Support reading PKCS8 CA keys.

Normally we generate and store a PKCS1 RSA private key for the candlepin CA. In
FIPS environments our setup scripts actually create an unencrypted PKCS8 cert.

Bouncycastle reads both and may return different objects.
Remove use of anon ECDH ciphers in tomcat config, add ECDHE.

Removing ECDH ciphers firstly because they should not be used:

http://wiki.openssl.org/index.php/Diffie_Hellman#Diffie-Hellman_in_SSL.2FTLS

These ciphers are disabled in the default JDK JCE provider, but are actually
implemented if you switch to the FIPS compliant SunPKCS11-NSS, at which point
they may be selected for use.

Secondly, they do not actually work with our application. From the link above,
a call to get peer certificate will return null because we're using an
anonymous protocol. This results in seeing no certificates on the HTTP request
object in Candlepin's SSLAuth class.

We are adding in TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA as this is a preferred
cipher. (see more in link above) This cipher *is* implemented in the default
JCE provider for java 6 and 7 both, and *should* be selected automatically.
(if the client supports it, m2crypto does)
Fix reading PKCS1 server certs.
search consumers by on facts

This behavior mirrors that of pool lookup by attributes.
supplied keys are ANDed together, if there are multiple values
for a key, they are considered ORs.  The key is case sensitive,
however values are not.

Fact lookup supports the wildcard *.  It may be used any number
of times in the key or value.
Support colons in the value of KeyValueParameters

Previously we used inputstr.split(":"), now we supply a maximum
of 2 so that values with colons (mac addresses for example) will
be searchable without causing exceptions.
Add index to cp_consumer_facts on cp_consumer_id

This should make it faster to build a consumer object from the
database.
Fix failing spec due to mysql cutting off milliseconds
Use a dependant subquery for facts

I'm not sure why "exists" doesn't work as well as "in", but
in mysql the performance is worse.  This flattens the O() of
facts restricted consumer lookup runtime.
Merge pull request #540 from candlepin/ckozak/fix_mysql_spec_tests

Fix failing spec due to mysql cutting off milliseconds
Fix concurrent hornetq error.

The HornetQ sessions are not thread safe. They represent a single
thread. Updated EventSinkImpl to use a ThreadLocal for the sessions.
Merge pull request #542 from candlepin/hornetq-fix

Fix concurrent hornetq error.
Remove old Fedoras, add F20.
Merge pull request #530 from candlepin/fips

Allow Candlepin To Run on FIPS server / JVM
Make Checkstyle allow longer lines.
Print out the line number and last piece of the logger name for testing

Do not do this in production as determining the line number comes with a
performance penalty.

See http://logback.qos.ch/manual/layouts.html#ClassicPatternLayout
Merge pull request #539 from candlepin/ckozak/facts_search

Find consumers based on fact combinations
Merge pull request #543 from candlepin/awood/tweaks

Allow longer lines in the code, 110 is now possible. @jmrodri is the only dissenter.
Latest strings from zanata
Merge pull request #544 from candlepin/alikins/zanata_2014_3_20

Latest strings from zanata
Revert "Updates for uuid2"

This reverts commit 2e28f539c5f223f17cb8d33f4ed451338b25bbc4.
Also modifies id length of tables created after this commit
from 37 down to 32, and fixes annotations.

Conflicts:
	src/main/resources/db/changelog/changelog-create.xml
	src/main/resources/db/changelog/changelog-update.xml