[Freeipa-devel] [freeipa PR#4171][closed] [Backport][ipa-4-7] Do not renew externally-signed CA as self-signed