As it turns out, the upstream fix makes tcpdump build with 1.1.x but all the ESP tests fail because it segfaults if you actually try to decrypt packets.
So I just disabled crypto support for now... -- Romain Francoise <rfranco...@debian.org> http://people.debian.org/~rfrancoise/
