Noel, > Also, I noticed, that the manpage documents "connections.<conn>.remote<suffix>.cacert", > but the parser only accepts "connections.<conn>.remote<suffix>.cacerts". Thanks, fixed with [1]. Regards Martin [1]http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=88a33f8a