[Freeipa-users] Installation fails in adding CA certificate entry - certutil does not support --seimple-self-signed

After some plumbing and manual operations I managed to have CA running during installation of the FreeIPA server. Currently the install fails in : Configuring directory server (dirsrv) [2/3]: adding CA certificate entry args=['/usr/bin/certutil', '-d', 'dbm:/etc/dirsrv/slapd-IPA-LOCAL/', '-O', '--simple-self-signed', '-n', 'IPA.LOCAL IPA CA', '-f', '/etc/dirsrv/slapd-IPA-LOCAL/pwdfile.txt'] The installation seems to fail due to the fact that certutil does not support --simple-self-signed parameter. Does anybody know if there is a version of libnss3-tools for Ubuntu 18.04 which does have a certutil package which support the option invoked or if the option can be disabled/removed during install ?