I am trying to verify if a TLS Server is configured according to the guidelines specified in NIST SP 800-52.
One rule stated is the following:
TLS servers that support TLS 1.3 and the Pre-Shared Key extension shall support the Pre-Shared Key Exchange Modes extension.
How should I go about verifying if a server behaves this way while only interacting with the server from the outside?
My idea was performing two handshakes with different Key Exchange Modes set in the extension. But I am not quite sure how I would decide based on the responses I get from the server.