Refuse to accept certificate chains containing any RSA public key smaller

net/data/ssl/certificates/1024-rsa-ee-by-2048-rsa-intermediate.pem

Index: net/data/ssl/certificates/1024-rsa-ee-by-2048-rsa-intermediate.pem
===================================================================
--- net/data/ssl/certificates/1024-rsa-ee-by-2048-rsa-intermediate.pem	(revision 0)
+++ net/data/ssl/certificates/1024-rsa-ee-by-2048-rsa-intermediate.pem	(revision 0)
@@ -0,0 +1,59 @@
+Certificate:
+    Data:
+        Version: 1 (0x0)
+        Serial Number: 237 (0xed)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: CN=2048 rsa Test intermediate CA
+        Validity
+            Not Before: Dec 10 02:17:59 2011 GMT
+            Not After : Dec  7 02:17:59 2021 GMT
+        Subject: C=US, ST=California, L=Mountain View, O=Test CA, CN=127.0.0.1
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (1024 bit)
+                Modulus (1024 bit):
+                    00:c7:86:34:86:21:c5:4f:2e:a9:8b:b1:3c:3f:e4:
+                    6a:26:d4:12:2f:67:3d:05:2b:73:f8:42:41:9c:0a:
+                    c6:98:94:c2:06:cb:08:e6:9a:ff:35:38:eb:91:20:
+                    2b:74:a4:9d:89:f6:be:7d:42:ee:a7:1f:3f:58:97:
+                    a2:95:29:4f:6c:74:d1:f6:94:30:03:12:77:7a:95:
+                    30:f4:82:ee:1b:e3:b3:53:97:50:63:5c:13:a7:b2:
+                    4f:02:4f:1d:b5:d3:26:2f:c0:69:f0:66:18:45:7f:
+                    a7:2f:53:26:4e:0e:cf:65:c6:93:16:8e:8e:d8:b8:
+                    ca:42:c7:e5:6e:61:16:30:05
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Subject Alternative Name: 
+                IP Address:127.0.0.1
+    Signature Algorithm: sha1WithRSAEncryption
+        91:fc:be:ab:a7:32:ff:20:fe:65:38:36:00:83:75:d9:43:a3:
+        4d:a2:8d:63:dd:7e:5c:1b:b6:22:8d:e1:5f:58:c9:b0:b2:fd:
+        76:54:ef:44:03:1f:c8:8d:06:97:0d:ce:24:1f:b4:18:85:06:
+        9a:15:b7:b5:99:61:14:0a:5f:06:49:e1:bf:aa:73:1e:d9:3b:
+        95:05:2a:1b:56:a1:d6:cd:5b:ff:c8:f1:fd:d9:bd:ac:dd:1e:
+        b4:b9:58:6e:4a:47:73:ac:c4:31:85:be:89:f7:96:5d:bd:45:
+        f2:78:b9:11:3c:ca:87:0b:30:3e:e9:be:62:0d:7c:ea:d3:b3:
+        31:f5:66:16:05:98:b4:1c:2e:c8:6c:bf:47:06:1d:76:69:1a:
+        e5:2e:99:99:d8:37:4c:21:7d:64:b7:c8:c0:0f:52:ee:16:bd:
+        2e:ec:c8:6c:4d:9f:55:c4:eb:54:d2:f2:7f:a9:5a:25:b9:0b:
+        3e:57:ef:2d:34:cf:83:f0:d6:a9:86:cd:8d:5b:04:7a:42:d8:
+        ed:5a:f1:13:33:34:e2:d2:e7:4b:88:fc:ef:48:24:ee:e7:11:
+        b1:50:e0:69:80:75:47:ce:8e:54:4f:7f:dc:84:7d:3e:dc:d7:
+        e1:85:31:87:a0:13:cf:e5:da:4b:c6:32:48:16:a8:57:52:be:
+        e9:1a:f3:ed
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----