Update to NSS 3.12.7 and NSPR 4.8.6....

nss/mozilla/security/nss/lib/pk11wrap/pk11cxt.c

 /* ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
  * 1.1 (the "License"); you may not use this file except in compliance with
  * the License. You may obtain a copy of the License at
  * http://www.mozilla.org/MPL/
  *
  * Software distributed under the License is distributed on an "AS IS" basis,
  * WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
@@ skipping 231 matching lines @@
  */
 static PK11Context *pk11_CreateNewContextInSlot(CK_MECHANISM_TYPE type,
      PK11SlotInfo *slot, CK_ATTRIBUTE_TYPE operation, PK11SymKey *symKey,
                                                              SECItem *param)
 {
     CK_MECHANISM mech_info;
     PK11Context *context;
     SECStatus rv;
         
     PORT_Assert(slot != NULL);
-    if (!slot || (!symKey && operation != CKA_DIGEST)) {
+    if (!slot || (!symKey && ((operation != CKA_DIGEST) || 
+                              (type == CKM_SKIPJACK_CBC64)))) {
         PORT_SetError(SEC_ERROR_INVALID_ARGS);
         return NULL;
     }
     context = (PK11Context *) PORT_Alloc(sizeof(PK11Context));
     if (context == NULL) {
         return NULL;
     }
 
     /* now deal with the fortezza hack... the fortezza hack is an attempt
      * to get around the issue of the card not allowing you to do a FORTEZZA
@@ skipping 796 matching lines @@
     context->init = PR_FALSE; /* allow Begin to start up again */
 
 
     if (crv != CKR_OK) {
         PORT_SetError( PK11_MapError(crv) );
         return SECFailure;
     }
     return SECSuccess;
 }