Puppet EPP

ca.pp

define openvpn::ca (
  String $country,
  String $province,
  String $city,
  String $organization,
  String $email,
  String $common_name     = 'server',
  Optional[String] $group = undef,
  Integer $ssl_key_size   = 2048,
  Integer $ca_expire      = 3650,
  Integer $key_expire     = 3650,
  Integer $crl_days       = 30,
  String $key_cn          = '',
  String $key_name        = '',
  String $key_ou          = '',
  Boolean $tls_auth       = false,
) {
  file { "/etc/openvpn/test/easy-rsa/vars":
      ensure  => file,
      mode    => '0550',
      content => epp('openvpn/vars-30.epp'),
    }
}

vars-30.epp

export EASYRSA_REQ_COUNTRY="<%= $::openvpn::ca::country %>"