Solving this issue of certificates and VPN

PeterUK

So not sure if SecuExtender VPN Client solves but one way would be for the SecuExtender VPN Client to downland the certificate from the USG by user name and password on some port to update before connecting to the VPN.

So what the issue? Certificates will last 47-days and if you have like strongswan or windows needing to install a intermediate that both can be done by just the certificate the issue is getting the updated certificate.

So FLEX H now does Let's Encrypt Certificate and this updates the remote VPN matched Certificate but how to give that Certificate the clients?

How are some options

1. just use a self sign Certificate
2. make the Certificate available from the USG by user name and password login some port
3. make the USG upload to a FTP server
4. make USG send the Certificate by Email

Not sure if there are other possibilities and even then the client would have to manually update the Certificate every 47-days