Re: connman-vpn does'nt work with wireguard

Hi

some records on journalctl when the vpn connect and cause a restart of connman

avril 24 20:12:21 grat-os1 connmand[554]: Interface wlan0 [ wifi ]
IPv4 online check to http://ipv4.connman.net/online/status.html
succeeded
avril 24 20:13:11 grat-os1 connmand[554]: Interface (null) [ vpn ]
state is association
avril 24 20:13:11 grat-os1 connmand[554]: ipconfig state 2 ipconfig method 1
avril 24 20:13:11 grat-os1 connmand[554]: wg0 {create} index 6 type 65534 <NONE>
avril 24 20:13:11 grat-os1 connmand[554]: wg0 {update} flags 144 <DOWN>
avril 24 20:13:11 grat-os1 connmand[554]: wg0 {newlink} index 6
address 00:00:00:00:00:00 mtu 1420
avril 24 20:13:11 grat-os1 connmand[554]: wg0 {newlink} index 6
operstate 2 <DOWN>
avril 24 20:13:11 grat-os1 connman-vpnd[626]: wg0 {create} index 6
type 65534 <NONE>
avril 24 20:13:11 grat-os1 connman-vpnd[626]: wg0 {update} flags 144 <DOWN>
avril 24 20:13:11 grat-os1 connman-vpnd[626]: wg0 {newlink} index 6
operstate 2 <DOWN>
avril 24 20:13:11 grat-os1 connmand[554]: ipconfig state 2 ipconfig method 1
avril 24 20:13:11 grat-os1 connmand[554]: wg0 {update} flags 98513
<UP,RUNNING,LOWER_UP>
avril 24 20:13:11 grat-os1 connmand[554]: wg0 {newlink} index 6
address 00:00:00:00:00:00 mtu 1420
avril 24 20:13:11 grat-os1 connmand[554]: wg0 {newlink} index 6
operstate 0 <UNKNOWN>
avril 24 20:13:11 grat-os1 connman-vpnd[626]: wg0 {update} flags 98513
<UP,RUNNING,LOWER_UP>
avril 24 20:13:11 grat-os1 connman-vpnd[626]: wg0 {newlink} index 6
operstate 0 <UNKNOWN>
avril 24 20:13:11 grat-os1 connmand[554]: wg0 {add} address
10.0.3.5/24 label wg0 family 2
avril 24 20:13:31 grat-os1 connmand[554]: Aborting (signal 11)
[/usr/bin/connmand]
avril 24 20:13:31 grat-os1 connmand[554]: ++++++++ backtrace ++++++++
avril 24 20:13:31 grat-os1 connmand[554]: #0  0x7f3a7d2592a0 in
/usr/lib/libc.so.6
avril 24 20:13:31 grat-os1 connmand[554]: #1  0x55bb53185ed7 in
/usr/bin/connmand
avril 24 20:13:31 grat-os1 connmand[554]: #2  0x55bb531a1d6a in
/usr/bin/connmand
avril 24 20:13:31 grat-os1 connmand[554]: #3  0x55bb5319db6c in
/usr/bin/connmand
avril 24 20:13:31 grat-os1 connmand[554]: #4  0x55bb5317704a in
/usr/bin/connmand
avril 24 20:13:31 grat-os1 connmand[554]: #5  0x55bb53177695 in
/usr/bin/connmand
avril 24 20:13:31 grat-os1 connmand[554]: #6  0x55bb531db674 in
/usr/bin/connmand
avril 24 20:13:31 grat-os1 connmand[554]: #7  0x55bb531db873 in
/usr/bin/connmand
avril 24 20:13:31 grat-os1 connmand[554]: #8  0x7f3a7d6c7711 in
/usr/lib/libdbus-1.so.3
avril 24 20:13:31 grat-os1 connmand[554]: #9  0x55bb531da9f0 in
/usr/bin/connmand
avril 24 20:13:31 grat-os1 connmand[554]: #10 0x7f3a7d7609e9 in
/usr/lib/libglib-2.0.so.0
avril 24 20:13:31 grat-os1 connmand[554]: #11 0x7f3a7d763b87 in
/usr/lib/libglib-2.0.so.0
avril 24 20:13:31 grat-os1 connmand[554]: #12 0x7f3a7d76443f in
/usr/lib/libglib-2.0.so.0
avril 24 20:13:31 grat-os1 connmand[554]: #13 0x55bb531462f9 in
/usr/bin/connmand
avril 24 20:13:31 grat-os1 connmand[554]: #14 0x7f3a7d243c4a in
/usr/lib/libc.so.6
avril 24 20:13:31 grat-os1 connmand[554]: #15 0x7f3a7d243d05 in
/usr/lib/libc.so.6
avril 24 20:13:31 grat-os1 connmand[554]: +++++++++++++++++++++++++++
avril 24 20:13:31 grat-os1 systemd[1]: connman.service: Main process
exited, code=exited, status=1/FAILURE
avril 24 20:13:31 grat-os1 systemd[1]: connman.service: Failed with
result 'exit-code'.
avril 24 20:13:32 grat-os1 systemd[1]: connman.service: Scheduled
restart job, restart counter is at 1.
avril 24 20:13:32 grat-os1 systemd[1]: Starting connman.service...
avril 24 20:13:32 grat-os1 connmand[1091]: Connection Manager version 1.42

Best regards

Daniel

Le mer. 24 avr. 2024 à 18:14, Grant Erickson
<[email protected]> a écrit :
>
> +Zoltán Böszörményi
>
> On Apr 24, 2024, at 7:50 AM, Christian Hewitt <[email protected]> wrote:
> >> On 24 Apr 2024, at 6:06 PM, Grant Erickson <[email protected]> wrote:
> >> On Apr 23, 2024, at 11:05 PM, daniel antoine <[email protected]> wrote:
> >>> I have installed wireguards-tools on my system and I am able to
> >>> connect to a VPN server friend with the command wg-quick up 'name of
> >>> the interface' . The configuration file in /etc/wiregard has a host
> >>> with a FQDN as blabla.com  . It also works if I replace the host by an
> >>> IP address (IPv4 or IPv6).
> >>>
> >>> I have adapted the configuration file in /var/lib/connman-plugin like vpn.config
> >>>
> >>> [provider_wireguard]
> >>> Type = WireGuard
> >>> Name = vpn
> >>> Host = balabla.com
> >>> WireGuard.Address = 10.0.6.5 /24
> >>> WireGuard.PrivateKey = xxxx
> >>> WireGuard.PublicKey = zzzz
> >>> WireGuard.AllowedIPs = 10.0.6.0/24
> >>> WireGuard.EndpointPort = 51822
> >>> WireGuard.PersistentKeepalive = 25
> >>>
> >>> My display environment is enlightenment. I see the connection "vpn" in
> >>> the connection window. When I click on it , wg show vpn displays the
> >>> connection to the server, a ip a command shows an interface wg0  but
> >>> it drops after some seconds. I can ping the server 10.0.6.1 until it
> >>> drops.
> >>>
> >>> If I replace the FQDN by an IP address in this file , for an IPv4
> >>> address it makes the wifi connection shutdown and returns. My laptop
> >>> is connected by wifi to my livebox. If I put an IPv6 address it does
> >>> nothing, no interface wg0 is created.
> >>>
> >>> connmanctl shows the vpn service with the command services and the vpn
> >>> connection is present in vpnconnection
> >>>
> >>> My first question is why connman does not accept an IP address IPv4 or
> >>> IPv6 . I have compiled wiregard-tools with WITH_BASHCOMPLETION=yes
> >>> and WITH_WGQUICK=yes
> >>>
> >>> After why the connection drops
> >>
> >> Daniel:
> >>
> >> I wonder if you are running into the same issue as Christian Hewitt <[email protected]> in the thread "RFC: There Are No Routes for Non-default Services
> >> “: https://lore.kernel.org/connman/[email protected]/
> >
> > The distro I work on (LibreELEC) is bundling this patch to revert the change:
> >
> > https://github.com/LibreELEC/LibreELEC.tv/commit/998f2bcfd5849e3eecda6f753ff5bab68a847aea
> >
> > This unfortunately means we’re unable to bump ConnMan until things are resolved/adapted upstream.
>
> Adding Zoltán Böszörményi <[email protected]>, the original patch submitter of 9eb1772d31b6 for visibility.
>
> Best,
>
> Grant