tldr, mtu 1350 fixed
I setup openwrt as wireguard client to commercial VPN.
Handshake ok but didn't work overall
Eventually I noticed ping worked, http worked, https failed.
I found thet setting mtu to 1350 on wg interface fixed it.
Never had to do that before. Wanted to share in case others see same issue.
Do you normally set mtu when using wire guard?
Yes, sometimes. Is any part of this connection over PPPoE, IPv6, another VPN or a cellular network?
No
Initially I was using isp public wifi
Then I tested wired connection and still had problem
Maybe ipv6, I think I had that shuttoff while trouble shooting
It's fair to say that if the network is not under your control, you cannot reasonably know the answer.
Wired connection - is it public too - please clarify?
In residential location
Wired to a router which is wired to a fiber device from isp