Update to NSS 3.12.9. falsestart.patch, falsestart2.patch, and...

net/third_party/nss/patches/ocspstapling.patch

 commit aa046eb9a2f5bd6fb027a1a516c01ec2a093d287
 Author: Adam Langley <agl@chromium.org>
 Date:   Mon Nov 22 16:40:05 2010 -0500
 
     nss: add support for OCSP stapling.
     
     This patch adds support in libssl for requesting and storing OCSP
     stapled responses.
     
     BUG=none
@@ skipping 326 matching lines @@
 +    certificate_status = 22,
      next_proto         = 67
  } SSL3HandshakeType;
  
 diff --git a/net/third_party/nss/ssl/sslerr.h b/net/third_party/nss/ssl/sslerr.h
 index bd72f97..eb56ea9 100644
 --- a/net/third_party/nss/ssl/sslerr.h
 +++ b/net/third_party/nss/ssl/sslerr.h
 @@ -203,6 +203,8 @@ SSL_ERROR_RX_UNEXPECTED_UNCOMPRESSED_RECORD = (SSL_ERROR_BASE + 114),
  
- SSL_ERROR_WEAK_SERVER_KEY               = (SSL_ERROR_BASE + 115),
+ SSL_ERROR_WEAK_SERVER_EPHEMERAL_DH_KEY  = (SSL_ERROR_BASE + 115),
  
 +SSL_ERROR_RX_UNEXPECTED_CERT_STATUS    = (SSL_ERROR_BASE + 116),
 +
  SSL_ERROR_END_OF_LIST  /* let the c compiler determine the value of this. */
  } SSLErrorCodes;
  #endif /* NO_SECURITY_ERROR_ENUM */
 diff --git a/net/third_party/nss/ssl/sslimpl.h b/net/third_party/nss/ssl/sslimpl.h
 index b84511b..c656f65 100644
 --- a/net/third_party/nss/ssl/sslimpl.h
 +++ b/net/third_party/nss/ssl/sslimpl.h
@@ skipping 141 matching lines @@
      ssl_ec_point_formats_xtn         = 11,
 @@ -208,7 +209,7 @@ typedef enum {
      ssl_renegotiation_info_xtn       = 0xff01  /* experimental number */
  } SSLExtensionType;
  
 -#define SSL_MAX_EXTENSIONS             7
 +#define SSL_MAX_EXTENSIONS             8
  
  typedef enum {
      /* No Snap Start handshake was attempted. */