Summary: the interim fix disables TLS/SSL renegotiation
Reviewed-by: mullan, chegar, wetmore

Summary: Add support for reordering out-of-order certificate chains
Reviewed-by: vinnie, xuelei

Summary: Move two static fields from SecurityConstants to javax.security.auth.Subject
Reviewed-by: mullan

Reviewed-by: valeriep

Reviewed-by: valeriep

Reviewed-by: valeriep

6894461: OCSP Checker should not wrap all Exception as "Unable to send OCSP request."(introduced by #6885667)
Reviewed-by: vinnie, xuelei

Reviewed-by: alanb, xuelei

Reviewed-by: alanb

Reviewed-by: mullan

Reviewed-by: valeriep, xuelei

Reviewed-by: michaelm, alanb

Reviewed-by: vinnie, mullan

Summary: Replace call to PolicyFile.canonPath with its own implementation
Reviewed-by: alanb, mullan

6885667: CertPath/CertPathValidatorTest/bugs/bug6383078 fails on jdk6u18/b02, jdk7/pit/b73 and passes on b72.
Summary: Wrap all OCSP exceptions in CertPathValidatorException so that we can fallback to CRLs, if enabled.
Reviewed-by: dgu, xuelei

Reviewed-by: vinnie, mullan

Reviewed-by: wetmore, alanb

Reviewed-by: mullan, mchung, anthony

Reviewed-by: xuelei, wetmore

Reviewed-by: valeriep, mullan

Reviewed-by: xuelei, mullan

Reviewed-by: xuelei, alanb

Reviewed-by: wetmore

6869739: Cannot check revocation of single certificate without validating the entire chain
Reviewed-by: xuelei

Reviewed-by: vinnie

Reviewed-by: mullan

Reviewed-by: valeriep, ohair

Reviewed-by: mullan, weijun

Reviewed-by: mullan, xuelei

Reviewed-by: mullan

Reviewed-by: mullan

Reviewed-by: alanb, mullan, wetmore

Reviewed-by: wetmore

Reviewed-by: valeriep

Reviewed-by: valeriep

Reviewed-by: mullan

Reviewed-by: valeriep, vinnie

Reviewed-by: mullan

Reviewed-by: mullan

Reviewed-by: xuelei