There is a scenario when the server sends APP data right away since this is UDP it can arrive before the ACK message. Right now we just drop the app data. This is acceptable by the RFC but we would prefer to read this data before the ACK message.
A new test should be added to dtlstest where the ACK message sent by the server is dropped and we should verify that the client resends the Finish message.
TODO is in statem_clnt.c: