diff --git a/examples/client/client.c b/examples/client/client.c index 87d34e447..07784fb36 100644 --- a/examples/client/client.c +++ b/examples/client/client.c @@ -2838,8 +2838,8 @@ THREAD_RETURN WOLFSSL_THREAD client_test(void* args) fprintf(stderr, "WARNING: If a TLS 1.3 connection is not negotiated, you " "will not be using a post-quantum group.\n"); - else if (version != 4) - err_sys("can only use post-quantum groups with TLS 1.3"); + else if (version != 4 && version != -4) + err_sys("can only use post-quantum groups with TLS 1.3 or DTLS 1.3"); } #endif diff --git a/examples/server/server.c b/examples/server/server.c index 1c652a393..504d013eb 100644 --- a/examples/server/server.c +++ b/examples/server/server.c @@ -2368,8 +2368,8 @@ THREAD_RETURN WOLFSSL_THREAD server_test(void* args) fprintf(stderr, "WARNING: If a TLS 1.3 connection is not negotiated, you " "will not be using a post-quantum group.\n"); - } else if (version != 4) { - err_sys("can only use post-quantum groups with TLS 1.3"); + } else if (version != 4 && version != -4) { + err_sys("can only use post-quantum groups with TLS 1.3 or DTLS 1.3"); } } #endif @@ -3104,7 +3104,7 @@ THREAD_RETURN WOLFSSL_THREAD server_test(void* args) #endif #if defined(WOLFSSL_TLS13) && defined(HAVE_SUPPORTED_CURVES) - if (version >= 4) { + if (version >= 4 || version == -4) { #ifdef CAN_FORCE_CURVE if (force_curve_group_id > 0) { do { diff --git a/src/tls13.c b/src/tls13.c index db29344e0..c78c5e150 100644 --- a/src/tls13.c +++ b/src/tls13.c @@ -10659,7 +10659,7 @@ int wolfSSL_UseKeyShare(WOLFSSL* ssl, word16 group) if (WOLFSSL_NAMED_GROUP_IS_PQC(group)) { if (ssl->ctx != NULL && ssl->ctx->method != NULL && - ssl->ctx->method->version.minor != TLSv1_3_MINOR) { + !IsAtLeastTLSv1_3(ssl->version)) { return BAD_FUNC_ARG; }