diff -up nss/lib/cryptohi/secsign.c.keep_sha1_default nss/lib/cryptohi/secsign.c
--- nss/lib/cryptohi/secsign.c.keep_sha1_default	2015-03-16 16:03:37.000000000 -0700
+++ nss/lib/cryptohi/secsign.c	2015-03-26 15:26:53.196999944 -0700
@@ -445,11 +445,11 @@ SEC_GetSignatureAlgorithmOidTag(KeyType 
 	    sigTag = SEC_OID_PKCS1_MD2_WITH_RSA_ENCRYPTION;	break;
 	case SEC_OID_MD5:
 	    sigTag = SEC_OID_PKCS1_MD5_WITH_RSA_ENCRYPTION;	break;
+	case SEC_OID_UNKNOWN:	/* default for RSA if not specified */
 	case SEC_OID_SHA1:
 	    sigTag = SEC_OID_PKCS1_SHA1_WITH_RSA_ENCRYPTION;	break;
 	case SEC_OID_SHA224:
 	    sigTag = SEC_OID_PKCS1_SHA224_WITH_RSA_ENCRYPTION;	break;
-	case SEC_OID_UNKNOWN:	/* default for RSA if not specified */
 	case SEC_OID_SHA256:
 	    sigTag = SEC_OID_PKCS1_SHA256_WITH_RSA_ENCRYPTION;	break;
 	case SEC_OID_SHA384: