Merge

http-client-branch: performance - reduce context switching

getNamesForMech, more import/export

http-client-branch: Make HttpHeaders final

http-client-branch: further update to max streams fix

Create Name with meth to support export

http-client-branch: fix intermittent problem with stream counting by decrementing counter before completing the subscriber CF

clean up TODO tags

implement version downgrad protection

Add twitter branch.

Merge

added jdk.tls.server.protocols

DH left padding of public key

TLS 1.3 support for HttpsUrlConnClient OCSP Stapling jtreg test Summary: Adds test cases for OCSPstapling using the TLS 1.3 handshake and HttpsUrlConnection

A couple of minor session resumption fixes

Merge

TLS 1.3 support in OCSP stapling jtreg tests Summary: Adds test cases for OCSP stapling using the TLS 1.3 handshake

Use DiffieHellman rather than the DH alias

http-client-branch: Fix for new MaxStreams.java test

remove TODO tags if no need any more

Merge

http-client-branch: HttpClient HTTP/1.1 could be more lenient and accept LF as well as CRLF as header separator. 8203427: HttpClient HTTP/1.1 could be more lenient and accept LF as well as CRLF as header separator. Reviewed-by: chegar

mismatching sign_alg and sign_alg_cert

Merge

8196389: Should HttpClient support SETTINGS_MAX_CONCURRENT_STREAMS from the server Reviewed-by: chegar, dfuchs

TestElasticTLABDecay is misconfigured

Last stylistic touchups

sun/net/www/protocol/https/HttpsURLConnection/ReadTimeout.java adapts to new exception hierarchy

close issues introduced in TLS 1.3 implementation

Merge

Merge

Setting X25519/X448 to TLS 1.3 only

merge

Initial working XDH support in TLS. I should try to refactor the code a bit.

com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java adapts to new exception hierarchy

Re-generate certificates for javax/net/ssl/templates/SSLSocketTemplate.java

RSA key is too short to support TLS 1.3

No more renegotiation in TLS 1.3

Use default signature algorithms for TLS 1.2

initial commit for JDK-8171279-XDH-TLS-branch

Fix build failure

Formatting and renames

Fix 32-bit builds

sun/security/ssl/AppOutputStream/NoExceptionOnClose.java changes the expected exception

Merge

Elastic TLAB machinery should handle decays

Serviceability support for Epsilon

The expected exception may be not thrown in order

Use SEC_WHCAR* as gss_name_t

DTLS fix for proper closing

http-client-branch: improve test stability by allowing retry on java.net.ConnectException

TLS 1.3, update on SSLSocketImpl.checkEOF()

improper certificates in SSLSocketTemplate.java

jdk/testlibrary/testkeys upgraded to use RSA_4096 key

TLS 1.3, incorrect encode of NewSessionTicket for empty extension

TLS 1.3, correct a serious ALPN impl typo

TLS 1.3, check alpn respond value

TLS 1.3, OpenSSL interop issue, a missed update

TLS 1.3, OpenSSL interop issues

Merge

Negotiate seems to be working

Use PostHandshakeContext for New Session Ticket when approriate

test correction, reject renegotiation applies to TLS 1.2 and prior versions only

rollbak behavior changes of extended secret extension

minor session management improvements to try to address some bugs

Corrected copyright

http-client-branch: additional tests for header case-insensitivity

code style, functions rearrangement

inline GenClientContext, macro redefition, new functions

no more warning

First working version

sequence number fix

Use VS2017

Merge

Undo the interim RSASSA-PSS changes in SignedObject class

Merge

Fix improper ordering for default certificate type field in CertificateRequest Summary: Fixes the ordering in the CERT_TYPES constant for the CertificateRequest message. ECDSA will now be an advertised type when ECDSA is available in JCE.

Initial changes for JDK-8199569

start/beginHandshake and more post-handshake changes

Merge

Initial TLSv1.3 Implementation

Initial changes for JDK-8145252-TLS13-branch

Refactor test handling with @requires

Merge

http-client-branch: add a property to make it possible to limit the size of the HTTP/1.1 coonection pool

Merge

Merge

Merge

Fix build with -epsilongc

Merge

Merge

http-client-branch: connection shutdown should no cancel streams immediately if data is pending in the stream queue.

http-client-branch: remove stray println

Fix for libsplashscreen.

Fix jdk.accessibility.

Try to fix libsplashscreen on mac.

... and missing _DIRS.

Add missing -I.

Even more fixes.

Merge

Fixes based on quick code review.

Cleaning up SRC and EXTRA_SRC.

Rename FindHeaderDirForModule to GetJavaHeaderDir.

Process extra header dirs syntax.

Even more cleaning up.

Cleaning up src format.

Fix Zero build failures

http-client-branch: SSLFlowDelegate - avoid wasted memory in SSL buffers, fix race condition if socket closed during handshake

http-client-branch: RST_STREAM should be handled immediately if received before HEADERS, and subscriber.onError() should be called if received after that.

http-client-branch: Http2Connection should not try to send RST_STREAM if the channel is already closed

Remove FindSrcDirsForLib.

Introduce EXTRA_SRC and supply headers as dirs.

Epsilon should use Elastic TLABs facility to control sizes

Fix gc/epsilon/TestMemoryMXBeans failures after the merge

Merge

http-client-branch: Merge with default

http-client-branch: review comment - remove tailing whitespace and long lines

8193356: HttpClient should create a new connection after available stream ids are used up. Reviewed-by: chegar, dfuchs

http-client-branch: review comment - HPACK bytewise decoding

Merge