hung thread on CRLRevocationManager#getCrlFromUri() due to not having a read timeout set on URLConnection

[leoclee]

In the Java RI's CRLRevocationManager (in the agent), there is a URLConnection that has a connect timeout set, but no read timeout set, which defaults to 0 (which means infinite timeout). This can cause threads to be hung on line 364 (the last line in the snippet below):

                // create a URL connection object from the distribution point
                URLConnection urlConnection = new URL(crlUrlString).openConnection();
                urlConnection.setConnectTimeout(CRL_FETCH_TIMEOUT);

                // get the input stream
                InputStream crlInputStream = urlConnection.getInputStream();