1diff -pu a/nss/lib/ssl/ssl3con.c b/nss/lib/ssl/ssl3con.c 2--- a/nss/lib/ssl/ssl3con.c 2013-07-31 12:07:10.964699464 -0700 3+++ b/nss/lib/ssl/ssl3con.c 2013-07-31 12:29:07.903829188 -0700 4@@ -4773,9 +4773,9 @@ ssl3_SendClientHello(sslSocket *ss, PRBo 5 return SECFailure; /* ssl3_config_match_init has set error code. */ 6 7 /* HACK for SCSV in SSL 3.0. On initial handshake, prepend SCSV, 8- * only if we're willing to complete an SSL 3.0 handshake. 9+ * only if TLS is disabled. 10 */ 11- if (!ss->firstHsDone && ss->vrange.min == SSL_LIBRARY_VERSION_3_0) { 12+ if (!ss->firstHsDone && !isTLS) { 13 /* Must set this before calling Hello Extension Senders, 14 * to suppress sending of empty RI extension. 15 */ 16