http://gpp6nwvsps43b3mfacsh433uroo6uyjvvpr6tgj4jh4n5ngxt7rqbvid.onion/posts/ikev2-strongswan.html
Issue the command that follows, replacing country US , organization Example , and common name Example CA with your own choices for values: ipsec pki --gen --outform pem > /etc/swanctl/private/ca.pem chmod 600 /etc/swanctl/private/ca.pem ipsec pki --self --ca --lifetime 3650 --in /etc/swanctl/private/ca.pem --dn "C=US, O=Example, CN=Example CA" --outform pem > /etc/swanctl/x509ca/ca.pem 1.5.