Re: Invalid handshake initiation after peer reboot: bug?

2020-08-24 Thread Eicke Herbertz
Hi Jason, thanks for your help, you were correct! It dawned on me the moment I read "real time clock": While OpenWRT enables network time synchronization by default, our customer blocks all internet access other than to our VPN server for the devices. That's why it wasn't reproducible in the offic

Re: Invalid handshake initiation after peer reboot: bug?

2020-08-22 Thread Jason A. Donenfeld
Hi Eicke, It could be a customer's network is mangling packets or something, though that seems least likely. More probably, if you're dealing with tiny devices, might it be that they don't have a real time clock battery? WireGuard relies on a timestamp counter always moving forward. It doesn't hav

Invalid handshake initiation after peer reboot: bug?

2020-08-22 Thread Eicke Herbertz
Hi, we are currently rolling out some OpenWrt devices that are clients to a WireGuard VPN. Everything was normal while they were in-house, but since they are in the customers network, we got issues. The first connection succeeds, but after a reboot of the client, the server logs an Invalid handsh