I had to drop the aix patch for openssl, because it didn't apply any more. I retained the keyword, but I guess it should be looked into, as the functionality of the patch may still be necessary.
Nope, openssl-0.9.8f seems to have proper shared lib support for aix-gcc - successfully merged here without the patch, openssh built against it works.