move easyrsa vars to openvpn