Title: #177: Add options to write lightweight CA cert or chain to file
But could you make `ca-find` return the cert/chain as well if (and only if)
`--all` is specified? Do not add the `--chain` and `--certificate-out` options
to it though. This is for consistency with `cert-find`, `host-find`,
`service-find`, etc. Not a blocker.
Also see inline comments.
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code