Title: #584: Improve the implementation of PKINIT certificate retrieval
@simo5 are you OK with @abbra's inline suggestions (it is your commit after all
@MartinBasti hmmm I will try to reproduce the issue with fresh VMs.
See the full comment at
Manage your subscription for the Freeipa-devel mailing list:
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code