Blame SOURCES/gnutls-3.3.22-eapp-data.patch

519d7d
diff --git b/lib/gnutls_handshake.c a/lib/gnutls_handshake.c
519d7d
index 5930941..e904f2e 100644
519d7d
--- b/lib/gnutls_handshake.c
519d7d
+++ a/lib/gnutls_handshake.c
519d7d
@@ -2510,7 +2510,8 @@ static int _gnutls_recv_supplemental(gnutls_session_t session)
519d7d
  * are non fatal errors, only in the specific case of a rehandshake.
519d7d
  * Their meaning is that the client rejected the rehandshake request or
519d7d
  * in the case of %GNUTLS_E_GOT_APPLICATION_DATA it could also mean that
519d7d
- * some data were pending.
519d7d
+ * some data were pending. A client may receive that error code if
519d7d
+ * it initiates the handshake and the server doesn't agreed.
519d7d
  *
519d7d
  * Returns: %GNUTLS_E_SUCCESS on success, otherwise a negative error code.
519d7d
  **/
519d7d
diff --git b/lib/gnutls_record.c a/lib/gnutls_record.c
519d7d
index 157d12a..40c20fe 100644
519d7d
--- b/lib/gnutls_record.c
519d7d
+++ a/lib/gnutls_record.c
519d7d
@@ -837,7 +837,7 @@ record_add_to_buffers(gnutls_session_t session,
519d7d
 			 * reasons). Otherwise it is an unexpected packet
519d7d
 			 */
519d7d
 			if (type == GNUTLS_ALERT
519d7d
-			    || (htype == GNUTLS_HANDSHAKE_CLIENT_HELLO
519d7d
+			    || ((htype == GNUTLS_HANDSHAKE_SERVER_HELLO || htype == GNUTLS_HANDSHAKE_CLIENT_HELLO)
519d7d
 				&& type == GNUTLS_HANDSHAKE)) {
519d7d
 				/* even if data is unexpected put it into the buffer */
519d7d
 				_gnutls_record_buffer_put(session, recv->type,