tls1_get_supported_group
can_use_ecc = tls1_get_supported_group(s, &nid);
int tls1_get_supported_group(const SSL *s, int *out_nid);
if (!tls1_get_supported_group(s, &nid)) {
if (!tls1_get_supported_group(ctx->ssl, &nid))