Issues with WireGuard on Android (with kernel module)

Issues with WireGuard on Android (with kernel module)

[Davide Depau]

[-- Attachment #1: Type: text/plain, Size: 1181 bytes --]

Hello,
I set up yesterday WireGuard on my OpenWrt router. I configured it on my
computer and it works - everything is setup correctly and traffic is
forwarded through WireGuard to the router and then to the outside.
On Android, after enabling the interface using the app or with wg-quick
manually, network is unreachable. I cannot even ping IPs on the same LAN as
the WireGuard interface.
I'm not sure how to find the routes as Android is a bit special.
As I said in the subject, my kernel (NetHunter kernel for OnePlus 3T) has
the module builtin.

Router conf (interface IP: 192.168.2.1/24):

[Interface]
ListenPort = 4500
PrivateKey = ...

[Peer]
PublicKey = ...
AllowedIPs = 192.168.2.196/32

[Peer]
PublicKey = ...
AllowedIPs = 192.168.2.4/32


Computer conf (working):

[Interface]
Address = 192.168.2.196/32
PrivateKey = ...
DNS = 1.1.1.1

[Peer]
PublicKey = ...
AllowedIPs = 0.0.0.0/0
Endpoint = (hostname):4500
PersistentKeepalive = 25


Phone conf (generated by app, not working):

[Interface]
Address = 192.168.2.4/24
DNS = 1.1.1.1
PrivateKey = ...

[Peer]
AllowedIPs = 0.0.0.0/0
Endpoint = (hostname):4500
PersistentKeepalive = 25
PublicKey = ...


Any hints?
Thank you

[-- Attachment #2: Type: text/html, Size: 1825 bytes --]

Re: Issues with WireGuard on Android (with kernel module)

[Jason A. Donenfeld]

Hi Davide,

It's possible you mixed up the keys in the config. The next version of
the Android app, which should be out soon, will have the ability to
export configs to .zip files, so you'll be able to test your
configuration on your computer, to verify that the problem is not
Android.

Jason

Re: Issues with WireGuard on Android (with kernel module)

[Davide Depau]

[-- Attachment #1: Type: text/plain, Size: 906 bytes --]

Hi Jason,
I've already extracted the configs generated by the app: my phone is rooted
and I found them in /data.
Anyway I learned a few days ago that my university's wifi blocks traffic by
protocol: though the UDP port I'm using for WireGuard I'm using is
technically open, their firewall apparently analyzes the frames and,
finding unexpected encrypted traffic, filters it.
I'll change the server port to OpenVPN's, which is also open and hopefully
won't look suspicious, and do some more checks.

Thank you
Davide

On Mon, Apr 30, 2018 at 7:34 PM Jason A. Donenfeld <Jason@zx2c4.com> wrote:

> Hi Davide,
>
> It's possible you mixed up the keys in the config. The next version of
> the Android app, which should be out soon, will have the ability to
> export configs to .zip files, so you'll be able to test your
> configuration on your computer, to verify that the problem is not
> Android.
>
> Jason
>

[-- Attachment #2: Type: text/html, Size: 1285 bytes --]