OpenSSH is best installed from source, using:
./configure --prefix=/usr --with-tcp-wrappers --sysconfdir=/etc/ssh
(Might require editing the Makefile and adding -ldl to the LIBS variable)
OpenSSL seems to be best configured with:
./config --prefix=/usr shared zlib-dynamic
And DenyHosts is a nice complement.