Issue

When running ipa-advise config-server-for-smart-card-auth, the generated script refers to nss.conf although FreeIPA is now using ssl.conf.

Steps to Reproduce

1. install IPA server
2. kinit admin
3. ipa-advise config-server-for-smart-card-auth

Actual behavior

The generated script contains the following:

# look for the OCSP directive in nss.conf
#  if it is present, switch it on
# if it is absent, append it to the end of VirtualHost section
if grep -q 'SSLOCSPEnable ' /etc/httpd/conf.d/nss.conf
then
  sed -i.ipabkp -r 's/^#*[[:space:]]*SSLOCSPEnable[[:space:]]+(on|off)$/SSLOCSPEnable on/' /etc/httpd/conf.d/nss.conf
else
  sed -i.ipabkp '/<\/VirtualHost>/i SSLOCSPEnable on' /etc/httpd/conf.d/nss.conf
fi

Expected behavior

The generated script should rather modify /etc/http/conf.d/ssl.conf

Version/Release/Distribution

master branch of freeipa

Additional info:

FreeIPA is using ssl.conf instead of nss.conf since commit 805aea2443c902cd7c5525102701f116b43da575