TurnKey OpenVPN

Create a client profile

openvpn-addclient client-name client-email [private-subnet]

Create auto-expiring obfuscated client profile download url

/var/www/openvpn/bin/addprofile client-name

Manually trigger deletion of expired profile download urls

/etc/cron.hourly/openvpn-profiles-delexpired

Revoke client certificate

source /etc/openvpn/easy-rsa/vars
/etc/openvpn/easy-rsa/revoke-full client-name