Personally, I like OpenVPN with pfSense. With the help of Scott's easyrsa4pfsense scripts available from the forums, you can easily generate and manage at least a small number of SSL certificates. At work we have 25 users all with individual certificates so I can add them to the revocation list if need be. At home I'm using pfSense as well and have a site to site setup with OpenVPN using SSL as well and everything is working just the way I would like it to. I hope that helps.
Curtis
