RFR: 8344397: Remove Security Manager dependencies from java.security and sun.security packages [v2]

[Weijun Wang]

On Wed, 27 Nov 2024 19:59:24 GMT, Sean Mullan <mullan at openjdk.org> wrote:

>> Now that JEP 486 has been integrated, `java.security` and `sun.security` implementation dependencies on `System.getSecurityManager` and `AccessController.doPrivileged` can be removed. 
>> 
>> This should cover most of the remaining cleanup in the security libraries area. A couple of the `sun.security.action` classes can't be removed yet, as well as a few constants in `sun.security.util.SecurityConstants` and internal `ProtectionDomain` methods until dependencies are removed in other areas. Some additional test cleanup can also be done later.
>
> Sean Mullan has updated the pull request incrementally with one additional commit since the last revision:
> 
>   Removal of unused fields from AccessControlContext - no longer needed now that VM cleanup is done.

`OCSP.java` and `URICertStore` in `sun/security/provider/certpath` still using `GetPropertyAction`.

src/java.base/share/classes/java/security/Provider.java line 1:

> 1: /*

1293: // use super() to avoid permission check and other processing

No need to mention permission check.

-------------

PR Review: https://git.openjdk.org/jdk/pull/22418#pullrequestreview-2472934436
PR Review Comment: https://git.openjdk.org/jdk/pull/22418#discussion_r1865997430