install: fix external CA cert validation
    
    The code which loads the external CA cert chain was never executed because
    of an incorrect usage of an iterator (iterating over it twice).
    
    https://fedorahosted.org/freeipa/ticket/6166
    
    Reviewed-By: Jan Cholasta <jcholast@redhat.com>