A

Anonymous

Question

iPassword 8 - error signing in when using proxy

Forum|Forum|4 years ago
November 16, 2021
48 replies
1691 views

I have a required local proxy security software (including SSL) on some of my systems for work, I've found there seems to be a problem with version 8. I can't sign in, it just gives a sign-in error, but if I look in the logs I'm getting some kind of HTTP error. With an identical system version 7, even the betas, work perfectly.

I can't exclude applications from it but I can exclude URLs if necessary.

These are the relevent log entries - If I try multiple times they just repeat each attempt.

WARN 2021-11-16T09:32:02.737 tokio-runtime-worker(ThreadId(5)) [1P:op-db-queue\src\operations.rs:1195] operation transaction #tx#7(set_object_bytes) took more than 100 ms (128 ms)
INFO 2021-11-16T09:32:07.473 tokio-runtime-worker(ThreadId(8)) [1P:foundation\op-windows\src\windows\network\proxy.rs:127] network proxies discovered: 1
INFO 2021-11-16T09:32:07.923 tokio-runtime-worker(ThreadId(8)) [1P:foundation\op-windows\src\windows\network\proxy.rs:220] proxy connected successfully
INFO 2021-11-16T09:32:07.923 tokio-runtime-worker(ThreadId(3)) [1P:foundation\op-proxy\src\lib.rs:150] selected HTTP proxy to use
ERROR 2021-11-16T09:32:08.118 tokio-runtime-worker(ThreadId(5)) [1P:op-app\src\app\backend\signin.rs:304] error signing in from data layer: UnableToCreateClient(HttpError(IoError(IoError(error sending request))))
ERROR 2021-11-16T09:32:08.118 tokio-runtime-worker(ThreadId(5)) [1P:C:\builds\dev\core\core\op-signin\src\lib.rs:421] error signing in from data layer: other error
ERROR 2021-11-16T09:32:08.118 tokio-runtime-worker(ThreadId(5)) [1P:C:\builds\dev\core\core\op-ui\src\signin\handlers.rs:363] Error signing in: other error

1Password Version: 8.04 (from logs)
Extension Version: 2.1.4
OS Version: Windows 10 x64

Windows

A

Anonymous

+1

Cant login to 1Password. Always brings up the message "cant login to your account" (sorry, 1Password is in german).
Password for account is correct. Tried in Browser and works... (iOS also works).

Logs are empty after I cleaned them up, so dont know how to get the logs atm.

Jack_P_1P

1Password Employee

Hi @MattW15 and @trolli:

Just to confirm are you both using security software that is doing some sort of TLS/SSL interception?

Jack

A

Anonymous

I know we have SSL inspection active.

A

Anonymous

Yes, I do on my end as well.

A

Anonymous

But then also the browser should not work in my opinion ? Is it not the same in the backend ?

Jack_P_1P

1Password Employee

Thanks for confirming @trolli.

At the moment, 1Password 8 doesn't support network environments where SSL/TLS inspection may occur as it can fail our verifications. We recommend for now to postpone any upgrade to 1Password 8 and stick with 1Password 7 until we add support for these networks.

Jack

ref: dev/core/core#7409

A

Anonymous

If we wanted to use 8, are there any URLs we can exempt from inspection to make it work? I have the ability to bypass inspection for domains, but not applications.

Jack_P_1P

1Password Employee

Hey @MattW15,

Thanks for following up. At this time, exemption of URLs would not get around this issue.

Jack

A

Anonymous

I just encountered this issue (company traffic goes through proxy for SSL interception with swapped SSL w/ root CA) and found this thread. My understanding is that 1P does not rely on SSL to keep the vault safe as it's end-to-end encryption? Or the login process still sends unencrypted (besides SSL) key/credential data directly via SSL?

And although I failed to login when going through company network in 1P8 Windows app, I was able to login via the Chrome Extension with the same network. Does that mean the extension does not check whether the SSL was tempered during the login? And does that mean I have to change my key and password because they were probably logged (also with my vault all together)?

J

jkane001

I'm having the same issue. Any thoughts on how long it would be before 1Password 8 supports network environments where SSL/TLS inspection is happening?

Show more replies

Sign up

1Password employees: Sign in with SSO

Login to the community

1Password employees: Sign in with SSO