Use 'sql:' prefix in nss.fips.cfg as F35+ no longer ship the legacy
Resolves: rhbz#2023537

Drop JDK-8272332 patch now included upstream.
Resolves: rhbz#2013846

October CPU update to jdk 17.0.1+12
Dropped commented-out source line
Resolves: rhbz#2013846

Extend LTS check to exclude EPEL.
Related: rhbz#2013846

Set LTS designator.
Related: rhbz#2013846

alternatives creation moved to posttrans
Thus fixing the old reisntall issue:
https://bugzilla.redhat.com/show_bug.cgi?id=1200302
https://bugzilla.redhat.com/show_bug.cgi?id=1976053
Resolves: rhbz#2008206

Patch syslookup.c so it actually has some code to be compiled into libsyslookup
Related: rhbz#2013846

Allow plain key import to be disabled with -Dcom.redhat.fips.plainKeySupport=false
Resolves: rhbz#1994682

Add patch to allow plain key import.
Resolves: rhbz#1994682

Update release notes to document the major changes between OpenJDK 11 & 17.
Resolves: rhbz#2000925

Update to jdk-17+35, also known as jdk-17-ga.
Switch to GA mode.
Add JDK-8272332 fix so we actually link against HarfBuzz.
Resolves: rhbz#2000925

Extend the default security policy to accomodate PKCS11 accessing jdk.internal.access.
Resolves: rhbz#1997359

Fix unused function compiler warning found in systemconf.c
Related: rhbz#1995889

Add patch to login to the NSS software token when in FIPS mode.
Resolves: rhbz#1997359

Add patch to disable non-FIPS crypto in the SUN and SunEC security providers.
Resolves: rhbz#1995889

Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
Related: rhbz#1995889