I put a script or two on github; generates a CA and server and client certs, suitable (I hope!) for openvpn and https and all that. Based on the easy-rsa...