diff --git a/src/tls13.c b/src/tls13.c
index 9230ccbbe..2fd6e18ba 100644
--- a/src/tls13.c
+++ b/src/tls13.c
@@ -4212,6 +4212,9 @@ int DoTls13ClientHello(WOLFSSL* ssl, const byte* input, word32* inOutIdx,
     }
 
     if (!usingPSK) {
+        /* Not using PSK so don't require no KE. */
+        ssl->options.noPskDheKe = 0;
+
 #ifndef NO_CERTS
         if (TLSX_Find(ssl->extensions, TLSX_KEY_SHARE) == NULL) {
             WOLFSSL_MSG("Client did not send a KeyShare extension");