It seems to me that this has been fixed in the meantime.  Tcltls builds correctly on OpenSSL 1.1.1g.