The block sizes for TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 and TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 were incorrect in the suite
definitions.
This is the root cause befind the old cl-suites.patch which disabled TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (no great loss). This patch also
fixes the TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 suite, which may be what
new Apple phones were negotiating for pop3s connections.