Description of problem:
When parsing PKINIT preauthentication responses from a KDC running WS2003, my code is failing to verify the signature correctly.  On examination of the signed data inside of the enveloped data, it appears that the digest algorithm given for the signed data is that of a signature algorithm (in my case SEC_OID_PKCS1_SHA1_WITH_RSA_ENCRYPTION) rather than a digest algorithm (I'd expect SEC_OID_SHA1).

I think the party generating the message is doing it wrong, but I'd like to parse the message successfully anyway.

Version-Release number of selected component (if applicable):
nss-3.12.10-6.fc16.x86_64

How reproducible:
Always

Steps to Reproduce:
I'll attach the data that I have.
  
Actual results:
Error 18 while attempting to verify the data.

Expected results:
No error.