Comment 3 for bug 948983

1: Correct, if /etc/puppet/puppet.conf has no [main] section with ssldir set (to /var/lib/puppet/ssl) the puppetmaster-passenger package install will use its default /etc/puppet/ssl path for the SSL variables in the /etc/apache2/sites-available/puppetmaster vhost and the generated certificate files.