ipsec.d/cacerts¶

The directory /etc/ipsec.d/cacerts contains trustworthy certificate authority (CA) certificates. These are loaded automatically by the keying daemons.

Special parameters (like CRL distribution points) can be assigned to a CA with an optional ca section in ipsec.conf.