Comment # 14 on bug 1209053 from Pedro Monreal Gonzalez

One more note, SHA-1 can still be used in FIPS mode but SHA-1 is not allowed
anymore in FIPS 186-5 signature verification operations. So, we will force
disable SHA-1 signature verification in the fips provider..