config setup 
   strictcrlpolicy=no
   uniqueids=never
   
ca test-192.168.9.12-192.168.9.11
    cacert=/etc/test/ca-certs//TrustedRoot.pem
    auto=route
    
conn test-192.168.9.12-192.168.9.11
    esp=aes128gcm16-aes128gcm16-ecp256!
    ike=aes128-sha256-ecp256!
    keyexchange=ikev1
    type=tunnel
    ikelifetime=24h
    lifetime=8h
    inactivity=60m
    left=192.168.9.12
    right=192.168.9.11
    auto=route
    leftauth=pubkey
    rightauth=pubkey
    leftca="DC=com, DC=test, DC=go, CN=CERTSERVER-CA"
    rightca=%same
    leftid="C=US, O=test, OU=test, CN=QdCertSaIke2P384"
    rightid=%any
    leftsendcert=always
    rightsendcert=always
    
