8171319: keytool should print out warnings when reading or generating cert/cert req using weak algorithms
Reviewed-by: coffeys

Reviewed-by: xuelei

7187962: sun.security.pkcs11.P11DSAKeyFactory.implTranslatePublicKey doesn't check if params is null
Reviewed-by: valeriep

Reviewed-by: xuelei

6637288: Add OCSP support to PKIX CertPathBuilder implementation
7126011: ReverseBuilder.getMatchingCACerts may throws NPE
Reviewed-by: xuelei

Reviewed-by: darcy, weijun

Summary: fix regression introduced by 6465942
Reviewed-by: vinnie

Summary: Add support to the java.security.cert APIs for determining the reason that a certification path is invalid.
Reviewed-by: vinnie