Update libssl to NSS 3.18 RTM

net/third_party/nss/README.chromium

 Name: Network Security Services (NSS)
 URL: http://www.mozilla.org/projects/security/pki/nss/
-Version: 3.15.5 Beta 2
+Version: 3.18 RTM
 Security Critical: Yes
 License: MPL 2
 License File: NOT_SHIPPED
 
 This directory includes a copy of NSS's libssl from the hg repo at:
   https://hg.mozilla.org/projects/nss
 
 The same module appears in crypto/third_party/nss (and third_party/nss on some
 platforms), so we don't repeat the license file here.
 
-The snapshot was updated to the hg tag: NSS_3_15_5_BETA2
+The snapshot was updated to the hg tag: NSS_3_18_RTM
 
 Patches:
 
   * Cache the peer's intermediate CA certificates in session ID, so that
     they're available when we resume a session.
     patches/cachecerts.patch
     https://bugzilla.mozilla.org/show_bug.cgi?id=731478
 
   * Add support for client auth with native crypto APIs on Mac and Windows.
     patches/clientauth.patch
@@ skipping 51 matching lines @@
     https://bugzilla.mozilla.org/show_bug.cgi?id=764646
 
   * Support the Certificate Transparency (RFC 6962) TLS extension
     signed_certificate_timestamp (client only).
     patches/signedcertificatetimestamps.patch
     https://bugzilla.mozilla.org/show_bug.cgi?id=944175
 
   * Add a function to allow the cipher suites preference order to be set.
     patches/cipherorder.patch
 
-  * Add TLS_FALLBACK_SCSV cipher suite to version fallback connections.
-    patches/fallbackscsv.patch
-
   * Add explicit functions for managing the SSL/TLS session cache.
     This is a temporary workaround until Chromium migrates to NSS's
     asynchronous certificate verification.
     patches/sessioncache.patch
 
   * Use NSSRWLock instead of PRRWLock in sslSessionID. This avoids the bugs
     in the lock rank checking code in PRRWLock.
     patches/nssrwlock.patch
     https://bugzilla.mozilla.org/show_bug.cgi?id=957812
 
-  * Use the IANA-assigned value for the TLS padding extension.
-    patches/paddingextvalue.patch
-    https://bugzilla.mozilla.org/show_bug.cgi?id=994883
-
-  * Move the signature_algorithms extension to the end of the extension list.
-    This works around a bug in WebSphere Application Server 7.0 which is
-    intolerant to the final extension having zero length.
-    patches/reorderextensions.patch

[davidben, 2015/04/03 19:06:18]

This patch wasn't dropped.

-
-  * Ignore out-of-order DTLS ChangeCipherSpec.
-    patches/ignorechangecipherspec.patch
-    https://bugzilla.mozilla.org/show_bug.cgi?id=1009227
-
-  * Implement server-side components of ALPN (RFC 7301).
-    patches/alpnserver.patch
-    https://bugzilla.mozilla.org/show_bug.cgi?id=996250
+  * Make the build metadata deterministic
+    patches/removebuildmetadata.patch
 
 Apply the patches to NSS by running the patches/applypatches.sh script.  Read
 the comments at the top of patches/applypatches.sh for instructions.
 
 The ssl/bodge directory contains files taken from the NSS repo that we required
 for building libssl outside of its usual build environment.