OpenVPN roles

Hi guys,
This is a whole bunch of changes meant to make OpenVPN-Client and Server a bit more reliable
Notably the OpenVPN roles now depend on easy-rsa-certificate roles. The easy-rsa-CA-client and easy-rsa-CA-server are combined into the one easy-rsa-certificate (throw  --server in the variable x509_csr_args where appropriate). easy-rsa-certificate makes sure that keys and certs exist on the node that needs them, so that OpenVPN roles don't need to copy keys or certs

I've also include my topplay.yml. I usually execute ansible-playbook -i inventory topplay.yml. My inventory contains a list of my VMs and places them in groups (such as the OpenVPN server group)
Note that to use the OpenVPN-Server and OpenVPN-Client roles you need to define one node to be your x509_ca_server (this may be localhost if you wish)