Since mod_ssl is using the /etc/ipa/ca.crt for its source of the CA chain, we don't need to update the HTTPD NSS database anymore (since it does not really exist). https://pagure.io/freeipa/issue/3757 Reviewed-By: Christian Heimes <cheimes@redhat.com> Reviewed-By: Stanislav Laznicka <slaznick@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com>