97e838e server upgrade: fix upgrade from pre-4.0

Authored and Committed by jcholast 7 years ago
    server upgrade: fix upgrade from pre-4.0
    
    update_ca_renewal_master uses ipaCert certmonger tracking information to
    decide whether the local server is the CA renewal master or not. The
    information is lost when migrating from /etc/httpd/alias to
    /var/lib/ipa/radb in update_ra_cert_store.
    
    Make sure update_ra_cert_store is executed after update_ca_renewal_master
    so that correct information is used.
    
    https://fedorahosted.org/freeipa/ticket/5959
    
    Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>