Blame SOURCES/gnutls-3.3.22-eapp-data.patch

b88a44
diff --git b/lib/gnutls_handshake.c a/lib/gnutls_handshake.c
b88a44
index 5930941..e904f2e 100644
b88a44
--- b/lib/gnutls_handshake.c
b88a44
+++ a/lib/gnutls_handshake.c
b88a44
@@ -2510,7 +2510,8 @@ static int _gnutls_recv_supplemental(gnutls_session_t session)
b88a44
  * are non fatal errors, only in the specific case of a rehandshake.
b88a44
  * Their meaning is that the client rejected the rehandshake request or
b88a44
  * in the case of %GNUTLS_E_GOT_APPLICATION_DATA it could also mean that
b88a44
- * some data were pending.
b88a44
+ * some data were pending. A client may receive that error code if
b88a44
+ * it initiates the handshake and the server doesn't agreed.
b88a44
  *
b88a44
  * Returns: %GNUTLS_E_SUCCESS on success, otherwise a negative error code.
b88a44
  **/
b88a44
diff --git b/lib/gnutls_record.c a/lib/gnutls_record.c
b88a44
index 157d12a..40c20fe 100644
b88a44
--- b/lib/gnutls_record.c
b88a44
+++ a/lib/gnutls_record.c
b88a44
@@ -837,7 +837,7 @@ record_add_to_buffers(gnutls_session_t session,
b88a44
 			 * reasons). Otherwise it is an unexpected packet
b88a44
 			 */
b88a44
 			if (type == GNUTLS_ALERT
b88a44
-			    || (htype == GNUTLS_HANDSHAKE_CLIENT_HELLO
b88a44
+			    || ((htype == GNUTLS_HANDSHAKE_SERVER_HELLO || htype == GNUTLS_HANDSHAKE_CLIENT_HELLO)
b88a44
 				&& type == GNUTLS_HANDSHAKE)) {
b88a44
 				/* even if data is unexpected put it into the buffer */
b88a44
 				_gnutls_record_buffer_put(session, recv->type,