This is fixed in the current development version of TclTLS which has the configure option "--with-builtin-dh-params-size"