Description of problem:

Upgrade of pulp server clobbers the /etc/pki/pulp/ca.crt and breaks httpd  

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:

1. Install pulp-server-2.1.1-1.el6.noarch on Centos6 
2. modify /etc/pki/pulp/ca.crt to be your own certificate
2. Install pulp-server-2.1.3-1.el6.noarch
3. service httpd restart


Actual results:

httpd restart fails. See error at the bottom of page.

Expected results:

I think maybe the certs should be marked as config in the rpm

[root@ld4repo02 tmp]# rpm -qc pulp-server
/etc/httpd/conf.d/pulp.conf
/etc/pulp/logging/basic.cfg
/etc/pulp/logging/db.cfg
/etc/pulp/logging/unit_tests.cfg
/etc/pulp/server.conf


Additional info:


error from log file /var/log/httpd/ssl_error_log

[Wed Aug 07 12:04:22 2013] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Aug 07 12:04:22 2013] [warn] RSA server certificate CommonName (CN) `localhost' does NOT match server name!?
[Wed Aug 07 12:04:22 2013] [error] Unable to configure RSA server private key
[Wed Aug 07 12:04:22 2013] [error] SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch