When a room occupant sends an availability update to a host in an
Openfire cluster, other users cannot join the room from other hosts in
the cluster. The availability update causes the other hosts to lose an
occupant's role and affiliation. New occupants encounter an NPE when
joining and are prevented from joining the room. Specifically, the NPE
occurs when Openfire attempts to send initial presences for current
occupants.

Remote hosts in the cluster lose the occupant's association because the
local room simply broadcasts the presence packet for the occupant's
availability update. Because it is from the client, this packet does not
have the occupant's role or affiliation. The remote hosts treat the
presence packet as the occupant's presence without modification.

This fix changes the order in which Openfire handles an availability
update. First, it updates its local view of an occupant's presence. This
populates the correct association. Then, it broadcasts the updated
presence to remote hosts in the cluster.

XEP-0016 error messages should set correct from attribute (the sender).

See XEP-0016, example 50.

OF-1063: Prevent TimerThread from exiting

Do not allow TimerThread to exit when the server becomes heavily loaded,
preferring instead to use the caller's thread to execute a scheduled
task when needed. This may result in a temporary slowdown, but is better
than a hard failure which requires a restart of the server.

OF-1057: Upgrade Jetty to 9.2.14

This commit moves jetty 9.2.9 to 9.2.14, which currently is the
latest release of it 9.2 branch.

OF-1056: Redirect commons logging over slf4j properly.

OF-1045: Fix NPE in cluster info page

Instead of using our proprietary commons logging wrapper for slf4j, use
the one provided by slf4j. Not only does is reduce code, it also does a
better job logging things (using the correct log category).

The jcl-over-slf4j.jar is a drop-in replacement for commons-logging.jar
(for version 1.1.1 commons-logging - our copy was probably older).

OF-1054 IllegalStateException when destroying MUC room prevents unava…

OF-1051: Prevent ConcurrentModificationException

Improve certificate signatures with SHA-2 functions

Conflicts:
	src/java/org/jivesoftware/openfire/keystore/IdentityStore.java

Aberenguel certificate issues

Conflicts:
	src/java/org/jivesoftware/openfire/keystore/IdentityStore.java

IdentityStore.addSelfSignedDomainCertificate considers the certificate
validity in days, not in months.

OF-1049: Fixes for certificate management

Remove exclamation mark from Search button (OF-1055)

Ensure cluster listener is properly initialized (and destroyed).

The unmodifiable collection in the original code is not immutable: when
the original collection is modified, this is reflected (which can cause
problems in iterators created from the unmodifiable collection). This
commit creates a new collection to prevent this from happening.

OF-1053: Don't use apostrophe in i18n

OF-1046: Improve offline-storage usage

Existing code already tried to prevent message bounces when a stanza was
sent by the server itself. This commit builds on that solution.
Also, debug logging was added for the store-and-* strategies when storage
was no longer possible as a result of quota limitations (we had a hard time
debugging this)

Replaced all apostrophes with HTML-encoded entities to prevent
formatting problems.

REST API Plugin update to version 1.2.2

A fix for OF-1041

By reversing the order in which objects are added to the internal state,
a failure during store construction won't put the manager in a half-initialized
state.

Check if the keys in the identity store can be accessed when the identity store is
being created.

Don't initialize the admin console TLS connector when no identity store
is available (that's guaranteed to fail).
Don't log admin console startup success when there's an error.