Update third_party/nss to NSS 3.15.4.

nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_ocspcertid.c

Index: nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_ocspcertid.c
===================================================================
--- nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_ocspcertid.c	(revision 239365)
+++ nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_ocspcertid.c	(working copy)
@@ -184,6 +184,7 @@
         PRTime time = 0;
         SECStatus rv;
         SECStatus rvOcsp;
+        OCSPFreshness freshness;
 
         PKIX_ENTER(DATE, "PKIX_PL_OcspCertID_GetFreshCacheStatus");
         PKIX_NULLCHECK_THREE(cid, hasFreshStatus, statusIsGood);
@@ -195,11 +196,11 @@
                 time = PR_Now();
         }
 
-        rv = ocsp_GetCachedOCSPResponseStatusIfFresh(
+        rv = ocsp_GetCachedOCSPResponseStatus(
                 cid->certID, time, PR_TRUE, /*ignoreGlobalOcspFailureSetting*/
-                &rvOcsp, missingResponseError);
+                &rvOcsp, missingResponseError, &freshness);
 
-        *hasFreshStatus = (rv == SECSuccess);
+        *hasFreshStatus = (rv == SECSuccess && freshness == ocspFresh);
         if (*hasFreshStatus) {
                 *statusIsGood = (rvOcsp == SECSuccess);
         }