[isaack]

Have you looked into https://github.com/slackhq/nebula? It uses X509 cert for auth.

Although for my home lab, using X509 is more of a minus than a plus due to complexity involved.

[psanford]

Nebula uses public key certificates, but they are not x509. The nebula certificate format uses protobuf for its encoding.