Andrew Meyer via FreeIPA-users wrote:
> While building a new freeipa server in AWS I got this error:
> 2018-03-01T18:15:49Z DEBUG The ipa-server-install command failed,
> exception: RuntimeError: Certificate issuance failed (CA_UNREACHABLE)
> 2018-03-01T18:15:49Z ERROR Certificate issuance failed (CA_UNREACHABLE)
> 2018-03-01T18:15:49Z ERROR The ipa-server-install command failed. See
> /var/log/ipaserver-install.log for more information
>
> I did some research and found this is possibly related to version 4.5.0?
Probably not. Run getcert-list to hopefully get more context to the error.
> I have a host entry in /etc/hosts but that didn't seem to fix the
> problem. Is there something else I'm missing?
>
> Do you know when 4.6.x will be released to epel/amazon?
The usual cause for version lag in RHEL is missing dependencies. Many
important changes are backported so in RHEL you can never really rely on
the version.