RELEASE NOTES FOR: 17.0.12 ==================================================================================================== Notes generated: Fri Jul 26 05:54:32 CEST 2024 Hint: Prefix bug IDs with https://bugs.openjdk.org/browse/ to reach the relevant JIRA entry. JAVA ENHANCEMENT PROPOSALS (JEP): None. RELEASE NOTES: security-libs/javax.security: JDK-8328638: Fallback Option For POST-only OCSP Requests JDK 17 introduced a performance improvement that made OCSP clients unconditionally use GET requests for small requests, while doing POST requests for everything else. This is explicitly allowed and recommended by RFC 5019 and RFC 6960. However, we have seen OCSP responders that, despite RFC requirements, are not working well with GET requests. This release introduces a new JDK system property to allow clients to fallback to POST-only behavior. This unblocks interactions with those OCSP responders through the use of `-Dcom.sun.security.ocsp.useget={false,true}`. This amends the original change that introduced GET OCSP requests (JDK-8179503). The default behavior is not changed; the option defaults to `true`. Set the option to `false` to disable GET OCSP requests. Any value other than `false` (case-insensitive) defaults to `true`. This option is non-standard, and might go away once problematic OCSP responders get upgraded. infrastructure/build: JDK-8326891: Native Executables and Libraries on Linux Use `RPATH` Instead of `RUNPATH` Native executables and libraries on Linux have switched to using `RPATH` instead of `RUNPATH` in this release. JDK native executables and libraries use embedded runtime search paths to locate other internal JDK native libraries. On Linux these can be defined as either `RPATH` or `RUNPATH`. The main difference is that the dynamic linker considers `RPATH` before the `LD_LIBRARY_PATH` environment variable, while `RUNPATH` is only considered after `LD_LIBRARY_PATH`. By making the change to using `RPATH`, it is no longer possible to replace JDK internal native libraries using `LD_LIBRARY_PATH`. hotspot/runtime: JDK-8325496: Make `TrimNativeHeapInterval` a Product Switch `TrimNativeHeapInterval` has been made an official product switch. It allows the JVM to trim the native heap at periodic intervals. This option is only available on Linux with glibc. security-libs/java.security: JDK-8281658: New Security Category for `-XshowSettings` Launcher Option The `-XshowSettings` launcher has a new `security` category. Settings from security properties, security providers, and TLS related settings are displayed with this option. A security sub-category can be passed as an argument to the security category option. See the output from `java -X`: ``` -XshowSettings:security show all security settings and continue -XshowSettings:security:*sub-category* show settings for the specified security sub-category and continue. Possible *sub-category* arguments for this option include: all: show all security settings and continue properties: show security properties and continue providers: show static security provider settings and continue tls: show TLS related security settings and continue ``` Third party security provider details will be reported if they are included in the application class path or module path and such providers are configured in the `java.security` file. JDK-8316138: Added GlobalSign R46 and E46 Root CA Certificates The following root certificates have been added to the cacerts truststore: ``` + GlobalSign + globalsignr46 DN: CN=GlobalSign Root R46, O=GlobalSign nv-sa, C=BE + GlobalSign + globalsigne46 DN: CN=GlobalSign Root E46, O=GlobalSign nv-sa, C=BE ``` security-libs/javax.net.ssl: JDK-8256660: Disabled DTLS 1.0 DTLS 1.0 has been disabled by default, by adding "DTLSv1.0" to the `jdk.tls.disabledAlgorithms` security property in the `java.security` configuration file. DTLS 1.0 has weakened over time and lacks support for stronger cipher suites. Any attempts to use DTLSv1.0 will fail with an `SSLHandshakeException`. Users can, at their own risk, re-enable the version by removing "DTLSv1.0" from the `jdk.tls.disabledAlgorithms` security property. hotspot/gc: JDK-8310031: Parallel: Precise Parallel Scanning of Large Object Arrays for Young Collection Roots During a young collection, ParallelGC partitions the old generation into 64kB stripes when scanning it for references into the young generation. These stripes are assigned to worker threads that do the scanning in parallel as work units. Before this change, Parallel GC always scanned these stripes completely even if only a small part had been known to contain interesting references. Additionally, every worker thread processed the objects that start in that stripe by itself, including parts of objects that extend into other stripes. This behavior limited parallelism when processing large objects. A single large object, potentially containing thousands of references, had been scanned by a single thread only and in full. This would cause bad scaling due to memory sharing and cache misses in the subsequent long, work stealing phase. With this change, Parallel GC workers limit work to their stripe and only process interesting parts of large object arrays. This reduces the work done by a single thread for a stripe, improves parallelism, and reduces the amount of work stealing. Parallel GC pauses are now on par with G1 in presence of large object arrays, reducing pause times by 4-5 times in some cases. ALL FIXED ISSUES, BY COMPONENT AND PRIORITY: client-libs: (P4) JDK-8320303: Allow PassFailJFrame to accept single window creator (P4) JDK-8294156: Allow PassFailJFrame.Builder to create test UI (P4) JDK-8324243: Compilation failures in java.desktop module with gcc 14 (P4) JDK-8315071: Modify TrayIconScalingTest.java, PrintLatinCJKTest.java to use new PassFailJFrame's builder pattern usage (P4) JDK-8316017: Refactor timeout handler in PassFailJFrame client-libs/2d: (P3) JDK-8326661: sun/java2d/cmm/ColorConvertOp/ColConvTest.java assumes profiles were generated by LCMS (P3) JDK-8321489: Update LCMS to 2.16 (P4) JDK-8328194: Add a test to check default rendering engine (P4) JDK-8319268: Build failure with GCC8.3.1 after 8313643 (P4) JDK-8323210: Update the usage of cmsFLAGS_COPY_ALPHA client-libs/java.awt: (P2) JDK-8318854: [macos14] Running any AWT app prints Secure coding warning (P3) JDK-8317287: [macos14] InterJVMGetDropSuccessTest.java: Child VM: abnormal termination (P3) JDK-8185862: AWT Assertion Failure in ::GetDIBits(hBMDC, hBM, 0, 1, 0, gpBitmapInfo, 0) 'awt_Win32GraphicsDevice.cpp', at line 185 (P4) JDK-8320113: [macos14] : ShapeNotSetSometimes.java fails intermittently on macOS 14 (P4) JDK-8324238: [macOS] java/awt/Frame/ShapeNotSetSometimes/ShapeNotSetSometimes.java fails with the shape has not been applied msg (P4) JDK-8266242: java/awt/GraphicsDevice/CheckDisplayModes.java failing on macOS 11 ARM (P4) JDK-8306634: Open source AWT Event related tests (P4) JDK-8306067: Open source AWT Graphics,GridBagLayout related tests (P4) JDK-8305874: Open source AWT Key, Text Event related tests (P4) JDK-8305943: Open source few AWT Focus related tests (P4) JDK-8315663: Open source misc awt tests (P4) JDK-8315726: Open source several AWT applet tests (P4) JDK-8305942: Open source several AWT Focus related tests (P4) JDK-8305645: System Tray icons get corrupted when Windows primary monitor changes (P4) JDK-8320342: Use PassFailJFrame for TruncatedPopupMenuTest.java client-libs/javax.accessibility: (P4) JDK-8326140: src/jdk.accessibility/windows/native/libjavaaccessbridge/AccessBridgeJavaEntryPoints.cpp ReleaseStringChars might be missing in early returns client-libs/javax.swing: (P3) JDK-8322239: [macos] a11y : java.lang.NullPointerException is thrown when focus is moved on the JTabbedPane (P3) JDK-8187759: Background not refreshed when painting over a transparent JFrame (P3) JDK-8306838: GetGraphicsTest needs to be headful (P3) JDK-8042380: Test javax/swing/JFileChooser/4524490/bug4524490.java fails with InvocationTargetException (P4) JDK-8318580: "javax/swing/MultiMonitor/MultimonVImage.java failing with Error. Can't find library: /open/test/jdk/java/awt/regtesthelpers" after JDK-8316053 (P4) JDK-8015739: Background of JInternalFrame is located out of JInternalFrame (P4) JDK-8316053: Open some swing tests 3 (P4) JDK-8315609: Open source few more swing text/html tests (P4) JDK-8306714: Open source few Swing event and AbstractAction tests (P4) JDK-8315677: Open source few swing JFileChooser and other tests (P4) JDK-8315741: Open source few swing JFormattedTextField and JPopupMenu tests (P4) JDK-8315889: Open source several Swing HTMLDocument related tests (P4) JDK-8315834: Open source several Swing JSpinner related tests (P4) JDK-8315824: Open source several Swing Text/HTML related tests (P4) JDK-8315898: Open source swing JMenu tests (P4) JDK-8316164: Opensource JMenuBar manual test (P4) JDK-8316154: Opensource JTextArea manual tests (P4) JDK-8316242: Opensource SwingGraphics manual test (P4) JDK-8328540: test javax/swing/JSplitPane/4885629/bug4885629.java fails on windows hidpi (P4) JDK-8297449: Update JInternalFrame Metal Border code (P5) JDK-8295026: Remove unused fields in StyleSheet core-libs: (P4) JDK-8309630: Clean up tests that reference deploy modules (P4) JDK-8272903: Missing license header in ArenaAllocator.java (P4) JDK-8326351: Update the Zlib version in open/src/java.base/share/legal/zlib.md to 1.3.1 core-libs/java.lang: (P3) JDK-8320570: NegativeArraySizeException decoding >1G UTF8 bytes with non-ascii characters (P4) JDK-8328524: [x86] StringRepeat.java failure on linux-x86: Could not reserve enough space for 2097152KB object heap (P4) JDK-8327998: Enable java/lang/ProcessBuilder/JspawnhelperProtocol.java on Mac (P4) JDK-8289643: File descriptor leak with ProcessBuilder.startPipeline (P4) JDK-8290885: java/lang/ProcessBuilder/PipelineLeaksFD.java fail: More or fewer pipes than expected core-libs/java.lang.foreign: (P4) JDK-8307411: Test java/foreign/channels/TestAsyncSocketChannels.java failed: IllegalStateException: Already closed core-libs/java.lang.invoke: (P4) JDK-8280377: MethodHandleProxies does not correctly invoke default methods with varags core-libs/java.lang:class_loading: (P4) JDK-8309763: Move tests in test/jdk/sun/misc/URLClassPath directory to test/jdk/jdk/internal/loader core-libs/java.lang:reflect: (P4) JDK-8177107: Reduce memory footprint of java.lang.reflect.Constructor/Method core-libs/java.math: (P4) JDK-8294137: Review running times of java.math tests core-libs/java.net: (P3) JDK-8306040: HttpResponseInputStream.available() returns 1 on empty stream (P3) JDK-8318599: HttpURLConnection cache issues leading to crashes in JGSS w/ native GSS introduced by 8303809 (P3) JDK-8296610: java/net/HttpURLConnection/SetAuthenticator/HTTPSetAuthenticatorTest.java failed with "BindException: Address already in use: connect" (P4) JDK-8297645: Drop the test/jdk/java/net/httpclient/reactivestreams-tck-tests/TckDriver.java test (P4) JDK-8163921: HttpURLConnection default Accept header is malformed according to HTTP/1.1 RFC (P4) JDK-8309527: Improve test proxy performance (P4) JDK-8303457: Introduce convenience test library APIs for creating test servers for tests in test/jdk/java/net/httpclient (P4) JDK-8327989: java/net/httpclient/ManyRequest.java should not use "localhost" in URIs (P4) JDK-8223696: java/net/httpclient/MaxStreams.java failed with didn't finish within the time-out (P4) JDK-8295944: Move the Http2TestServer and related classes into a package of its own (P4) JDK-8330523: Reduce runtime and improve efficiency of KeepAliveTest (P4) JDK-8309409: Update HttpInputStreamTest and BodyProcessorInputStreamTest to use hg.openjdk.org (P4) JDK-8304927: Update java/net/httpclient/BasicAuthTest.java to check basic auth over HTTP/2 (P4) JDK-8330815: Use pattern matching for instanceof in KeepAliveCache core-libs/java.nio: (P3) JDK-8280113: (dc) DatagramSocket.receive does not always throw when the channel is closed (P3) JDK-8297292: java/nio/channels/FileChannel/FileExtensionAndMap.java is too slow (P3) JDK-8263940: NPE when creating default file system when default file system provider is packaged as JAR file on class path (P4) JDK-8301183: (zipfs) jdk/jdk/nio/zipfs/TestLocOffsetFromZip64EF.java failing with ZipException:R0 on OL9 (P4) JDK-8303972: (zipfs) Make test/jdk/jdk/nio/zipfs/TestLocOffsetFromZip64EF.java independent of the zip command line (P4) JDK-8320943: Files/probeContentType/Basic.java fails on latest Windows 11 - content type mismatch core-libs/java.rmi: (P4) JDK-8298939: Refactor open/test/jdk/javax/rmi/ssl/SSLSocketParametersTest.sh to jtreg java test core-libs/java.util: (P3) JDK-8283349: Robustness improvements to java/util/prefs/AddNodeChangeListener.jar (P4) JDK-8313307: java/util/Formatter/Padding.java fails on some Locales core-libs/java.util.concurrent: (P3) JDK-8318809: java/util/concurrent/ConcurrentLinkedQueue/WhiteBox.java shows intermittent failures on linux ppc64le and aarch64 core-libs/java.util.jar: (P4) JDK-8315117: Update Zlib Data Compression Library to Version 1.3 (P4) JDK-8324632: Update Zlib Data Compression Library to Version 1.3.1 core-libs/java.util.logging: (P4) JDK-8329013: StackOverflowError when starting Apache Tomcat with signed jar core-libs/java.util:collections: (P4) JDK-8328066: WhiteBoxResizeTest failure on linux-x86: Could not reserve enough space for 2097152KB object heap core-libs/java.util:i18n: (P4) JDK-8310818: Refactor more Locale tests to use JUnit (P4) JDK-8302512: Update IANA Language Subtag Registry to Version 2023-02-14 (P4) JDK-8304761: Update IANA Language Subtag Registry to Version 2023-03-22 (P4) JDK-8306031: Update IANA Language Subtag Registry to Version 2023-04-13 (P4) JDK-8308021: Update IANA Language Subtag Registry to Version 2023-05-11 (P4) JDK-8313702: Update IANA Language Subtag Registry to Version 2023-08-02 (P4) JDK-8318322: Update IANA Language Subtag Registry to Version 2023-10-16 (P4) JDK-8327631: Update IANA Language Subtag Registry to Version 2024-03-07 core-libs/javax.naming: (P3) JDK-8325579: Inconsistent behavior in com.sun.jndi.ldap.Connection::createSocket core-libs/javax.script: (P4) JDK-8320712: Rewrite BadFactoryTest in pure Java core-svc/debugger: (P4) JDK-8213714: AttachingConnector/attach/attach001 failed due to "bind failed: Address already in use" (P4) JDK-8260540: serviceability/jdwp/AllModulesCommandTest.java failed with "Debuggee error: 'ERROR: transport error 202: bind failed: Address already in use'" core-svc/java.lang.management: (P3) JDK-8299858: [Metrics] Swap memory limit reported incorrectly when too large core-svc/javax.management: (P4) JDK-8302069: javax/management/remote/mandatory/notif/NotifReconnectDeadlockTest.java update hotspot/compiler: (P2) JDK-8319372: C2 compilation fails with "Bad immediate dominator info" (P3) JDK-8325326: [PPC64] Don't relocate in case of allocation failure (P3) JDK-8326101: [PPC64] Need to bailout cleanly if creation of stubs fails when code cache is out of space (P3) JDK-8326201: [S390] Need to bailout cleanly if creation of stubs fails when code cache is out of space (P3) JDK-8303466: C2: failed: malformed control flow. Limit type made precise with MaxL/MinL (P3) JDK-8276227: ciReplay: SIGSEGV if classfile for replay compilation is not present after JDK-8275868 (P3) JDK-8326638: Crash in PhaseIdealLoop::remix_address_expressions due to unexpected Region instead of Loop (P3) JDK-8324050: Issue store-store barrier after re-materializing objects during deoptimization (P3) JDK-8297445: PPC64: Represent Registers as values (P4) JDK-8323519: Add applications/ctw/modules to Hotspot tiered testing (P4) JDK-8321107: Add more test cases for JDK-8319372 (P4) JDK-8275868: ciReplay: Inlining fails with "unloaded signature classes" due to wrong protection domains (P4) JDK-8325137: com/sun/management/ThreadMXBean/ThreadCpuTimeArray.java can fail in Xcomp with out of expected range (P4) JDK-8322858: compiler/c2/aarch64/TestFarJump.java fails on AArch64 due to unexpected PrintAssembly output (P4) JDK-8325432: enhance assert message "relocation addr must be in this section" (P4) JDK-8328165: improve assert(idx < _maxlrg) failed: oob (P4) JDK-8272315: Improve assert_different_registers (P4) JDK-8327136: javax/management/remote/mandatory/notif/NotifReconnectDeadlockTest.java fails on libgraal (P4) JDK-8329823: RISC-V: Need to sync CPU features with related JVM flags (P4) JDK-8330094: RISC-V: Save and restore FRM in the call stub (P4) JDK-8325372: Shenandoah: SIGSEGV crash in unnecessary_acquire due to LoadStore split through phi (P4) JDK-8311964: Some jtreg tests failing on x86 with error 'unrecognized VM options' (C2 flags) hotspot/gc: (P2) JDK-8328166: Epsilon: 'EpsilonHeap::allocate_work' misuses the parameter 'size' as size in bytes (P2) JDK-8328168: Epsilon: Premature OOM when allocating object larger than uncommitted heap size (P3) JDK-8272651: G1 heap region info print order changed by JDK-8269914 (P3) JDK-8329223: Parallel: Parallel GC resizes heap even if -Xms = -Xmx (P4) JDK-8280030: [REDO] Parallel: More precise boundary in ObjectStartArray::object_starts_in_range (P4) JDK-8282094: [REDO] Parallel: Refactor PSCardTable::scavenge_contents_parallel (P4) JDK-8291753: Add JFR event for GC CPU Time (P4) JDK-8270018: Add scoped object for g1 young gc JFR notification (P4) JDK-8316608: Enable parallelism in vmTestbase/gc/vector tests (P4) JDK-8318727: Enable parallelism in vmTestbase/vm/gc/concurrent tests (P4) JDK-8269914: Factor out heap printing for G1 young and full gc (P4) JDK-8329570: G1: Excessive is_obj_dead_cond calls in verification (P4) JDK-8310031: Parallel: Implement better work distribution for large object arrays in old gen (P4) JDK-8278893: Parallel: Remove GCWorkerDelayMillis (P4) JDK-8322503: Shenandoah: Clarify gc state usage (P4) JDK-8299023: TestPLABResize.java and TestPLABPromotion.java are failing intermittently (P4) JDK-8309890: TestStringDeduplicationInterned.java waits for the wrong condition hotspot/jfr: (P3) JDK-8286740: JFR: Active Setting event emitted incorrectly (P4) JDK-8305931: jdk/jfr/jcmd/TestJcmdDumpPathToGCRoots.java failed with "Expected chains but found none" (P4) JDK-8326521: JFR: CompilerPhase event test fails on windows 32 bit (P4) JDK-8326529: JFR: Test for CompilerCompile events fails due to time out hotspot/jvmti: (P4) JDK-8286490: JvmtiEventControllerPrivate::set_event_callbacks CLEARING_MASK computation is incorrect hotspot/runtime: (P3) JDK-8307423: [s390x] Represent Registers as values (P3) JDK-8328812: Update and move siphash license (P4) JDK-8302907: [PPC64] Use more constexpr in class Register (P4) JDK-8298413: [s390] CPUInfoTest fails due to uppercase feature string (P4) JDK-8324824: AArch64: Detect Ampere-1B core and update default options for Ampere CPUs (P4) JDK-8320005: Allow loading of shared objects with .a extension on AIX (P4) JDK-8273153: Consolidate file_exists into os:file_exists (P4) JDK-8314832: Few runtime/os tests ignore vm flags (P4) JDK-8314835: gtest wrappers should be marked as flagless (P4) JDK-8280056: gtest/LargePageGtests.java#use-large-pages failed "os.release_one_mapping_multi_commits_vm" (P4) JDK-8305819: LogConfigurationTest intermittently fails on AArch64 (P4) JDK-8325496: Make TrimNativeHeapInterval a product switch (P4) JDK-8319048: Monitor deflation unlink phase prolongs time to safepoint (P4) JDK-8275334: Move class loading Events to a separate section in hs_err files (P4) JDK-8331942: On Linux aarch64, CDS archives should be using 64K alignment by default (P4) JDK-8327059: os::Linux::print_proc_sys_info add swappiness information (P4) JDK-8328997: Remove unnecessary template parameter lists in GrowableArray (P4) JDK-8286781: Replace the deprecated/obsolete gethostbyname and inet_addr calls (P4) JDK-8315652: RISC-V: Features string uses wrong separator for jtreg (P4) JDK-8326936: RISC-V: Shenandoah GC crashes due to incorrect atomic memory operations (P4) JDK-8330242: RISC-V: Simplify and remove CORRECT_COMPILER_ATOMIC_SUPPORT in atomic_linux_riscv.hpp (P4) JDK-8325862: set -XX:+ErrorFileToStderr when executing java in containers for some container related jtreg tests (P4) JDK-8324598: use mem_unit when working with sysinfo memory and swap related information (P5) JDK-8330156: RISC-V: Range check auipc + signed 12 imm instruction (P5) JDK-8316186: RISC-V: Remove PlatformCmpxchg<4> hotspot/svc: (P3) JDK-8267796: vmTestbase/nsk/jvmti/scenarios/hotswap/HS201/hs201t002/TestDescription.java fails with NoClassDefFoundError (P4) JDK-8316142: Enable parallelism in vmTestbase/nsk/monitoring/stress/lowmem tests (P4) JDK-8312916: Remove remaining usages of -Xdebug from test/hotspot/jtreg (P4) JDK-8316462: sun/jvmstat/monitor/MonitoredVm/MonitorVmStartTerminate.java ignores VM flags hotspot/test: (P3) JDK-8312194: test/hotspot/jtreg/applications/ctw/modules/jdk_crypto_ec.java cannot handle empty modules (P4) JDK-8326006: Allow TEST_VM_FLAGLESS to set flagless mode (P4) JDK-8325876: crashes in docker container tests on Linuxppc64le Power8 machines (P4) JDK-8323994: gtest runner repeats test name for every single gtest assertion (P4) JDK-8323717: Introduce test keyword for tests that need external dependencies (P4) JDK-8322920: Some ProcessTools.execute* functions are declared to throw Throwable (P5) JDK-8320129: "top" command during jtreg failure handler does not display CPU usage on OSX infrastructure: (P4) JDK-8326794: Bump update version for OpenJDK: jdk-17.0.12 infrastructure/build: (P1) JDK-8328948: GHA: Restoring sysroot from cache skips the build after JDK-8326960 (P3) JDK-8325972: Add -x to bash for building with LOG=debug (P4) JDK-8331641: [17u]: Bump GHA bootstrap JDK to 17.0.11 (P4) JDK-8301753: AppendFile/WriteFile has differences between make 3.81 and 4+ (P4) JDK-8331113: createJMHBundle.sh support configurable maven repo mirror (P4) JDK-8331352: error: template-id not allowed for constructor/destructor in C++20 (P4) JDK-8325213: Flags introduced by configure script are not passed to ADLC build (P4) JDK-8328705: GHA: Cross-compilation jobs do not require build JDK (P4) JDK-8326960: GHA: RISC-V sysroot cannot be debootstrapped due to ongoing Debian t64 transition (P4) JDK-8324723: GHA: Upgrade some actions to avoid deprecated Node 16 (P4) JDK-8326891: Prefer RPATH over RUNPATH for $ORIGIN rpaths in internal JDK binaries infrastructure/release_eng: (P4) JDK-8335963: [17u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.12 other-libs: (P3) JDK-8285452: Add a new test library API to replace a file content using FileUtils.java security-libs: (P3) JDK-8280546: Remove hard-coded 127.0.0.1 loopback address (P3) JDK-8319128: sun/security/pkcs11 tests fail on OL 7.9 aarch64 (P4) JDK-8326942: [17u] Backout "8325254: CKA_TOKEN private and secret keys are not necessarily sensitive" (P4) JDK-8296190: TestMD5Intrinsics and TestMD5MultiBlockIntrinsics don't test the intrinsics security-libs/java.security: (P3) JDK-8281658: Add a security category to the java -XshowSettings option (P3) JDK-8316138: Add GlobalSign 2 TLS root certificates (P3) JDK-8328825: Google CAInterop test failures (P3) JDK-8326643: JDK server does not send a dummy change_cipher_spec record after HelloRetryRequest message (P3) JDK-8321925: sun/security/mscapi/KeytoolChangeAlias.java fails with "Alias <246810> does not exist" (P3) JDK-8314283: Support for NSS tests on aarch64 platforms (P3) JDK-8286045: Use ForceGC for cleaner test cases (P4) JDK-8289401: Add dump output to TestRawRSACipher.java (P4) JDK-8305169: java/security/cert/CertPathValidator/OCSP/GetAndPostTests.java -- test server didn't start in timely manner security-libs/javax.crypto:pkcs11: (P3) JDK-8319136: Skip pkcs11 tests on linux-aarch64 (P3) JDK-8295343: sun/security/pkcs11 tests fail on Linux RHEL 8.6 and newer (P4) JDK-8325254: CKA_TOKEN private and secret keys are not necessarily sensitive security-libs/javax.net.ssl: (P3) JDK-8256660: Disable DTLS 1.0 (P4) JDK-8312383: Log X509ExtendedKeyManager implementation class name in TLS/SSL connection (P4) JDK-8301381: Verify DTLS 1.0 cannot be negotiated security-libs/javax.security: (P4) JDK-8329213: Better validation for com.sun.security.ocsp.useget option (P4) JDK-8328638: Fallback option for POST-only OCSP requests security-libs/jdk.security: (P3) JDK-8334441: Mark tests in jdk_security_infra group as manual tools: (P4) JDK-8297695: Fix typos in test/langtools files tools/javac: (P4) JDK-8296137: diags-examples.xml is broken (P4) JDK-8290901: Reduce use of -source in langtools tests (P4) JDK-8163229: several regression tests have a main method that is never executed tools/javadoc(tool): (P3) JDK-8290126: Add a check in JavadocTester for "javadoc should not crash" (P4) JDK-8311893: Interactive component with ARIA role 'tabpanel' does not have a programmatically associated name (P4) JDK-8280835: jdk/javadoc/tool/CheckManPageOptions.java depends on source hierarchy (P4) JDK-8286311: remove boilerplate from use of runTests tools/jlink: (P4) JDK-8159927: Add a test to verify JMOD files created in the images do not have debug symbols (P4) JDK-8273774: CDSPluginTest should only expect classes_nocoops.jsa exists on supported 64-bit platforms (P4) JDK-8272916: Copyright year was modified unintentionally in jlink.properties and ImagePluginStack.java (P4) JDK-8264322: Generate CDS archive when creating custom JDK image (P4) JDK-8326591: New test JmodExcludedFiles.java fails on Windows when --with-external-symbols-in-bundles=public is used tools/jpackage: (P3) JDK-8294699: Launcher causes lingering busy cursor (P3) JDK-8325203: System.exit(0) kills the launched 3rd party application (P4) JDK-8320681: [macos] Test tools/jpackage/macosx/MacAppStoreJlinkOptionsTest.java timed out on macOS (P4) JDK-8316563: test tools/jpackage/linux/LinuxResourceTest.java fails on CentOS Linux release 8.5.2111 and Fedora 27 (P4) JDK-8319338: tools/jpackage/share/RuntimeImageTest.java fails with -XX:+UseZGC tools/launcher: (P4) JDK-8268974: GetJREPath() JLI function fails to locate libjava.so if not standard Java launcher is used