OpenVPN

https://openwrt.org/docs/guide-user/services/vpn/openvpn/server#key_management

VPN_PKI="/etc/easy-rsa/pki"
export EASYRSA_PKI="${VPN_PKI}"
export EASYRSA_CERT_EXPIRE="36500"
cp -p pki/private/*.key /etc/openvpn/
cp -p pki/issued/*.crt   /etc/openvpn/
cp -p pki/{ca.crt,dh.pem}  /etc/openvpn/

service openvpn restart