Compression "comp-lzo no" in openVPN client file not supported

Hey fink ,

Thank you for reaching out to the community, following are parameters options you can opt for:

client                                                                         
dev tun                                                                        
proto [<OPENVPN_PROTOCOL>]                                                     
verify-x509-name "[<OPENVPN_SERVER_DN>]"                                       
;route remote_host 255.255.255.255 net_gateway                                 
resolv-retry infinite                                                          
nobind                                                                         
persist-key                                                                    
persist-tun                                                                    
ca [<OPENVPN_CA_FILE>]                                                         
cert [<OPENVPN_CLIENT_CERT>]                                                   
key [<OPENVPN_CLIENT_KEY>]                                                     
auth-user-pass                                                                 
cipher [<OPENVPN_CIPHER>]                                                      
auth [<OPENVPN_AUTH>]                                                          
comp-lzo [<OPENVPN_COMPRESSION>]                                               
;can_save [<OPENVPN_SEVECREDENTIAL>]                                           
;otp [<OPENVPN_TWOFATOKEN>]                                                    
;run_logon_script [<OPENVPN_ADLOGON>]                                          
;auto_connect [<OPENVPN_AUTOCONNECT>]                                          
;route-delay 4                                                                 
verb 3                                                                         
reneg-sec 0

 XG - RR  Temporary Fix OpenVPN (3.4.0)

I didn' change comp-lzo to yes because this option is no longer supported. There are known vulnerabilities on compression with OpenVPN since 2018 according to this OpenVPN-Site. So better not to use.

fink I've the same problem, can you please tell me how did you solve this issue?

Thanks

Use only following parameter and delete all the rest. it works for me:

client
dev tun
proto udp
explicit-exit-notify
verify-x509-name "xxxxxxxxx"
route remote_host 255.255.255.255 net_gateway
resolv-retry infinite
nobind
persist-key
persist-tun

I'm able to connect but I can't reach any internal or external (internet) hosts

Hello, I got rid of this message after changing the security level in the openvpn app (3.4.1) to "Legacy".

It's under settings -> advanced settings -> security level

Sophos should remove deprecated seetings or implament Wireguard :-)

SFOS v20

We are looking into this actively, currently “comp-lzo” is the attribute causing some issues in making it work with the “preferred” security level.

With the latest release of Android (3.4.0), there seems some issue with “comp-lzo no” and legacy mode too, which is highlighted in the OpenVPN community at https://forums.openvpn.net/viewtopic.php?t=43571.

The current workaround to make Android-based OpenVPN connect clients to work is by enabling “compression” on SFOS global settings and reimport of configuration.