[strongSwan] certificate chain setup for iPhone clients

[Naveen]

Hi,

I plan to setup vpn servers for iPhone clients using strong swan. right now i am using a self-signed CA to sign the client Certificates that are used by the iPhone users (for digi cert auth during IKE). Each user has a unique clientCert. Now i want to move away from self-signed CA to a trusted so that users don't see a warning on their phones.

Any suggestions on how to go about this - like 
a. companies who provide this CA - verisign ?
b. cost involved in setting up this cert chain

thanks
Naveen
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140917/171b92db/attachment.html>