strongSwan User Documentation » Configuration Files » ipsec.d »
The directory /etc/ipsec.d/ocspcerts contains trustworthy OCSP signer certificates.