[CentOS] C6 renew IPA CA (root) certificates

Mon Nov 18 10:23:58 UTC 2019
Markus Hetzenecker <markus.hetzenecker at enveo.at>

Hi all,

I need to renew the self-signed CA (root) certificates of my CentOS 6 IPA 
installation (ipa-server-3.0.0-51.el6.centos.x86_64) after 8 years.

In the documention i find only for "Renewing CA Certificates Issued by 
External CAs" , found in
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/
identity_management_guide/cas

Thanks for any pointers, M.