What is best practice if I need to revoke CA of the FreeIPA and issue a new one? For example, the system administrator is leaving the company and published it somewhere?
Please use the FreeIPA users mailing lists for discussions, https://lists.fedorahosted.org/archives/list/freeipa-users%40lists.fedorahosted.org/ .The issue tracker is meant to track bugs and feature requests, not as a support forum.
Closing the ticket.
Metadata Update from @abbra: - Issue close_status updated to: invalid - Issue status updated to: Closed (was: Open)