The following algorithms have been implemented in SunPKCS11 provider (based on PKCS#11 v2.40 mechanisms):
A minor API change is proposed to expose TLS ProtocolVersion constants (SSL30, TLS10, TLS11, etc.) from java.base to jdk.crypto.cryptoki module. This allows to remove hardcoded TLS int constants in SunPKCS11 classes (required when implementing "Tls"-like algorithms).
A test case is included with the following:
* TLS 1.2 communication using SunPKCS11 + NSS (in FIPS mode)