`supported_groups` doesn't match `key_share` when custom JA3

[Ossianaa]

To Reproduce

package main

import (
	"fmt"

	"github.com/Noooste/azuretls-client"
)

func main() {
	session := azuretls.NewSession()
	defer session.Close()
	var ja3 = "771,4865-4866-4867-49195-49199-49196-49200-52393-52392-49171-49172-156-157-47-53,0-65281-27-18-51-43-5-17513-65037-16-11-45-10-35-23-13,25497-29-23-24,0"
	if err := session.ApplyJa3(ja3, azuretls.Chrome); err != nil {
		panic(fmt.Errorf("failed to apply HTTP/3 settings: %v", err))
	}

	resp, err := session.Do(&azuretls.Request{
		Method:     "GET",
     	 Url:        "https://tls.peet.ws/api/all",
	})
	if err != nil {
		panic(err)
	}
	fmt.Println(string(resp.Body))
}

Expected behavior
key_share should same with supported_groups

{
        "name": "key_share (51)",
        "shared_keys": [
          {
            "TLS_GREASE (0x2a2a)": "00"
          },
          {
            "X25519Kyber768 (25497)": "..."
          },
          {
            "X25519 (29)": "..."
          }
        ]
      }
...
{
        "name": "supported_groups (10)",
        "supported_groups": [
          "TLS_GREASE (0x2a2a)",
          "X25519Kyber768 (25497)",
          "X25519 (29)",
          "P-256 (23)",
          "P-384 (24)"
        ]
}

Screenshots

Desktop (please complete the following information):

• OS: Windows
• Browser chrome
• Version 126

[Ossianaa]

fixed with this code

package main

import (
	"fmt"
	"github.com/Noooste/fhttp/http2"
	tls "github.com/Noooste/utls"
	"github.com/Noooste/utls/dicttls"
	"github.com/Noooste/azuretls-client"
)

func GetClientHello() *tls.ClientHelloSpec {
	return &tls.ClientHelloSpec{
		CipherSuites: []uint16{
			tls.GREASE_PLACEHOLDER,
			tls.TLS_AES_128_GCM_SHA256,
			tls.TLS_AES_256_GCM_SHA384,
			tls.TLS_CHACHA20_POLY1305_SHA256,
			tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
			tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
			tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
			tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
			tls.TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,
			tls.TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,
			tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
			tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
			tls.TLS_RSA_WITH_AES_128_GCM_SHA256,
			tls.TLS_RSA_WITH_AES_256_GCM_SHA384,
			tls.TLS_RSA_WITH_AES_128_CBC_SHA,
			tls.TLS_RSA_WITH_AES_256_CBC_SHA,
		},
		CompressionMethods: []byte{
			0x00, // compressionNone
		},
		Extensions: tls.ShuffleChromeTLSExtensions([]tls.TLSExtension{
			&tls.UtlsGREASEExtension{},
			&tls.KeyShareExtension{
				KeyShares: []tls.KeyShare{
					{Group: tls.CurveID(tls.GREASE_PLACEHOLDER), Data: []byte{0}},
					{Group: tls.X25519Kyber768Draft00},
					{Group: tls.X25519},
				},
			},
			&tls.ALPNExtension{AlpnProtocols: []string{
				http2.NextProtoTLS,
				"http/1.1",
			}},
			&tls.SNIExtension{},
			&tls.SignatureAlgorithmsExtension{SupportedSignatureAlgorithms: []tls.SignatureScheme{
				tls.ECDSAWithP256AndSHA256,
				tls.PSSWithSHA256,
				tls.PKCS1WithSHA256,
				tls.ECDSAWithP384AndSHA384,
				tls.PSSWithSHA384,
				tls.PKCS1WithSHA384,
				tls.PSSWithSHA512,
				tls.PKCS1WithSHA512,
			}},
			&tls.ExtendedMasterSecretExtension{},
			&tls.SessionTicketExtension{},
			&tls.SCTExtension{},
			&tls.RenegotiationInfoExtension{},
			&tls.PSKKeyExchangeModesExtension{Modes: []uint8{
				tls.PskModeDHE,
			}},
			&tls.ApplicationSettingsExtension{SupportedProtocols: []string{http2.NextProtoTLS}},
			&tls.UtlsCompressCertExtension{Algorithms: []tls.CertCompressionAlgo{
				tls.CertCompressionBrotli,
			}},
			&tls.SupportedVersionsExtension{Versions: []uint16{
				tls.GREASE_PLACEHOLDER,
				tls.VersionTLS13,
				tls.VersionTLS12,
			}},
			&tls.SupportedCurvesExtension{Curves: []tls.CurveID{
				tls.GREASE_PLACEHOLDER,
				tls.X25519Kyber768Draft00,
				tls.X25519,
				tls.CurveP256,
				tls.CurveP384,
			}},
			&tls.StatusRequestExtension{},
			&tls.SupportedPointsExtension{SupportedPoints: []byte{
				0x00, // pointFormatUncompressed
			}},
			&tls.GREASEEncryptedClientHelloExtension{
				CandidateCipherSuites: []tls.HPKESymmetricCipherSuite{
					{
						KdfId:  dicttls.HKDF_SHA256,
						AeadId: dicttls.AEAD_AES_128_GCM,
					},
				},
				CandidatePayloadLens: []uint16{128, 160, 192, 224}, // +16: 144, 176, 208, 240
			},
			&tls.UtlsGREASEExtension{},
			&tls.UtlsPaddingExtension{GetPaddingLen: tls.BoringPaddingStyle},
		}),
	}
}


func main() {
	session := azuretls.NewSession()
	defer session.Close()

	session.GetClientHelloSpec = GetClientHello;

	resp, err := session.Do(&azuretls.Request{
		Method:     "GET",
     	 Url:        "https://tls.peet.ws/api/all",
	})
	if err != nil {
		panic(err)
	}
	fmt.Println(string(resp.Body))
}