nss update for jessie

[Florian Weimer]

* Moritz Mühlenhoff:

> On Mon, Oct 03, 2016 at 10:00:59PM +0200, Florian Weimer wrote:
>> * Florian Weimer:
>> 
>> > Here are the untested nspr bits:
>> >
>> >   <https://people.debian.org/~fw/nss-201610/>
>> >
>> > I'll add the nss bits later and test them together (with mod_nss for
>> > Apache httpd, and hopefully I can find a Debian NSS client, too).
>> 
>> I've added my nss build as well.  I have not yet tested it.
>
> My tests with chromium and openjdk went all fine.

My limited test with libapache2-mod-nss went well as well.  Although
mod_nss is quite painful to set up, and it has a hard-coded cipher
list in the configuration file (it does not appear to be possible to
import the NSS defaults).  This means that users won't get benefits
such as GCM modes or ECDHE key agreement.

I'll hopefully be able to release DSA tomorrow, after Salvatore
reported back on his testing.