Update release notes to document the major changes between OpenJDK 11 & 17.
Resolves: rhbz#2003072

Update to jdk-17+35, also known as jdk-17-ga.
Switch to GA mode.
Add JDK-8272332 fix so we actually link against HarfBuzz.
Resolves: rhbz#2003072
Resolves: rhbz#2004078

Extend the default security policy to accomodate PKCS11 accessing jdk.internal.access.
Resolves: rhbz#1996182

Fix unused function compiler warning found in systemconf.c
Related: rhbz#1995150

Add patch to login to the NSS software token when in FIPS mode.
Resolves: rhbz#1996182

Add patch to disable non-FIPS crypto in the SUN and SunEC security providers.
Resolves: rhbz#1995150

Minor code cleanups on FIPS detection patch and check for SECMOD_GetSystemFIPSEnabled in configure.
Remove unneeded Requires on NSS as it will now be dynamically linked and detected by RPM.
Related: rhbz#1995150

Detect FIPS using SECMOD_GetSystemFIPSEnabled in the new libsystemconf JDK library.
Related: rhbz#1995150

Update RH1655466 FIPS patch with changes in OpenJDK 8 version.
SunPKCS11 runtime provider name is a concatenation of "SunPKCS11-" and the name in the config file.
Change nss.fips.cfg config name to "NSS-FIPS" to avoid confusion with nss.cfg.
No need to substitute path to nss.fips.cfg as java.security file supports a java.home variable.
Disable FIPS mode support unless com.redhat.fips is set to "true".
Enable alignment with FIPS crypto policy by default (-Dcom.redhat.fips=false to disable).
Add explicit runtime dependency on NSS for the PKCS11 provider in FIPS mode
Move setup of JavaSecuritySystemConfiguratorAccess to Security class so it always occurs (RH1915071)
Related: rhbz#1995150

Support the FIPS mode crypto policy (RH1655466)
Use appropriate keystore types when in FIPS mode (RH1818909)
Disable TLSv1.3 when the FIPS crypto policy and the NSS-FIPS provider are in use (RH1860986)
Related: rhbz#1995150

Update to jdk-17+33, including JDWP fix and July 2021 CPU
Resolves: rhbz#1959487

Use the "reverse" build loop (debug first) as the main and only build loop to get more diagnostics.
Remove restriction on disabling product build, as debug packages no longer have javadoc packages.
Resolves: rhbz#1959487

Fix patch rh1648249-add_commented_out_nss_cfg_provider_to_java_security.patch which made the SunPKCS provider show up again
Resolves: rhbz#1959487

Re-enable TestSecurityProperties after inclusion of PR3695
Resolves: rhbz#1959487

Add PR3695 to allow the system crypto policy to be turned off
Resolves: rhbz#1959487

Remove boot JDKs in favour of OpenJDK 17 build now in the buildroot.
Resolves: rhbz#1959487