Update to NSS 3.12.9. falsestart.patch, falsestart2.patch, and...

net/third_party/nss/README.chromium

 Name: Network Security Services (NSS)
 URL: http://www.mozilla.org/projects/security/pki/nss/
 
 This directory includes a copy of NSS's libssl from the CVS repo at:
   :pserver:anonymous@cvs-mirror.mozilla.org:/cvsroot
 
-The snapshot was updated to the CVS tag: NSS_3_12_7_RTM
+The snapshot was updated to the CVS tag: NSS_3_12_9_RTM
 
 Patches:
 
   * Next protocol negotiation support.
     patches/nextproto.patch
     http://codereview.chromium.org/415005
 
-  * False start support
-    patches/falsestart.patch
-    patches/falsestart2.patch
-    https://bugzilla.mozilla.org/show_bug.cgi?id=525092
-
   * Commenting out a couple of functions because they need NSS symbols
     which may not exist in the system NSS library.
     patches/versionskew.patch
 
   * Send empty renegotiation info extension instead of SCSV unless TLS is
     disabled.
     patches/renegoscsv.patch
     https://bugzilla.mozilla.org/show_bug.cgi?id=549042
 
   * Cache the peer's intermediate CA certificates in session ID, so that
     they're available when we resume a session.  Add certificates to
     ss->ssl3.peerCertChain in the right order.
     patches/cachecerts.patch
     https://bugzilla.mozilla.org/show_bug.cgi?id=606049
 
-  * Add the SSL_ERROR_WEAK_SERVER_KEY error code for a weak server key in 
-    the Server Key Exchange handshake message.
-    patches/weakserverkey.patch
-    http://crbug.com/51694
-    https://bugzilla.mozilla.org/show_bug.cgi?id=587234
-
   * Add Snap Start support
     patches/snapstart.patch
     patches/snapstart2.patch
     http://tools.ietf.org/html/draft-agl-tls-snapstart-00
 
   * Add the SSL_PeerCertificateChain function
     patches/peercertchain.patch
 
   * Add OCSP stapling support
     patches/ocspstapling.patch
 
   * Add support for client auth with native crypto APIs on Mac and Windows
     patches/clientauth.patch
     ssl/sslplatf.c
 
   * Don't send a client certificate when renegotiating if the peer does not
     request one. This only happened if the previous key exchange algorithm
     was non-RSA.
     patches/clientauth.patch
     https://bugzilla.mozilla.org/show_bug.cgi?id=616757
 
 Apply the patches to NSS by running the patches/applypatches.sh script.  Read
 the comments at the top of patches/applypatches.sh for instructions.
 
 The ssl/bodge directory contains files taken from the NSS repo that we required
 for building libssl outside of its usual build environment.