Because openssl init may load additional libraries, it should be done
before the chroot.

patch attached.

lamont