net/third_party/nss/patches/suitebonly.patch

   1 diff -pu a/nss/lib/ssl/ssl3ecc.c b/nss/lib/ssl/ssl3ecc.c
   2 --- a/nss/lib/ssl/ssl3ecc.c     2014-01-03 19:28:03.550814608 -0800
   3 +++ b/nss/lib/ssl/ssl3ecc.c     2014-01-03 19:40:46.523288747 -0800
   4 @@ -1073,6 +1073,7 @@ static const PRUint8 ecPtFmt[6] = {
   5  static PRBool
   6  ssl3_SuiteBOnly(sslSocket *ss)
   7  {
   8 +#if 0
   9      /* See if we can support small curves (like 163). If not, assume we can
  10       * only support Suite-B curves (P-256, P-384, P-521). */
  11      PK11SlotInfo *slot =
  12 @@ -1086,6 +1087,9 @@ ssl3_SuiteBOnly(sslSocket *ss)
  13      /* we can, presume we can do all curves */
  14      PK11_FreeSlot(slot);
  15      return PR_FALSE;
  16 +#else
  17 +    return PR_TRUE;
  18 +#endif
  19  }
  20
  21  /* Send our "canned" (precompiled) Supported Elliptic Curves extension,