Yeah, they would need to be recompiled.
I myself compiled OpenSSL 1.1.0h (TLS 1.2) for Nokia N9 and, to get e.g. wget working with TLS 1.2, I had to compile it with correct arguments (--with-openssl=<dir> etc.).
But it works now and downloads TLS 1.2 protected sites. I need to take care of certs now - OpenSSL installed in non-standard directory (/opt/openssl.1.1.0h) doesn't accept the ones in /etc/ssl/certs installed by aegis-certman-common-ca, it seems. But I'm tinkering

Also Python 3.9.18 compiled with OpenSSL 1.1.0h works on N9 and pip is working as well, I will share it soon.