Unable to connect: IllegalStateException

[yvesf]

Unable to connect: IllegalStateException

[faxm0dem]

Same here since a few cm versions

[yvesf]

Actually, I fear there is nothing I can do about this error, I'm getting it too on my device. I found more details here: https://wiki.strongswan.org/issues/462

Update: search for fwmark here: http://www.cisco.com/c/en/us/td/docs/security/vpn_client/anyconnect/anyconnect30/release/notes/rn-ac3-0-android.html The error doesn't appear with mtu >= 1280
see here

andiodine/src/org/xapek/andiodine/IodineVpnService.java

Line 315 in 5d8801d

// the VPN framework fails if mtu < 1280

[faxm0dem]

Indeed I have the same IllegalStateException using Anyconnect.

[yvesf]

Please try to force your iodined to use 1280 as mtu for the tun dev with the -m option.
Btw, the mtu is not to be confused with the 'fragment' size.

[faxm0dem]

It's working indeed. Thanks, as far as I'm concerned this is an acceptable workaround

[ypid]

Also works for me. Thanks 👍

[yvesf]

thanks for the feedback. I will add a try-catch for this exception with
a specific hint about this.

[yvesf]

I'll tag the current HEAD with v1.2 as soon as I got some positive response about the latest change. (build signed with debug keys: https://www.xapek.org/~yvesf/public/IodineMain-debug-v1.2-rc1.apk)

Now, if you connect and run into this problem, the app will show you a link to this page instead of a full log with no information.
The log-output will stay visible until you press the 'Close' button.

[ypid]

Thanks for the build. With the 1280 as mtu it works as expected and with the default mtu it gives a note and links to this issue. One thing I noticed is that the link is not click able. Everything else works as expected.

[yvesf]

This specific issue is solved in HEAD, will be fixed in (git-tag) v1.1 .

For follow-up of this problem and workaround see #9