diff --git a/srcpkgs/strongswan/template b/srcpkgs/strongswan/template
index 84684af5deb..15692e2e89b 100644
--- a/srcpkgs/strongswan/template
+++ b/srcpkgs/strongswan/template
@@ -1,7 +1,7 @@
 # Template file for 'strongswan'
 pkgname=strongswan
 version=5.6.3
-revision=1
+revision=2
 build_style=gnu-configure
 # tpm support waits on libtss2
 configure_args="--disable-static --enable-blowfish --enable-curl
@@ -19,15 +19,16 @@ homepage="https://www.strongswan.org/"
 changelog="https://wiki.strongswan.org/projects/strongswan/wiki/Changelog"
 distfiles="https://download.strongswan.org/${pkgname}-${version}.tar.bz2"
 checksum=c3c7dc8201f40625bba92ffd32eb602a8909210d8b3fac4d214c737ce079bf24
+make_dirs="/etc/ipsec.d/ 0755 root root
+ /etc/ipsec.d/aacerts 0755 root root
+ /etc/ipsec.d/acerts 0755 root root
+ /etc/ipsec.d/cacerts 0755 root root
+ /etc/ipsec.d/oscpcerts 0755 root root
+ /etc/ipsec.d/certs 0755 root root
+ /etc/ipsec.d/crls 0755 root root
+ /etc/ipsec.d/reqs 0755 root root
+ /etc/ipsec.d/private 0750 root root"
 
 post_install() {
-	touch .empty
-	# ipsec.d/{,aacerts,acerts,cacerts,certs,crls,oscpcerts,reqs}
-	for dir in /etc/ipsec.d/{,{aa,a,ca,oscp,}certs,crls,reqs}; do
-		vmkdir "$dir"
-		vcopy .empty "$dir"
-	done
-	vmkdir /etc/ipsec.d/private 750
-	vcopy .empty /etc/ipsec.d/private/
 	vsv strongswan
 }