Fix client key share

13.go

@@ -460,7 +460,6 @@ func (hs *serverHandshakeState) readClientFinished13(hasConfirmLock bool) error
 	c.in.traceErr, c.out.traceErr = nil, nil
 	c.phase = handshakeConfirmed
 	atomic.StoreInt32(&c.handshakeConfirmed, 1)
-	hs.c.Group = hs.hello.keyShare.group
 
 	// Any read operation after handshakeRunning and before handshakeConfirmed
 	// will be holding this lock, which we release as soon as the confirmation
@@ -1203,6 +1202,7 @@ func (hs *clientHandshakeState) doTLS13Handshake() error {
 		return errors.New("tls: unexpected data after handshake")
 	}
 	c.in.setCipher(c.vers, appServerCipher)
+	hs.c.Group = serverHello.keyShare.group
 	return nil
 }