strongSwan User Documentation » Configuration Files » ipsec.d »
The directory /etc/ipsec.d/crls contains certificate revocation lists.