[raidan]

In the past I've used etcd-ca[0] to perform a similar function, though probably not it's original intention.

[0] https://github.com/coreos/etcd-ca

[eliaspro]

Just playing with SaltStack's recently added x509 state for a fully autonomous/self-signed CA incl deployment to the clients.