Title: #5605: Add ACME profile on replica install in non-ACME environment
Always import the default certificate profiles
The default certificate profiles were not imported for
in a promoted client installation.
This could lead to missing profiles, as was seen in the ACME
case, while upgrading from older versions.
The sequence was:
1. Install a non-ACME IPA server
2. Install an ipa client
3. On the client promote to a server with a build that supports
The resulting installation is missing the acmeIPAServerCert
profile because it is provided in INCLUDED_PROFILES which isn't
loaded during promotions.
There is already handling to handle issues if the profile already
exists so it is safe to call this on every installation.
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/5605/head:pr5605
git checkout pr5605