Curious what you want to use OpenVPN for?
Here using OpenVPN / Wireguard clients on my Ubuntu laptops via PIA (Private Internet Access).
Noticed lately that many websites block these VPN servers in the cloud connections.
Using a TOR OS or TOR client for surfing works well and are not blocked by web sites.
You can install a TOR proxy server or OpenVPN client directly on to PFSense if you want.
The above written here only use VPN clients external to home connected clients to the PFSense VPN servers. (IPSec, OpenVPN or Wireguard - have all three running now). (Homeseer, HA, Zoneminder, BI, OmniTouch Pro Snaplink running on clients). IE: Windows, Android, iOS clients on the WAN.