Using X.509 Certificates
OpenVPN relies heavily on X.509 certificates for authenticating both the server and clients. Managing and using X.509 certificates is often referred to as managing a Public Key Infrastructure (PKI).
The basics of using X.509 certificates are covered by the 'easy-rsa' scripts, which are part of the regular OpenVPN distribution. This page contains more detailed information on the use of certificates.