To update the CA certificate in the Dogtag NSS database, the ipa-cacert-manage renew and ipa-certupdate commands temporarily change the profile of the CA certificate certmonger request, resubmit it and change the profile back to the original one.

When something goes wrong while resubmitting the request, it needs to be modified and resubmitted again manually. This might fail with invalid cookie error, because changing the profile does not change the internal state of the request.

Detect this in dogtag-ipa-ca-renew-agent and reset the internal state when profile is changed.