Title: #367: Remove nsslib from IPA
In the last update I renamed the proposed config option `ca_certfile` to
`cacert_store` and made a requirement for it to be absolute path. This was done
with possible future changes to it (thanks @HonzaCholasta for pointing that
If the tests pass then this should be ready for review.
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code