forked from https://chromium.googlesource.com/chromium/deps/nss