bundle exec puppet master --no-daemonize --certname localhost --dns_alt_names localhost --verbose
bundle exec puppet agent -t --certname localhost --server localhost
To re-set the CSR process for an agent:
on the master: puppet cert clean <agent fqdn>
on the agent: remove the ssldir