Reviewed-by: mullan

Reviewed-by: vinnie, xuelei

Reviewed-by: vinnie

Reviewed-by: mullan

Reviewed-by: xuelei

Reviewed-by: dholmes, mchung

Reviewed-by: chegar

Summary: This restriction is applied via the Java Security property, "jdk.certpath.disabledAlgorithms". This will impact providers that adhere to this security property.
Reviewed-by: mullan

Reviewed-by: chegar, alanb
Contributed-by: NMark Sheppard <mark.sheppard@oracle.com>

Reviewed-by: vinnie, xuelei

Reviewed-by: xuelei

6637288: Add OCSP support to PKIX CertPathBuilder implementation
7126011: ReverseBuilder.getMatchingCACerts may throws NPE
Reviewed-by: xuelei

7020531: test: java/security/cert/CertificateFactory/openssl/OpenSSLCert.java file not closed after run
Reviewed-by: alanb, smarks

Reviewed-by: vinnie

Reviewed-by: mbykov

Reviewed-by: darcy, weijun

6948781: CertificateFactory.generateCertificate doesn't throw CertificateException for malformed certificate
Reviewed-by: mullan

Reviewed-by: xuelei

Reviewed-by: ohair

Summary: make the builder aware of SKID/AKID, break the internal circular dependences
Reviewed-by: mullan

Summary: create regression test cases on name constraints
Reviewed-by: weijun

Summary: checking AKID of certificates and CRLs
Reviewed-by: mullan, weijun

Summary: remove the mask if certificate revoked
Reviewed-by: mullan

Reviewed-by: vinnie

Reviewed-by: vinnie

Summary: Add support to the java.security.cert APIs for determining the reason that a certification path is invalid.
Reviewed-by: vinnie

Summary: Do not consider CA target certificates if selector.getBasicConstraints() == -2
Reviewed-by: vinnie