The following is a summary of all required steps to enable your CS407 to use openvpn with your own PKI – I was following these instructions. If you want to install and configure openvpn, follow this link.
download and extract openvpn-2.x.zip
copy easy-rsa folder to /opt/etc/openvpn/easy-rsa
edit vars in folder /opt/etc/openvpn/easy-rsa
export KEY_CONFIG=/opt/etc/openvpn/easy-rsa/openssl.cnf
export KEY_DIR=/opt/etc/openvpn/private.lan/keys
export KEY_COUNTRY=YOURCOUNTRY
export KEY_PROVINCE=YOURPROVINCE
export KEY_CITY=YOURCITY
export [...]
read the article