Dogtag-pki

This version of JSS features many enhancements.

- HSM KeyWrap support
- An extended JSS Provider
- OCSP support in SSLSocket and SSLServerSocket
- Internal improvements to JNI handling
- Various small bug fixes and enhancements

A special thanks to external contributor emaldona for his contributions
around JDK9+ deprecations.

This version of JSS has a security fix:

- CVE-2019-14823: Fix root certificate validation when using Leaf and
Chain OCSP mode. Note that unlike the v4.6.x or v4.4.x series, the
previous v4.5.3 release was not impacted.

This version of JSS also has a few enhancements over v4.5.3:

- Backporting Dessa's JUnit CMake typo fix
- Adding HSM support for PKCS11 AES KeyWrap/Padding (by ladycfu)
- OCSP checking for leaf and chain (by jmagne)

Thanks to all who contributed to this release!

This release brings two useful improvements:

- Required changes to allow TomcatJSS to operate in FIPS mode on Tomcat v8.5+.
- Common code to support dropping `nuxwdog`, using `systemd` unit files instead.

A complete list of changes since `v4.5.2` [is here](https://github.com/dogtagpki/jss/compare/v4.5.2...v4.5.3).

This release finishes the move of the `netscape.security` classes [from PKI](https://github.com/dogtagpki/pki/tree/master/base/util/src/netscape/security) into JSS under the `org.mozilla.jss.netscape.security` [namespace](https://github.com/dogtagpki/jss/tree/master/org/mozilla/jss/netscape/security). This release mostly exists to enable PKI to rely on the new class locations.

This release also features minor build-only improvements for a cleaner compile.

The Fedora spec files can be found [on `src.fedoraproject.org`](https://src.fedoraproject.org/rpms/jss) for [`f28`](https://src.fedoraproject.org/rpms/jss/tree/f28), [`f29`](https://src.fedoraproject.org/rpms/jss/tree/f29), and [`rawhide (f30)`](https://src.fedoraproject.org/rpms/jss/tree/master). Koji has the [`f28`](https://koji.fedoraproject.org/koji/taskinfo?taskID=32029344), [`f29`](https://koji.fedoraproject.org/koji/taskinfo?taskID=32029350), and [`rawhide (f30)`](https://koji.fedoraproject.org/koji/taskinfo?taskID=32029340) builds. Karma is appreciated on the [`f28`](https://bodhi.fedoraproject.org/updates/FEDORA-2019-a9f84d8cf6) and [`f29`](https://bodhi.fedoraproject.org/updates/FEDORA-2019-94922829c1) update requests in Bodhi.

See what's changed since [`v4.5.1`](https://github.com/dogtagpki/jss/compare/v4.5.1...v4.5.2) in the commit log or have a look at [PRs tagged for `v4.5.2`](https://github.com/dogtagpki/jss/pulls?utf8=%E2%9C%93&q=is%3Apr+milestone%3A4.5.2).

Several notable changes have been made since 4.5.0:

- A new CMake build system has been introduced to replace coreconf,
- Support for OpenJDK versions 8 through 11 has been added,
- Reproducible JAR builds,
- Minor DER encoding issues have been fixed,
- Synced supported TLS ciphersuites with NSS,
- Introduced PKCS11 Constants in JSS to replace Sun constants,
- And various other minor changes.

Thanks to everyone who has contributed since 4.5.0!

See [the comparison](https://github.com/dogtagpki/jss/compare/v4.5.0...v4.5.1) for more detailed information about what changed since 4.5.0, or look at the [merged PRs tagged for the v4.5.1 milestone](https://github.com/dogtagpki/jss/pulls?q=is%3Apr+is%3Aclosed+milestone%3A4.5.1).

See [changes since 4.5.0-b1](https://github.com/dogtagpki/jss/compare/v4.5.0-b1...v4.5.0).

Fedora 29 Source Package:
- [jss-4.5.0-1.fc29](https://src.fedoraproject.org/rpms/jss/tree/eec3e6f0c8e38044c7fd9b8852749cf1960bc3a0)

Fedora 28 Source Package:
- [jss-4.5.0-1.fc28](https://src.fedoraproject.org/rpms/jss/tree/04ae5087527fc7da634172adf3910948618676f9)