Wow, thanks for all the awesome replies, everyone! I’ve been trying out some of the tips you guys shared, and it’s been super helpful. I switched to using certificates instead of pre-shared keys, and it feels way more secure.
I also checked out the StrongSwan wiki, and it’s been a game-changer for setting things up. One quick question though—anyone know if there’s a way to automate certificate renewal? I’m a bit worried about them expiring and breaking the connection.
Thanks again, you guys rock!
I also checked out the StrongSwan wiki, and it’s been a game-changer for setting things up. One quick question though—anyone know if there’s a way to automate certificate renewal? I’m a bit worried about them expiring and breaking the connection.
Thanks again, you guys rock!