http://cs.i2p/blog/pq-openvpn
We spun up a few test OpenVPN instances when OpenSSL 3.5.0 was still in beta, and our assumption that we could use something like ML-DSA-87 for the TLS certificates was correct. Halfway through migrating the servers to port striping v3, the stable version of OpenSSL 3.5.0 came out (April 8, 2025), so we went back to the migrated servers and added these new ML-DSA-87 instances, then continued migrated the remaining servers, but this time also including these new instances.