lzo2 2.07-2/2.08-1 breaks OpenVPN

[Guidobelix]

I have done something stupid. During a system update yesterday pacman asked me if I wanted to replace lzo2 with lzo.
Without thinking too much I said yes and now OpenVPN doesn't work anymore
$this->bbcode_second_pass_code('', '┌─[✗]─[root@pogoplug4]─[~]
└──> journalctl -xn
-- Logs begin at mar 2013-08-06 19:16:12 CEST, end at sab 2014-08-23 18:01:02 CEST. --
ago 23 17:57:10 pogoplug4 openvpn@Virginis[548]: Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
ago 23 17:57:10 pogoplug4 openvpn@Virginis[548]: Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
ago 23 17:57:10 pogoplug4 openvpn@Virginis[548]: Cannot initialize LZO compression library
ago 23 17:57:10 pogoplug4 openvpn@Virginis[548]: Exiting due to fatal error
')

The most annoyng thin is that the system does not let me go back to lzo2, because of some dependencies

And, just to drive me crazy, I can't use Geoff turnaround, because if I comment out the "comp-lzo no" line in my OpenVPN configs I can't connect to my vpn provider!

Has anyone got a suggestion?

[Geoff]

Looking at the man page, I can see that setting comp-lzo (to anything, even "no") allows the server to override the setting to turn on comp-lzo (and push that setting to the client) on a per-client basis. Maybe you could ask your VPN provider not to turn on the comp-lzo setting for your client in their client-config file.

[hydro]

$this->bbcode_second_pass_quote('Guidobelix', '
')The most annoyng thin is that the system does not let me go back to lzo2, because of some dependencies

[Guidobelix]

@hydro
Thank you very much! I haven't thought about that , I'll give it t try tonight.
Edit: it worked like a charm Thank you!

@Geoff
Thanks, I tried that, but haven't got an answer from them yet.

By the way, I have the exact same set-up (at least as far as I could check) on my Archlinux PC running openVPN with the same provider and the same config file, and everything worksfine, so it looks like an ARM specific issue.
I hope it will be solved sooner or later.

[rhester72]

Playing the 'provides' trick proved to be such a good idea, I'm making a ready-to-go package of the last working lzo2 that also provides lzo (at least enough to satisfy pacman and applications) here:

http://multics.minidns.net/arch/lzo2_provides_lzo-2.06-3-arm.pkg.tar.xz

Maybe someday this will actually be fixed upstream. :/ Anyone know who the maintainer of lzo for ARM is?

Rodney

[WarheadsSE]

They are unmodified from the ABS tree.

[WarheadsSE]

It has been addressed upstream.
https://projects.archlinux.org/svntogit ... 3b5de6860f

[Guidobelix]

@WarheadSE

I had a look at that commit, but I don't think it addresses the problem we are talking about here. From what I could see it simply changes the dependency of OpenVPN from LZO2 to LZO, following the renaming of that package.

The issue remains that LZO breaks OpenVPN, as LZO2 was doing since 2.07.

And, as far as could test on my Archlinux PC, it does it on ARM only (or at least on ARM5, I have a PP4).

The workaround that hydro has found simply allows us to still use OpenVPN 2.06 with later packages that depend on LZO.

[bkuri]

Just wanted to chime in and mention that rhester72's package works great. Thanks!

[WarheadsSE]

Sounds like something that needs to be actually addressed then