diff --git a/include/mbedtls/ssl.h b/include/mbedtls/ssl.h
index 8ad6bb0c38..766ad791ae 100644
--- a/include/mbedtls/ssl.h
+++ b/include/mbedtls/ssl.h
@@ -761,18 +761,6 @@ typedef enum {
  */
     MBEDTLS_SSL_EARLY_DATA_STATE_NO_IND_SENT,
 
-/*
- * The client has indicated the use of early data and the server has accepted
- * it.
- */
-    MBEDTLS_SSL_EARLY_DATA_STATE_ACCEPTED,
-
-/*
- * The client has indicated the use of early data but the server has rejected
- * it.
- */
-    MBEDTLS_SSL_EARLY_DATA_STATE_REJECTED,
-
 /*
  * The client has sent an early data indication extension in its first
  * ClientHello, it has not received the response (ServerHello or
@@ -790,12 +778,25 @@ typedef enum {
  */
     MBEDTLS_SSL_EARLY_DATA_STATE_CAN_WRITE,
 
+/*
+ * The client has indicated the use of early data and the server has accepted
+ * it.
+ */
+    MBEDTLS_SSL_EARLY_DATA_STATE_ACCEPTED,
+
+/*
+ * The client has indicated the use of early data but the server has rejected
+ * it.
+ */
+    MBEDTLS_SSL_EARLY_DATA_STATE_REJECTED,
+
 /*
  * The client has sent an early data indication extension in its first
  * ClientHello, the server has accepted them and the client has received the
  * server Finished message. It cannot send early data to the server anymore.
  */
     MBEDTLS_SSL_EARLY_DATA_STATE_SERVER_FINISHED_RECEIVED,
+
 } mbedtls_ssl_early_data_state;
 #endif /* MBEDTLS_SSL_EARLY_DATA && MBEDTLS_SSL_CLI_C */