pki: remove database config upgrade

BACKGROUND

There is a bug in engine-config that existed since beginning of time, it
does not take the CABaseDirectory into account.
However, both the setup and the upgrade set full path for all pki
artifacts, this is why this bug has been never discovered.

DESCRIPTION

The database upgrade script puts two values per default, these are
relative:
select
fn_db_update_config_value('keystoreUrl','keys/engine.p12','general');
select
fn_db_update_config_value('TruststoreUrl','.truststore','general');

When system is upgraded from 3.1, after database upgrade the
engine-upgrade script will convert keys to PKCS#12 format, and overwrite
database settings.

However, if you upgrade from 3.2 to 3.2, then the engine-upgrade script
does not overwrite the setting, leaving relative paths.

WORKAROUND

Modify keystoreUrl and truststoreUrl within database to absolute paths.

Change-Id: Iec8bb367033b5ec03b5b97bd183fc5683523ccd9
Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=968906
Signed-off-by: Alon Bar-Lev <alonbl@redhat.com>
pki: set ownership of apache key to root

Apache reads the keys before dropping privileges, correct permissions
are read by root.

Change-Id: I7f3ab38f6e3f4e03244878877d4bab0fd72bc3c4
Signed-off-by: Alon Bar-Lev <alonbl@redhat.com>
pki: upgrade: do not overwrite apache certificate and key

Fix missing existence condition before duplicate the apache certificate
and key.

This will overwrite 3rd party certificate (if installed) at upgrade from
3.2 to more recent 3.2.

Change-Id: I638e9193fdda7ca9a88313ba1890e9c1a76179af
Signed-off-by: Alon Bar-Lev <alonbl@redhat.com>
Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=969755