Refuse to accept certificate chains containing any RSA public key smaller

net/data/ssl/certificates/1024-rsa-intermediate.pem

Index: net/data/ssl/certificates/1024-rsa-intermediate.pem
===================================================================
--- net/data/ssl/certificates/1024-rsa-intermediate.pem	(revision 0)
+++ net/data/ssl/certificates/1024-rsa-intermediate.pem	(revision 0)
@@ -0,0 +1,63 @@
+Certificate:
+    Data:
+        Version: 3 (0x2)
+        Serial Number: 237 (0xed)
+        Signature Algorithm: sha1WithRSAEncryption
+        Issuer: CN=2048 RSA Test Root CA
+        Validity
+            Not Before: Dec 10 02:17:59 2011 GMT
+            Not After : Dec  7 02:17:59 2021 GMT
+        Subject: CN=1024 rsa Test intermediate CA
+        Subject Public Key Info:
+            Public Key Algorithm: rsaEncryption
+            RSA Public Key: (1024 bit)
+                Modulus (1024 bit):
+                    00:a8:93:f1:85:66:37:bb:d7:dc:6e:d4:9c:1d:58:
+                    42:f3:0d:30:34:86:6b:a2:80:cc:2d:4d:0b:51:0c:
+                    ea:6e:b7:b5:fa:ba:4a:73:71:18:ce:e4:06:55:51:
+                    c9:6f:03:74:61:7a:c5:85:68:27:32:e9:a9:37:7c:
+                    b2:61:5c:db:9b:ea:f3:eb:a0:a8:91:9e:b1:26:1b:
+                    fd:7e:e3:5b:03:82:c5:b0:5a:06:b2:5a:ae:10:cb:
+                    a6:e3:36:60:3d:d4:2a:24:33:24:d5:7e:46:3b:02:
+                    a3:d7:f6:9e:59:79:cd:16:75:3f:dd:70:75:12:c6:
+                    01:dc:90:a7:3c:b3:35:8d:35
+                Exponent: 65537 (0x10001)
+        X509v3 extensions:
+            X509v3 Basic Constraints: critical
+                CA:TRUE
+            X509v3 Subject Key Identifier: 
+                69:CA:F8:07:DB:3E:A5:9F:2B:A2:2E:66:78:9C:A3:01:23:C0:91:EC
+            X509v3 Key Usage: critical
+                Certificate Sign, CRL Sign
+    Signature Algorithm: sha1WithRSAEncryption
+        87:15:ac:c7:71:88:fe:cc:e5:c1:b6:c1:e7:13:07:c5:6b:fb:
+        b5:d6:51:34:70:7e:30:12:d9:f0:26:e6:99:3d:c3:29:c3:50:
+        62:1a:1a:89:4f:63:10:25:60:e5:2e:7f:ca:7c:a9:98:48:1d:
+        2f:33:d8:c8:ff:78:c9:eb:5b:d9:1e:1f:63:ef:23:39:75:15:
+        ae:32:c0:d6:38:be:39:0a:6b:3a:c8:1a:a8:f4:a1:6f:84:8b:
+        32:f3:2a:0a:8d:67:2d:2e:d0:33:13:b6:62:e3:c1:84:cf:b5:
+        02:56:3d:52:9c:17:15:97:52:b3:77:cb:14:45:7f:ee:3c:4b:
+        cc:ad:37:8b:05:a9:09:ae:b6:77:6f:4a:f3:2f:d1:2e:dd:2e:
+        2b:55:04:5a:3b:41:75:51:8e:f1:cd:76:e2:18:e4:a4:49:73:
+        c0:f2:20:57:87:d5:bc:b2:a4:59:38:97:dc:dc:a0:12:bf:27:
+        04:5a:c8:d4:ab:90:41:66:34:01:b4:dd:e2:70:80:0f:52:f5:
+        f5:8a:0b:ab:7d:22:92:c6:a0:a6:c8:8b:26:fd:d9:fd:ea:27:
+        2b:74:4b:f9:04:1d:28:77:73:3c:5e:a1:62:6c:7d:90:df:83:
+        64:86:a1:19:d7:b6:cc:18:01:c8:fd:92:c5:c4:00:b4:cc:cf:
+        3e:57:0c:f9
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----