Index: openssh-5.4p1/ssh-add.c =================================================================== --- openssh-5.4p1.orig/ssh-add.c +++ openssh-5.4p1/ssh-add.c @@ -43,6 +43,7 @@ #include #include "openbsd-compat/openssl-compat.h" +#include #include #include @@ -366,6 +367,10 @@ main(int argc, char **argv) SSLeay_add_all_algorithms(); + /* Init available hardware crypto engines. */ + ENGINE_load_builtin_engines(); + ENGINE_register_all_complete(); + /* At first, get a connection to the authentication agent. */ ac = ssh_get_authentication_connection(); if (ac == NULL) { Index: openssh-5.4p1/ssh-agent.c =================================================================== --- openssh-5.4p1.orig/ssh-agent.c +++ openssh-5.4p1/ssh-agent.c @@ -52,6 +52,7 @@ #include #include #include "openbsd-compat/openssl-compat.h" +#include #include #include @@ -1091,6 +1092,10 @@ main(int ac, char **av) SSLeay_add_all_algorithms(); + /* Init available hardware crypto engines. */ + ENGINE_load_builtin_engines(); + ENGINE_register_all_complete(); + __progname = ssh_get_progname(av[0]); init_rng(); seed_rng(); Index: openssh-5.4p1/ssh-keygen.c =================================================================== --- openssh-5.4p1.orig/ssh-keygen.c +++ openssh-5.4p1/ssh-keygen.c @@ -22,6 +22,7 @@ #include #include #include "openbsd-compat/openssl-compat.h" +#include #include #include @@ -1523,6 +1524,11 @@ main(int argc, char **argv) __progname = ssh_get_progname(argv[0]); SSLeay_add_all_algorithms(); + + /* Init available hardware crypto engines. */ + ENGINE_load_builtin_engines(); + ENGINE_register_all_complete(); + log_init(argv[0], SYSLOG_LEVEL_INFO, SYSLOG_FACILITY_USER, 1); init_rng(); Index: openssh-5.4p1/ssh-keysign.c =================================================================== --- openssh-5.4p1.orig/ssh-keysign.c +++ openssh-5.4p1/ssh-keysign.c @@ -38,6 +38,7 @@ #include #include #include +#include #include "xmalloc.h" #include "log.h" @@ -195,6 +196,11 @@ main(int argc, char **argv) fatal("could not open any host key"); SSLeay_add_all_algorithms(); + + /* Init available hardware crypto engines. */ + ENGINE_load_builtin_engines(); + ENGINE_register_all_complete(); + for (i = 0; i < 256; i++) rnd[i] = arc4random(); RAND_seed(rnd, sizeof(rnd)); Index: openssh-5.4p1/ssh.c =================================================================== --- openssh-5.4p1.orig/ssh.c +++ openssh-5.4p1/ssh.c @@ -74,6 +74,7 @@ #include #include "openbsd-compat/openssl-compat.h" #include "openbsd-compat/sys-queue.h" +#include #include "xmalloc.h" #include "ssh.h" @@ -584,6 +585,10 @@ main(int ac, char **av) SSLeay_add_all_algorithms(); ERR_load_crypto_strings(); + /* Init available hardware crypto engines. */ + ENGINE_load_builtin_engines(); + ENGINE_register_all_complete(); + /* Initialize the command to execute on remote host. */ buffer_init(&command); Index: openssh-5.4p1/sshd.c =================================================================== --- openssh-5.4p1.orig/sshd.c +++ openssh-5.4p1/sshd.c @@ -77,6 +77,7 @@ #include #include #include "openbsd-compat/openssl-compat.h" +#include #ifdef HAVE_SECUREWARE #include @@ -1462,6 +1463,10 @@ main(int ac, char **av) SSLeay_add_all_algorithms(); + /* Init available hardware crypto engines. */ + ENGINE_load_builtin_engines(); + ENGINE_register_all_complete(); + /* * Force logging to stderr until we have loaded the private host * key (unless started from inetd)