Just a thought: was the openssl static libraries built with -ffunction-sections? If not, then that may be why the openssh static binaries where so big and so I think that -ffunction-sections should be mandatory for packagers, unless the libraries sources is one-function-per-file structured (which achieves the same thing). Rob