puppetlabs/puppet — pull request #410 by nicholashubbard (2012-01-26 16:57:09+00:00)
Title: Unable to remotely sign a SSL certificate via certificate face

The problem is that options[:ca_location] is a string not a symbol. Seems like the safer option is to pull Puppet::SSL::Host.ca_location since it is already set correctly.