FWIW: I don't like OpenSSL as a CSPRNG; I think you'd generally better off replacing it with direct reads from urandom.

Another useful thing to know: there is lately a push towards crypto constructions that minimize dependencies on randomness. For example, there's "deterministic" DSA that replaces the nonce with a uncorrelated (psuedorandom) bits from digest functions. If you see people talking about cryptosystems being bad or good based on CSPRNG dependencies, that's the idea they're talking about.

This was a good post. For the record, we've been repeatedly trying and failing to hire Daniel Franke ever since that HN hack.