Ignore out-of-order DTLS ChangeCipherSpec.

net/third_party/nss/patches/ignorechangecipherspec.patch

+Index: ssl/ssl3con.c
+===================================================================
+--- ssl/ssl3con.c       (revision 274314)
++++ ssl/ssl3con.c       (working copy)
+@@ -3621,6 +3621,14 @@
+                SSL_GETPID(), ss->fd));
+ 
+     if (ws != wait_change_cipher) {
++       if (IS_DTLS(ss)) {
++           /* Ignore this because it's out of order. */
++           SSL_TRC(3, ("%d: SSL3[%d]: discard out of order "
++                       "DTLS change_cipher_spec",
++                       SSL_GETPID(), ss->fd));
++           buf->len = 0;
++           return SECSuccess;
++       }
+        (void)SSL3_SendAlert(ss, alert_fatal, unexpected_message);
+        PORT_SetError(SSL_ERROR_RX_UNEXPECTED_CHANGE_CIPHER);
+        return SECFailure;