diff --git a/scripts/test.sh b/scripts/test.sh
index 7970a19964..d9b43ca079 100755
--- a/scripts/test.sh
+++ b/scripts/test.sh
@@ -21,8 +21,10 @@ build_botan()
 		BOTAN_CONFIG="--without-os-features=threads
 					  --disable-modules=locking_allocator"
 	fi
-	# disable some larger modules we don't need for the tests
+	# disable some larger modules we don't need for the tests and deprecated
+	# ones, except for MD5, which we need for TLS 1.0/1.1
 	BOTAN_CONFIG="$BOTAN_CONFIG --disable-modules=pkcs11,tls,x509,xmss
+				  --disable-deprecated-features --enable-modules=md5
 				  --prefix=$DEPS_PREFIX"
 
 	git clone https://github.com/randombit/botan.git $BOTAN_DIR &&
diff --git a/testing/scripts/recipes/011_botan.mk b/testing/scripts/recipes/011_botan.mk
index 3488bf3daf..96e5dd7c3f 100644
--- a/testing/scripts/recipes/011_botan.mk
+++ b/testing/scripts/recipes/011_botan.mk
@@ -7,10 +7,13 @@ REV = 3.7.1
 NUM_CPUS := $(shell getconf _NPROCESSORS_ONLN)
 
 # the first two are necessary due to LD, the others to reduce the build time
+# the last one enables MD5, which we need for TLS 1.0/1.1 (and possibly EAP-MD5)
 CONFIG_OPTS = \
 	--without-os-features=threads \
 	--disable-modules=locking_allocator \
-	--disable-modules=pkcs11,tls,x509,xmss
+	--disable-modules=pkcs11,tls,x509,xmss \
+	--disable-deprecated-features \
+	--enable-modules=md5
 
 all: install