Ignore out-of-order DTLS ChangeCipherSpec.

net/third_party/nss/patches/ignorechangecipherspec.patch

Index: net/third_party/nss/patches/ignorechangecipherspec.patch
===================================================================
--- net/third_party/nss/patches/ignorechangecipherspec.patch	(revision 0)
+++ net/third_party/nss/patches/ignorechangecipherspec.patch	(revision 0)
@@ -0,0 +1,19 @@
+Index: ssl/ssl3con.c
+===================================================================
+--- ssl/ssl3con.c	(revision 274314)
++++ ssl/ssl3con.c	(working copy)
+@@ -3621,6 +3621,14 @@
+ 		SSL_GETPID(), ss->fd));
+ 
+     if (ws != wait_change_cipher) {
++	if (IS_DTLS(ss)) {
++	    /* Ignore this because it's out of order. */
++	    SSL_TRC(3, ("%d: SSL3[%d]: discard out of order "
++			"DTLS change_cipher_spec",
++			SSL_GETPID(), ss->fd));
++	    buf->len = 0;
++	    return SECSuccess;
++	}
+ 	(void)SSL3_SendAlert(ss, alert_fatal, unexpected_message);
+ 	PORT_SetError(SSL_ERROR_RX_UNEXPECTED_CHANGE_CIPHER);
+ 	return SECFailure;