I put a script or two on github; generates a CA and server and client certs, suitable (I hope!) for openvpn and https and all that. Based on the easy-rsa scripts, but I didn’t find them that easy to use.
A haiku to openssl:
openssl a black crane over the lake may you rot in hell
Image is Hokusai’s “Mount Fuji with Cherry Trees in Bloom”; lovely.