Update NSS to 3.21 RTM and NSPR to 4.11 RTM

nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_cert.c

 /* This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 /*
  * pkix_pl_cert.c
  *
  * Certificate Object Functions
  *
  */
 
@@ skipping 1497 matching lines @@
 PKIX_Error *
 PKIX_PL_Cert_Create(
         PKIX_PL_ByteArray *byteArray,
         PKIX_PL_Cert **pCert,
         void *plContext)
 {
         CERTCertificate *nssCert = NULL;
         SECItem *derCertItem = NULL;
         void *derBytes = NULL;
         PKIX_UInt32 derLength;
-        PKIX_Boolean copyDER;
         PKIX_PL_Cert *cert = NULL;
         CERTCertDBHandle *handle;
 
         PKIX_ENTER(CERT, "PKIX_PL_Cert_Create");
         PKIX_NULLCHECK_TWO(pCert, byteArray);
 
         PKIX_CHECK(PKIX_PL_ByteArray_GetPointer
                     (byteArray, &derBytes, plContext),
                     PKIX_BYTEARRAYGETPOINTERFAILED);
 
         PKIX_CHECK(PKIX_PL_ByteArray_GetLength
                     (byteArray, &derLength, plContext),
                     PKIX_BYTEARRAYGETLENGTHFAILED);
 
         derCertItem = SECITEM_AllocItem(NULL, NULL, derLength);
         if (derCertItem == NULL){
                 PKIX_ERROR(PKIX_OUTOFMEMORY);
         }
 
         (void) PORT_Memcpy(derCertItem->data, derBytes, derLength);
 
         /*
          * setting copyDER to true forces NSS to make its own copy of the DER,
          * allowing us to free our copy without worrying about whether NSS
          * is still using it
          */
-        copyDER = PKIX_TRUE;
         handle  = CERT_GetDefaultCertDB();
         nssCert = CERT_NewTempCertificate(handle, derCertItem,
                                           /* nickname */ NULL, 
                                           /* isPerm   */ PR_FALSE, 
                                           /* copyDer  */ PR_TRUE);
         if (!nssCert){
                 PKIX_ERROR(PKIX_CERTDECODEDERCERTIFICATEFAILED);
         }
 
         PKIX_CHECK(pkix_pl_Cert_CreateWithNSSCert
@@ skipping 2151 matching lines @@
         CERTCertificate **pnssCert, 
         void *plContext)
 {
     PKIX_ENTER(CERT, "PKIX_PL_Cert_GetNssCert");
     PKIX_NULLCHECK_TWO(cert, pnssCert);
 
     *pnssCert = CERT_DupCertificate(cert->nssCert);
 
     PKIX_RETURN(CERT);
 }