I haven&#x27;t found any that I was happy with, last time I needed something similar (years ago now). But I&#x27;ve had some similar worries, and one of the projects on my short-list to look into more is:<p><a href="https:&#x2F;&#x2F;github.com&#x2F;coreos&#x2F;etcd-ca" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;coreos&#x2F;etcd-ca</a><p>Not sure if that&#x27;d help much if you explicitly want to use an external CA though.