I would like to setup Strongswan/Libreswan with PKI authentication. Now I have searched and found only how to configure specific accepted client certificates like here: http://technikenity.blogspot.com/2013/06/howto-windows-8-ikev2-vpn-with.html
What I would like to do is have something like rightCA=companyCA.pem That would make Strongswan accept any client certificate that can build trust up to the CA.
EDIT: I would also like to have a means of authorizing the authenticated clients(eg. against LDAP)