Lower pki-ca requires to 10.1.2
    
    Current Dogtag 10.2 and it's requirements are not properly packaged for
    CentOS, yet. To enable FreeIPA running on CentOS 7.0, lower the
    Requires on Fedora 20 and CentOS platform on Dogtag 10.1.2 which
    has the patches required by FreeIPA backported and which has all
    dependencies avaiable.
    
    https://fedorahosted.org/freeipa/ticket/4737