Currently we utilize an exec resource to manage the TLS certificate for StackStorm. Instead we should utilize the OpenSSL module https://forge.puppet.com/camptocamp/openssl .
Also, probably be good to add a $manage_ssl_cert option to the ::st2 class in case someone wants to generate their own cert in their own special way.