Summary: Also including the contribution from Dennis Gu
Reviewed-by: mullan, weijun

7044486: open jdk repos have files with incorrect copyright headers, which can end up in src bundles
Reviewed-by: ohair, trims

Reviewed-by: alanb, chegar
Contributed-by: dbhole@redhat.com

7038175: Expired PKITS certificates causing CertPathBuilder and CertPathValidator regression test failures
Reviewed-by: xuelei

Summary: Pass trust anchors to CRL certification path building, support CRLs without AKID extension.
Reviewed-by: mullan

Reviewed-by: dholmes

Summary: Do not override the previous setting for initial selection.
Reviewed-by: mullan

Summary: loosen the check for version 1 and 2 X.509 certificate
Reviewed-by: mullan, weijun

Summary: Remove KeyUsage checking for trust anchors
Reviewed-by: mullan

Summary: add new BasicReason and improve trust anchor searching method during cert path validation
Reviewed-by: mullan

Reviewed-by: chegar, sherman

Reviewed-by: wetmore

Reviewed-by: xdono

Reviewed-by: wetmore, andrew, vinnie

Reviewed-by: valeriep

Reviewed-by: mullan, weijun, wetmore

Reviewed-by: mullan, weijun

Reviewed-by: darcy, weijun

6948781: CertificateFactory.generateCertificate doesn't throw CertificateException for malformed certificate
Reviewed-by: mullan

Reviewed-by: mullan

Reviewed-by: xuelei

Reviewed-by: xuelei

Reviewed-by: xuelei

Reviewed-by: hawtin

6876158: Remove dependencies on Signer, Certificate, Identity, IdentityScope classes from java.security pkg
Reviewed-by: alanb, mullan

6894461: OCSP Checker should not wrap all Exception as "Unable to send OCSP request."(introduced by #6885667)
Reviewed-by: vinnie, xuelei

Reviewed-by: alanb

Summary: Replace call to PolicyFile.canonPath with its own implementation
Reviewed-by: alanb, mullan

6885667: CertPath/CertPathValidatorTest/bugs/bug6383078 fails on jdk6u18/b02, jdk7/pit/b73 and passes on b72.
Summary: Wrap all OCSP exceptions in CertPathValidatorException so that we can fallback to CRLs, if enabled.
Reviewed-by: dgu, xuelei

Reviewed-by: vinnie, mullan

Reviewed-by: mullan, mchung, anthony

6869739: Cannot check revocation of single certificate without validating the entire chain
Reviewed-by: xuelei

Reviewed-by: mullan, weijun

Reviewed-by: mullan, xuelei

Reviewed-by: mullan

Reviewed-by: vinnie

Summary: make the builder aware of SKID/AKID, break the internal circular dependences
Reviewed-by: mullan

Summary: allocate memory dynamically, keep reading until EOF.
Reviewed-by: weijun

Reviewed-by: weijun

Summary: checking AKID of certificates and CRLs
Reviewed-by: mullan, weijun