OpenVPN easy-rsa is an great tool, hacking it into a NanoBSD env was a bit more challenging, but this should do the trick more and less. Please note generating the random bits can take an long...time.