Open VPN server - authentication

Is it possible to do authentication by certificate? I have found somewhere that this option doesn’t work on ROS. So is it true that only possible way is username/password?
If not, how to do it? I did lot of experiments without any success.
Tom

Authentication only by certificate is not possible, but you can use username/password + certificate.