Description of problem:
When trying to connect to an OpenConnect VPN (such as the IBM VPN) either via the GNOME GUI or command line, all attempts fail with "Failed to set TLS priority string ("@OPENCONNECT,@SYSTEM:%COMPAT"): The request is invalid."

Version-Release number of selected component (if applicable):
Fedora 29 (upgraded from Fedora 28)
openconnect v7.08
gnutls-3.6.4-4.fc29.x86_64

How reproducible:
100%


Steps to Reproduce:
1. Attempt to connect to any openconnect VPN

Actual results:
Failed to set TLS priority string ("@OPENCONNECT,@SYSTEM:%COMPAT"): The request is invalid.

Expected results:
Connected to VPN

Additional info:
I managed to fix it by duplicating the SYSTEM line and adding an OPENCONNECT one like so:

[stewart@birb ~]$ cat /etc/crypto-policies/back-ends/gnutls.config
SYSTEM=NONE:+MAC-ALL:-MD5:+GROUP-ALL:+SIGN-ALL:-SIGN-RSA-MD5:-SIGN-DSA-SHA1:-SIGN-DSA-SHA224:-SIGN-DSA-SHA256:-SIGN-DSA-SHA384:-SIGN-DSA-SHA512:+SIGN-RSA-SHA1:%VERIFY_ALLOW_SIGN_WITH_SHA1:+CIPHER-ALL:-CAMELLIA-256-GCM:-CAMELLIA-128-GCM:-CAMELLIA-256-CBC:-CAMELLIA-128-CBC:-3DES-CBC:-ARCFOUR-128:+ECDHE-RSA:+ECDHE-ECDSA:+RSA:+DHE-RSA:+VERS-ALL:-VERS-DTLS0.9:-VERS-SSL3.0:+COMP-NULL:%PROFILE_LOW
OPENCONNECT=NONE:+MAC-ALL:-MD5:+GROUP-ALL:+SIGN-ALL:-SIGN-RSA-MD5:-SIGN-DSA-SHA1:-SIGN-DSA-SHA224:-SIGN-DSA-SHA256:-SIGN-DSA-SHA384:-SIGN-DSA-SHA512:+SIGN-RSA-SHA1:%VERIFY_ALLOW_SIGN_WITH_SHA1:+CIPHER-ALL:-CAMELLIA-256-GCM:-CAMELLIA-128-GCM:-CAMELLIA-256-CBC:-CAMELLIA-128-CBC:-3DES-CBC:-ARCFOUR-128:+ECDHE-RSA:+ECDHE-ECDSA:+RSA:+DHE-RSA:+VERS-ALL:-VERS-DTLS0.9:-VERS-SSL3.0:+COMP-NULL:%PROFILE_LOW

But this is probably a terrible hacked dialed up to 11.