From 8cb4819b539ca872403c5939fee208b6d97644be Mon Sep 17 00:00:00 2001
From: Juliusz Sosinowicz <juliusz@wolfssl.com>
Date: Fri, 27 May 2022 21:12:22 +0200
Subject: [PATCH] Fix curve group matching on secure renegotiation

---
 src/tls.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/tls.c b/src/tls.c
index ad0b787b3..a61987f64 100644
--- a/src/tls.c
+++ b/src/tls.c
@@ -4680,6 +4680,7 @@ int TLSX_ValidateSupportedCurves(WOLFSSL* ssl, byte first, byte second) {
                         defOid = 0;
                         defSz = 80;
                     }
+                    key |= ssl->pkCurveOID == oid;
                 break;
     #endif /* HAVE_ECC && WOLFSSL_STATIC_DH */
 #endif