Update net/third_party/nss to NSS_3_15_5_BETA2.

net/third_party/nss/patches/aesgcmchromium.patch

 diff -pu a/nss/lib/ssl/ssl3con.c b/nss/lib/ssl/ssl3con.c
---- a/nss/lib/ssl/ssl3con.c     2014-01-03 19:42:10.424660677 -0800
-+++ b/nss/lib/ssl/ssl3con.c     2014-01-03 19:42:18.324789858 -0800
+--- a/nss/lib/ssl/ssl3con.c     2014-01-17 18:04:43.127747463 -0800
++++ b/nss/lib/ssl/ssl3con.c     2014-01-17 18:06:21.919386088 -0800
 @@ -44,6 +44,9 @@
  #ifdef NSS_ENABLE_ZLIB
  #include "zlib.h"
  #endif
 +#ifdef LINUX
 +#include <dlfcn.h>
 +#endif
  
  #ifndef PK11_SETATTRS
  #define PK11_SETATTRS(x,id,v,l) (x)->type = (id); \
@@ skipping 73 matching lines @@
      if (doDecrypt) {
 -       rv = PK11_Decrypt(keys->write_key, CKM_AES_GCM, &param, out, &uOutLen,
 +       rv = pk11_decrypt(keys->write_key, CKM_AES_GCM, &param, out, &uOutLen,
                           maxout, in, inlen);
      } else {
 -       rv = PK11_Encrypt(keys->write_key, CKM_AES_GCM, &param, out, &uOutLen,
 +       rv = pk11_encrypt(keys->write_key, CKM_AES_GCM, &param, out, &uOutLen,
                           maxout, in, inlen);
      }
      *outlen += (int) uOutLen;
-@@ -5102,6 +5168,10 @@ ssl3_SendClientHello(sslSocket *ss, PRBo
+@@ -5103,6 +5169,10 @@ ssl3_SendClientHello(sslSocket *ss, PRBo
         ssl3_DisableNonDTLSSuites(ss);
      }
  
 +    if (!ssl3_HasGCMSupport()) {
 +       ssl3_DisableGCMSuites(ss);
 +    }
 +
      /* how many suites are permitted by policy and user preference? */
      num_suites = count_cipher_suites(ss, ss->ssl3.policy, PR_TRUE);
      if (!num_suites) {
-@@ -8057,6 +8127,10 @@ ssl3_HandleClientHello(sslSocket *ss, SS
+@@ -8080,6 +8150,10 @@ ssl3_HandleClientHello(sslSocket *ss, SS
         ssl3_DisableNonDTLSSuites(ss);
      }
  
 +    if (!ssl3_HasGCMSupport()) {
 +       ssl3_DisableGCMSuites(ss);
 +    }
 +
  #ifdef PARANOID
      /* Look for a matching cipher suite. */
      j = ssl3_config_match_init(ss);