Odd Crypto Issue F32 Workstation

Ask Fedora
1

My F32 workstation is awesome! Except for this strange issue, I can’t write media or verify hashes of downloaded img/iso files. I first noticed this in Balena-Etcher installed via rpm. I removed the repo and installed the appimage, which failed in the same manner. I installed Fedora MediaWriter from flathub and reproduced the error there as well.

W@46542ms: Error QNetworkReply::UnknownNetworkError reading from QUrl("https://mirror.steadfastnet.com/fedora/releases/32/Workstation/x86_64/iso/Fedora-Workstation-Live-x86_64-32-1.6.iso") : "Error while reading: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac"
W@46545ms: Computed SHA256 hash of "/home/zach/Downloads/Fedora-Workstation-Live-x86_64-32-1.6.iso.part"  - "c226c4120c87f255fb39c5c505f1328a10b52a5b23808cb6e04e52fbd889d041" does not match expected "4d0f6653e2e0860c99ffe0ef274a46d875fb85bd2a40cb896dce1ed013566924"

I can dd an iso, because there’s not the same type of error checking. However, the iso sizes dont match, by ( iirc ) ~1 byte?

I’m happy enough to submit a bug, but must admit that I am running nvidia proprietary drivers on Xorg, installed via rpmfusion. ( Never again nvidia, but here we are ). This is on an 8th gen Intel i5. Network is the on-board intel + an add on pci broadcom card ( I think? ), both existing as part of a bridge. SELinux is set to enforcing. Kernel is 5.6.16-300. Additional logs can be produced if it would be helpful? I’m really trying hard to figure this one out, but I haven’t been able to find anything useful so far.

Has anyone else dealt with this? Thanks for any tips or ideas.

-Z-

Update - seems to now be affecting dnf and flatpak as well. I feel like I should reinstall just to be safe, but will leave it for a bit longer.

Errors during downloading metadata for repository 'fedora':
2

Update 2 - reconfiguring the two NICs into a team seems to have helped. Flatpaks and dnf have updated successfully. FMW on two attemps did have the same error though.

3

Next bit of oddity, the computer wont boot a fresh install iso from uefi mode, however, the same iso works fine on my laptop.

4

And finally, it looks like the issue was the bios on my MSI board. Updating a potentially corrupted version seems to have fixed the issue. I disabled the nvidia card, because why bother with it?

1 Like