mcp-proxy-adapter 6.9.10__py3-none-any.whl → 6.9.12__py3-none-any.whl

mcp_proxy_adapter/core/config_validator.py

@@ -851,7 +851,7 @@ class ConfigValidator:
             
             # Check certificate expiration
             now = datetime.now(timezone.utc)
-            not_after = cert.not_valid_after.replace(tzinfo=timezone.utc)
+            not_after = cert.not_valid_after_utc
             
             if now > not_after:
                 self.validation_results.append(ValidationResult(
@@ -1113,7 +1113,7 @@ class ConfigValidator:
                 level="error",
                 message=f"Error validating certificate-key pair: {e}",
                 section=section,
-                key=key
+                key="cert_file"
             ))
     
     def _validate_certificate_chain(self, cert_file: str, ca_cert_file: str, section: str) -> None:

mcp_proxy_adapter/core/mtls_server.py

@@ -140,9 +140,9 @@ class mTLSServer:
         self,
         host: str = "127.0.0.1",
         port: int = 8443,
-        cert_file: str = "certs/localhost_server.crt",
-        key_file: str = "keys/localhost_server.key",
-        ca_cert_file: str = "certs/test_ca_ca.crt",
+        cert_file: str = None,
+        key_file: str = None,
+        ca_cert_file: str = None,
         main_app=None,
     ):
         """
@@ -292,10 +292,16 @@ def start_mtls_server_thread(
         from mcp_proxy_adapter.core.utils import find_port_for_internal_server
         port = find_port_for_internal_server(host, preferred_port)
 
-        # Get certificate paths
-        cert_file = ssl_config.get("cert_file", "certs/localhost_server.crt")
-        key_file = ssl_config.get("key_file", "keys/localhost_server.key")
-        ca_cert_file = ssl_config.get("ca_cert", "certs/test_ca_ca.crt")
+        # Get certificate paths - all required for mTLS
+        cert_file = ssl_config.get("cert_file")
+        key_file = ssl_config.get("key_file")
+        ca_cert_file = ssl_config.get("ca_cert")
+        
+        if not cert_file or not key_file:
+            raise ValueError(
+                "mTLS server requires SSL certificate configuration. "
+                "Please configure 'ssl.cert_file' and 'ssl.key_file' in your configuration file."
+            )
 
         # Create and start mTLS server
         mtls_server = mTLSServer(

mcp_proxy_adapter/core/proxy_client.py

@@ -49,7 +49,7 @@ class ProxyClient:
 
     Usage:
         async with ProxyClient(
-            base_url="https://127.0.0.1:3004",
+            base_url="https://your-proxy-host:3004",
             ca_cert_path="/path/to/ca.crt",
             client_cert_path="/path/to/client.crt",
             client_key_path="/path/to/client.key",

mcp_proxy_adapter/core/proxy_registration.py

@@ -265,15 +265,6 @@ class ProxyRegistrationManager:
             
         if not self.client_security:
             logger.debug("SSL context creation failed: client_security is None")
-            # Try best-effort default CA if available
-            try:
-                default_ca = "/home/vasilyvz/projects/mcp_proxy_adapter/mtls_certificates/ca/ca.crt"
-                if Path(default_ca).exists():
-                    ctx = ssl.create_default_context(cafile=default_ca)
-                    logger.debug("Using default CA bundle for SSL verification")
-                    return ctx
-            except Exception:
-                pass
             return None
 
         try:
@@ -302,20 +293,13 @@ class ProxyRegistrationManager:
                     cert_config = mapped_cert
                     ssl_config = mapped_ssl
 
-            # If still no client certificate specified, try default client certs from project
+            # If still no client certificate specified, raise clear error
             if not cert_config or not cert_config.get("cert_file") or not cert_config.get("key_file"):
-                try:
-                    base_dir = "/home/vasilyvz/projects/mcp_proxy_adapter/mtls_certificates/client"
-                    if os.path.isdir(base_dir):
-                        crt_candidates = sorted(glob.glob(os.path.join(base_dir, "*.crt")))
-                        key_candidates = sorted(glob.glob(os.path.join(base_dir, "*.key")))
-                        if crt_candidates and key_candidates:
-                            cert_config = {
-                                "cert_file": crt_candidates[0],
-                                "key_file": key_candidates[0],
-                            }
-                except Exception:
-                    pass
+                raise ValueError(
+                    "Client certificate configuration is required for mTLS proxy registration. "
+                    "Please configure 'proxy_registration.certificate.cert_file' and 'proxy_registration.certificate.key_file' "
+                    "in your configuration file."
+                )
 
             logger.debug(
                 f"SSL context creation: cert_config={cert_config}, ssl_config={ssl_config}"
@@ -328,9 +312,13 @@ class ProxyRegistrationManager:
                 if ca_file and Path(ca_file).exists():
                     context = ssl.create_default_context(cafile=ca_file)
                 else:
-                    # Try default project CA
-                    default_ca = "/home/vasilyvz/projects/mcp_proxy_adapter/mtls_certificates/ca/ca.crt"
-                    context = ssl.create_default_context(cafile=default_ca) if Path(default_ca).exists() else ssl.create_default_context()
+                    # No CA certificate configured - use system default
+                    context = ssl.create_default_context()
+                    logger.warning(
+                        "No CA certificate configured for proxy registration. "
+                        "This may cause SSL verification failures if the proxy uses self-signed certificates. "
+                        "Consider configuring 'proxy_registration.ssl.ca_cert' in your configuration file."
+                    )
 
                 # Load client certificates if provided
                 if cert_config:

mcp_proxy_adapter/version.py

@@ -2,4 +2,4 @@
 Version information for MCP Proxy Adapter.
 """
 
-__version__ = "6.9.10"
+__version__ = "6.9.12"

{mcp_proxy_adapter-6.9.10.dist-info → mcp_proxy_adapter-6.9.12.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mcp-proxy-adapter
-Version: 6.9.10
+Version: 6.9.12
 Summary: Powerful JSON-RPC microservices framework with built-in security, authentication, and proxy registration
 Home-page: https://github.com/maverikod/mcp-proxy-adapter
 Author: Vasiliy Zdanovskiy

{mcp_proxy_adapter-6.9.10.dist-info → mcp_proxy_adapter-6.9.12.dist-info}/RECORD

@@ -4,7 +4,7 @@ mcp_proxy_adapter/config.py,sha256=1Ngxri2IPGoytYdCF5pXzbLUXsWcf6qYENkaDkAppg0,2
 mcp_proxy_adapter/custom_openapi.py,sha256=XRviX-C-ZkSKdBhORhDTdeN_1FWyEfXZADiASft3t9I,28149
 mcp_proxy_adapter/main.py,sha256=NFcSW7WaEnimRWe5zj28D0CH9otHlRZ92d2Um6XiGjE,10399
 mcp_proxy_adapter/openapi.py,sha256=2UZOI09ZDRJuBYBjKbMyb2U4uASszoCMD5o_4ktRpvg,13480
-mcp_proxy_adapter/version.py,sha256=sjeaOBDaenC5mbWV1ZBeLLxJEySM3gA0p4Tc6DWCGzU,75
+mcp_proxy_adapter/version.py,sha256=-ib2qPGRpcqxjhDnAw7fWZIN9saMqv86oGu8JxcPnS8,75
 mcp_proxy_adapter/api/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 mcp_proxy_adapter/api/app.py,sha256=La7xt02j4Zbg4sSc1iL72DM3UNFVddPlN4_xpaRauVo,37214
 mcp_proxy_adapter/api/handlers.py,sha256=X-hcMNVeTAu4yVkKJEChEsj2bFptUS6sLNN-Wysjkow,10011
@@ -62,17 +62,17 @@ mcp_proxy_adapter/core/client.py,sha256=qIbPl8prEwK2U65kl-vGJW2_imo1E4i6HxG_VpPe
 mcp_proxy_adapter/core/client_manager.py,sha256=yD8HZJlOwmDbVU49YfzSbh1XZ-Vib8qfcLVAaH03Jdg,8832
 mcp_proxy_adapter/core/client_security.py,sha256=siUaYorcDbpZsEIKgLfg-jBKkp7z_Er8wsO63mDD3Is,13127
 mcp_proxy_adapter/core/config_converter.py,sha256=Wnnsrbw7DxtgDfLG-IyyzK-hkKu0_1yp7-7dW87tu_4,17422
-mcp_proxy_adapter/core/config_validator.py,sha256=GmzXu7HfPerIwRHuTuELyavAwqUFD2ws_Km2Z2oNOfs,54875
+mcp_proxy_adapter/core/config_validator.py,sha256=B5Tu8nE_iSvB1jFJ6qseOZrUpd0QoK7phU9Sznv1HDI,54858
 mcp_proxy_adapter/core/crl_utils.py,sha256=Jnwq2UN52IoCDZCwByRP3XNMOJexftb-mVaH6zes6Fc,11706
 mcp_proxy_adapter/core/errors.py,sha256=CyhQgvMt0ooQjONa65XRBJ44y-l-E5_ES4KOuRvIpBk,8557
 mcp_proxy_adapter/core/logging.py,sha256=VIpiC6QTGLukRjiJoVpq3VEoLKhUeLNl8IdfljpW6ZU,9654
 mcp_proxy_adapter/core/mtls_asgi.py,sha256=tvk0P9024s18dcCHY9AaQIecT4ojOTv21EuQWXwooU0,5200
 mcp_proxy_adapter/core/mtls_asgi_app.py,sha256=DT_fTUH1RkvBa3ThbyCyNb-XUHyCb4DqaKA1gcZC6z4,6538
 mcp_proxy_adapter/core/mtls_proxy.py,sha256=5APlWs0ImiHGEC65W_7F-PbVO3NZ2BVSj9r14AcUtTE,6011
-mcp_proxy_adapter/core/mtls_server.py,sha256=GBNhLezDYSXFP1xcNaThEhBqZlxXUGp0q0OT2Ibb2M0,10366
+mcp_proxy_adapter/core/mtls_server.py,sha256=y34wFnzE8TYoQKw0tEkqthEIQAv6XntASK16w7Tt4Gw,10506
 mcp_proxy_adapter/core/protocol_manager.py,sha256=iaXWsfm1XSfemz5QQBesMluc4cwf-LtuZVi9bm1uj28,14680
-mcp_proxy_adapter/core/proxy_client.py,sha256=CB6KBhV3vH2GU5nZ27VZ_xlNbYTAU_tnYFrkuK5He58,6094
-mcp_proxy_adapter/core/proxy_registration.py,sha256=QlQFHnjIN8ETWcasPDUXNMfMsU_-KdrvLTYJiDua_wI,41237
+mcp_proxy_adapter/core/proxy_client.py,sha256=T9rqITYNijAw-yE4wvBe7ABN-LhJjkbIEeK6Rv1iUeA,6100
+mcp_proxy_adapter/core/proxy_registration.py,sha256=foA1eLmVRhh6tWVb2gWL7ytWk9oGi1mf4vAFajrEvWg,40617
 mcp_proxy_adapter/core/role_utils.py,sha256=YwRenGoXI5YrHVbFjKFAH2DJs2miyqhcr9LWF7mxieg,12284
 mcp_proxy_adapter/core/security_adapter.py,sha256=MAtNthsp7Qj4-oLFzSi7Pr3vWQbWS_uelqa5LGgrXIE,12957
 mcp_proxy_adapter/core/security_factory.py,sha256=M-1McwUOmuV7Eo-m_P2undtJVNK_KIjDx8o_uRY8rLo,8005
@@ -135,8 +135,8 @@ mcp_proxy_adapter/schemas/base_schema.json,sha256=v9G9cGMd4dRhCZsOQ_FMqOi5VFyVbI
 mcp_proxy_adapter/schemas/openapi_schema.json,sha256=C3yLkwmDsvnLW9B5gnKKdBGl4zxkeU-rEmjTrNVsQU0,8405
 mcp_proxy_adapter/schemas/roles.json,sha256=pgf_ZyqKyXbfGUxvobpiLiSJz9zzxrMuoVWEkEpz3N8,764
 mcp_proxy_adapter/schemas/roles_schema.json,sha256=deHgI7L6GwfBXacOlNtDgDJelDThppClC3Ti4Eh8rJY,5659
-mcp_proxy_adapter-6.9.10.dist-info/METADATA,sha256=h4we7LJB-fUzy2mHfbzo0uJz0Ihc0O10dmVrmYcCxYQ,8511
-mcp_proxy_adapter-6.9.10.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-mcp_proxy_adapter-6.9.10.dist-info/entry_points.txt,sha256=Bf-O5Aq80n22Ayu9fI9BgidzWqwzIVaqextAddTuHZw,563
-mcp_proxy_adapter-6.9.10.dist-info/top_level.txt,sha256=JZT7vPLBYrtroX-ij68JBhJYbjDdghcV-DFySRy-Nnw,18
-mcp_proxy_adapter-6.9.10.dist-info/RECORD,,
+mcp_proxy_adapter-6.9.12.dist-info/METADATA,sha256=6TqJW150DKE4ixti-i5QytQGR5T7Zvhx1VLCyXnK0qE,8511
+mcp_proxy_adapter-6.9.12.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+mcp_proxy_adapter-6.9.12.dist-info/entry_points.txt,sha256=Bf-O5Aq80n22Ayu9fI9BgidzWqwzIVaqextAddTuHZw,563
+mcp_proxy_adapter-6.9.12.dist-info/top_level.txt,sha256=JZT7vPLBYrtroX-ij68JBhJYbjDdghcV-DFySRy-Nnw,18
+mcp_proxy_adapter-6.9.12.dist-info/RECORD,,