tls1_group_id_allowed
if (!tls1_group_id_allowed(ssl, pref[i]))
if (!tls1_group_id_allowed(s, groups[i]))