Bug#598732: /usr/share/ssl-cert/ssleay.cnf should use 2048 bits

[Stefan Fritsch <sf@sfritsch.de>]

On Friday 01 October 2010, Daniel Kahn Gillmor wrote:
> It would be a shame if squeeze shipped with this default set below
> some common expectations of a key to last at least the lifetime of
> a debian release.

1024 bits are more than enough to satisfy the security expectations of 
an auto-generated "snake-oil" key for the life time of squeeze. 512 
bits were factored in 1999, 768 bits were factored in 2009. So, expect 
another 5-10 years for 1024.

If an ssl-cert upload is necessary for squeeze for other reasons, I 
will change it. Otherwise it will have to wait for wheezy.