OpenSSH has long been an example of solid development (and crypto) practices too, and has had a few less issues. Search for "Use constant time memcmp when comparing HMACs in openvpn_decrypt." (the fix is my colleague's, but the bug was mine.)

That said, both are very good, and if you do want a full VPN there's a lot to recommend OpenVPN.