[COMPRESS_ERROR] server pushed compression settings that are not allowed

Pritunl
1

Hello! When i tried to connect to pritunl-server from openvpn3, i have this message:
session-start: ** ERROR ** Failed to connect: Connection, Client disconnected

$ openvpn3 session-start --config local_vpn.ovpn
$ Using configuration profile from file: local_vpn.ovpn
$ Session path: /net/openvpn/v3/sessions/f943f16ds7131s49e1s9023s0983a5d60ef8
$ session-start: ** ERROR ** Failed to connect: Connection, Client disconnected

$ sudo openvpn3-admin journal --path /net/openvpn/v3/sessions/f943f16ds7131s49e1s9023s0983a5d60ef8
$ [sudo] пароль для admin:
$ Tue Nov 28 17:10:13 2023 {tag:2360436534705743513} Client !! FATAL !!: [COMPRESS_ERROR] server pushed compression settings that are not allowed and will result in a non-working connection.

can somebody help me??

1 Like
2

Hello. follow this step:

  1. import config
    $ openvpn3 config-import --config config_vpn.ovpn --name MY_VPN1
  2. allow compression
    $ openvpn3 config-manage --config MY_VPN1 --allow-compression yes
  3. connect to vpn
    $ openvpn3 session-start --config MY_VPN1
2 Likes
3

thaaaaaaank you, this worked for me

4

This is the wrong solution for two reasons. 1. Compression has been disabled by default for a good reason - it can be used as an attack vector. 2. Not all clients allow changing these settings - I can’t see any way to change settings in OpenVPN Connect on android for example.

What’s the proper fix for this? I can’t see any way to disable compression in the Pritunl UI.

5

There is no option to enable compression, in very old releases there was an option but it is no longer shown and disabled by default. Enabling debugging output in the server settings will show the server configuration in the output when starting. The line allow-compression no would indicate it is disabled. Chrome Developer Tools could also be used to view the response from the server page and check the value of lzo_compression.

6

Perfect, thank you. lzo_compression is set to false so I’m not sure why the Android OpenVPN client is giving me Transport Error: server pushed compression settings that are not allowed and will result in a non-working connection.

7

I’ve resolved the problem by selecting “Legacy” for the security configuration in the OpenVPN Connect app.