Make trustmanager reload CRLs by default.  Fixes #80.
Add better error message when certificate chain verification fails
Fix GlobusGSSContextTest

The GlobusGSSContextTest relies on having a credential, which then relies
on X509Credential class not having a cached copy of such a credential.
However, it does not ensure there is no such cached credential.

Since multiple tests (and test-suites) are run within the same JVM
instance, the effect is that, if another test-suite caches a
(deliberately) invalid, self-signed certificate then this cached
copy is returned instead of the expected certificate.

This patch fixes this problem by ensuring the cache is cleared.  It
introduces a (negliable) overhead as the cache is flushed between
tests; however, the additional robustness justifies this cost.
Add better error message when certificate chain verification fails
Fix error message and list implementation, as suggested by code review.
ssl-proxies: Improve RFC 3820 compliance of key usage check

Each certificate in a certificate chain can have a key usage field.
The existing JGlobus code checks that each proxy certificate does not
have more key usages than the issuing certificate. This seems like
a sensible check, however it conflicts with the algorithm described
in RFC 3820.

The RFC states that all key usage (and extended key usage) extensions
of all proxy certificates and the EEC must be collected in a list and
the effective key usage computed by the intersection of all extensions:

   *  If a certificate is a proxy certificate with a policy other than
      id-ppl-independent, the effective key usage and extended key usage
      functionality of the proxy certificate is the intersection of the
      functionality of those extensions in the proxy certificate and the
      effective key usage functionality of the proxy issuer.

We have observed real-world proxy certificates that failed with the
existing check in JGlobus 2, even though they are valid proxies
according to the RFC. These proxies also work with JGlobus 1.
Merge pull request #90 from gbehrmann/fix/2.0/keyusage

ssl-proxies: Improve RFC 3820 compliance of key usage check
Merge pull request #88 from paulmillar/fix_GlobusGSSContextTest

Fix GlobusGSSContextTest
Merge pull request #86 from paulmillar/better-error-msg_v2.0

Add better error message when certificate chain verification fails
Merge pull request #84 from bbockelm/v2.0-crl-updates

Make trustmanager reload CRLs by default.  Fixes #80.
ssl-proxies: Fix several race conditions

In particular the race in CertificateIOUtil has caused signing policies
be registered with the wrong hash. This in turn causes certificates
from the corresponding CA to be rejected.

(cherry picked from commit 1a0952b493a62e30dfe84937ec76cca00a8b6095)
Merge pull request #96 from gbehrmann/fix/v2.0/races-signing-policy

ssl-proxies: Fix several race conditions
Fix SCM URL per newer version of maven.
Try newer version of maven release to see if it clears up the git issues.
Attempt fix of SCM URL for maven-release-plugin 2.2.

Seems to want the older-style of git URL.
[maven-release-plugin] prepare release v2.0.6
Include sonatype fixes from 2.0.5.