Summary: Add support for DSA parameter generation and OIDs for NSA Suite B algorithms.
Reviewed-by: vinnie

7192896: Reason of CertPathValidatorException should be UNDETERMINED_REVOCATION_STATUS if OCSP request failed
Reviewed-by: xuelei

7187962: sun.security.pkcs11.P11DSAKeyFactory.implTranslatePublicKey doesn't check if params is null
Reviewed-by: valeriep

Reviewed-by: vinnie

Reviewed-by: xuelei

6637288: Add OCSP support to PKIX CertPathBuilder implementation
7126011: ReverseBuilder.getMatchingCACerts may throws NPE
Reviewed-by: xuelei

7167988: PKIX CertPathBuilder in reverse mode doesn't work if more than one trust anchor is specified
Reviewed-by: mullan

Reviewed-by: sherman

Summary: Add support for SHA-224, SHA224withRSA, SHA224withECDSA, HmacSHA224 and OAEPwithSHA-224AndMGF1Padding.
Reviewed-by: vinnie

Summary: On Mac OS X, align system property "os.arch" with Apple legacy JDKs.  Also, improve os.name string matching by using .contains() method instead of .startsWith(). This fix spans multiple repositories.
Reviewed-by: dcubed, phh, ohair, katleman

7147830: NullPointerException in java.security.Policy.implies() when the ProtectionDomain has a null code sou
Reviewed-by: vinnie

Summary: Also including the contribution from Dennis Gu
Reviewed-by: mullan, weijun

Reviewed-by: weijun

Reviewed-by: xuelei

Reviewed-by: xuelei, mullan

6953295: Move few sun.security.{util, x509, pkcs} classes used by keytool/jarsigner to another package
Reviewed-by: mchung

Summary: to use new InternalError constructor with cause chainning
Reviewed-by: alanb, ksrini, xuelei, neugens
Contributed-by: sebastian.sickelmann@gmx.de

Reviewed-by: weijun

Reviewed-by: alanb, weijun

Reviewed-by: xuelei, mullan
Contributed-by: alexandre.boulgakov@oracle.com

7044486: open jdk repos have files with incorrect copyright headers, which can end up in src bundles
Reviewed-by: ohair, trims

Reviewed-by: alanb, chegar
Contributed-by: dbhole@redhat.com

7038175: Expired PKITS certificates causing CertPathBuilder and CertPathValidator regression test failures
Reviewed-by: xuelei

Summary: Pass trust anchors to CRL certification path building, support CRLs without AKID extension.
Reviewed-by: mullan

Reviewed-by: dholmes

Summary: Do not override the previous setting for initial selection.
Reviewed-by: mullan

Summary: loosen the check for version 1 and 2 X.509 certificate
Reviewed-by: mullan, weijun

Summary: Remove KeyUsage checking for trust anchors
Reviewed-by: mullan

Summary: add new BasicReason and improve trust anchor searching method during cert path validation
Reviewed-by: mullan

Reviewed-by: chegar, sherman

Reviewed-by: wetmore

Reviewed-by: xdono

Reviewed-by: wetmore, andrew, vinnie

Reviewed-by: valeriep

Reviewed-by: mullan, weijun, wetmore

Reviewed-by: mullan, weijun

Reviewed-by: darcy, weijun

6948781: CertificateFactory.generateCertificate doesn't throw CertificateException for malformed certificate
Reviewed-by: mullan

Reviewed-by: mullan

Reviewed-by: xuelei