Add DTLS support to NSS, contributed by Eric Rescorla.

net/third_party/nss/ssl/sslproto.h

 /*
  * Various and sundry protocol constants. DON'T CHANGE THESE. These values 
  * are mostly defined by the SSL2, SSL3, or TLS protocol specifications.
  * Cipher kinds and ciphersuites are part of the public API.
  *
  * ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
  * 1.1 (the "License"); you may not use this file except in compliance with
@@ skipping 31 matching lines @@
 /* $Id: sslproto.h,v 1.17 2012/03/13 02:39:11 wtc%google.com Exp $ */
 
 #ifndef __sslproto_h_
 #define __sslproto_h_
 
 /* All versions less than 3_0 are treated as SSL version 2 */
 #define SSL_LIBRARY_VERSION_2                   0x0002
 #define SSL_LIBRARY_VERSION_3_0                 0x0300
 #define SSL_LIBRARY_VERSION_TLS_1_0             0x0301
 #define SSL_LIBRARY_VERSION_TLS_1_1             0x0302
+/* Note: this is the internal format, not the wire format */
+#define SSL_LIBRARY_VERSION_DTLS_1_0            0x0302
 
 /* deprecated old name */
 #define SSL_LIBRARY_VERSION_3_1_TLS SSL_LIBRARY_VERSION_TLS_1_0 
 
+/* The DTLS version used in the spec */
+#define SSL_LIBRARY_VERSION_DTLS_1_0_WIRE       ((~0x0100) & 0xffff)
+
 /* Header lengths of some of the messages */
 #define SSL_HL_ERROR_HBYTES                     3
 #define SSL_HL_CLIENT_HELLO_HBYTES              9
 #define SSL_HL_CLIENT_MASTER_KEY_HBYTES         10
 #define SSL_HL_CLIENT_FINISHED_HBYTES           1
 #define SSL_HL_SERVER_HELLO_HBYTES              11
 #define SSL_HL_SERVER_VERIFY_HBYTES             1
 #define SSL_HL_SERVER_FINISHED_HBYTES           1
 #define SSL_HL_REQUEST_CERTIFICATE_HBYTES       2
 #define SSL_HL_CLIENT_CERTIFICATE_HBYTES        6
@@ skipping 160 matching lines @@
 
 /* Netscape "experimental" cipher suites. */
 #define SSL_RSA_OLDFIPS_WITH_3DES_EDE_CBC_SHA   0xffe0
 #define SSL_RSA_OLDFIPS_WITH_DES_CBC_SHA        0xffe1
 
 /* New non-experimental openly spec'ed versions of those cipher suites. */
 #define SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA      0xfeff
 #define SSL_RSA_FIPS_WITH_DES_CBC_SHA           0xfefe
 
 #endif /* __sslproto_h_ */