diff --git a/openvswitch.changes b/openvswitch.changes
index bbbb874..86466a8 100644
--- a/openvswitch.changes
+++ b/openvswitch.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Mar 12 13:36:57 UTC 2013 - tpaszkowski@suse.com
+
+- ipsec build temporary disabled
+
 -------------------------------------------------------------------
 Fri Mar  8 14:16:57 UTC 2013 - tpaszkowski@suse.com
 
diff --git a/openvswitch.spec b/openvswitch.spec
index fef2a53..e701179 100644
--- a/openvswitch.spec
+++ b/openvswitch.spec
@@ -18,6 +18,8 @@
 # never build in kernel module, as openvswitch shipped one is more feature
 # rich
 %define build_in_kernel_kmp 0
+## ipsec build tempoaaryr disabled (need to upgrade ipsec-tools)
+%define build_ipsec 0
 
 Name:           openvswitch
 Version:	1.9.0
@@ -77,6 +79,8 @@ BuildRequires:	kernel-source
 Kernel modules supporting the openvswitch datapath
 %endif
 
+
+%if 0%{?build_ipsec}
 %package ipsec
 Summary:  Open vSwitch GRE-over-IPsec support
 Group:	   Productivity/Networking/System
@@ -93,6 +97,7 @@ The ovs-monitor-ipsec script provides support for encrypting GRE
 tunnels with IPsec.
 
 Open vSwitch is a full-featured software-based Ethernet switch.
+%endif
 
 %package switch
 Suggests: openvswitch-kmp
@@ -296,8 +301,10 @@ install -d -m 755 %{buildroot}/%_sysconfdir/profile.d
 install -d -m 755 %{buildroot}/%{_datadir}/%{name}/scripts
 install -m 644 vswitchd/vswitch.ovsschema \
          %{buildroot}/%{_datadir}/%{name}/vswitch.ovsschema
+%if 0%{?build_ipsec}
 install -m 755 debian/ovs-monitor-ipsec \
 	%{buildroot}/%{_datadir}/%{name}/ovs-monitor-ipsec
+%endif
 
 popd
 
@@ -377,9 +384,11 @@ rmdir %{buildroot}%{_datadir}/%{name}/python
 %dir %{py_sitedir}/ovstest
 %{py_sitedir}/ovstest/*
 
+%if 0%{?build_ipsec}
 %files ipsec
 %defattr(-,root,root)
 %{_datadir}/openvswitch/ovs-monitor-ipsec
+%endif
 
 %files switch
 %defattr(-,root,root)