1 - Go to the easy-rsa directory and edit the vars file.
# cd /etc/openvpn/easy-rsa/2.*/
2 - Run clean-all to ensure that we have a clean certificate setup.
./clean-all ## Note all certificates in the 'keys/' directory will be removed, make sure you have copied the used certificates to a different keys folder
3 - Generate client key and certificate.
./build-key username The keys will be generated in the keys/ folder
4 - Copy the keys in the directory `keys/` to `/etc/opennvpn/keys`.
cp -r keys/* /etc/openvpn/keys/.