The full package "com.sun.net.ssl" had been deprecated since JDK 1.4, and the codes have not been updated for a while. There is only two external dependency of the code. They are external JSSE provider (Security.java) and the RSA Signature provider (Signature.java).
This package is not exported in the java.base module, and application cannot use them directly any more. It should be safe to remove them now, and reorg the provider impl code to sun.security.ssl.