Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading

2020-10-31 Thread Amos Jeffries
On 31/10/20 3:20 am, Scott wrote: On Sat, Oct 31, 2020 at 12:49:16AM +1300, Amos Jeffries wrote: On 30/10/20 3:27 pm, Scott wrote: On Thu, Oct 29, 2020 at 10:08:42PM +1300, Amos Jeffries wrote: On 29/10/20 12:06 pm, Scott wrote: On Wed, Oct 28, 2020 at 12:00:01PM +, squid-users-reques wro

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading

2020-10-31 Thread Amos Jeffries
On 31/10/20 3:20 am, Scott wrote: On Sat, Oct 31, 2020 at 12:49:16AM +1300, Amos Jeffries wrote: On 30/10/20 3:27 pm, Scott wrote: On Thu, Oct 29, 2020 at 10:08:42PM +1300, Amos Jeffries wrote: On 29/10/20 12:06 pm, Scott wrote: On Wed, Oct 28, 2020 at 12:00:01PM +, squid-users-reques wro

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading

2020-10-30 Thread Alex Rousskov
On 10/29/20 10:27 PM, Scott wrote: > My point is that, assuming browsers are now enforcing SameSite cookies must > be secure, then doing SSL offload (whereby the origin server does NOT flag > the cookie as secure) will break. ... > I've seen other proxy manufacturers provide > cookie manipula

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading

2020-10-30 Thread Scott
On Sat, Oct 31, 2020 at 12:49:16AM +1300, Amos Jeffries wrote: > On 30/10/20 3:27 pm, Scott wrote: > > On Thu, Oct 29, 2020 at 10:08:42PM +1300, Amos Jeffries wrote: > >> On 29/10/20 12:06 pm, Scott wrote: > >>> On Wed, Oct 28, 2020 at 12:00:01PM +, squid-users-reques wrote: > Date: Thu, 2

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading

2020-10-30 Thread Amos Jeffries
On 30/10/20 3:27 pm, Scott wrote: On Thu, Oct 29, 2020 at 10:08:42PM +1300, Amos Jeffries wrote: On 29/10/20 12:06 pm, Scott wrote: On Wed, Oct 28, 2020 at 12:00:01PM +, squid-users-reques wrote: Date: Thu, 29 Oct 2020 00:08:34 +1300 From: Amos Jeffries On 28/10/20 5:25 pm, Scott wrote:

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading

2020-10-29 Thread Scott
On Thu, Oct 29, 2020 at 10:08:42PM +1300, Amos Jeffries wrote: > On 29/10/20 12:06 pm, Scott wrote: > > On Wed, Oct 28, 2020 at 12:00:01PM +, squid-users-reques wrote: > >> Date: Thu, 29 Oct 2020 00:08:34 +1300 > >> From: Amos Jeffries > >> > >> On 28/10/20 5:25 pm, Scott wrote: > >>> > >>> Her

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading

2020-10-29 Thread Eliezer Croitor
proxying Exchange OWA wembail with SSL offloading On Wed, Oct 28, 2020 at 12:00:01PM +, squid-users-requ...@lists.squid-cache.org wrote: > Date: Thu, 29 Oct 2020 00:08:34 +1300 > From: Amos Jeffries > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] Reverse proxying

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading

2020-10-29 Thread Amos Jeffries
On 29/10/20 12:06 pm, Scott wrote: On Wed, Oct 28, 2020 at 12:00:01PM +, squid-users-reques wrote: Date: Thu, 29 Oct 2020 00:08:34 +1300 From: Amos Jeffries On 28/10/20 5:25 pm, Scott wrote: Here are the logs (first not working, followed by working). Note this is the login attempt, not t

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading

2020-10-28 Thread Scott
On Wed, Oct 28, 2020 at 12:00:01PM +, squid-users-requ...@lists.squid-cache.org wrote: > Date: Thu, 29 Oct 2020 00:08:34 +1300 > From: Amos Jeffries > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL > offloadin

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading - not working on IE/Chrome

2020-10-28 Thread Scott
On Wed, Oct 28, 2020 at 12:00:01PM +, squid-users-requ...@lists.squid-cache.org wrote: > Date: Thu, 29 Oct 2020 00:08:34 +1300 > From: Amos Jeffries > To: squid-users@lists.squid-cache.org > Subject: Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL > offloadin

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading - not working on IE/Chrome

2020-10-28 Thread Amos Jeffries
On 28/10/20 5:25 pm, Scott wrote: Here are the logs (first not working, followed by working). Note this is the login attempt, not the loading of the initial page. You'll see in the NOT WORKING section that the browser does NOT return a cookie to the server, which is where the problem may be.

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading - not working on IE/Chrome

2020-10-27 Thread Scott
On Tue, Oct 27, 2020 at 09:30:16PM +0200, Eliezer Croitor wrote: > Hey Scott, > > Can you attach any example cookie with and without the secure value? > (replace sensitive data) > > Thanks, > Eliezer > > > Eliezer Croitoru > Tech Support > Mobile: +972-5-28704261 > Email: ngtech1...@gmail.c

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading - not working on IE/Chrome

2020-10-27 Thread Eliezer Croitor
Hey Scott, Can you attach any example cookie with and without the secure value? (replace sensitive data) Thanks, Eliezer Eliezer Croitoru Tech Support Mobile: +972-5-28704261 Email: ngtech1...@gmail.com -Original Message- From: squid-users On Behalf Of Scott Sent: Tuesday, October

Re: [squid-users] Reverse proxying Exchange OWA wembail with SSL offloading - not working on IE/Chrome

2020-10-27 Thread Alex Rousskov
On 10/27/20 5:24 AM, Scott wrote: > Given that the browser <-> Squid traffic is HTTPS, is there a way to get > squid to add the "secure" attribute to cookies? At least for testing it > clarify what's going on. If Squid sees decrypted/plain HTTP messages, then it is possible to adapt HTTP respo