Only the static (.a) version of the ipsec library is being built. The shared library should be built for all the usual reasons why shared libs are better.
Use the static version.
$ configure --enable-board=qemux86-64 --enable-rootfs=glibc_cgl --enable-kernel=cgl $ find export/dist/ -name 'libipsec*' $ find bitbake_build/ -name 'libipsec*' bitbake_build/tmp/sysroots/qemux86-64/usr/lib64/libipsec.la bitbake_build/tmp/sysroots/qemux86-64/usr/lib64/libipsec.a bitbake_build/tmp/sysroots/qemux86-64/usr/include/libipsec ...