I've taken a slightly different route, going for the debian package. Instead
of looking for an eclass to handle the conversion i just did it manually with
deb2targz.
Handley debian has openssl-0.9.8, so the dependancies are correct without
having to resort to ugly symlinks, although nessusd does complain about "no
version information available" in libssl and libcrypto.