[strongSwan] best way to generate self-signed certs for strongswan-4, 5, x

[luxInteg]

Greetings 

I am atttempting to use strongswan-4.5.2 after  last playing with 
strongswan-2.x. some years ago.  I have this questions.

Which is the best way to generate certificates for strongswan?  This way  as 
with the older version
( http://www.natecarlson.com/2006/07/10/configuring-an-ipsec-tunnel-with-
openswan-and-l2tpd/#gencert)
or is way :-
( http://wiki.strongswan.org/projects/strongswan/wiki/IpsecPKI)


Advice would be appreciated
luxInteg