net: don't add padding extension for SSLv3.

net/third_party/nss/ssl/ssl3con.c

Index: net/third_party/nss/ssl/ssl3con.c
diff --git a/net/third_party/nss/ssl/ssl3con.c b/net/third_party/nss/ssl/ssl3con.c
index 567d481203a4e98a3f43f25cb5fdf091445e7e46..25709b227ebb1889bc620386b510988cc02aa3b1 100644
--- a/net/third_party/nss/ssl/ssl3con.c
+++ b/net/third_party/nss/ssl/ssl3con.c
@@ -5248,7 +5248,9 @@ ssl3_SendClientHello(sslSocket *ss, PRBool resending)
      * in F5 devices.
      *
      * This is not done for DTLS nor for renegotiation. */
-    if (!IS_DTLS(ss) && !ss->firstHsDone) {
+    if (!IS_DTLS(ss) &&
+        ss->version > SSL_LIBRARY_VERSION_3_0 &&

[wtc, 2013/11/11 19:49:53]

We can just test the local variable 'isTLS'.

(We may be able to test 'total_exten_len', which would match the test on line
5366, but testing 'isTLS' seems better.)

[agl, 2013/11/11 20:23:49]

Done.

+        !ss->firstHsDone) {
         paddingExtensionLen = ssl3_CalculatePaddingExtensionLength(length);
         total_exten_len += paddingExtensionLen;
         length += paddingExtensionLen;