diff --git a/src/internal.c b/src/internal.c
index 474620c83..e79670d15 100644
--- a/src/internal.c
+++ b/src/internal.c
@@ -8204,7 +8204,7 @@ static void PickHashSigAlgo(CYASSL* ssl,
         }
     #endif /* HAVE_ECC */
 
-    #if defined(OPENSSL_EXTRA) || !defined(NO_PSK)
+    #if defined(OPENSSL_EXTRA) && !defined(NO_PSK)
     if (ssl->specs.kea == dhe_psk_kea) {
         if ((*inOutIdx - begin) + OPAQUE16_LEN > size)
             return BUFFER_ERROR;