Implement RFC 5764 (DTLS-SRTP).

net/third_party/nss/ssl/ssl.h

Index: net/third_party/nss/ssl/ssl.h
===================================================================
--- net/third_party/nss/ssl/ssl.h	(revision 130750)
+++ net/third_party/nss/ssl/ssl.h	(working copy)
@@ -835,7 +835,26 @@
                       struct CERTCertificateStr ** pRetCert,
                       struct SECKEYPrivateKeyStr **pRetKey);
 
+
 /*
+** Configure DTLS-SRTP (RFC 5764) preferences.
+** Input is a list of ciphers and a length of the list in descending
+** preference order. As a side effect, this causes the use_srtp
+** extension to be negotiated.
+*/
+SSL_IMPORT SECStatus SSL_SetSRTPCiphers(PRFileDesc *socket,
+					const PRUint16 *ciphers,
+					unsigned int num_ciphers);
+
+/*
+** Get the selected DTLS-SRTP cipher suite (if any).
+** To be called after the handshake completes.
+** Returns SECFailed if not negotiated.
+*/
+SSL_IMPORT SECStatus SSL_GetSRTPCipher(PRFileDesc *socket,
+				       PRUint16 *cipher);
+
+/*
  * Look to see if any of the signers in the cert chain for "cert" are found
  * in the list of caNames.  
  * Returns SECSuccess if so, SECFailure if not.