Load chain CAs for OCSP response validation in Android checkServerTrusted()

[cconlon]

This PR loads intermediate CA certificates from the verified certificate chain into the CertManager before OCSP validation. This fixes OCSP_LOOKUP_FAIL (-367) when responses are signed by intermediate CAs.

This PR also adjusts our Android emulator GitHub action where it could hang indefinitely (up to the action timeout) after tests completed due to emulator not shutting down cleanly.

ZD 20419

[Copilot]

Pull request overview

This PR fixes OCSP validation failures (OCSP_LOOKUP_FAIL error -367) that occur when OCSP responses are signed by intermediate CA certificates. The fix loads intermediate CA certificates from the verified certificate chain into the CertManager before OCSP validation, ensuring the necessary certificates are available for response verification.

Key Changes:

• Modified checkServerTrusted() to load chain CAs (intermediate and root certificates) into the CertManager before OCSP validation
• Added comprehensive test case to validate OCSP verification with intermediate CAs
• Updated to use the verified certificate chain (certList) instead of the input chain for consistency

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 3 comments.

File	Description
src/java/com/wolfssl/provider/jsse/WolfSSLTrustX509.java	Implements the core fix by loading all chain CAs (indices 1 through size-1) into the CertManager before OCSP validation, and uses verified chain for extracting leaf and issuer certificates
src/test/com/wolfssl/provider/jsse/test/WolfSSLTrustX509Test.java	Adds comprehensive test case testCheckServerTrustedOCSPWithChainCAs() to verify OCSP validation works with intermediate CAs from the chain, and updates comment wording
src/test/com/wolfssl/test/WolfSSLCertManagerTest.java	Minor comment update removing redundant wording ("for cert" → "cert")

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.