cfgparser: use correct SHA256_DIGEST_LENGTH