Hi,
Since 3 days i will install vpn on my android 5.0.2 Nexus 5 Cyanogenmod latest nightly.
I use:
OpenVPN for Android
And parallel i have tested with OpenVPN Connect
The connection to my vpn server a ipfire Home Router ist sucessfull but either my connection is not running every website is not available or it runs on mobile connect.
In the log files I see this error / warning
2015-02-16 13:48:18 Modell Nexus 5 (hammerhead) google, Android API 21, version 0.6.26, offizielle Version
2015-02-16 13:48:19 Generiere OpenVPN Konfiguration…
2015-02-16 13:48:22 started Socket Thread
2015-02-16 13:48:22 Netzwerkstatus: CONNECTED HSPA to MOBILE web.vodafone.de
2015-02-16 13:48:22 DEPRECATED OPTION: --tls-remote, please update your configuration
2015-02-16 13:48:22 Current Parameter Settings:
2015-02-16 13:48:22 config = '/data/data/de.blinkt.openvpn/cache/android.conf'
2015-02-16 13:48:22 mode = 0
2015-02-16 13:48:22 show_ciphers = DISABLED
2015-02-16 13:48:22 show_digests = DISABLED
2015-02-16 13:48:22 show_engines = DISABLED
2015-02-16 13:48:22 genkey = DISABLED
2015-02-16 13:48:22 key_pass_file = '[UNDEF]'
2015-02-16 13:48:22 show_tls_ciphers = DISABLED
2015-02-16 13:48:22 connect_retry_max = 5
2015-02-16 13:48:22 Connection profiles [0]:
2015-02-16 13:48:22 proto = udp
2015-02-16 13:48:22 local = '[UNDEF]'
2015-02-16 13:48:22 local_port = '1194'
2015-02-16 13:48:22 remote = 'm5ny8vruoybxp30c.myfritz.net'
2015-02-16 13:48:22 remote_port = '1194'
2015-02-16 13:48:22 remote_float = DISABLED
2015-02-16 13:48:22 bind_defined = DISABLED
2015-02-16 13:48:22 bind_local = ENABLED
2015-02-16 13:48:22 bind_ipv6_only = DISABLED
2015-02-16 13:48:22 connect_retry_seconds = 5
2015-02-16 13:48:22 connect_timeout = 10
2015-02-16 13:48:22 socks_proxy_server = '[UNDEF]'
2015-02-16 13:48:22 socks_proxy_port = '[UNDEF]'
2015-02-16 13:48:22 socks_proxy_retry = DISABLED
2015-02-16 13:48:22 tun_mtu = 1450
2015-02-16 13:48:22 tun_mtu_defined = ENABLED
2015-02-16 13:48:22 link_mtu = 1500
2015-02-16 13:48:22 link_mtu_defined = DISABLED
2015-02-16 13:48:22 tun_mtu_extra = 0
2015-02-16 13:48:22 tun_mtu_extra_defined = DISABLED
2015-02-16 13:48:22 mtu_discover_type = -1
2015-02-16 13:48:22 fragment = 0
2015-02-16 13:48:22 mssfix = 1450
2015-02-16 13:48:22 explicit_exit_notification = 0
2015-02-16 13:48:22 Connection profiles END
2015-02-16 13:48:22 remote_random = DISABLED
2015-02-16 13:48:22 ipchange = '[UNDEF]'
2015-02-16 13:48:22 dev = 'tun'
2015-02-16 13:48:22 dev_type = '[UNDEF]'
2015-02-16 13:48:22 dev_node = '[UNDEF]'
2015-02-16 13:48:22 lladdr = '[UNDEF]'
2015-02-16 13:48:22 topology = 1
2015-02-16 13:48:22 tun_ipv6 = DISABLED
2015-02-16 13:48:22 ifconfig_local = '[UNDEF]'
2015-02-16 13:48:22 ifconfig_remote_netmask = '[UNDEF]'
2015-02-16 13:48:22 ifconfig_noexec = DISABLED
2015-02-16 13:48:22 ifconfig_nowarn = ENABLED
2015-02-16 13:48:22 ifconfig_ipv6_local = '[UNDEF]'
2015-02-16 13:48:22 ifconfig_ipv6_netbits = 0
2015-02-16 13:48:22 ifconfig_ipv6_remote = '[UNDEF]'
2015-02-16 13:48:22 shaper = 0
2015-02-16 13:48:22 mtu_test = 0
2015-02-16 13:48:22 mlock = DISABLED
2015-02-16 13:48:22 keepalive_ping = 0
2015-02-16 13:48:22 keepalive_timeout = 0
2015-02-16 13:48:22 inactivity_timeout = 0
2015-02-16 13:48:22 ping_send_timeout = 0
2015-02-16 13:48:22 ping_rec_timeout = 0
2015-02-16 13:48:22 ping_rec_timeout_action = 0
2015-02-16 13:48:22 ping_timer_remote = DISABLED
2015-02-16 13:48:22 remap_sigusr1 = 0
2015-02-16 13:48:22 persist_tun = DISABLED
2015-02-16 13:48:22 persist_local_ip = DISABLED
2015-02-16 13:48:22 persist_remote_ip = DISABLED
2015-02-16 13:48:22 persist_key = DISABLED
2015-02-16 13:48:22 passtos = DISABLED
2015-02-16 13:48:22 resolve_retry_seconds = 60
2015-02-16 13:48:22 resolve_in_advance = DISABLED
2015-02-16 13:48:22 username = '[UNDEF]'
2015-02-16 13:48:22 groupname = '[UNDEF]'
2015-02-16 13:48:22 chroot_dir = '[UNDEF]'
2015-02-16 13:48:22 cd_dir = '[UNDEF]'
2015-02-16 13:48:22 writepid = '[UNDEF]'
2015-02-16 13:48:22 up_script = '[UNDEF]'
2015-02-16 13:48:22 down_script = '[UNDEF]'
2015-02-16 13:48:22 down_pre = DISABLED
2015-02-16 13:48:22 up_restart = DISABLED
2015-02-16 13:48:22 up_delay = DISABLED
2015-02-16 13:48:22 daemon = DISABLED
2015-02-16 13:48:22 inetd = 0
2015-02-16 13:48:22 log = DISABLED
2015-02-16 13:48:22 suppress_timestamps = DISABLED
2015-02-16 13:48:22 machine_readable_output = ENABLED
2015-02-16 13:48:22 nice = 0
2015-02-16 13:48:22 verbosity = 4
2015-02-16 13:48:22 mute = 0
2015-02-16 13:48:22 gremlin = 0
2015-02-16 13:48:22 status_file = '[UNDEF]'
2015-02-16 13:48:22 status_file_version = 1
2015-02-16 13:48:22 status_file_update_freq = 60
2015-02-16 13:48:22 occ = ENABLED
2015-02-16 13:48:22 rcvbuf = 65536
2015-02-16 13:48:22 sndbuf = 65536
2015-02-16 13:48:22 sockflags = 0
2015-02-16 13:48:22 fast_io = DISABLED
2015-02-16 13:48:22 comp.alg = 2
2015-02-16 13:48:22 comp.flags = 1
2015-02-16 13:48:22 route_script = '[UNDEF]'
2015-02-16 13:48:22 route_default_gateway = '[UNDEF]'
2015-02-16 13:48:22 route_default_metric = 0
2015-02-16 13:48:22 route_noexec = DISABLED
2015-02-16 13:48:22 route_delay = 0
2015-02-16 13:48:22 route_delay_window = 30
2015-02-16 13:48:22 route_delay_defined = DISABLED
2015-02-16 13:48:22 route_nopull = DISABLED
2015-02-16 13:48:22 route_gateway_via_dhcp = DISABLED
2015-02-16 13:48:22 allow_pull_fqdn = DISABLED
2015-02-16 13:48:22 route 192.168.10.0/255.255.255.0/vpn_gateway/nil
2015-02-16 13:48:22 management_addr = '/data/data/de.blinkt.openvpn/cache/mgmtsocket'
2015-02-16 13:48:22 management_port = 'unix'
2015-02-16 13:48:22 management_user_pass = '[UNDEF]'
2015-02-16 13:48:22 management_log_history_cache = 250
2015-02-16 13:48:22 management_echo_buffer_size = 100
2015-02-16 13:48:22 management_write_peer_info_file = '[UNDEF]'
2015-02-16 13:48:22 management_client_user = '[UNDEF]'
2015-02-16 13:48:22 management_client_group = '[UNDEF]'
2015-02-16 13:48:22 management_flags = 4390
2015-02-16 13:48:22 shared_secret_file = '[UNDEF]'
2015-02-16 13:48:22 key_direction = 0
2015-02-16 13:48:22 ciphername_defined = ENABLED
2015-02-16 13:48:22 ciphername = 'AES-256-CBC'
2015-02-16 13:48:22 authname_defined = ENABLED
2015-02-16 13:48:22 authname = 'SHA1'
2015-02-16 13:48:22 prng_hash = 'SHA1'
2015-02-16 13:48:22 prng_nonce_secret_len = 16
2015-02-16 13:48:22 keysize = 0
2015-02-16 13:48:22 engine = DISABLED
2015-02-16 13:48:22 replay = ENABLED
2015-02-16 13:48:22 mute_replay_warnings = DISABLED
2015-02-16 13:48:22 replay_window = 64
2015-02-16 13:48:22 replay_time = 15
2015-02-16 13:48:22 packet_id_file = '[UNDEF]'
2015-02-16 13:48:22 use_iv = ENABLED
2015-02-16 13:48:22 test_crypto = DISABLED
2015-02-16 13:48:22 tls_server = DISABLED
2015-02-16 13:48:22 tls_client = ENABLED
2015-02-16 13:48:22 key_method = 2
2015-02-16 13:48:22 ca_file = '[UNDEF]'
2015-02-16 13:48:22 ca_path = '[UNDEF]'
2015-02-16 13:48:22 dh_file = '[UNDEF]'
2015-02-16 13:48:22 cert_file = '[UNDEF]'
2015-02-16 13:48:22 priv_key_file = '[UNDEF]'
2015-02-16 13:48:22 pkcs12_file = '[[INLINE]]'
2015-02-16 13:48:22 cipher_list = '[UNDEF]'
2015-02-16 13:48:22 tls_verify = '[UNDEF]'
2015-02-16 13:48:22 tls_export_cert = '[UNDEF]'
2015-02-16 13:48:22 verify_x509_type = 259
2015-02-16 13:48:22 verify_x509_name = 'IPFireRED.fritz.box'
2015-02-16 13:48:22 crl_file = '[UNDEF]'
2015-02-16 13:48:22 ns_cert_type = 1
2015-02-16 13:48:22 remote_cert_ku
= 0
2015-02-16 13:48:22 remote_cert_ku = 0
2015-02-16 13:48:22 remote_cert_ku = 0
2015-02-16 13:48:22 remote_cert_ku = 0
2015-02-16 13:48:22 remote_cert_ku = 0
2015-02-16 13:48:22 remote_cert_ku = 0
2015-02-16 13:48:22 remote_cert_ku = 0
2015-02-16 13:48:22 remote_cert_ku = 0
2015-02-16 13:48:22 remote_cert_ku = 0
2015-02-16 13:48:22 remote_cert_ku = 0
2015-02-16 13:48:22 remote_cert_ku[i] = 0
2015-02-16 13:48:22 remote_cert_ku[i] = 0
2015-02-16 13:48:22 remote_cert_ku[i] = 0
2015-02-16 13:48:22 remote_cert_ku[i] = 0
2015-02-16 13:48:22 remote_cert_ku[i] = 0
2015-02-16 13:48:22 remote_cert_ku[i] = 0
2015-02-16 13:48:22 remote_cert_eku = '[UNDEF]'
2015-02-16 13:48:22 ssl_flags = 0
2015-02-16 13:48:22 tls_timeout = 2
2015-02-16 13:48:22 renegotiate_bytes = 0
2015-02-16 13:48:22 renegotiate_packets = 0
2015-02-16 13:48:22 renegotiate_seconds = 3600
2015-02-16 13:48:22 handshake_window = 60
2015-02-16 13:48:22 transition_window = 3600
2015-02-16 13:48:22 single_session = DISABLED
2015-02-16 13:48:22 push_peer_info = DISABLED
2015-02-16 13:48:22 tls_exit = DISABLED
2015-02-16 13:48:22 tls_auth_file = '[UNDEF]'
2015-02-16 13:48:22 client = ENABLED
2015-02-16 13:48:22 pull = ENABLED
2015-02-16 13:48:22 auth_user_pass_file = '[UNDEF]'
2015-02-16 13:48:22 OpenVPN 2.4-icsopenvpn [git:icsopenvpn_625-af9eb9424047f9f5] android-14-armeabi-v7a [SSL (OpenSSL)] [LZO] [SNAPPY] [LZ4] [EPOLL] [MH] [IPv6] built on Dec 15 2014
2015-02-16 13:48:22 library versions: OpenSSL 1.0.1j 15 Oct 2014, LZO 2.07
2015-02-16 13:48:22 MANAGEMENT: Connected to management server at /data/data/de.blinkt.openvpn/cache/mgmtsocket
2015-02-16 13:48:22 MANAGEMENT: CMD 'hold release'
2015-02-16 13:48:22 MANAGEMENT: CMD 'bytecount 2'
2015-02-16 13:48:22 MANAGEMENT: CMD 'state on'
2015-02-16 13:48:22 MANAGEMENT: CMD 'proxy NONE'
2015-02-16 13:48:23 MANAGEMENT: CMD 'password [...]'
2015-02-16 13:48:23 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
2015-02-16 13:48:23 LZO compression initializing
2015-02-16 13:48:23 WARNING: normally if you use --mssfix and/or --fragment, you should also set --tun-mtu 1500 (currently it is 1450)
2015-02-16 13:48:23 Control Channel MTU parms [ L:1508 D:138 EF:38 EB:0 ET:0 EL:0 ]
2015-02-16 13:48:23 MANAGEMENT: >STATE:1424090903,RESOLVE,,,
2015-02-16 13:48:24 Data Channel MTU parms [ L:1508 D:1450 EF:58 EB:387 ET:0 EL:0 ]
2015-02-16 13:48:24 Local Options String: 'V4,dev-type tun,link-mtu 1508,tun-mtu 1450,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-client'
2015-02-16 13:48:24 Expected Remote Options String: 'V4,dev-type tun,link-mtu 1508,tun-mtu 1450,proto UDPv4,comp-lzo,cipher AES-256-CBC,auth SHA1,keysize 256,key-method 2,tls-server'
2015-02-16 13:48:24 Local Options hash (VER=V4): '24ae9d3f'
2015-02-16 13:48:24 Expected Remote Options hash (VER=V4): 'be985391'
2015-02-16 13:48:24 TCP/UDP: Preserving recently used remote address: [AF_INET]109.90.169.134:1194
2015-02-16 13:48:24 Socket Buffers: R=[163840->131072] S=[163840->131072]
2015-02-16 13:48:24 Protecting socket fd 4
2015-02-16 13:48:24 MANAGEMENT: CMD 'needok 'PROTECTFD' ok'
2015-02-16 13:48:24 UDP link local (bound): [AF_INET][undef]:1194
2015-02-16 13:48:24 UDP link remote: [AF_INET]109.90.169.134:1194
2015-02-16 13:48:24 MANAGEMENT: >STATE:1424090904,WAIT,,,
2015-02-16 13:48:24 MANAGEMENT: >STATE:1424090904,AUTH,,,
2015-02-16 13:48:24 TLS: Initial packet from [AF_INET]109.90.169.134:1194, sid=8fca3ea2 c0fc97a3
2015-02-16 13:48:25 VERIFY OK: depth=1, /C=DE/ST=NRW/L=Sankt_Augustin/O=Home/OU=Home/CN=Home_CA/emailAddress=rafael.seeck@gmail.com
2015-02-16 13:48:25 VERIFY OK: nsCertType=SERVER
2015-02-16 13:48:25 VERIFY X509NAME OK: /C=DE/ST=NRW/O=Home/OU=Home/CN=IPFireRED.fritz.box
2015-02-16 13:48:25 VERIFY OK: depth=0, /C=DE/ST=NRW/O=Home/OU=Home/CN=IPFireRED.fritz.box
2015-02-16 13:48:26 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
2015-02-16 13:48:26 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2015-02-16 13:48:26 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
2015-02-16 13:48:26 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
2015-02-16 13:48:26 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
2015-02-16 13:48:26 [IPFireRED.fritz.box] Peer Connection Initiated with [AF_INET]109.90.169.134:1194
2015-02-16 13:48:27 MANAGEMENT: >STATE:1424090907,GET_CONFIG,,,
2015-02-16 13:48:29 SENT CONTROL [IPFireRED.fritz.box]: 'PUSH_REQUEST' (status=1)
2015-02-16 13:48:29 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 192.168.10.5,route 10.246.32.1,topology net30,ping 10,ping-restart 60,route 192.168.10.0 255.255.255.0,dhcp-option DNS 192.168.10.5,ifconfig 10.246.32.6 10.246.32.5'
2015-02-16 13:48:29 OPTIONS IMPORT: timers and/or timeouts modified
2015-02-16 13:48:29 OPTIONS IMPORT: --ifconfig/up options modified
2015-02-16 13:48:29 OPTIONS IMPORT: route options modified
2015-02-16 13:48:29 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
2015-02-16 13:48:29 ROUTE_GATEWAY 127.100.103.119/255.0.0.0 IFACE=lo HWADDR=00:00:00:00:00:00
2015-02-16 13:48:29 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
2015-02-16 13:48:29 MANAGEMENT: >STATE:1424090909,ASSIGN_IP,,10.246.32.6,
2015-02-16 13:48:29 MANAGEMENT: CMD 'needok 'IFCONFIG' ok'
2015-02-16 13:48:29 MANAGEMENT: >STATE:1424090909,ADD_ROUTES,,,
2015-02-16 13:48:29 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2015-02-16 13:48:29 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2015-02-16 13:48:29 MANAGEMENT: CMD 'needok 'ROUTE' ok'
2015-02-16 13:48:29 MANAGEMENT: CMD 'needok 'DNSSERVER' ok'
2015-02-16 13:48:29 MANAGEMENT: CMD 'needok 'DNSSERVER' ok'
2015-02-16 13:48:29 MANAGEMENT: CMD 'needok 'PERSIST_TUN_ACTION' OPEN_BEFORE_CLOSE'
2015-02-16 13:48:29 Öffne tun Netzwerkinterface:
2015-02-16 13:48:29 Route von Android zurückgewiesen.10.246.32.6/30 Bad address
2015-02-16 13:48:29 Lokale IPv4: 10.246.32.6/30 IPv6: null MTU: 1450
2015-02-16 13:48:29 DNS-Server: 192.168.10.5, 192.168.10.5, Domäne: null
2015-02-16 13:48:29 Routen: 10.246.32.1/32, 10.246.32.6/30, 192.168.10.0/24
2015-02-16 13:48:29 ausgeschlossene Routen:
2015-02-16 13:48:29 Installierte Routen (VpnService): 10.246.32.1/32, 10.246.32.6/30, 192.168.10.0/24
2015-02-16 13:48:29 Apps, die nicht das VPN nutzen:
2015-02-16 13:48:29 MANAGEMENT: CMD 'needok 'OPENTUN' ok'
2015-02-16 13:48:29 Initialization Sequence Completed
2015-02-16 13:48:29 MANAGEMENT: >STATE:1424090909,CONNECTED,SUCCESS,10.246.32.6,109.90.169.134
The bad Adress rejected by android.
Please help.
On windows or debian Linux it will run perfect. No problems only on my phone.
Before Cyanogenmod I will test it on stock unrooted Nexus 5 and I have the same problem.
Bye
Rafael
