diff --git a/ssl/tls13_server.cc b/ssl/tls13_server.cc
index 39d44bc..baf2a04 100644
--- a/ssl/tls13_server.cc
+++ b/ssl/tls13_server.cc
@@ -558,6 +558,13 @@
     return ssl_hs_error;
   }
 
+  // ClientHello should be the end of the flight.
+  if (ssl->method->has_unprocessed_handshake_data(ssl)) {
+    ssl_send_alert(ssl, SSL3_AL_FATAL, SSL_AD_UNEXPECTED_MESSAGE);
+    OPENSSL_PUT_ERROR(SSL, SSL_R_EXCESS_HANDSHAKE_DATA);
+    return ssl_hs_error;
+  }
+
   ssl->method->next_message(ssl);
   hs->tls13_state = state13_send_server_hello;
   return ssl_hs_ok;