Reviewed-by: mullan, weijun, wetmore

Reviewed-by: mullan, weijun

Reviewed-by: darcy, weijun

6948781: CertificateFactory.generateCertificate doesn't throw CertificateException for malformed certificate
Reviewed-by: mullan

Reviewed-by: mullan

Reviewed-by: xuelei

Reviewed-by: xuelei

Reviewed-by: xuelei

Reviewed-by: hawtin

6876158: Remove dependencies on Signer, Certificate, Identity, IdentityScope classes from java.security pkg
Reviewed-by: alanb, mullan

6894461: OCSP Checker should not wrap all Exception as "Unable to send OCSP request."(introduced by #6885667)
Reviewed-by: vinnie, xuelei

Reviewed-by: alanb

Summary: Replace call to PolicyFile.canonPath with its own implementation
Reviewed-by: alanb, mullan

6885667: CertPath/CertPathValidatorTest/bugs/bug6383078 fails on jdk6u18/b02, jdk7/pit/b73 and passes on b72.
Summary: Wrap all OCSP exceptions in CertPathValidatorException so that we can fallback to CRLs, if enabled.
Reviewed-by: dgu, xuelei

Reviewed-by: vinnie, mullan

Reviewed-by: mullan, mchung, anthony

6869739: Cannot check revocation of single certificate without validating the entire chain
Reviewed-by: xuelei

Reviewed-by: mullan, weijun

Reviewed-by: mullan, xuelei

Reviewed-by: mullan

Reviewed-by: vinnie

Summary: make the builder aware of SKID/AKID, break the internal circular dependences
Reviewed-by: mullan

Summary: allocate memory dynamically, keep reading until EOF.
Reviewed-by: weijun

Reviewed-by: weijun

Summary: checking AKID of certificates and CRLs
Reviewed-by: mullan, weijun

Summary: remove the mask if certificate revoked
Reviewed-by: mullan

Summary: checking validity and ocsp-nocheck extension.
Reviewed-by: mullan, vinnie

6705872: SecureRandom number init is taking too long on a java.io.tmpdir with a large number of files.
Reviewed-by: xuelei, alanb

Reviewed-by: vinnie

Summary: Update copyright for files that have been modified starting July 2008 to Dec 2008
Reviewed-by: katleman, ohair, tbell

6744888: OCSP validation code should permit some clock skew when checking validity of OCSP responses
Summary: Allow for up to 10 minutes of clock skew when validating OCSP responses
Reviewed-by: vinnie

Summary: fix regression introduced by 6465942
Reviewed-by: vinnie

Summary: Add support to the java.security.cert APIs for determining the reason that a certification path is invalid.
Reviewed-by: vinnie

Summary: Update copyright year for files that have been modified in 2008
Reviewed-by: ohair, tbell

Summary: Do not consider CA target certificates if selector.getBasicConstraints() == -2
Reviewed-by: vinnie

Summary: make supportedExts variable non-static
Reviewed-by: vinnie

Reviewed-by: mullan