Provide RSA2048 as per RFC

webrtc/base/nssidentity.cc

 /*
  *  Copyright 2012 The WebRTC Project Authors. All rights reserved.
  *
  *  Use of this source code is governed by a BSD-style license
  *  that can be found in the LICENSE file in the root of the source
  *  tree. An additional intellectual property rights grant can be found
  *  in the file PATENTS.  All contributing project authors may
  *  be found in the AUTHORS file in the root of the source tree.
  */
 
@@ skipping 34 matching lines @@
   if (privkey_)
     SECKEY_DestroyPrivateKey(privkey_);
   if (pubkey_)
     SECKEY_DestroyPublicKey(pubkey_);
 }
 
 NSSKeyPair* NSSKeyPair::Generate(KeyType key_type) {
   SECKEYPrivateKey* privkey = nullptr;
   SECKEYPublicKey* pubkey = nullptr;
   SSLKEAType ssl_kea_type;
-  if (key_type == KT_RSA) {
+  if (key_type == KT_RSA1024 || key_type == KT_RSA2048) {
     PK11RSAGenParams rsa_params;
-    rsa_params.keySizeInBits = 1024;
+    rsa_params.keySizeInBits = key_type == KT_RSA1024 ? 1024 : 2048;
     rsa_params.pe = 0x010001;  // 65537 -- a common RSA public exponent.
 
     privkey = PK11_GenerateKeyPair(
         NSSContext::GetSlot(), CKM_RSA_PKCS_KEY_PAIR_GEN, &rsa_params, &pubkey,
         PR_FALSE /*permanent*/, PR_FALSE /*sensitive*/, nullptr);
 
     ssl_kea_type = ssl_kea_rsa;
   } else if (key_type == KT_ECDSA) {
     unsigned char param_buf[12];  // OIDs are small
     SECItem ecdsa_params = {siBuffer, param_buf, sizeof(param_buf)};
@@ skipping 357 matching lines @@
 
   certificate = CERT_CreateCertificate(serial, subject_name, validity, certreq);
   if (!certificate) {
     LOG(LS_ERROR) << "Couldn't create certificate";
     goto fail;
   }
 
   arena = certificate->arena;
 
   SECOidTag sec_oid;
-  if (params.key_type == KT_RSA) {
+  if (params.key_type == KT_RSA1024 || params.key_type == KT_RSA2048) {
     sec_oid = SEC_OID_PKCS1_SHA256_WITH_RSA_ENCRYPTION;
   } else if (params.key_type == KT_ECDSA) {
     sec_oid = SEC_OID_ANSIX962_ECDSA_SHA256_SIGNATURE;
   } else {
     // We should not arrive here since NSSKeyPair::Generate would have failed.
     // Play it safe in order to accomodate code changes.
     LOG(LS_ERROR) << "Key type requested not understood";
     goto fail;
   }
 
@@ skipping 126 matching lines @@
 
 
 NSSCertificate &NSSIdentity::certificate() const {
   return *certificate_;
 }
 
 
 }  // rtc namespace
 
 #endif  // HAVE_NSS_SSL_H