Extend the build-certs-chroot script is to fill in the public key fingerprint of the CA certificate in the appropriate strongswan.con files.