"strongSwan for newbies" should reworked
During installation, you will be prompted to answer a question:
Choose to generate a self-signed certificate.
An RSA private key is generated in /etc/ipsec.d/private/gatewayKey.pem :
-----BEGIN RSA PRIVATE KEY-----
-----END RSA PRIVATE KEY-----
The corresponding public key is generated in /etc/ipsec.d/certs/gatewayCert.pem.:
Warning, these are fake certificate, don't try to use them.
The line "Would you like to install opportunistic encryption or would you like to generate a self-signed certificate?" does not come and no certificates are created in
/etc/ipsec.d/private/ and /etc/ipsec.d/certs/ .
So Newbies like me hangs at this point and there isn't an explanation, how to create the certificates manually.
This point should be better explained, now it is impossible to handle.