http://gpp6nwvsps43b3mfacsh433uroo6uyjvvpr6tgj4jh4n5ngxt7rqbvid.onion/posts/ikev2-libreswan.html
Also replace yy.yy.yy.yy by your server ’ s actual IP address. certutil -S -c "Example CA" -n "yy.yy.yy.yy" -s "O=Example,CN=yy.yy.yy.yy" -k rsa -g 4096 -v 12 -d sql:/etc/ipsec.d -t ",," -1 -6 -8 "yy.yy.yy.yy" Again, a random seed must be generated for the creation of your key. Do some random typing until the process meter is full.