[jdk17u-dev] RFR: 8200566: DistributionPointFetcher fails to fetch CRLs if the DistributionPoints field contains more than one DistributionPoint and the first one fails

[Goetz Lindenmaier]

I backport this for parity with 17.0.19-oracle.

The functional code applies clean and works out-of-the-box.

For the test I needed several changes:

Included edits of https://bugs.openjdk.org/browse/JDK-8349501: "Relocate supporting classes in security/testlibrary to test/lib/jdk tree" that was already backported in test.  See second commit.

Further TBSCertList introduced by https://bugs.openjdk.org/browse/JDK-8296901: "Do not create unsigned certificate and CRL" is missing in 17. I reworked
the code similar to other test changes in 8296901.

Then crlExts.setExtension() does not exist in 17. It was improved and renamed by https://bugs.openjdk.org/browse/JDK-8296143: "CertAttrSet's set/get mechanism is not type-safe".

Both later changes are in the third commit.

-------------

Commit messages:
 - Make test fit for 17
 - Parts of JDK-8349501
 - backport e70264654570155a39d0841ce82b9dd52ca0389c

Changes: https://git.openjdk.org/jdk17u-dev/pull/4285/files
  Webrev: https://webrevs.openjdk.org/?repo=jdk17u-dev&pr=4285&range=00
  Issue: https://bugs.openjdk.org/browse/JDK-8200566
  Stats: 253 lines in 2 files changed: 244 ins; 1 del; 8 mod
  Patch: https://git.openjdk.org/jdk17u-dev/pull/4285.diff
  Fetch: git fetch https://git.openjdk.org/jdk17u-dev.git pull/4285/head:pull/4285

PR: https://git.openjdk.org/jdk17u-dev/pull/4285