Re: Wireguard on android w/o kernel module

2018-06-02 Thread Jose Marinez
Hi Jason,
I'm looking into that specific aspect as we speak. Google at times has 
"peculiar ways" to conceive of how users would interact with Android, maybe 
this is one of them. However, I've seen developers abuse APIs in self interest 
for a number of reasons.
On iOS, once a VPN app is disconnected, it automatically ceases the right to 
"always on."
I'll dig around and get back to you on this.  


Thanks,Jose

On Saturday, June 2, 2018, 5:49 PM, Jason A. Donenfeld  wrote:

On Sat, Jun 2, 2018 at 11:47 PM Jose Marinez  wrote:
> Pardon me, as I just sent a related message without reading this one first. 
> The fact remains, there should be a better way to handle and prevent this.

Care to poke around in the APIs and see if you can come up with
something automatic and useful?

Jason



___
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard


Re: Wireguard on android w/o kernel module

2018-06-02 Thread Jason A. Donenfeld
On Sat, Jun 2, 2018 at 11:47 PM Jose Marinez  wrote:
> Pardon me, as I just sent a related message without reading this one first. 
> The fact remains, there should be a better way to handle and prevent this.

Care to poke around in the APIs and see if you can come up with
something automatic and useful?

Jason
___
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard


Re: Wireguard on android w/o kernel module

2018-06-02 Thread Jose Marinez
Pardon me, as I just sent a related message without reading this one first. The 
fact remains, there should be a better way to handle and prevent this. Perhaps, 
at a minimum and in the interim, to suggest investigating the installation of 
another VPN client settings right in the error message.


Thanks,Jose

On Friday, June 1, 2018, 12:54 PM, Maximilian Eschenbacher 
 wrote:

Hey Jason,

thanks for the quick response.

On 01/06/2018 18:42:41, Jason A. Donenfeld wrote:
>You can investigate (b) by fishing around in the system VPN settings
>and seeing what's there, possibly removing authorization for those.
>Afterwards, close the application, reopen it, and it should prompt you
>to accept permissions.

This was exactly what had happened.

Best regards

Max
___
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard



___
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard


Re: Wireguard on android w/o kernel module

2018-06-01 Thread Maximilian Eschenbacher

Hey Jason,

thanks for the quick response.

On 01/06/2018 18:42:41, Jason A. Donenfeld wrote:

You can investigate (b) by fishing around in the system VPN settings
and seeing what's there, possibly removing authorization for those.
Afterwards, close the application, reopen it, and it should prompt you
to accept permissions.


This was exactly what had happened.

Best regards

Max


signature.asc
Description: PGP signature
___
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard


Re: Wireguard on android w/o kernel module

2018-06-01 Thread Jason A. Donenfeld
Hello Maximilian,

This happens when either:

a) You reject the permissions prompt shown when the app opens.
b) Another VPN application is set to "always on" mode.

You can investigate (b) by fishing around in the system VPN settings
and seeing what's there, possibly removing authorization for those.
Afterwards, close the application, reopen it, and it should prompt you
to accept permissions.

We'll happily accept a patch automating this kind of thing, if the
Android frameworks allow it.

Jason
___
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard