the other option would be to put a really basic bootstrap config on the ca server that just configures puppet to point to the main server