OpenSSL 1.1 is not supported upstream yet. It builds, but the resulting tcpdump binary segfaults when running the ESP test suite, which is why I changed the package to target OpenSSL 1.0 in stretch.
-- Romain Francoise <rfranco...@debian.org> https://people.debian.org/~rfrancoise/
