Title: #355: Set up DS TLS on replica in CA-less topology
This is basically the same as 89de60c5d8ba64d619101a7498b8c4469b6e50ae which
had to be reverted because it is not the proper fix.
I would rather wait for the proper fix (#41), which has not been merged yet
because it is blocked by https://bugzilla.redhat.com/show_bug.cgi?id=1377413.
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code