you want to eiter: - follow http://www.netbsd.org/Documentation/network/ipsec/oldtree.html you don't seem to have enough symbolic links. - switch to 1.5, which completely integrates crypto code into sys tree. itojun