OpenSSL 1.1.1 failures verified with https://keg.brnrd.eu/build.html?mastername=111amd64-default-openssl111&build=2018-08-14_10h01m04s
Could also merge these changes with D17834 but that deals with the ports framework and FreeBSD 12 & head. The fixes to ports already containing `BROKEN_SSL` is incomplete. Let me know if this is the desired approach.