Wireguard VPN not working on a single Android palmtop

Uqbar · April 9, 2024, 9:02am

Hi all.
I have been successfully using Wireguard VPN on a number of Android palmtops.
There is one (Android 10) which isn’t working and I ran out of troubleshooting options.
Router is RB5009 w/ fw 7.14.2 and application is WireGuard v1.0,20231018.

Local (palmtop) logs say this:

04-09 10:38:43.532  6225  6225 I am_on_create_called: [0,com.wireguard.android.activity.MainActivity,performCreate]
04-09 10:38:43.624  6225  6225 I am_on_start_called: [0,com.wireguard.android.activity.MainActivity,handleStartActivity]
04-09 10:38:43.630  6225  6225 I zhongyeqing: callingPackage -- com.wireguard.android
04-09 10:38:43.631  6225  6225 I am_on_resume_called: [0,com.wireguard.android.activity.MainActivity,RESUME_ACTIVITY]
04-09 10:38:43.654  6225  6225 I am_on_top_resumed_gained_called: [0,com.wireguard.android.activity.MainActivity,topStateChangedWhenResumed]
04-09 10:38:45.064  6225  6225 I am_on_top_resumed_lost_called: [0,com.wireguard.android.activity.MainActivity,topStateChangedWhenResumed]
04-09 10:38:45.065  6225  6225 I am_on_paused_called: [0,com.wireguard.android.activity.MainActivity,performPause]
04-09 10:38:45.089  6225  6225 I am_on_create_called: [0,com.wireguard.android.activity.SettingsActivity,performCreate]
04-09 10:38:45.125  6225  6225 I am_on_start_called: [0,com.wireguard.android.activity.SettingsActivity,handleStartActivity]
04-09 10:38:45.126  6225  6225 I zhongyeqing: callingPackage -- com.wireguard.android
04-09 10:38:45.126  6225  6225 I am_on_resume_called: [0,com.wireguard.android.activity.SettingsActivity,RESUME_ACTIVITY]
04-09 10:38:45.134  6225  6225 I am_on_top_resumed_gained_called: [0,com.wireguard.android.activity.SettingsActivity,topStateChangedWhenResumed]
04-09 10:38:45.451  6225  6225 I am_on_stop_called: [0,com.wireguard.android.activity.MainActivity,STOP_ACTIVITY_ITEM]
04-09 10:38:51.431  6225  6225 I am_on_top_resumed_lost_called: [0,com.wireguard.android.activity.SettingsActivity,topStateChangedWhenResumed]
04-09 10:38:51.432  6225  6225 I am_on_paused_called: [0,com.wireguard.android.activity.SettingsActivity,performPause]
04-09 10:38:51.453  6225  6225 I am_on_restart_called: [0,com.wireguard.android.activity.MainActivity,performRestartActivity]
04-09 10:38:51.454  6225  6225 I am_on_start_called: [0,com.wireguard.android.activity.MainActivity,handleStartActivity]
04-09 10:38:51.454  6225  6225 I zhongyeqing: callingPackage -- com.wireguard.android
04-09 10:38:51.455  6225  6225 I am_on_resume_called: [0,com.wireguard.android.activity.MainActivity,RESUME_ACTIVITY]
04-09 10:38:51.455  6225  6225 I am_on_top_resumed_gained_called: [0,com.wireguard.android.activity.MainActivity,topWhenResuming]
04-09 10:38:51.720  6225  6225 I am_on_stop_called: [0,com.wireguard.android.activity.SettingsActivity,LIFECYCLER_STOP_ACTIVITY]
04-09 10:38:51.723  6225  6225 I am_on_destroy_called: [0,com.wireguard.android.activity.SettingsActivity,performDestroy]
04-09 10:38:54.560  6225  6225 I am_on_top_resumed_lost_called: [0,com.wireguard.android.activity.MainActivity,topStateChangedWhenResumed]
04-09 10:38:54.561  6225  6225 I am_on_paused_called: [0,com.wireguard.android.activity.MainActivity,performPause]
04-09 10:38:55.333  6225  6225 I am_on_stop_called: [0,com.wireguard.android.activity.MainActivity,STOP_ACTIVITY_ITEM]
04-09 10:38:56.910  6225  6225 I am_on_activity_result_called: [0,com.wireguard.android.activity.MainActivity,ACTIVITY_RESULT]
04-09 10:38:56.910  6225  6225 I am_on_restart_called: [0,com.wireguard.android.activity.MainActivity,performRestartActivity]
04-09 10:38:56.916  6225  6225 I am_on_start_called: [0,com.wireguard.android.activity.MainActivity,handleStartActivity]
04-09 10:38:56.917  6225  6225 I zhongyeqing: callingPackage -- com.wireguard.android
04-09 10:38:56.917  6225  6225 I am_on_resume_called: [0,com.wireguard.android.activity.MainActivity,RESUME_ACTIVITY]
04-09 10:38:56.917  6225  6225 I am_on_top_resumed_gained_called: [0,com.wireguard.android.activity.MainActivity,topWhenResuming]
04-09 10:39:01.281  6225  6282 I WireGuard/GoBackend: Bringing tunnel railroad UP
04-09 10:39:06.480  6225  6225 I am_on_top_resumed_lost_called: [0,com.wireguard.android.activity.MainActivity,topStateChangedWhenResumed]
04-09 10:39:06.481  6225  6225 I am_on_paused_called: [0,com.wireguard.android.activity.MainActivity,performPause]
04-09 10:39:06.492  6225  6225 I am_on_create_called: [0,com.wireguard.android.activity.SettingsActivity,performCreate]
04-09 10:39:06.513  6225  6225 I am_on_start_called: [0,com.wireguard.android.activity.SettingsActivity,handleStartActivity]
04-09 10:39:06.514  6225  6225 I zhongyeqing: callingPackage -- com.wireguard.android
04-09 10:39:06.514  6225  6225 I am_on_resume_called: [0,com.wireguard.android.activity.SettingsActivity,RESUME_ACTIVITY]
04-09 10:39:06.519  6225  6225 I am_on_top_resumed_gained_called: [0,com.wireguard.android.activity.SettingsActivity,topStateChangedWhenResumed]
04-09 10:39:06.798  6225  6225 I am_on_stop_called: [0,com.wireguard.android.activity.MainActivity,STOP_ACTIVITY_ITEM]
04-09 10:39:13.022  6225  6225 I am_on_top_resumed_lost_called: [0,com.wireguard.android.activity.SettingsActivity,topStateChangedWhenResumed]
04-09 10:39:13.023  6225  6225 I am_on_paused_called: [0,com.wireguard.android.activity.SettingsActivity,performPause]
04-09 10:39:13.043  6225  6225 I am_on_create_called: [0,com.wireguard.android.activity.LogViewerActivity,performCreate]
04-09 10:39:13.045  6225  6225 I am_on_start_called: [0,com.wireguard.android.activity.LogViewerActivity,handleStartActivity]
04-09 10:39:13.045  6225  6225 I zhongyeqing: callingPackage -- com.wireguard.android
04-09 10:39:13.046  6225  6225 I am_on_resume_called: [0,com.wireguard.android.activity.LogViewerActivity,RESUME_ACTIVITY]
04-09 10:39:13.051  6225  6225 I am_on_top_resumed_gained_called: [0,com.wireguard.android.activity.LogViewerActivity,topStateChangedWhenResumed]
04-09 10:39:13.300  6225  6225 I am_on_stop_called: [0,com.wireguard.android.activity.SettingsActivity,STOP_ACTIVITY_ITEM]
04-09 10:39:16.885  6225  8735 D WireGuard/GoBackend/railroad: peer(////…///8) - Handshake did not complete after 5 seconds, retrying (try 4)
04-09 10:39:16.886  6225  8735 D WireGuard/GoBackend/railroad: peer(////…///8) - Sending handshake initiation
04-09 10:39:21.916  6225  6294 D WireGuard/GoBackend/railroad: peer(////…///8) - Handshake did not complete after 5 seconds, retrying (try 5)
04-09 10:39:21.916  6225  6294 D WireGuard/GoBackend/railroad: peer(////…///8) - Sending handshake initiation
04-09 10:39:27.025  6225  8726 D WireGuard/GoBackend/railroad: peer(////…///8) - Handshake did not complete after 5 seconds, retrying (try 6)
04-09 10:39:27.025  6225  8726 D WireGuard/GoBackend/railroad: peer(////…///8) - Sending handshake initiation
04-09 10:39:32.255  6225  8726 D WireGuard/GoBackend/railroad: peer(fA6O…RlhQ) - Retrying handshake because we stopped hearing back after 15 seconds
04-09 10:39:32.255  6225  8726 D WireGuard/GoBackend/railroad: peer(fA6O…RlhQ) - Sending handshake initiation
04-09 10:39:32.278  6225  6294 D WireGuard/GoBackend/railroad: peer(fA6O…RlhQ) - Received handshake response
04-09 10:39:32.279  6225  6294 D WireGuard/GoBackend/railroad: peer(fA6O…RlhQ) - Sending keepalive packet
04-09 10:39:32.308  6225  8726 D WireGuard/GoBackend/railroad: peer(////…///8) - Handshake did not complete after 5 seconds, retrying (try 7)
04-09 10:39:32.308  6225  8726 D WireGuard/GoBackend/railroad: peer(////…///8) - Sending handshake initiation
04-09 10:39:37.374  6225  8735 D WireGuard/GoBackend/railroad: peer(////…///8) - Handshake did not complete after 5 seconds, retrying (try 8)
04-09 10:39:37.374  6225  8735 D WireGuard/GoBackend/railroad: peer(////…///8) - Sending handshake initiation
04-09 10:39:42.487  6225  8726 D WireGuard/GoBackend/railroad: peer(////…///8) - Handshake did not complete after 5 seconds, retrying (try 9)
04-09 10:39:42.487  6225  8726 D WireGuard/GoBackend/railroad: peer(////…///8) - Sending handshake initiation
04-09 10:39:47.770  6225  8735 D WireGuard/GoBackend/railroad: peer(////…///8) - Handshake did not complete after 5 seconds, retrying (try 10)
04-09 10:39:47.771  6225  8735 D WireGuard/GoBackend/railroad: peer(////…///8) - Sending handshake initiation

I am now installing/compiling WinBox on my (Arch) Linux pc in order to get detailed logging from my Mikrotik box (I cannot filter via webfig) and will post relevant log entries later.

Any hint/experience here?

llamajaja · April 9, 2024, 5:56pm

#1 Issue on these sorts of problems…
Ensure you have the right public key on the android from the MT.
Ensure on the MT you have the right public key from the android

#2 issue - Rest of Allowed Ips configured right at both ends.

+++++++++++++++++++++++++++++++++++++++++++
Disable other peers on MT router and just keep the single problematic android up.
Do you see traffic on the Status Graph???

VMX · April 22, 2024, 9:50am

Same issue here.

Had the Wireguard server working flawlessly for months on my MikroTik Hex S, and then all of a sudden, my clients stopped working. Logs both on the client devices and the MikroTik itself show the same as yours regarding the failed handshake.

I’ve updated to the latest beta test version but it hasn’t fixed anything.

Needless to say, it’s not a config issue, since I haven’t touched the config ever since I set everything up months ago. Clients are diverse (Android phone, MacBook laptop), all running the official Wireguard app, so it must’ve been something on MikroTik side.

patrikg · April 22, 2024, 9:58am

Is Wireguard using some certs to connect ?
Haven’t worked with WireGuard myself,
Maybe the certs have run out of date, best before date.