selinux policies brakes things

[lejeczek]

Hi guys.

Anybody on CentOS Stream?
With updates among which I have
selinux-policy-3.14.3-79.el8.noarch
ipa-selinux-4.9.6-4.module_el8.5.0+921+2b5d5825.noarch
I end up with problems:

Starting The Apache HTTP Server...
ipa: INFO: KDC proxy enabled
ipa-httpd-kdcproxy: INFO     KDC proxy enabled
[Mon Sep 27 08:58:25.895507 2021] [auth_gssapi:error] [pid 
9238:tid 140576742644032] Failed to open key file 
/etc/httpd/alias/ipasession.key
[Mon Sep 27 08:58:25.895674 2021] [auth_gssapi:error] [pid 
9238:tid 140576742644032] Failed to open key file 
/etc/httpd/alias/ipasession.key
AH00526: Syntax error on line 85 of /etc/httpd/conf.d/ssl.conf:
SSLCertificateFile: file '/var/lib/ipa/certs/httpd.crt' does 
not exist or is empty
httpd.service: Main process exited, code=exited, 
status=1/FAILURE
httpd.service: Failed with result 'exit-code'.
Failed to start The Apache HTTP Server.

-> $ restorecon -RFv /var/lib/ipa/certs/
restorecon: Could not set context for /var/lib/ipa/certs: 
Invalid argument
restorecon: Could not set context for 
/var/lib/ipa/certs/httpd.crt:  Invalid argument

I told OS to autorelabel and after reboot I can not get to 
the system, not via 'ssh' nor with terminal login - that's 
new :)

regards, L.