See http://forum.ipfire.org/index.php/topic,7365.0.html for information.

Turns out the CCD does not work if the user has embedded spaces in the
CN (field labeled "User's full name or system hostname:" on Road Warrior
creation screen). I don't remember exactly, but I believe OpenSSL or
OpenVPN itself converts spaces to underscores. You can test this by
creating a user, embedding spaces, and then on the server
cat /var/log/ovpnserver.log

You will note the Common Name has spaces converted to underscores.

The solution is to write the ccd file with underscores, ie
$filename =~ s/ /_/gi;

If someone will point me to the script that creates that, I will be
happy to patch and test, then send you the diff.

Rod

NOTE: I have spent a little time looking at this and solving it for an
existing installation, but I intend to pull an old router out and
reconfigure it for a controlled test, unless someone else can verify my
findings independently.

Rod