None of the tests actually need GNUTLS_LEGACY (3.3.8): GNUTLS (3.4.10) works. Only single-DES actually needs OPENSSL_LEGACY (1.0.1j). For the rest, OPENSSL (1.0.2g) works. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>