Oh, yes - it would need to be modified to support PSK suites!

That intermediate set is for TLS 1.0 and later.

The issue is the ordering of the cipher suites - OpenSSL does not have a sensible default here.

Nick