Instructions

Install client

sudo apt-get install strongswan

Edit config

Edit /etc/ipsec.conf so that it has the below contents:
config setup
    charondebug="ike 2, cfg 2"

conn bitstreamvpn
    rightsubnet=0.0.0.0/0
    keyexchange=ikev2
    auto=add
    right=bitstreamvpn.com
    leftsourceip=%modecfg
    rightcert=bitstreamvpn-endpoint.pem
    leftcert=vpn_client.pem
            

Install our certificates

Download our CA certificate and put it in /etc/ipsec.d/cacerts/bitstreamvpn-ca.pem
Also, download our endpoint certificate and put it in /etc/ipsec.d/certs/bitstreamvpn-endpoint.pem

Create a CSR

We'll give you some commands like:
sudo openssl genpkey -algorithm RSA \
    -out /etc/ipsec.d/private/vpn_client_key.pem \
    -pkeyopt rsa_keygen_bits:2048

sudo openssl req -new -keyform pem \
    -key /etc/ipsec.d/private/vpn_client_key.pem \
    -subj '/C=US/O=test/CN=d2a2419d-e6d0-46f7-9f58-23c2c2f210d8'
                
Run these in your terminal and give us the output to receive your certificate.

Install your certificate

Copy your certificate to /etc/ipsec.d/certs/vpn_client.pem

Start it up

sudo ipsec restart; sudo ipsec up bitstreamvpn