URL: https://github.com/freeipa/freeipa/pull/5605 Author: rcritten Title: #5605: Add ACME profile on replica install in non-ACME environment Action: opened

PR body: """ Always import the default certificate profiles

The default certificate profiles were not imported for in a promoted client installation.

This could lead to missing profiles, as was seen in the ACME case, while upgrading from older versions.

The sequence was:

1. Install a non-ACME IPA server 2. Install an ipa client 3. On the client promote to a server with a build that supports ACME.

The resulting installation is missing the acmeIPAServerCert profile because it is provided in INCLUDED_PROFILES which isn't loaded during promotions.

There is already handling to handle issues if the profile already exists so it is safe to call this on every installation.

https://pagure.io/freeipa/issue/8738 """

To pull the PR as Git branch: git remote add ghfreeipa https://github.com/freeipa/freeipa git fetch ghfreeipa pull/5605/head:pr5605 git checkout pr5605