for PCI, puppet master's 8140 was reporting it as a vulnerability for self signed certificate. I have done this in the past with foreman-puppet. Tried to mimic the same with just openvox master