Summary says it all. Reproducible: Always Steps to Reproduce: 1. fips-mode-setup --enable 2. reboot 3. gnutls-cli localhost Actual Results: Error in GnuTLS initialization: Error while performing self checks. global_init: Error while performing self checks. and exits with code 1 Expected Results: Starts connecting and errors with "Could not connect to 127.0.0.1:443: Connection refused" (or succeeds if there is actually a https server running)
According to the log, this seems to be caused by nettle and gnutls version mismatch, where nettle is nettle-3.9.1-2.fc39.x86_64 while gnutls is gnutls-3.8.0-7.fc39.x86_64. I believe either downgrading nettle to the previous version (nettle-3.9.1-1.fc39) or updating gnutls to gnutls-3.8.1-1.fc39 should fix the issue.
Indeed my VM (built about two hours ago) currently has nettle-3.9.1-2.fc39.x86_64 , which is even newer than in https://bodhi.fedoraproject.org/updates/?packages=nettle (whose latest version is 3.9.1-1). I updated to https://bodhi.fedoraproject.org/updates/FEDORA-2023-7ef3bc8d6d , i.e. to gnutls 3.8.1-1.fc39 and that indeed fixes the issue. Want to refer to this bug in the bodhi advisory? I'm happy to karma it up then. Thanks!
FEDORA-2023-7ef3bc8d6d has been submitted as an update to Fedora 39. https://bodhi.fedoraproject.org/updates/FEDORA-2023-7ef3bc8d6d
FEDORA-2023-7ef3bc8d6d has been pushed to the Fedora 39 stable repository. If problem still persists, please make note of it in this bug report.