You might be able to pkg_delete -f the openssl package and hope that
  bind9's running named still works. (Any tools needing ssl won't work
  temporarily.) Then hurry and install the openssl (that was already built).

  Hopefully, the old bind9 install will work with the newer openssl. I think
  it will.

  Be sure to have a package of your old openssl package just in case you
  need to revert to it. (Use pkg_tarup if needed.)

How is this different from make replace, except that this doesn't
reregister the bind9->openssl dependency?

-- 
        Greg Troxel <gdt@ir.bbn.com>