SSL: Support KE_rsa_fips.

This seems to have been a key exchange method used to test the TLS 1.0 PRF
during SSL 3.0.

SSL_rsa_fips_with_3des_ede_cbc_sha interoperates with Firefox 24.4.0.
SSL: More KE_rsa_fips suites.

According to comments in <nss/sslproto.h> these two suites were
old aliases for the other two KE_rsa_fips suites.

Also adjusts the names to match NSS's names for the two constants.
Nettle: Support the soon to be released Nettle 3.0.

The DSA APIs have been changed in Nettle 3.0. This adds code to
use the new API (as the compat API failed due to name conflits).
Fix m4 issue.