Description of problem:

I was following this guide to set up SSL for cockpit based on the FreeIPA host, and issuing the `ipa-getcert request` command, the request status says CA_UNAVAILABLE.
While debugging the problem, I stumbled across SELinux complaining about ipa-submit (which is not able to talk to the CA Server).

Version-Release number of selected component (if applicable): 0.79.14-5.el9

How reproducible: Always

Steps to Reproduce:
1. Install ipa-client
2. Try to request a certificate using ipa-getcert to a host on the IPA server

Actual results:
certmonger/ipa-submit can't talk to the IPA server

Expected results:
Certificate should be issued and TRACKED by certmonger.

Additional info:
FreeIPA server is living on another host.