[Puppet Users] tlsv1 alert unknown ca

I fixed this by configuring webrick to set :SSLCACertificateFile and
:SSLCACertificatePath to the ssl bundle I got from godaddy.

s=WEBrick::HTTPServer.new(
:Port => 8443,
:Logger => WEBrick::Log::new($stderr, WEBrick::Log::DEBUG),
:DocumentRoot => "/tmp/webrick_test/doc_root",
:SSLEnable => true,
:SSLVerifyClient => OpenSSL::SSL::VERIFY_PEER,
:SSLCertificate => cert,
:SSLPrivateKey => pkey,
:SSLCACertificateFile => "sf_bundle.crt",
:SSLCACertificatePath => "/tmp/webrick_test",
:SSLCertName => [ [ "CN", "myhost.net" ] ]
)

s.start