I use my phone ( samsung omnia with windows mobile 6.1 OS) to connect , via vpn , to my private lan . I assume that you have already downloaded the CA.pem certificate , then you have to generate a client certificate in hosts>>add , and then export the new certificate with the private key( .pem format ) . In vpn config. page , Authentication ,select X.509Ca or X.509Ca+ Password . now you have to put the two certificate in the same directory of the vpn program in your phone .here the config that I use :
remote myremote.dyndns.org 1194
is important to specify the full path for the ca , cert , and key . the cert client and the key are the “same”.
hope this help U