Fix BZ 69866 - Use separate CertificateVerifier class to avoid strong JNI reference to OpenSSLContexts

[aogburn]

https://bz.apache.org/bugzilla/show_bug.cgi?id=69866

[ChristopherSchultz]

LGTM, I'm just running the CI before merging.

Please run "ant validate" next time to make sure CheckStyle is happy.

[markt-asf]

Either OpenSSLContext.certificates(byte[][]) is duplicated (in which case it should shared instead) or it becomes unused in which case it should be removed.

[aogburn]

Either OpenSSLContext.certificates(byte[][]) is duplicated (in which case it should shared instead) or it becomes unused in which case it should be removed.

D'oh, it's now unused there so it was my intention to remove it. Thanks for catching that. Fixed.

[markt-asf]

There were some follow-up changes required. See: c19b057
I'm seeing some possibly unrelated test failures. I want to look into those before back-porting this fix.

[markt-asf]

They were unrelated (and have been fixed). This fix has been back-ported.