Use different certificates for openvox agent/server/db on primaries/compilers #43

Right now it's common that one server (as in: VM or physical box) has one certificate from the Puppet CA. If there's just an openvox agent running, the cert will be only used by the agent. When there's also a DB and or server running, they will all use the same certificate.

I had multiple customers that bricked their setup because they wanted to revoke & renew the agent certificate on the primary, which then broke the server & DB.

This is quite easy to fix, I always create a certificate puppet.local with proper DNS alt names. That will be used by the server & DB, just set certname = puppet.local in the server section in puppet.conf and the normal certname in the name section.

I think a setup like this should be the default.