Fix ca less IPA install on fips mode
    
    When ipa-server-install is run in fips mode and ca-less, the installer
    fails when the keys are provided with --{http|dirsrv|pkinit}-cert-file
    in a separate key file.
    
    The installer transforms the key into PKCS#8 format using
    openssl pkcs8 -topk8
    but this command fails on a fips-enabled server, unless the options
    -v2 aes256 -v2prf hmacWithSHA256
    are also provided.
    
    Fixes:
    https://pagure.io/freeipa/issue/7280
    
    Reviewed-By: Christian Heimes <cheimes@redhat.com>
    Reviewed-By: Christian Heimes <cheimes@redhat.com>