When the server receives a ClientHello as a response to the HelloRequest, the message sequence number (msg_hdr.seq) doesnt match with the expected value (d1->handshake_read_seq).
The code where we verify it is at d1_both.c file, at line 645 from openssl-0.9.8g release. Thanks, João Pedro Patriarca