Janez Molicnik via FreeIPA-users wrote:
Hey, just an update..
I've managed to successfully install the ipa-client when I copied the /etc/ipa/ca.crt
file from ipa-server to the new would be ipa-client that accepted the certificate this
time and finally installed.
You can also use the option --ca-cert-file to point to a PEM file
containing the certificate chain.
rob