I would read the code where the complaint is and see what's going on. Also, are you leaving IPSEC_ESP out on purpose, because you only want AH? I bet no one builds with just IPSEC and not IPSEC_ESP.
Attachment:
pgpigY2gAjXBA.pgp
Description: PGP signature