- etc/ldap/ssl/slapd-cert.cnf: generate 2048 instead of 1024 bit key.
 - ldap-tools/mkslapdcert: use sha256 instead of sha1 algorithm.