diff --git a/scripts/test.sh b/scripts/test.sh
index 15ca7e0e6..c397e00ec 100755
--- a/scripts/test.sh
+++ b/scripts/test.sh
@@ -200,10 +200,17 @@ win*)
 	if test "$APPVEYOR" != "True"; then
 		TARGET=
 	else
+		case "$IMG" in
+		2015|2017)
+			# old OpenSSL versions don't provide HKDF
+			CONFIG="$CONFIG --enable-kdf"
+			;;
+		esac
 		CONFIG="$CONFIG --enable-openssl"
 		CFLAGS="$CFLAGS -I$OPENSSL_DIR/include"
 		LDFLAGS="-L$OPENSSL_DIR"
 		export LDFLAGS
+
 	fi
 	CFLAGS="$CFLAGS -mno-ms-bitfields"
 	DEPS="gcc-mingw-w64-base"