Update third_party/nss to NSS 3.15.4.

nss/lib/certdb/certt.h

 /* This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 /*
  * certt.h - public data structures for the certificate library
  */
 #ifndef _CERTT_H_
 #define _CERTT_H_
 
 #include "prclist.h"
@@ skipping 1088 matching lines @@
  * STOP_TESTING means:
  *              Our success is sufficient, do not continue testing
  *              other methods.
  * CONTINUE_TESTING means:
  *                  We will continue and test the next allowed
  *                  specified method.
  */
 #define CERT_REV_M_STOP_TESTING_ON_FRESH_INFO        0UL
 #define CERT_REV_M_CONTINUE_TESTING_ON_FRESH_INFO    32UL
 
+/* When this flag is used, libpkix will never attempt to use the GET HTTP
+ * method for OCSP requests; it will always use POST.
+ */
+#define CERT_REV_M_FORCE_POST_METHOD_FOR_OCSP 64UL
+
 /*
  * The following flags are supposed to be used to control bits in
  *     CERTRevocationTests.cert_rev_method_independent_flags
  * All Flags are prefixed by CERT_REV_M_, where _M_ indicates
  * this is a method independent flag.
  */
 
 /*
  * This defines the order to checking.
  * EACH_METHOD_SEPARATELY means:
@@ skipping 215 matching lines @@
 SEC_ASN1_CHOOSER_DECLARE(CERT_SetOfSignedCrlTemplate)
 SEC_ASN1_CHOOSER_DECLARE(CERT_SignedDataTemplate)
 SEC_ASN1_CHOOSER_DECLARE(CERT_SubjectPublicKeyInfoTemplate)
 SEC_ASN1_CHOOSER_DECLARE(SEC_SignedCertificateTemplate)
 SEC_ASN1_CHOOSER_DECLARE(CERT_SignedCrlTemplate)
 SEC_ASN1_CHOOSER_DECLARE(CERT_TimeChoiceTemplate)
 
 SEC_END_PROTOS
 
 #endif /* _CERTT_H_ */