http://gpp6nwvsps43b3mfacsh433uroo6uyjvvpr6tgj4jh4n5ngxt7rqbvid.onion/posts/ikev2-strongswan.html
Create Client Certificate Generate the client certificate, similar to the way you generated the server certificate. In the following example, replace win10 , example.com , and Example wherever they appear by your own values: ipsec pki --gen --outform pem > /etc/swanctl/private/win10.pem chmod 600 /etc/swanctl/private/win10.pem ipsec pki --pub --in /etc/swanctl/private/win10.pem | ipsec pki --issue --lifetime 730 --cacert...