I've just published a follow up to my earlier blog, it gives a step-by-step guide to setting up certs for the VPN gateway and Android client: http://danielpocock.com/strongswan-debian-rhel-fedora-with-android-client Regards, Daniel