Implement the encrypt-then-MAC TLS extension.

net/third_party/nss/ssl/sslimpl.h

Index: net/third_party/nss/ssl/sslimpl.h
===================================================================
--- net/third_party/nss/ssl/sslimpl.h	(revision 252347)
+++ net/third_party/nss/ssl/sslimpl.h	(working copy)
@@ -339,6 +339,7 @@
     unsigned int enableALPN             : 1;  /* 27 */
     unsigned int enableSignedCertTimestamps : 1;  /* 28 */
     unsigned int enableFallbackSCSV     : 1;  /* 29 */
+    unsigned int enableEncryptThenMAC   : 1;  /* 30 */
 } sslOptions;
 
 typedef enum { sslHandshakingUndetermined = 0,
@@ -595,6 +596,7 @@
     SSLDestroy         destroyDecompressContext;
     void *             decompressContext;
     PRBool             bypassCiphers;	/* did double bypass (at least) */
+    PRBool             encryptThenMAC;	/* encrypt before MAC (block cipher) */
     PK11SymKey *       master_secret;
     SSL3SequenceNumber write_seq_num;
     SSL3SequenceNumber read_seq_num;