Indirect linking to libcrypto on Leopard

I am trying to build a framework with the 10.6 SDK and 10.5 deployment target. However, I find that it fails to load on Leopard, the crash report says it fails to find libcrypto.0.9.8.dylib.

I am aware of the (very annoying) problem that the 10.6 SDK links to this version of this lib, which is incompatible with the one (0.9.7) available on 10.5.x. 

However, I do not link to this library. So can anyone perhaps tell me why it would even try to link to this library? Could it be that one of the libraries/frameworks that are linked in my framework could indirectly link to it? I tried to check this using otool, but also none of the frameworks and libraries seem to link to it. I am linking to Foundation, AppKit, CoreServices, WebKit, Security, IOKit, does anyone know whether any of these give this problem?

thanks
Christiaan