If your VPN server is running a very old version of OpenVPN, you may encounter connection problems when using modern versions of Viscosity due to a mismatch of VPN compression settings. OpenVPN introduced a number of new compression options in recent updates, and it also enforces stricter requirements between the settings on the server and client.

A mismatch of VPN compression settings can result in a warning of Bad compression stub decompression header byte appearing in the connection log. However in many instances, depending on the compression settings, it can result in a non-functional VPN connection with no warnings at all.

Old versions of OpenVPN were far more lenient about compression configuration mismatches between client and server. You may have wanted your connection to use compression, but if there is a configuration mismatch, these versions would generally not show any errors or warnings, instead compression would simply not be used. Modern versions of OpenVPN however will drop packets using a different compression setting than expected. This can result in a VPN connection establishing, however it being essentially unusable.

OpenVPN Server Administrators

We also strongly recommend disabling compression due to the VORACLE security vulnerability.

If you still wish to use compression, we recommend updating your server to the latest version of OpenVPN and use the compress option and remove any legacy comp-lzo options.

Viscosity Users

If you are not the administrator of the server you are connecting to, as a first step we highly recommend contacting your VPN Provider for assistance. If you're unsure who this is please see the How Do I Find Out Who My VPN Provider Is? article. It's highly likely they'll be able to provide you with an updated configuration file you can simply import into Viscosity, without the need to go through the additional troubleshooting steps below.

If you're unable to get an updated configuration from your VPN Provider, please try making the changes below:

1. Edit your connection in Viscosity and go to the Advanced tab. If there is a line starting with comp-lzo here, take note of this line (it could be comp-lzo yes, comp-lzo no, comp-lzo adaptive, or just comp-lzo). Then delete this line.
2. Save your connection and try to connect. If you are able to connect and access resources through your VPN, there is nothing more you need to do. Otherwise please continue.
3. Edit your connection in Viscosity again and go to the Options tab.
4. If you had comp-lzo yes, comp-lzo adaptive, or just comp-lzo, the Compression option should be set to LZO. If you are unable to use your VPN, change the Compression option to Off, save your connection and try connecting again.
5. If you had comp-lzo no, the Compression option should be set to Off. If you are unable to use your VPN, change the Compression option to LZO, save your connection and try connecting again.