files.com 1.1.755 → 1.1.756

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c38e1b80bb3ca6cc68890468ddc3825ea371c9cef66eab7723139cded8a24476
-  data.tar.gz: 9a619e69a0d14981c5aea32983c785fedf71d6e39c94db5ab4e068370a77628d
+  metadata.gz: 50c4517b06cd0f06a8cda997810e28459a5bbf479a94ba8f3d1b5dcc56a90265
+  data.tar.gz: 5144e352cf98064eba58fac3c6cade1aaf7e895b69fd7cea3acc39d5ba9721c7
 SHA512:
-  metadata.gz: 5cafa2058da9cfaf06f0f060db191533c3052fc1994760f5fc9c6097524144df432374ba6a91c3ed1c85535c5e6d16969ed2e179a9cea7f605d5d65ec0f17b13
-  data.tar.gz: 3c84e0b5b096b36ef608b571d7a764272a5625a1415c825fa21fa3f39db3c60977a2d5657a7d7445a1e285ed57a790d56d0914662e85034521015b0b4da892f0
+  metadata.gz: 6ce02a19664368fdeb056e2fce1d1b4099bebbf3ec855c4f87463fbdaa8eea94b6c161a2a442f608ceff264f883ef1fa656f217c599b1ddf63d55f9f089578f4
+  data.tar.gz: 455cc7bd2a17743d9b3c576aad54bb1933d00c63dd375c5544c5ce041f7560d1d04fde199f6f01b4b6a945d516dcd7bbacf32c31304ddf3f35c4196918478565

data/_VERSION

@@ -1 +1 @@
-1.1.755
+1.1.756

data/docs/remote_server.md

@@ -111,7 +111,7 @@
 * `s3_assume_role_duration_seconds` (int64): Session duration in seconds for AssumeRole authentication (900-43200).
 * `s3_assume_role_external_id` (string): External ID for AssumeRole authentication.
 * `server_certificate` (string): Remote server certificate
-* `server_host_key` (string): Remote server SSH Host Key. If provided, we will require that the server host key matches the provided key. Uses OpenSSH format similar to what would go into ~/.ssh/known_hosts
+* `server_host_key` (string): Pinned plain SSH host key for SFTP, in OpenSSH public key format. If omitted, Files.com detects and stores the server's plain host key, including when the server offers an OpenSSH host certificate. With `server_certificate=require_match` (the default), the server must present the pinned key and prove it holds the matching private key. The pin remains in force until an administrator updates `server_host_key`. Files.com does not authenticate remote hosts through SSH certificates and does not check their CA signatures, principals, or validity periods. Certificate expiration does not end the pin; update `server_host_key` to retire a host key.
 * `server_type` (string): Remote server type.
 * `workspace_id` (int64): Workspace ID (0 for default workspace)
 * `ssl` (string): Should we require SSL?
@@ -401,7 +401,7 @@ Files::RemoteServer.create(
 * `s3_compatible_virtual_hosted_style` (boolean): S3-compatible: If true, use virtual-hosted-style URLs instead of path-style URLs
 * `s3_region` (string): S3 region
 * `server_certificate` (string): Remote server certificate
-* `server_host_key` (string): Remote server SSH Host Key. If provided, we will require that the server host key matches the provided key. Uses OpenSSH format similar to what would go into ~/.ssh/known_hosts
+* `server_host_key` (string): Pinned plain SSH host key for SFTP, in OpenSSH public key format. If omitted, Files.com detects and stores the server's plain host key, including when the server offers an OpenSSH host certificate. With `server_certificate=require_match` (the default), the server must present the pinned key and prove it holds the matching private key. The pin remains in force until an administrator updates `server_host_key`. Files.com does not authenticate remote hosts through SSH certificates and does not check their CA signatures, principals, or validity periods. Certificate expiration does not end the pin; update `server_host_key` to retire a host key.
 * `server_type` (string): Remote server type.
 * `sharepoint_client_id` (string): SharePoint: Microsoft Entra application client ID for app-only authentication.
 * `sharepoint_site_url` (string): SharePoint: Site URL to scope app-only authentication to a single site. Leave blank to browse all sites.
@@ -574,7 +574,7 @@ Files::RemoteServer.update(id,
 * `s3_compatible_virtual_hosted_style` (boolean): S3-compatible: If true, use virtual-hosted-style URLs instead of path-style URLs
 * `s3_region` (string): S3 region
 * `server_certificate` (string): Remote server certificate
-* `server_host_key` (string): Remote server SSH Host Key. If provided, we will require that the server host key matches the provided key. Uses OpenSSH format similar to what would go into ~/.ssh/known_hosts
+* `server_host_key` (string): Pinned plain SSH host key for SFTP, in OpenSSH public key format. If omitted, Files.com detects and stores the server's plain host key, including when the server offers an OpenSSH host certificate. With `server_certificate=require_match` (the default), the server must present the pinned key and prove it holds the matching private key. The pin remains in force until an administrator updates `server_host_key`. Files.com does not authenticate remote hosts through SSH certificates and does not check their CA signatures, principals, or validity periods. Certificate expiration does not end the pin; update `server_host_key` to retire a host key.
 * `server_type` (string): Remote server type.
 * `sharepoint_client_id` (string): SharePoint: Microsoft Entra application client ID for app-only authentication.
 * `sharepoint_site_url` (string): SharePoint: Site URL to scope app-only authentication to a single site. Leave blank to browse all sites.
@@ -778,7 +778,7 @@ remote_server.update(
 * `s3_compatible_virtual_hosted_style` (boolean): S3-compatible: If true, use virtual-hosted-style URLs instead of path-style URLs
 * `s3_region` (string): S3 region
 * `server_certificate` (string): Remote server certificate
-* `server_host_key` (string): Remote server SSH Host Key. If provided, we will require that the server host key matches the provided key. Uses OpenSSH format similar to what would go into ~/.ssh/known_hosts
+* `server_host_key` (string): Pinned plain SSH host key for SFTP, in OpenSSH public key format. If omitted, Files.com detects and stores the server's plain host key, including when the server offers an OpenSSH host certificate. With `server_certificate=require_match` (the default), the server must present the pinned key and prove it holds the matching private key. The pin remains in force until an administrator updates `server_host_key`. Files.com does not authenticate remote hosts through SSH certificates and does not check their CA signatures, principals, or validity periods. Certificate expiration does not end the pin; update `server_host_key` to retire a host key.
 * `server_type` (string): Remote server type.
 * `sharepoint_client_id` (string): SharePoint: Microsoft Entra application client ID for app-only authentication.
 * `sharepoint_site_url` (string): SharePoint: Site URL to scope app-only authentication to a single site. Leave blank to browse all sites.

data/lib/files.com/models/remote_server.rb

@@ -207,7 +207,7 @@ module Files
       @attributes[:server_certificate] = value
     end
 
-    # string - Remote server SSH Host Key. If provided, we will require that the server host key matches the provided key. Uses OpenSSH format similar to what would go into ~/.ssh/known_hosts
+    # string - Pinned plain SSH host key for SFTP, in OpenSSH public key format. If omitted, Files.com detects and stores the server's plain host key, including when the server offers an OpenSSH host certificate. With `server_certificate=require_match` (the default), the server must present the pinned key and prove it holds the matching private key. The pin remains in force until an administrator updates `server_host_key`. Files.com does not authenticate remote hosts through SSH certificates and does not check their CA signatures, principals, or validity periods. Certificate expiration does not end the pin; update `server_host_key` to retire a host key.
     def server_host_key
       @attributes[:server_host_key]
     end
@@ -1023,7 +1023,7 @@ module Files
     #   s3_compatible_virtual_hosted_style - boolean - S3-compatible: If true, use virtual-hosted-style URLs instead of path-style URLs
     #   s3_region - string - S3 region
     #   server_certificate - string - Remote server certificate
-    #   server_host_key - string - Remote server SSH Host Key. If provided, we will require that the server host key matches the provided key. Uses OpenSSH format similar to what would go into ~/.ssh/known_hosts
+    #   server_host_key - string - Pinned plain SSH host key for SFTP, in OpenSSH public key format. If omitted, Files.com detects and stores the server's plain host key, including when the server offers an OpenSSH host certificate. With `server_certificate=require_match` (the default), the server must present the pinned key and prove it holds the matching private key. The pin remains in force until an administrator updates `server_host_key`. Files.com does not authenticate remote hosts through SSH certificates and does not check their CA signatures, principals, or validity periods. Certificate expiration does not end the pin; update `server_host_key` to retire a host key.
     #   server_type - string - Remote server type.
     #   sharepoint_client_id - string - SharePoint: Microsoft Entra application client ID for app-only authentication.
     #   sharepoint_site_url - string - SharePoint: Site URL to scope app-only authentication to a single site. Leave blank to browse all sites.
@@ -1283,7 +1283,7 @@ module Files
     #   s3_compatible_virtual_hosted_style - boolean - S3-compatible: If true, use virtual-hosted-style URLs instead of path-style URLs
     #   s3_region - string - S3 region
     #   server_certificate - string - Remote server certificate
-    #   server_host_key - string - Remote server SSH Host Key. If provided, we will require that the server host key matches the provided key. Uses OpenSSH format similar to what would go into ~/.ssh/known_hosts
+    #   server_host_key - string - Pinned plain SSH host key for SFTP, in OpenSSH public key format. If omitted, Files.com detects and stores the server's plain host key, including when the server offers an OpenSSH host certificate. With `server_certificate=require_match` (the default), the server must present the pinned key and prove it holds the matching private key. The pin remains in force until an administrator updates `server_host_key`. Files.com does not authenticate remote hosts through SSH certificates and does not check their CA signatures, principals, or validity periods. Certificate expiration does not end the pin; update `server_host_key` to retire a host key.
     #   server_type - string - Remote server type.
     #   sharepoint_client_id - string - SharePoint: Microsoft Entra application client ID for app-only authentication.
     #   sharepoint_site_url - string - SharePoint: Site URL to scope app-only authentication to a single site. Leave blank to browse all sites.
@@ -1463,7 +1463,7 @@ module Files
     #   s3_compatible_virtual_hosted_style - boolean - S3-compatible: If true, use virtual-hosted-style URLs instead of path-style URLs
     #   s3_region - string - S3 region
     #   server_certificate - string - Remote server certificate
-    #   server_host_key - string - Remote server SSH Host Key. If provided, we will require that the server host key matches the provided key. Uses OpenSSH format similar to what would go into ~/.ssh/known_hosts
+    #   server_host_key - string - Pinned plain SSH host key for SFTP, in OpenSSH public key format. If omitted, Files.com detects and stores the server's plain host key, including when the server offers an OpenSSH host certificate. With `server_certificate=require_match` (the default), the server must present the pinned key and prove it holds the matching private key. The pin remains in force until an administrator updates `server_host_key`. Files.com does not authenticate remote hosts through SSH certificates and does not check their CA signatures, principals, or validity periods. Certificate expiration does not end the pin; update `server_host_key` to retire a host key.
     #   server_type - string - Remote server type.
     #   sharepoint_client_id - string - SharePoint: Microsoft Entra application client ID for app-only authentication.
     #   sharepoint_site_url - string - SharePoint: Site URL to scope app-only authentication to a single site. Leave blank to browse all sites.

data/lib/files.com/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Files
-  VERSION = "1.1.755"
+  VERSION = "1.1.756"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: files.com
 version: !ruby/object:Gem::Version
-  version: 1.1.755
+  version: 1.1.756
 platform: ruby
 authors:
 - files.com