Implement -Z (--retrievable_by_cert) option.

Allow specified entity to retrieve credential w/o passphrase (trusted
retrivers)
Conflicts:

	myproxy/src/main/java/org/globus/myproxy/MyProxyCLI.java
Increase Myproxy default proxy key bits to 2048 (as in C version)
Fix myproxy -Z option Conflicts:

	myproxy/src/main/java/org/globus/myproxy/MyProxyCLI.java
fix log message in SigningPolicyParser
Missing dependency
Manual backport of pull request 59 due to git am issues
ssl-proxies: Fix CRL refresh bug

The CertifcationRevocationList class caches CRL information to
reduce the cost of reloading them too often.

The caching logic contains a bug in which any call to the refresh
method will update the timestamp for the last reload even when
CRLs have not been reloaded. The consequence is that if refresh is
called sufficiently often, the CRLs will never be reloaded.

Signed-off-by: Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
ssl-proxies: Fix CRL check race condition

JGlobus uses CRLs as if they were immutable objects, however when
using the Bouncy Castle provider, the ASN.1 parser uses lazy
evaluation internally, which means the X509CRL object is not
thread safe.

Signed-off-by: Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
ssl-proxies: Performance and bug fixes in principal conversion utilities

The CertificateUtil class provides utilities for converting between
Globus DN notation and other string representations.

This patch fixes an O(n^2) problem in toGlobusId() caused by repeatedly
prepending a string to a StringBuffer, thus causing a growing string
to be copied internally.

The patch optimizes toPrincipal() by avoiding the rather expensive
LinkedList and replacing it with an ArrayDeque preallocated to the
correct size.

The patch also replaces the use of StringBuffer with the more efficient
StringBuilder class.

The patch fixes a bug in toPrincipal() in which white space around a
slash appearing inside an attribute value was stripped.

The patch adds unit tests for all three methods.

Signed-off-by: Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
gsi: fix unit tests to work with Java7
Add LICENSE and updated README per issue #71.
Add support for removing one or more ciphers from the list of ciphers available
during GSI handshake.
fix String to principal parsing

The current implementation fail to parse DN with http:// in the value of an attribute

Conflicts:

	ssl-proxies/src/test/java/org/globus/gsi/util/CertificateUtilTest.java
Update GlobusGSSException to avoid boring messages

Quite often, a GlobusGSSException is used to wrap an existing
Exception where it adds no additional meaning.

The result of this problem is Exception messages with many chained
"Failure unspecified at GSS-API level" messages.

In addition, SSLEngine suffers from the same problem, throwing an
SSLException with a message that has no meaning and with a Throwable
(that cause the SSLException) containing the meaningful message.

As a work-around, this patch skips over these semantically-null
Exception messages.

This is really a work-around, but fixing the underlying problems will
take sufficiently long that such a work-around is necessary.
Merge pull request #83 from paulmillar/fix_GlobusGSSException_v2_0

Update GlobusGSSException to avoid boring messages (v2.0)
ssl-proxies: Add support for more RDN keywords

Java's X500Principal class only supports a limited number of
RDN keywords. Real world certificates make use of many more
keywords and bouncy castle and the EMI CANL library support
these. JGlobus 2 does not. This is a regression since JGlobus
1.x.

This patch adds additional mappings when mapping to and from
the X500Principal class. The mappings are copied from bouncy
castle 2.46 and CANL.

Signed-off-by: Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>

Conflicts:
	ssl-proxies/src/test/java/org/globus/gsi/util/CertificateUtilTest.java