Reviewed-by: xuelei

Summary: remove the mask if certificate revoked
Reviewed-by: mullan

Summary: checking validity and ocsp-nocheck extension.
Reviewed-by: mullan, vinnie

Reviewed-by: valeriep

Summary: Update copyright for files that have been modified in 2009, up to 03/09
Reviewed-by: katleman, tbell, ohair

Reviewed-by: xuelei

6705872: SecureRandom number init is taking too long on a java.io.tmpdir with a large number of files.
Reviewed-by: xuelei, alanb

6812738: SSL stress test with GF leads to 32 bit max process size in less than 5 minutes with PCKS11 provider
Summary: Removed finalize() and add more error handling to native code
Reviewed-by: vinnie

Summary: A null hostname should be regarded as a loopback address.
Reviewed-by: weijun

Reviewed-by: xuelei, mullan

Reviewed-by: xuelei

Reviewed-by: xuelei

Reviewed-by: xuelei

Reviewed-by: vinnie

Summary: do not try to read zero byte from a InputStream, and do always return immediately for zero byte reading in a InputStream implementation.
Reviewed-by: weijun

Summary: replace sun.misc.Cache with sun.security.util.Cache
Reviewed-by: weijun

4313887: New I/O: Improved filesystem interface
4607272: New I/O: Support asynchronous I/O
Reviewed-by: sherman, chegar

Reviewed-by: valeriep

Reviewed-by: valeriep

Reviewed-by: xuelei

6750401: SSL stress test with GF leads to 32 bit max process size in less than 5 minutes,with PCKS11 provider
Summary: This is the JSSE portion of the fix. Main part is in PKCS11.
Reviewed-by: valeriep, xuelei

Summary: Update copyright for files that have been modified starting July 2008 to Dec 2008
Reviewed-by: katleman, ohair, tbell

Summary: SSLServerSocketImpl.checkEnabledSuites() does not release the temporary socket properly
Reviewed-by: wetmore, weijun

Summary: the inputStream.read(byte[], int, 0) is not always return zero.
Reviewed-by: wetmore, weijun

Reviewed-by: valeriep

6744888: OCSP validation code should permit some clock skew when checking validity of OCSP responses
Summary: Allow for up to 10 minutes of clock skew when validating OCSP responses
Reviewed-by: vinnie

Summary: fix regression introduced by 6465942
Reviewed-by: vinnie

Summary: Add support to the java.security.cert APIs for determining the reason that a certification path is invalid.
Reviewed-by: vinnie

Reviewed-by: xuelei

Reviewed-by: mullan

Reviewed-by: mullan, xuelei

Reviewed-by: vinnie, wetmore

Summary: Update copyright year for files that have been modified in 2008
Reviewed-by: ohair, tbell

Summary: Do not consider CA target certificates if selector.getBasicConstraints() == -2
Reviewed-by: vinnie

Summary: make supportedExts variable non-static
Reviewed-by: vinnie

6711509: PolicyTool is misspelling Runtime permission - 'setSecurityManager' entry in the policy file
Reviewed-by: wetmore, mullan

Summary: checking certificate key length for RSA_EXPORT key exchange
Reviewed-by: wetmore, mullan

Reviewed-by: mullan

6524501: inconsistency with PKCS#11 spec - 0-value flags in CK_SLOT_INFO struct returned by C_GetSlotInfo()
Reviewed-by: mullan

Summary: make the critical extension known to end entity checker.
Reviewed-by: wetmore, mullan