URL:
Reporter RHNID:
Section: -
Language: en-US (English)
Workaround:

Description: Chapter 4: Managing Certificates

When discussing ipa-getcert (p140) also discuss the required SELinux context. 

Use language similar to the GE step 2.5:

2.5. Certmonger is not permitted to create certificates in arbitrary locations. Configure an
SELinux file context for the directory created in the previous step.

[root@client ~]# semanage fcontext -a -t cert_t "/etc/vsftpd/certs(/.*)?"