Upgrade openssl to 0.9.8zc.

Also refactored the RPM spec file a bit, to only mention the version in
one place.

(cherry picked from commit 94141f15c617861f5a55f3e4167e8ab9417c4433)
Change self-signed certificate RSA key size from 4096 to 2048 bits

RPM installation time should improve by quite a bit, especially on
systems with bad entropy source. Really, why spend 100x more time to
generate 4096 bits, when 2048 bits is perfectly fine by today's
standards, let alone that we're talking about a self-signed certificate.

(cherry picked from commit 799c695fdb1d107a606943daf115252f6b79f5bf)
Further sanitisation of the self-signed certificate

Added "-sha256 -utf8" to work in future browsers, removed unneeded stuff
from subject since CN is the only thing that matters in self-signed
certificates.

(cherry picked from commit 672718b05e0ded61a646412c065e2ffb1f185f89)