Switch from psf-ca to a salt generated CA pillar
Setup postgresql to use the Salt CA TLS certificate
Move the haproxy cipher configuration into the tls pillar
Correctly set the issuer to the CA
Watch the certificate files
Restructure the files placed on disk into a single PEM
Allow the Salt CA to be valid for 5 years
regenerate certificates when they've reached 25% of their lifetime
Refactor to make this nicer/saner
Move the regular tls handling over to the tls state
Document the new security mechanisms
Document the required master configuration for the service authenticity
Merge pull request #10 from dstufft/certificate-authority

Enable Authentication of Services