Hi Mike, > Is the ca section of the ipsec.conf used only for ca-certificates or also for the leftcert itself? > If so, what is the element cacert referring to? man ipsec.conf or [1]? Regards, Tobias [1] https://wiki.strongswan.org/projects/strongswan/wiki/CaSection