Hi,

I have been trying to get my router to work as a VPN client using hide.me VPN service following their description here:
hide.me/en/vpnsetup/ubuntu/ikev2/
I am aware that this may not be the correct setup for OpenWrt, but I am too novice to see what should be changed here...

Currently I get the following error when starting the VPN:
root@OpenWrt:~# ipsec up hide-nl
no files found matching '/etc/strongswan.d/*.conf'
initiating IKE_SA hide-nl[1] to 109.201.137.41
generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(HASH_ALG) ]
sending packet: from 192.168.1.56[500] to 109.201.137.41[500] (638 bytes)
received packet: from 109.201.137.41[500] to 192.168.1.56[500] (501 bytes)
parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) CERTREQ N(HASH_ALG) N(MULT_AUTH) ]
local host is behind NAT, sending keep alives
received 2 cert requests for an unknown ca
no IDi configured, fall back on IP address
establishing CHILD_SA hide-nl
generating IKE_AUTH request 1 [ IDi CPRQ(ADDR) SA TSi TSr N(MOBIKE_SUP) N(ADD_4_ADDR) N(ADD_6_ADDR) N(MULT_AUTH) N(EAP_ONLY) ]
sending packet: from 192.168.1.56[4500] to 109.201.137.41[4500] (380 bytes)
received packet: from 109.201.137.41[4500] to 192.168.1.56[4500] (4588 bytes)
parsed IKE_AUTH response 1 [ IDr CERT CERT AUTH EAP/REQ/ID ]
building CRED_CERTIFICATE - X509 failed, tried 1 builders
building CRED_CERTIFICATE - X509 failed, tried 1 builders
no trusted RSA public key found for 'C=MY, ST=Wilayah Persekutuan, L=Labuan, O=eVenture Limited, CN=*.hide.me'
generating INFORMATIONAL request 2 [ N(AUTH_FAILED) ]
sending packet: from 192.168.1.56[4500] to 109.201.137.41[4500] (76 bytes)
establishing connection 'hide-nl' failed

Perhaps the following issue (I have the same for probably all certs, so the srror list is actually much longer) when starting ipsec are related to the problem I have:
ipsec restart

....
Sat Nov 18 20:30:58 2017 daemon.info syslog: 00[DMN] Starting IKE charon daemon (strongSwan 5.3.3, Linux 3.18.23, mips)
Sat Nov 18 20:30:59 2017 daemon.info syslog: 00[CFG] loading ca certificates from '/etc/ipsec.d/cacerts'
Sat Nov 18 20:30:59 2017 daemon.info syslog: 00[LIB] building CRED_CERTIFICATE - X509 failed, tried 1 builders
Sat Nov 18 20:30:59 2017 daemon.info syslog: 00[CFG]   loading ca certificate from '/etc/ipsec.d/cacerts/cd58d51e.0' failed
.....

It seems to me that there is an issue with I have been googling for quite a while but with no success.

Does anyone have any idea what could be wrong?

Thanks a lot in advance!