I don't think you need to set it, but I did before due to legacy sect issues in one of my scripts.
Now I compiled with the legacy in the port openssl, so looks like you don't need to change the openssl.cnf from the original at all, i,e both default and legacy commented.