Reviewed-by: mullan

Reviewed-by: valeriep

Summary: Add new java.security.Principal.implies method
Reviewed-by: alanb

Reviewed-by: alanb, mchung, weijun

Summary: Added com.sun.security.ocsp.timeout system property to control timeout
Reviewed-by: mullan, vinnie
Contributed-by: jason.uh@oracle.com

Reviewed-by: vinnie, xuelei

Reviewed-by: chegar, ksrini

Summary: Fixed initialize(int, SecureRandom) call to not error out when no precomputed params available.
Reviewed-by: vinnie

Reviewed-by: xuelei

Reviewed-by: xuelei

Summary: Add support for DSA parameter generation and OIDs for NSA Suite B algorithms.
Reviewed-by: vinnie

7192896: Reason of CertPathValidatorException should be UNDETERMINED_REVOCATION_STATUS if OCSP request failed
Reviewed-by: xuelei

7187962: sun.security.pkcs11.P11DSAKeyFactory.implTranslatePublicKey doesn't check if params is null
Reviewed-by: valeriep

Reviewed-by: vinnie

Reviewed-by: xuelei

6637288: Add OCSP support to PKIX CertPathBuilder implementation
7126011: ReverseBuilder.getMatchingCACerts may throws NPE
Reviewed-by: xuelei

Reviewed-by: smarks, mduigou, ahgross

7167988: PKIX CertPathBuilder in reverse mode doesn't work if more than one trust anchor is specified
Reviewed-by: mullan

Reviewed-by: sherman

Summary: Add support for SHA-224, SHA224withRSA, SHA224withECDSA, HmacSHA224 and OAEPwithSHA-224AndMGF1Padding.
Reviewed-by: vinnie

Summary: On Mac OS X, align system property "os.arch" with Apple legacy JDKs.  Also, improve os.name string matching by using .contains() method instead of .startsWith(). This fix spans multiple repositories.
Reviewed-by: dcubed, phh, ohair, katleman

7147830: NullPointerException in java.security.Policy.implies() when the ProtectionDomain has a null code sou
Reviewed-by: vinnie

Summary: Also including the contribution from Dennis Gu
Reviewed-by: mullan, weijun

Reviewed-by: weijun

Reviewed-by: xuelei

Reviewed-by: xuelei, mullan

6953295: Move few sun.security.{util, x509, pkcs} classes used by keytool/jarsigner to another package
Reviewed-by: mchung

Summary: to use new InternalError constructor with cause chainning
Reviewed-by: alanb, ksrini, xuelei, neugens
Contributed-by: sebastian.sickelmann@gmx.de

Reviewed-by: weijun

Reviewed-by: alanb, weijun

Reviewed-by: xuelei, mullan
Contributed-by: alexandre.boulgakov@oracle.com

7044486: open jdk repos have files with incorrect copyright headers, which can end up in src bundles
Reviewed-by: ohair, trims

Reviewed-by: alanb, chegar
Contributed-by: dbhole@redhat.com

7038175: Expired PKITS certificates causing CertPathBuilder and CertPathValidator regression test failures
Reviewed-by: xuelei

Summary: Pass trust anchors to CRL certification path building, support CRLs without AKID extension.
Reviewed-by: mullan

Reviewed-by: dholmes

Summary: Do not override the previous setting for initial selection.
Reviewed-by: mullan

Summary: loosen the check for version 1 and 2 X.509 certificate
Reviewed-by: mullan, weijun

Summary: Remove KeyUsage checking for trust anchors
Reviewed-by: mullan

Summary: add new BasicReason and improve trust anchor searching method during cert path validation
Reviewed-by: mullan