The openvpn man page (v 2.3.2 on OpenBSD 5.6) states that you can use PKI scripts in the easy-rsa subdirectory,
> The OpenVPN distribution contains a set of scripts for managing RSA > certificates & keys, located in the easy-rsa subdirectory. > > The easy-rsa package is also rendered in web form here: > http://openvpn.net/easyrsa.html But this is no longer the case. As far as I know, the easy-rsa scripts were formerly stored in "/usr/local/share/examples/openvpn/easy-rsa" [Notes] PKG_PATH="http://ftp5.usa.openbsd.org/pub/OpenBSD/5.6/packages/amd64/" The up to date official easy-rsa scripts moved to https://github.com/OpenVPN/easy-rsa Orion