Add DTLS support to NSS, contributed by Eric Rescorla.

net/third_party/nss/ssl/ssl3prot.h

 /* Private header file of libSSL.
  * Various and sundry protocol constants. DON'T CHANGE THESE. These
  * values are defined by the SSL 3.0 protocol specification.
  *
  * ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
  * 1.1 (the "License"); you may not use this file except in compliance with
  * the License. You may obtain a copy of the License at
@@ skipping 43 matching lines @@
 #define MAX_CERT_TYPES                  10
 #define MAX_COMPRESSION_METHODS         10
 #define MAX_MAC_LENGTH                  64
 #define MAX_PADDING_LENGTH              64
 #define MAX_KEY_LENGTH                  64
 #define EXPORT_KEY_LENGTH                5
 #define SSL3_RANDOM_LENGTH              32
 
 #define SSL3_RECORD_HEADER_LENGTH        5
 
+/* SSL3_RECORD_HEADER_LENGTH + epoch/sequence_number */
+#define DTLS_RECORD_HEADER_LENGTH       13
+
 #define MAX_FRAGMENT_LENGTH             16384
      
 typedef enum {
     content_change_cipher_spec = 20, 
     content_alert              = 21,
     content_handshake          = 22, 
     content_application_data   = 23
 } SSL3ContentType;
 
 typedef struct {
@@ skipping 69 matching lines @@
 
 typedef struct {
     SSL3AlertLevel       level;
     SSL3AlertDescription description;
 } SSL3Alert;
 
 typedef enum {
     hello_request       = 0, 
     client_hello        = 1, 
     server_hello        = 2,
+    hello_verify_request = 3,
     new_session_ticket  = 4,
     certificate         = 11, 
     server_key_exchange = 12,
     certificate_request = 13, 
     server_hello_done   = 14,
     certificate_verify  = 15, 
     client_key_exchange = 16, 
     finished            = 20,
     certificate_status  = 22,
     next_proto          = 67
@@ skipping 180 matching lines @@
     unsigned char *iv;
     SECItem encrypted_state;
     unsigned char *mac;
 } EncryptedSessionTicket;
 
 #define TLS_EX_SESS_TICKET_MAC_LENGTH       32
 
 #define TLS_STE_NO_SERVER_NAME        -1
 
 #endif /* __ssl3proto_h_ */