Update NSS to 3.21 RTM and NSPR to 4.11 RTM

nss/lib/util/secoidt.h

 /* This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 
 #ifndef _SECOIDT_H_
 #define _SECOIDT_H_
 
 #include "utilrename.h"
 
 /*
@@ skipping 458 matching lines @@
                                    that we can print the names of those
                                    extensions that we don't even support */
 };
 
 /* New Opaque extended OID table API.  
  * These are algorithm policy Flags, used with functions
  * NSS_SetAlgorithmPolicy & NSS_GetAlgorithmPolicy.
  */
 #define NSS_USE_ALG_IN_CERT_SIGNATURE  0x00000001  /* CRLs and OCSP, too */
 #define NSS_USE_ALG_IN_CMS_SIGNATURE   0x00000002  /* used in S/MIME */
+#define NSS_USE_ALG_IN_SSL_KX          0x00000004  /* used in SSL key exchange */
 #define NSS_USE_ALG_RESERVED           0xfffffffc  /* may be used in future */
 
 /* Code MUST NOT SET or CLEAR reserved bits, and must NOT depend on them
  * being all zeros or having any other known value.  The reserved bits
  * must be ignored.
  */
 
 
 #endif /* _SECOIDT_H_ */