We should write a JSTest which spins up a mongod, connects to it, and extracts information about which TLS protocols/suites are supported. Eventually, we'll want to assert that ECDHE and DHE are supported on all platforms. However, until we get to that point, we should only assert that they're available where they exist today.

We should validate that all platforms support TLS 1.1 and TLS 1.2, and do not support TLS 1.0 or below.

We should validate that no "weak" ciphers are offered.

Amazon Linux 1 will explicitly not be required to support ECDHE, due to its copy of OpenSSL's buildoptions.