As it turns out, the upstream fix makes tcpdump build with 1.1.x but all the ESP tests fail because it segfaults if you actually try to decrypt packets.
So I just disabled crypto support for now... -- Romain Francoise <[email protected]> http://people.debian.org/~rfrancoise/
