I'd not be comfortable for a rigorous patching effort to make ipsec-tools/racoon build against 1.1.0. There'd be about 10-20K LOC to modify/port...
Honestly, if there is no OpenSSL-supplied compat library (and upstream would not wake up), then the only sane option is to drop ipsec-tools on the floor. :-( -- ,''`. Christian Hofstaedtler <z...@debian.org> : :' : Debian Developer `. `' 7D1A CFFA D9E0 806C 9C4C D392 5C13 D6DB 9305 2E03 `-