Merge branch 'bug33195_042' into bug33195_043

Conflicts:
* Keep disable module relay from maint-0.4.3
* Keep doxygen from maint-0.4.3
* Keep the ordering from bug33195_042

diff --cc .travis.yml
index af5052682fc5b691ba199a9405cee86722a7b45d,c3903fe1e171a03f20019cccf1ff05c507f64d15..d8218c7c0cd8ebc35e7f91dac31ef7a235c001be
--- 1/.travis.yml
--- 2/.travis.yml
+++ b/.travis.yml
@@@ -54,21 -55,28 +55,33 @@@ matrix
      ## Chutney is a fast job, clang is slower on Linux, so we do Chutney clang
      - env: CHUTNEY="yes" CHUTNEY_ALLOW_FAILURES="2" SKIP_MAKE_CHECK="yes"
        compiler: clang
-     ## We check asciidoc with distcheck, to make sure we remove doc products
-     ## We use Linux clang, because there are no other Linux clang jobs
-     - env: DISTCHECK="yes" ASCIIDOC_OPTIONS="" SKIP_MAKE_CHECK="yes"
-       compiler: clang
-     ## We include a single coverage build with the best options for coverage
-     - env: COVERAGE_OPTIONS="--enable-coverage" HARDENING_OPTIONS="" TOR_TEST_RNG_SEED="636f766572616765"
-     ## We run rust on Linux, because it's faster than rust on macOS
-     ## We check rust offline
-     - env: RUST_OPTIONS="--enable-rust" TOR_RUST_DEPENDENCIES=true
+ 
      ## We check asciidoc with distcheck, to make sure we remove doc products
      - env: DISTCHECK="yes" ASCIIDOC_OPTIONS="" SKIP_MAKE_CHECK="yes"
+ 
 +    ## We check disable module relay
 +    - env: MODULES_OPTIONS="--disable-module-relay"
      ## We check disable module dirauth
      - env: MODULES_OPTIONS="--disable-module-dirauth"
+ 
+     ## We run rust on Linux, because it's faster than rust on macOS
+     ## We check rust offline
+     - env: RUST_OPTIONS="--enable-rust" TOR_RUST_DEPENDENCIES=true
+ 
+     ## We check NSS
+     ## Use -std=gnu99 to turn off some newer features, and maybe turn on some
+     ## extra gcc warnings?
+     - env: NSS_OPTIONS="--enable-nss" C_DIALECT_OPTIONS="-std=gnu99"
+ 
+     ## We include a single coverage build with the best options for coverage
+     - env: COVERAGE_OPTIONS="--enable-coverage" HARDENING_OPTIONS="" TOR_TEST_RNG_SEED="636f766572616765"
+ 
+     ## We clone our stem repo and run `make test-stem`
+     - env: TEST_STEM="yes" SKIP_MAKE_CHECK="yes"
+ 
++    ## We run `make doxygen` without `make check`.
++    - env: SKIP_MAKE_CHECK="yes" DOXYGEN="yes"
++
      ## macOS builds are very slow, and we have a limited number of
      ## concurrent macOS jobs. We're not actively developing Rust, so it is
      ## the lowest priority.