1 files changed, 2 insertions, 2 deletions
diff --git a/src/main/java/org/bouncycastle/crypto/tls/DTLSServerProtocol.java b/src/main/java/org/bouncycastle/crypto/tls/DTLSServerProtocol.java
index f429e201..5a334ad1 100644
--- a/src/main/java/org/bouncycastle/crypto/tls/DTLSServerProtocol.java
+++ b/src/main/java/org/bouncycastle/crypto/tls/DTLSServerProtocol.java
@@ -170,6 +170,8 @@ public class DTLSServerProtocol extends DTLSProtocol {
             throw new TlsFatalAlert(AlertDescription.unexpected_message);
         }
 
+        recordLayer.initPendingEpoch(state.server.getCipher());
+
         /*
          * RFC 5246 7.4.8 This message is only sent following a client certificate that has signing
          * capability (i.e., all certificates except those containing fixed Diffie-Hellman
@@ -186,8 +188,6 @@ public class DTLSServerProtocol extends DTLSProtocol {
             }
         }
 
-        recordLayer.initPendingEpoch(state.server.getCipher());
-
         // NOTE: Calculated exclusive of the actual Finished message from the client
         byte[] clientFinishedHash = handshake.getCurrentHash();
         clientMessage = handshake.receiveMessage();