSign and Starfield services root certificates
8209506: Add Google Trust Services GlobalSign root certificates
8210432: Add additional TeliaSonera root certificate
8195793: Remove GTE CyberTrust Global Root
8216577: Add GlobalSign's R6 Root certificate
8222137: Remove T-Systems root CA certificate
8223555: Cleanups in cacerts tests
Summary: Integration for JEP 319: Root Certificates
Reviewed-by: clanger, mdoerr

Summary: Add a TrustStoreManager to manage trusted certs.
Reviewed-by: mullan

8220641: [TESTBUG] New test KdcPolicy.java introduced by JDK-8164656 needs same change as JDK-8190690
Summary: Add -Dsun.net.spi.nameservice.provider.1=ns,mock to KdcPolicy.java @run calls
Reviewed-by: shade

Reviewed-by: xuelei, shade

Reviewed-by: xuelei

Summary: Add class CADistrustPolicy and distrust Symantec.
Reviewed-by: weijun

Reviewed-by: sherman, rriggs

Summary: Terminate cipher lists with TLS_EMPTY_RENEGOTIATION_INFO_SCSV.
Reviewed-by: jnimeh, clanger

Reviewed-by: weijun, mullan, chegar

Summary: Create separate launchers for clhsdb and hsdb since JDK 8 uses separate launchers for SA tools
Reviewed-by: kevinw, andrew

Reviewed-by: martin, naoto

Summary: TLS v1.2 algorithms for key and MAC derivation added to SunPKCS11 crypto provider. 8210912 fix is included as part of this changeset.
Reviewed-by: valeriep

8186098: sun/security/pkcs11/KeyStore/SecretKeysBasic.sh failed due to libnss3 version cannot be parsed
Summary: Improves the approach on parsing lib version
Reviewed-by: weijun, xuelei

Summary: It outputs the lib content if the lib version cannot be parsed
Reviewed-by: xuelei

8129560: TestKeyPairGenerator.java fails on Solaris because private exponent needs to comply with FIPS 186-4
Summary: Replace BigInteger.valueof(3) with RSAKeyGenParameterSpec.F4
Reviewed-by: coffeys

Reviewed-by: mullan, coffeys

8027781: New jarsigner timestamp warning is grammatically incorrect
8159805: sun/security/tools/jarsigner/warnings/NoTimestampTest.java fails after JDK-8027781
Reviewed-by: weijun, coffeys, mullan

Reviewed-by: pkoppula, coffeys

Reviewed-by: mullan, jnimeh, coffeys