Switch .cnf files to sha256 message digest

Use sha256 as default_md (message digest) in all .cnf files as it is
more secure than the previous, now considered weak, sha1.