Reviewed-by: vinnie

Summary: make the builder aware of SKID/AKID, break the internal circular dependences
Reviewed-by: mullan

Summary: allocate memory dynamically, keep reading until EOF.
Reviewed-by: weijun

Reviewed-by: weijun

Summary: checking AKID of certificates and CRLs
Reviewed-by: mullan, weijun

Summary: remove the mask if certificate revoked
Reviewed-by: mullan

Summary: checking validity and ocsp-nocheck extension.
Reviewed-by: mullan, vinnie

6705872: SecureRandom number init is taking too long on a java.io.tmpdir with a large number of files.
Reviewed-by: xuelei, alanb

Reviewed-by: vinnie

Summary: Update copyright for files that have been modified starting July 2008 to Dec 2008
Reviewed-by: katleman, ohair, tbell

6744888: OCSP validation code should permit some clock skew when checking validity of OCSP responses
Summary: Allow for up to 10 minutes of clock skew when validating OCSP responses
Reviewed-by: vinnie

Summary: fix regression introduced by 6465942
Reviewed-by: vinnie

Summary: Add support to the java.security.cert APIs for determining the reason that a certification path is invalid.
Reviewed-by: vinnie

Summary: Update copyright year for files that have been modified in 2008
Reviewed-by: ohair, tbell

Summary: Do not consider CA target certificates if selector.getBasicConstraints() == -2
Reviewed-by: vinnie

Summary: make supportedExts variable non-static
Reviewed-by: vinnie

Reviewed-by: mullan