Workaround a bug in NSS when using DHE+client authentication.

net/third_party/nss/README.chromium

Index: net/third_party/nss/README.chromium
diff --git a/net/third_party/nss/README.chromium b/net/third_party/nss/README.chromium
index 2f0c1655e8614ccaf03d789cf05cabc2530d07d7..7dc9de0d5359d753ec8baf2170e22661a93ca4b2 100644
--- a/net/third_party/nss/README.chromium
+++ b/net/third_party/nss/README.chromium
@@ -45,5 +45,11 @@ Patches:
   * Add OCSP stapling support
     patches/ocspstapling.patch
 
+  * Don't send a client certificate when renegotiating if the peer does not
+    request one. This only happened if the previous key exchange algorithm
+    was non-RSA.
+    patches/dheclientauth.patch
+    https://bugzilla.mozilla.org/show_bug.cgi?id=616757
+
 The ssl/bodge directory contains files taken from the NSS repo that we required
 for building libssl outside of its usual build environment.