Reviewed-by: weijun, rhalade, mschoene

Reviewed-by: mullan

Reviewed-by: mullan

Reviewed-by: mullan

Reviewed-by: mullan

Reviewed-by: mullan

8031825: OCSP client can't find responder cert if it uses a different subject key id algorithm than responderID
Reviewed-by: vinnie, xuelei

Reviewed-by: xuelei, mullan, weijun

Reviewed-by: mullan, xuelei

Reviewed-by: vinnie, xuelei

Reviewed-by: vinnie

Reviewed-by: xuelei

8013228: Create new system properties to control allowable OCSP clock skew and CRL connection timeout
Reviewed-by: vinnie

Reviewed-by: vinnie

6637288: Add OCSP support to PKIX CertPathBuilder implementation
7126011: ReverseBuilder.getMatchingCACerts may throws NPE
Reviewed-by: xuelei

Reviewed-by: xuelei, mullan
Contributed-by: alexandre.boulgakov@oracle.com

Reviewed-by: mullan, weijun, wetmore

Reviewed-by: darcy, weijun

Reviewed-by: xuelei

6869739: Cannot check revocation of single certificate without validating the entire chain
Reviewed-by: xuelei

Reviewed-by: mullan, weijun

Reviewed-by: vinnie

Summary: checking validity and ocsp-nocheck extension.
Reviewed-by: mullan, vinnie

Summary: Update copyright for files that have been modified starting July 2008 to Dec 2008
Reviewed-by: katleman, ohair, tbell

6744888: OCSP validation code should permit some clock skew when checking validity of OCSP responses
Summary: Allow for up to 10 minutes of clock skew when validating OCSP responses
Reviewed-by: vinnie