Don't send supported groups if no-ec and we're doing DTLS
The supported_groups extension only supported EC groups in DTLS.
Therefore we shouldn't send it in a no-ec build.
@@ -211,7 +211,7 @@ EXT_RETURN tls_construct_ctos_supported_groups(SSL *s, WPACKET *pkt,
}
#if defined(OPENSSL_NO_EC)
- if (max_version < TLS1_3_VERSION)
+ if (SSL_IS_DTLS(s) || max_version < TLS1_3_VERSION)
return EXT_RETURN_NOT_SENT;
#else
if (!use_ecc(s, min_version, max_version) && max_version < TLS1_3_VERSION)
