For now we use strongswan-pki but we should just use openssl See: https://gist.github.com/Soarez/9688998