Replace the deprecated DSA_SIGNATURE_LEN macro with

net/third_party/nss/ssl/ssl3con.c

 /* -*- Mode: C; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
 /*
  * SSL3 Protocol
  *
  * ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
  * 1.1 (the "License"); you may not use this file except in compliance with
  * the License. You may obtain a copy of the License at
@@ skipping 51 matching lines @@
 
 #include "pk11func.h"
 #include "secmod.h"
 #include "blapi.h"
 
 #include <stdio.h>
 #ifdef NSS_ENABLE_ZLIB
 #include "zlib.h"
 #endif
 
+/* DSA_SIGNATURE_LEN is deprecated and replaced by DSA1_SIGNATURE_LEN
+ * in NSS 3.14. Provide a backup definition when compiling against an
+ * older system NSS library.
+ */
+#ifndef DSA1_SIGNATURE_LEN
+#define DSA1_SIGNATURE_LEN      40      /* Bytes */
+#endif
+
 #ifndef PK11_SETATTRS
 #define PK11_SETATTRS(x,id,v,l) (x)->type = (id); \
                 (x)->pValue=(v); (x)->ulValueLen = (l);
 #endif
 
 static void      ssl3_CleanupPeerCerts(sslSocket *ss);
 static void      ssl3_CopyPeerCertsFromSID(sslSocket *ss, sslSessionID *sid);
 static PK11SymKey *ssl3_GenerateRSAPMS(sslSocket *ss, ssl3CipherSpec *spec,
                                        PK11SlotInfo * serverKeySlot);
 static SECStatus ssl3_DeriveMasterSecret(sslSocket *ss, PK11SymKey *pms);
@@ skipping 823 matching lines @@
 
     switch (key->keyType) {
     case rsaKey:
         hashItem.data = hash->md5;
         hashItem.len = sizeof(SSL3Hashes);
         break;
     case dsaKey:
         hashItem.data = hash->sha;
         hashItem.len = sizeof(hash->sha);
         /* Allow DER encoded DSA signatures in SSL 3.0 */
-        if (isTLS || buf->len != DSA_SIGNATURE_LEN) {
+        if (isTLS || buf->len != DSA1_SIGNATURE_LEN) {
             signature = DSAU_DecodeDerSig(buf);
             if (!signature) {
                 PORT_SetError(SSL_ERROR_BAD_HANDSHAKE_HASH_VALUE);
                 return SECFailure;
             }
             buf = signature;
         }
         break;
 
 #ifdef NSS_ENABLE_ECC
@@ skipping 9932 matching lines @@
             PORT_Free(ss->ssl3.hs.recvdFragments.buf);
         }
     }
 
     ss->ssl3.initialized = PR_FALSE;
 
     SECITEM_FreeItem(&ss->ssl3.nextProto, PR_FALSE);
 }
 
 /* End of ssl3con.c */