PF Sense setup (I)

Will try to keep a journal (daily, hopefully) of what I'm doing on the PF setup.

Today got the OpenVPN up & running; it way more complex than doing so if you run, say, Endian, as your router/ firewall/ UTM solution; but once it is up and running, it seems, it feels more robust.
By far, the greatest PITA is setting up the PKI files.

This is the openvpn line to connect as client, for the moment, at least:

sudo openvpn --client --pull --comp-lzo --nobind --dev tun \
--ca ~/ca.crt --cert ~/certificate.crt --key ~/key.key \
--remote my.pf-sense.router --proto tcp