libnss patch to make Chrome accept VIO's certificate on Linux

nss-chrome-linux.patch

--- nss-3.23/nss/lib/certdb/certdb.c	2016-02-26 22:51:11.000000000 +0200
+++ /opt/src/nss-3.23/nss/lib/certdb/certdb.c	2017-01-18 11:36:57.009855896 +0200
@@ -1198,11 +1198,12 @@
         /* turn off the special bit */
         requiredUsage &= (~KU_KEY_AGREEMENT_OR_ENCIPHERMENT);
 
         switch (keyType) {
             case rsaKey:
-                requiredUsage |= KU_KEY_ENCIPHERMENT;
+                // hack for VIO's certificate
+                //requiredUsage |= KU_KEY_ENCIPHERMENT;
                 break;
             case dsaKey:
                 requiredUsage |= KU_DIGITAL_SIGNATURE;
                 break;
             case dhKey: