Reviewed-by: mullan

Summary: Added com.sun.security.ocsp.timeout system property to control timeout
Reviewed-by: mullan, vinnie
Contributed-by: jason.uh@oracle.com

Reviewed-by: vinnie, xuelei

Reviewed-by: xuelei

Reviewed-by: xuelei

7192896: Reason of CertPathValidatorException should be UNDETERMINED_REVOCATION_STATUS if OCSP request failed
Reviewed-by: xuelei

7187962: sun.security.pkcs11.P11DSAKeyFactory.implTranslatePublicKey doesn't check if params is null
Reviewed-by: valeriep

Reviewed-by: vinnie

Reviewed-by: xuelei

6637288: Add OCSP support to PKIX CertPathBuilder implementation
7126011: ReverseBuilder.getMatchingCACerts may throws NPE
Reviewed-by: xuelei

7167988: PKIX CertPathBuilder in reverse mode doesn't work if more than one trust anchor is specified
Reviewed-by: mullan

Summary: Also including the contribution from Dennis Gu
Reviewed-by: mullan, weijun

Reviewed-by: weijun

Reviewed-by: xuelei

6953295: Move few sun.security.{util, x509, pkcs} classes used by keytool/jarsigner to another package
Reviewed-by: mchung

Summary: to use new InternalError constructor with cause chainning
Reviewed-by: alanb, ksrini, xuelei, neugens
Contributed-by: sebastian.sickelmann@gmx.de

Reviewed-by: weijun

Reviewed-by: alanb, weijun

Reviewed-by: xuelei, mullan
Contributed-by: alexandre.boulgakov@oracle.com

7044486: open jdk repos have files with incorrect copyright headers, which can end up in src bundles
Reviewed-by: ohair, trims

7038175: Expired PKITS certificates causing CertPathBuilder and CertPathValidator regression test failures
Reviewed-by: xuelei

Summary: Pass trust anchors to CRL certification path building, support CRLs without AKID extension.
Reviewed-by: mullan

Summary: Do not override the previous setting for initial selection.
Reviewed-by: mullan

Summary: loosen the check for version 1 and 2 X.509 certificate
Reviewed-by: mullan, weijun

Summary: Remove KeyUsage checking for trust anchors
Reviewed-by: mullan

Summary: add new BasicReason and improve trust anchor searching method during cert path validation
Reviewed-by: mullan

Reviewed-by: mullan, weijun, wetmore

Reviewed-by: mullan, weijun

Reviewed-by: darcy, weijun

Reviewed-by: mullan

Reviewed-by: xuelei

6894461: OCSP Checker should not wrap all Exception as "Unable to send OCSP request."(introduced by #6885667)
Reviewed-by: vinnie, xuelei

6885667: CertPath/CertPathValidatorTest/bugs/bug6383078 fails on jdk6u18/b02, jdk7/pit/b73 and passes on b72.
Summary: Wrap all OCSP exceptions in CertPathValidatorException so that we can fallback to CRLs, if enabled.
Reviewed-by: dgu, xuelei

Reviewed-by: vinnie, mullan

6869739: Cannot check revocation of single certificate without validating the entire chain
Reviewed-by: xuelei

Reviewed-by: mullan, weijun

Reviewed-by: mullan, xuelei

Reviewed-by: vinnie

Summary: make the builder aware of SKID/AKID, break the internal circular dependences
Reviewed-by: mullan

Summary: allocate memory dynamically, keep reading until EOF.
Reviewed-by: weijun