jca.pe
Using the FreeIPA PKI with Puppet
How to setup Puppet so it runs inside of Apache using Phusion Passenger, mod_nss, and the certificates from FreeIPA.