Merge

TLS 1.3 support in OCSP stapling jtreg tests Summary: Adds test cases for OCSP stapling using the TLS 1.3 handshake

Use DiffieHellman rather than the DH alias

http-client-branch: Fix for new MaxStreams.java test

remove TODO tags if no need any more

Merge

http-client-branch: HttpClient HTTP/1.1 could be more lenient and accept LF as well as CRLF as header separator. 8203427: HttpClient HTTP/1.1 could be more lenient and accept LF as well as CRLF as header separator. Reviewed-by: chegar

mismatching sign_alg and sign_alg_cert

Merge

8196389: Should HttpClient support SETTINGS_MAX_CONCURRENT_STREAMS from the server Reviewed-by: chegar, dfuchs

TestElasticTLABDecay is misconfigured

Last stylistic touchups

sun/net/www/protocol/https/HttpsURLConnection/ReadTimeout.java adapts to new exception hierarchy

close issues introduced in TLS 1.3 implementation

Merge

Merge

Setting X25519/X448 to TLS 1.3 only

merge

Initial working XDH support in TLS. I should try to refactor the code a bit.

com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java adapts to new exception hierarchy

Re-generate certificates for javax/net/ssl/templates/SSLSocketTemplate.java

RSA key is too short to support TLS 1.3

No more renegotiation in TLS 1.3

Use default signature algorithms for TLS 1.2

initial commit for JDK-8171279-XDH-TLS-branch

Fix build failure

Formatting and renames

Fix 32-bit builds

sun/security/ssl/AppOutputStream/NoExceptionOnClose.java changes the expected exception

Merge

Elastic TLAB machinery should handle decays

Serviceability support for Epsilon

The expected exception may be not thrown in order

Use SEC_WHCAR* as gss_name_t

DTLS fix for proper closing

http-client-branch: improve test stability by allowing retry on java.net.ConnectException

TLS 1.3, update on SSLSocketImpl.checkEOF()

improper certificates in SSLSocketTemplate.java

jdk/testlibrary/testkeys upgraded to use RSA_4096 key

TLS 1.3, incorrect encode of NewSessionTicket for empty extension

TLS 1.3, correct a serious ALPN impl typo

TLS 1.3, check alpn respond value

TLS 1.3, OpenSSL interop issue, a missed update

TLS 1.3, OpenSSL interop issues

Merge

Negotiate seems to be working

Use PostHandshakeContext for New Session Ticket when approriate

test correction, reject renegotiation applies to TLS 1.2 and prior versions only

rollbak behavior changes of extended secret extension

minor session management improvements to try to address some bugs

Corrected copyright

http-client-branch: additional tests for header case-insensitivity

code style, functions rearrangement

inline GenClientContext, macro redefition, new functions

no more warning

First working version

sequence number fix

Use VS2017

Merge

Undo the interim RSASSA-PSS changes in SignedObject class

Merge

Fix improper ordering for default certificate type field in CertificateRequest Summary: Fixes the ordering in the CERT_TYPES constant for the CertificateRequest message. ECDSA will now be an advertised type when ECDSA is available in JCE.

Initial changes for JDK-8199569

start/beginHandshake and more post-handshake changes

Merge

Initial TLSv1.3 Implementation

Initial changes for JDK-8145252-TLS13-branch

Refactor test handling with @requires

Merge

http-client-branch: add a property to make it possible to limit the size of the HTTP/1.1 coonection pool

Merge

Merge

Merge

Fix build with -epsilongc

Merge

Merge

http-client-branch: connection shutdown should no cancel streams immediately if data is pending in the stream queue.

http-client-branch: remove stray println

Fix for libsplashscreen.

Fix jdk.accessibility.

Try to fix libsplashscreen on mac.

... and missing _DIRS.

Add missing -I.

Even more fixes.

Merge

Fixes based on quick code review.

Cleaning up SRC and EXTRA_SRC.

Rename FindHeaderDirForModule to GetJavaHeaderDir.

Process extra header dirs syntax.

Even more cleaning up.

Cleaning up src format.

Fix Zero build failures

http-client-branch: SSLFlowDelegate - avoid wasted memory in SSL buffers, fix race condition if socket closed during handshake

http-client-branch: RST_STREAM should be handled immediately if received before HEADERS, and subscriber.onError() should be called if received after that.

http-client-branch: Http2Connection should not try to send RST_STREAM if the channel is already closed

Remove FindSrcDirsForLib.

Introduce EXTRA_SRC and supply headers as dirs.

Epsilon should use Elastic TLABs facility to control sizes

Fix gc/epsilon/TestMemoryMXBeans failures after the merge

Merge

http-client-branch: Merge with default

http-client-branch: review comment - remove tailing whitespace and long lines

8193356: HttpClient should create a new connection after available stream ids are used up. Reviewed-by: chegar, dfuchs

http-client-branch: review comment - HPACK bytewise decoding

Merge

http-client-branch: avoid calling getApplicationBufferSize/getPacketBufferSize too often

http-client-branch: review comment - some minor comment rewording and cleanup

http-client-branch: review comment - update comment in Http2Connection

http-client-branch: tag tests that access real hosts on external networks as manual

http-client-branch: do not ignore setup exceptions when creating WS test server

Merge

http-client-branch: fix racy busy loop in graceful SSLEngine closure

Enable LSM for Epsilon

No need for hotspot_gc_epsilon, when there is run-test target

Hook up Epsilon flags to a new VM facility

Small bugfixes and improvements

Remove UseNoGC alias

No need for Epsilon in precompiled header

Merge

Automatically set -I<gensrc>/$module.