install: drop support for Dogtag 9

Dogtag 9 CA and CA DS install and uninstall code was removed. Existing
Dogtag 9 CA and CA DS instances are disabled on upgrade.

Creating a replica of a Dogtag 9 IPA master is still supported.

https://fedorahosted.org/freeipa/ticket/5197

Reviewed-By: David Kupka <dkupka@redhat.com>

ipa-client/ipaclient/ipa_certupdate.py

@@ -23,8 +23,8 @@ import shutil
 
 from six.moves.urllib.parse import urlsplit
 
-from ipapython import (admintool, ipautil, ipaldap, sysrestore, dogtag,
-                       certmonger, certdb)
+from ipapython import (admintool, ipautil, ipaldap, sysrestore, certmonger,
+                       certdb)
 from ipaplatform import services
 from ipaplatform.paths import paths
 from ipaplatform.tasks import tasks
@@ -134,10 +134,9 @@ class CertUpdate(admintool.AdminTool):
         if services.knownservices.httpd.is_running():
             services.knownservices.httpd.restart()
 
-        dogtag_constants = dogtag.configured_constants()
         nickname = 'caSigningCert cert-pki-ca'
         criteria = {
-            'cert-database': dogtag_constants.ALIAS_DIR,
+            'cert-database': paths.PKI_TOMCAT_ALIAS_DIR,
             'cert-nickname': nickname,
             'ca-name': 'dogtag-ipa-ca-renew-agent',
         }

ipa-client/man/default.conf.5

@@ -66,16 +66,16 @@ The following options are relevant for the server:
 Specifies the base DN to use when performing LDAP operations. The base must be in DN format (dc=example,dc=com).
 .TP
 .B ca_agent_port <port>
-Specifies the secure CA agent port. The default is 9443 for Dogtag 9, and 8443 for Dogtag 10.
+Specifies the secure CA agent port. The default is 8443.
 .TP
 .B ca_ee_port <port>
-Specifies the secure CA end user port. The default is 9444 for Dogtag 9, and 8443 for Dogtag 10.
+Specifies the secure CA end user port. The default is 8443.
 .TP
 .B ca_host <hostname>
 Specifies the hostname of the dogtag CA server. The default is the hostname of the IPA server.
 .TP
 .B ca_port <port>
-Specifies the insecure CA end user port. The default is 9180 for Dogtag 9, and 8080 for Dogtag 10.
+Specifies the insecure CA end user port. The default is 8080.
 .TP
 .B context <context>
 Specifies the context that IPA is being executed in. IPA may operate differently depending on the context. The current defined contexts are cli and server. Additionally this value is used to load /etc/ipa/\fBcontext\fR.conf to provide context\-specific configuration. For example, if you want to always perform client requests in verbose mode but do not want to have verbose enabled on the server, add the verbose option to \fI/etc/ipa/cli.conf\fR.