Get the order of things right; the keys need to be generated

early to allow entropy to replenish.
sshd must start late to catch the full effects of ldconfig.

etc/network.subr

@@ -608,11 +608,7 @@ network_pass3() {
 		if [ ! -f /etc/ssh/ssh_host_key ]; then
 			echo creating ssh host key
 			/usr/bin/ssh-keygen -N "" -f /etc/ssh/ssh_host_key
-			echo now starting sshd
-		else
-			echo -n ' sshd';
 		fi
-		${sshd_program:-/usr/sbin/sshd} ${sshd_flags}
 		;;
 	esac
 

etc/rc

@@ -395,6 +395,15 @@ case ${sendmail_enable} in
 	;;
 esac
 
+case ${sshd_enable} in
+[Yy][Ee][Ss])
+	if [ -x ${sshd_program:-/usr/sbin/sshd} ]; then
+		echo -n ' sshd';
+		${sshd_program:-/usr/sbin/sshd} ${sshd_flags}
+	fi
+	;;
+esac
+
 case ${usbd_enable} in
 [Yy][Ee][Ss])
 	echo -n ' usbd';	/usr/sbin/usbd ${usbd_flags}

etc/rc.d/netoptions

@@ -608,11 +608,7 @@ network_pass3() {
 		if [ ! -f /etc/ssh/ssh_host_key ]; then
 			echo creating ssh host key
 			/usr/bin/ssh-keygen -N "" -f /etc/ssh/ssh_host_key
-			echo now starting sshd
-		else
-			echo -n ' sshd';
 		fi
-		${sshd_program:-/usr/sbin/sshd} ${sshd_flags}
 		;;
 	esac
 

etc/rc.d/network1

@@ -608,11 +608,7 @@ network_pass3() {
 		if [ ! -f /etc/ssh/ssh_host_key ]; then
 			echo creating ssh host key
 			/usr/bin/ssh-keygen -N "" -f /etc/ssh/ssh_host_key
-			echo now starting sshd
-		else
-			echo -n ' sshd';
 		fi
-		${sshd_program:-/usr/sbin/sshd} ${sshd_flags}
 		;;
 	esac
 

etc/rc.d/network2

@@ -608,11 +608,7 @@ network_pass3() {
 		if [ ! -f /etc/ssh/ssh_host_key ]; then
 			echo creating ssh host key
 			/usr/bin/ssh-keygen -N "" -f /etc/ssh/ssh_host_key
-			echo now starting sshd
-		else
-			echo -n ' sshd';
 		fi
-		${sshd_program:-/usr/sbin/sshd} ${sshd_flags}
 		;;
 	esac
 

etc/rc.d/network3

@@ -608,11 +608,7 @@ network_pass3() {
 		if [ ! -f /etc/ssh/ssh_host_key ]; then
 			echo creating ssh host key
 			/usr/bin/ssh-keygen -N "" -f /etc/ssh/ssh_host_key
-			echo now starting sshd
-		else
-			echo -n ' sshd';
 		fi
-		${sshd_program:-/usr/sbin/sshd} ${sshd_flags}
 		;;
 	esac
 

etc/rc.d/routing

@@ -608,11 +608,7 @@ network_pass3() {
 		if [ ! -f /etc/ssh/ssh_host_key ]; then
 			echo creating ssh host key
 			/usr/bin/ssh-keygen -N "" -f /etc/ssh/ssh_host_key
-			echo now starting sshd
-		else
-			echo -n ' sshd';
 		fi
-		${sshd_program:-/usr/sbin/sshd} ${sshd_flags}
 		;;
 	esac
 

etc/rc.network

@@ -608,11 +608,7 @@ network_pass3() {
 		if [ ! -f /etc/ssh/ssh_host_key ]; then
 			echo creating ssh host key
 			/usr/bin/ssh-keygen -N "" -f /etc/ssh/ssh_host_key
-			echo now starting sshd
-		else
-			echo -n ' sshd';
 		fi
-		${sshd_program:-/usr/sbin/sshd} ${sshd_flags}
 		;;
 	esac