Make the AES-GCM cipher suites work in DTLS, by moving the

net/third_party/nss/ssl/sslimpl.h

Index: net/third_party/nss/ssl/sslimpl.h
===================================================================
--- net/third_party/nss/ssl/sslimpl.h	(revision 218090)
+++ net/third_party/nss/ssl/sslimpl.h	(working copy)
@@ -72,6 +72,9 @@
 #define hmac_md5	ssl_hmac_md5
 #define hmac_sha	ssl_hmac_sha
 #define hmac_sha256	ssl_hmac_sha256
+#define hmac_sha384	ssl_hmac_sha384
+#define hmac_sha512	ssl_hmac_sha512
+#define mac_aead	ssl_mac_aead
 
 #define SET_ERROR_CODE		/* reminder */
 #define SEND_ALERT		/* reminder */
@@ -533,9 +536,8 @@
 			       int                  maxout,
 			       const unsigned char *in,
 			       int                  inlen,
-			       SSL3ContentType      type,
-			       SSL3ProtocolVersion  version,
-			       SSL3SequenceNumber   seqnum);

[wtc, 2013/08/17 00:21:15]

The |type|, |version|, and |seqnum| arguments were only used to build
the record pseudo-header. For DTLS, the |version| is the logical version,
not the version used on the wire. This is why SSLAEADCipher didn't work
in DTLS.

To fix this, I have the callers of SSLAEADCipher call
ssl3_BuildRecordPseudoHeader and pass the pseudo-header as the
|additionalData| argument to SSLAEADCipher.

+			       const unsigned char *additionalData,
+			       int                  additionalDataLen);
 typedef SECStatus (*SSLCompressor)(void *               context,
                                    unsigned char *      out,
                                    int *                outlen,