There's a new upstream for moonshot-trust-router that I believe should work with openssl 1.1. Realistically, I should be able to deal with moonshot-gss-eap #848680 within a month. I think it may be more like two months to deal with both moonshot-gss-eap and moonshot-trust-router, both of which have new upstreams. Right now, neither is in testing. I expect Buster to be the first release to include moonshot-trust-router and definitely plan to get moonshot-gss-eap back into testing for Buster, but I'm not bothered if moonshot-trust-router spends a month FTBFS because you remove openssl 1.0.
--Sam