Each ca section is named with a unique label ca strongswan The only mandatory parameter is cacert=strongswanCert.pem which points to the CA certificate which usually resides in the default directory/etc/ipsec.d/cacerts/but could also be retrieved via an absolute path name. ...