Hi there,
Older versions of OpenVPN, which were included with earlier versions of the Edgerouter firmware (1.2 for sure) included a set of scripts known as easy-rsa. The Easy-RSA scripts are used to generate certificate authority, server, and client keys and DH parameters.
Starting with OpenVPN 2.3, the easy-rsa scripts are no longer installed with OpenVPN. Instead, you have to manually download them and place them in the proper location in order to use them with OpenVPN.
As of ERL Firmware 1.7 (and possibly earlier), the easy rsa scripts are missing, and so I assume that an upgarde to OpenVPN 2.3 was made. Is there any chance that we can persuade the powers that be at UBNT to include the easy-RSA scripts in the future versions of the ERL firmware?