id summary reporter owner description type status priority milestone component version severity resolution keywords cc 502 SSL3_GET_RECORD:bad decompression Anton B Steffan Karger "I'm facing a problem with Netgear R7000 router. There are multiple reports about the same problem under different OS. For example, here: http://forum1.netgear.com/showthread.php?t=90147 Netgear is running outdated software: OpenSSL 1.0.0g 18 Jan 2012 Zlib-1.2.7 The client side software: openssl-1.0.1k openvpn-2.3.6 zlib-1.2.8 (compression library) I have opened a bug report at netgear and they might fix it. However, the root of the problem seems can be fixed in OpenVPN. Here is the log file on the client site: Tue Jan 13 09:39:56 2015 us=336194 VERIFY OK: depth=1, C=TW, ST=TW, L=Taipei, O=netgear, OU=netgear, CN=netgear, emailAddress=mail@netgear.com Tue Jan 13 09:39:56 2015 us=336439 VERIFY OK: depth=0, C=TW, ST=TW, O=netgear, OU=netgear, CN=netgear, emailAddress=mail@netgear.com Tue Jan 13 09:39:56 2015 us=416665 TLS_ERROR: BIO read tls_read_plaintext error: error:1408F06B:SSL routines:SSL3_GET_RECORD:bad decompression Tue Jan 13 09:39:56 2015 us=416728 TLS Error: TLS object -> incoming plaintext read error Tue Jan 13 09:39:56 2015 us=416748 TLS Error: TLS handshake failed Tue Jan 13 09:39:56 2015 us=416962 TCP/UDP: Closing socket Tue Jan 13 09:39:56 2015 us=417004 SIGUSR1[soft,tls-error] received, process restarting The best explanation is probably given by nginx guys: http://forum.nginx.org/read.php?2,226705,226754#msg-226754 It is a compatability issue of different versions. There are also patches for different software. For example: https://github.com/goochjj/pound/commit/a0c52c542ca9620a96750f9877b26bf4c84aef1b.diff https://svn.apache.org/repos/asf/tomcat/native/trunk/native/src/ssl.c I've patched OpenVPN similarly and the problem has gone. The patch is attached to this bug report " Bug / Defect closed major release 2.3.7 Generic / unclassified OpenVPN 2.2.2 (Community Ed) Not set (select this one, unless your'e a OpenVPN developer) fixed