Uprev NSS (in libssl) to NSS 3.21

net/third_party/nss/patches/dh1024.patch

Index: net/third_party/nss/patches/dh1024.patch
diff --git a/net/third_party/nss/patches/dh1024.patch b/net/third_party/nss/patches/dh1024.patch
deleted file mode 100644
index 3b76da0600b3ae9b630629ccea9406ab785fc22a..0000000000000000000000000000000000000000
--- a/net/third_party/nss/patches/dh1024.patch
+++ /dev/null
@@ -1,14 +0,0 @@
-diff --git a/ssl/ssl3con.c b/ssl/ssl3con.c
-index a67a9d1..02b0dda 100644
---- a/ssl/ssl3con.c
-+++ b/ssl/ssl3con.c
-@@ -6964,7 +6964,8 @@ ssl3_HandleServerKeyExchange(sslSocket *ss, SSL3Opaque *b, PRUint32 length)
-     	if (rv != SECSuccess) {
- 	    goto loser;		/* malformed. */
- 	}
--	if (dh_p.len < 512/8) {
-+	if (dh_p.len < 1024/8 ||
-+	    (dh_p.len == 1024/8 && (dh_p.data[0] & 0x80) == 0)) {
- 	    errCode = SSL_ERROR_WEAK_SERVER_EPHEMERAL_DH_KEY;
- 	    goto alert_loser;
- 	}