Can’t seem to start gluetun with Mullvad Wireguard configuration

[DirkWolthuis]

Hi all,

I’m using the latest container with the wireguard config setup from the wiki. I have two questions:

1. what private key do I use: mullvad provides 2, one from the config and one from the generate config screen.

2. when using the mullvad private key for the generate config screen, I get the following errors:

gluetun    | 2022-06-11T12:59:29Z INFO [vpn] starting
gluetun    | 2022-06-11T12:59:29Z INFO [firewall] allowing VPN connection...
gluetun    | 2022-06-11T12:59:29Z INFO [wireguard] Using available kernelspace implementation
gluetun    | 2022-06-11T12:59:29Z INFO [wireguard] Connecting to 92.60.40.239:51820
gluetun    | 2022-06-11T12:59:30Z INFO [wireguard] Wireguard is up
gluetun    | 2022-06-11T12:59:30Z WARN [dns over tls] cannot update files: Get "https://www.internic.net/domain/named.root": dial tcp: lookup www.internic.net on 1.1.1.1:53: read udp 10.66.96.88:38817->1.1.1.1:53: i/o timeout
gluetun    | 2022-06-11T12:59:30Z INFO [dns over tls] attempting restart in 2m40s
gluetun    | 2022-06-11T13:00:18Z INFO [healthcheck] program has been unhealthy for 46s: restarting VPN
gluetun    | 2022-06-11T13:00:18Z INFO [vpn] stopping
gluetun    | 2022-06-11T13:00:18Z INFO [vpn] starting
gluetun    | 2022-06-11T13:00:18Z INFO [firewall] allowing VPN connection...
gluetun    | 2022-06-11T13:00:18Z INFO [wireguard] Using available kernelspace implementation
gluetun    | 2022-06-11T13:00:18Z INFO [wireguard] Connecting to 92.60.40.194:51820
gluetun    | 2022-06-11T13:00:18Z INFO [wireguard] Wireguard is up
gluetun    | 2022-06-11T13:01:10Z INFO [healthcheck] program has been unhealthy for 51s: restarting VPN
gluetun    | 2022-06-11T13:01:10Z INFO [vpn] stopping
gluetun    | 2022-06-11T13:01:11Z INFO [vpn] starting
gluetun    | 2022-06-11T13:01:11Z INFO [firewall] allowing VPN connection...
gluetun    | 2022-06-11T13:01:11Z INFO [wireguard] Using available kernelspace implementation
gluetun    | 2022-06-11T13:01:11Z INFO [wireguard] Connecting to 193.32.249.66:51820
gluetun    | 2022-06-11T13:01:11Z INFO [wireguard] Wireguard is up
gluetun    | 2022-06-11T13:02:07Z INFO [healthcheck] program has been unhealthy for 56s: restarting VPN
gluetun    | 2022-06-11T13:02:07Z INFO [vpn] stopping
gluetun    | 2022-06-11T13:02:07Z INFO [vpn] starting

When using the one from the config, I get these errors:

outines:ASN1_TIME_adj:error getting time
gluetun    | 2022-06-11T13:24:02Z INFO [dns over tls] [23525992601485312] unbound[316:0] error: and additionally crypto error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
gluetun    | 2022-06-11T13:24:02Z INFO [dns over tls] [23525992601485312] unbound[316:0] notice: ssl handshake failed 1.0.0.1 port 853
gluetun    | 2022-06-11T13:24:02Z INFO [dns over tls] [23525992601485312] unbound[316:1] error: ssl handshake failed crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
gluetun    | 2022-06-11T13:24:02Z INFO [dns over tls] [23525992601485312] unbound[316:1] error: and additionally crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
gluetun    | 2022-06-11T13:24:02Z INFO [dns over tls] [23525992601485312] unbound[316:1] error: and additionally crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
gluetun    | 2022-06-11T13:24:02Z INFO [dns over tls] [23525992601485312] unbound[316:1] error: and additionally crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
gluetun    | 2022-06-11T13:24:02Z INFO [dns over tls] [23525992601485312] unbound[316:1] error: and additionally crypto error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
gluetun    | 2022-06-11T13:24:02Z INFO [dns over tls] [23525992601485312] unbound[316:1] notice: ssl handshake failed 1.0.0.1 port 853
gluetun    | 2022-06-11T13:24:02Z INFO [dns over tls] [23525992601485312] unbound[316:0] error: ssl handshake failed crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
gluetun    | 2022-06-11T13:24:02Z INFO [dns over tls] [23525992601485312] unbound[316:0] error: and additionally crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
gluetun    | 2022-06-11T13:24:02Z INFO [dns over tls] [23525992601485312] unbound[316:0] error: and additionally crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
gluetun    | 2022-06-11T13:24:02Z INFO [dns over tls] [23525992601485312] unbound[316:0] error: and additionally crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
gluetun    | 2022-06-11T13:24:02Z INFO [dns over tls] [23525992601485312] unbound[316:0] error: and additionally crypto error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed
gluetun    | 2022-06-11T13:24:02Z INFO [dns over tls] [23525992601485312] unbound[316:0] notice: ssl handshake failed 1.0.0.1 port 853
gluetun    | 2022-06-11T13:24:02Z INFO [healthcheck] program has been unhealthy for 6s: restarting VPN
gluetun    | 2022-06-11T13:24:02Z INFO [vpn] stopping
gluetun    | 2022-06-11T13:24:02Z INFO [vpn] starting
gluetun    | 2022-06-11T13:24:02Z INFO [firewall] allowing VPN connection...
gluetun    | 2022-06-11T13:24:03Z INFO [wireguard] Using available kernelspace implementation
gluetun    | 2022-06-11T13:24:03Z INFO [wireguard] Connecting to 193.32.249.70:51820
gluetun    | 2022-06-11T13:24:03Z INFO [wireguard] Wireguard is up
gluetun    | 2022-06-11T13:24:03Z INFO [dns over tls] [23525992601485312] unbound[316:0] error: ssl handshake failed crypto error:0D0D90AD:asn1 encoding routines:ASN1_TIME_adj:error getting time
gluetun    | 2022-06-11T13:24:03Z INFO [dns over tls] [23525992601485312] unbound[316:0] error: and additionally crypto error:0D0D90

Can anyone help me to get this working?

[qdm12]

Use the one from the config, it's documented in https://github.com/qdm12/gluetun/wiki/Mullvad#wireguard-only

Now the bunch of other errors you get is probably because your host system clock is wrong? Feel free to subscribe to #137 which would solve such issue, I'm aiming at finishing this in the coming days.