strongswan installation

sudo apt install libtss2-tcti-tabrmd0

systemctl status strongswan-starter

cp /etc/ipsec.d/cacerts/ca.cert.pem /root/ca.cert.pem
cp /etc/ipsec.d/certs/server.cert.pem /root/server.cert.pem
cp /etc/ipsec.d/private/ca.key.pem  /root/ca.key.pem
cp /etc/ipsec.d/private/server.key.pem  /root/server.key.pem

cat /dev/null > ~/.bash_history && history -c

ipsec pki --pub --in server.key.pem --type rsa | ipsec pki --issue --lifetime 2750 --cacert ca.cert.pem --cakey ca.key.pem --dn "CN=vpn.example.com" --san="vpn.example.com" --flag serverAuth --flag ikeIntermediate --outform pem > server.cert.pem