Update BCJSSE entries for 1.65
@@ -32,12 +32,16 @@ <h3>2.1.2 Defects Fixed</h3>
<li>ChaCha20Poly1305 could fail for small updates when used via the provider. This has been fixed.</li>
<li>Properties.getPropertyValue could ignore system property when other local overrides set. This has been fixed.</li>
<li>The entropy gathering thread was not running in daemon mode, meaning there could be a delay in an application shutting down due to it. This has been fixed.</li>
+<li>BCJSSE: TrustManager now tolerates having no trusted certificates.</li>
<li>BCJSSE: Choice of credentials and signing algorithm now respect the peer's signature_algorithms extension properly.</li>
<li>BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.</li>
</ul>
<h3>2.1.3 Additional Features and Functionality</h3>
<ul>
<li>LMS and HSS (RFC 8554) support has been added to the low level library and the PQC provider.</li>
+<li>BCJSSE: BC API now supports explicitly specifying the session to resume.</li>
+<li>BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is negotiated (except in FIPS mode).</li>
+<li>BCJSSE: Added support for extended_master_secret system properties: jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption, jdk.tls.useExtendedMasterSecret .</li>
<li>BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is negotiated (except in FIPS mode).</li>
<li>BCJSSE: KeyManager and TrustManager now check algorithm constraints for keys and certificate chains.</li>
<li>BCJSSE: KeyManager selection of server credentials now prefers matching SNI hostname (if any).</li>
