Good work Daniel, I hope that this OpenSSL issues stops now soon.. One suggestion about the random number generator - I think the core/fastrand/ one has a better quality than the one provided from glibc (kam_rand, which points to rand). If this fix is confirmed, I would suggest to use this one for now.
I looked already quite a bit into this random number generator topic. Most servers and also OS use the "Fortuna" PRNG. I was thinking of using fastrand for all "normal" random numbers (to replace the one from glibc) and then using fortuna for "secure" random numbers. I planned to work on this when 5.3. has been released.