added use of default on CRL sign check.

Author: dghgit

prov/src/main/java/org/bouncycastle/jce/provider/RFC3280CertPathUtilities.java

@@ -560,7 +560,7 @@ protected static Set processCRLF(
 
             if (keyUsage == null)
             {
-                if (Properties.isOverrideSet("org.bouncycastle.x509.allow_ca_without_crl_sign"))
+                if (Properties.isOverrideSet("org.bouncycastle.x509.allow_ca_without_crl_sign", true))
                 {
                     checkKeys.add(validKeys.get(i));
                 }
@@ -1448,18 +1448,16 @@ protected static void processCertA(
         {
             throw new ExtCertPathValidatorException("Could not validate certificate: " + e.getMessage(), e, certPath, index);
         }
-        System.err.println(cert.getIssuerX500Principal());
-        System.err.println(cert.getSubjectX500Principal());
+
         //
         // (a) (3)
         //
         if (revocationChecker != null)
         {
             revocationChecker.initialize(new PKIXCertRevocationCheckerParameters(paramsPKIX, validCertDate, certPath,
                 index, sign, workingPublicKey));
-            System.err.println("in revocation");
+
             revocationChecker.check(cert);
-            System.err.println("leaving revocation");
         }
 
         //