mcp-proxy-adapter 6.9.11__tar.gz → 6.9.13__tar.gz

{mcp_proxy_adapter-6.9.11 → mcp_proxy_adapter-6.9.13}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mcp-proxy-adapter
-Version: 6.9.11
+Version: 6.9.13
 Summary: Powerful JSON-RPC microservices framework with built-in security, authentication, and proxy registration
 Home-page: https://github.com/maverikod/mcp-proxy-adapter
 Author: Vasiliy Zdanovskiy

{mcp_proxy_adapter-6.9.11 → mcp_proxy_adapter-6.9.13}/mcp_proxy_adapter/core/app_factory.py

@@ -283,6 +283,30 @@ async def create_and_run_server(
         f"🔍 Debug: app_config keys: {list(app_config.keys()) if app_config else 'None'}"
     )
 
+    # Check for SSL config in root ssl section first (new format)
+    if app_config and "ssl" in app_config:
+        ssl_config = app_config["ssl"]
+        print(f"🔍 Debug: SSL config found in root: {ssl_config}")
+        print(f"🔍 Debug: SSL enabled: {ssl_config.get('enabled', False)}")
+        if ssl_config.get("enabled", False):
+            # Add SSL config directly to server_config for Hypercorn
+            server_config["certfile"] = ssl_config.get("cert_file")
+            server_config["keyfile"] = ssl_config.get("key_file")
+            server_config["ca_certs"] = ssl_config.get(
+                "ca_cert_file", ssl_config.get("ca_cert")
+            )
+            # Set verify_mode based on verify_client setting
+            if ssl_config.get("verify_client", False):
+                server_config["verify_mode"] = "CERT_REQUIRED"
+            else:
+                server_config["verify_mode"] = ssl_config.get("verify_mode")
+            print(f"🔒 SSL enabled: {ssl_config.get('cert_file', 'N/A')}")
+            print(
+                f"🔒 SSL enabled: cert={ssl_config.get('cert_file')}, key={ssl_config.get('key_file')}"
+            )
+            print(
+                f"🔒 Server config SSL: certfile={server_config.get('certfile')}, keyfile={server_config.get('keyfile')}, ca_certs={server_config.get('ca_certs')}, verify_mode={server_config.get('verify_mode')}"
+            )
 
     # Check for SSL config in security section (fallback)
     if app_config and "security" in app_config:

{mcp_proxy_adapter-6.9.11 → mcp_proxy_adapter-6.9.13}/mcp_proxy_adapter/core/mtls_server.py

@@ -140,9 +140,9 @@ class mTLSServer:
         self,
         host: str = "127.0.0.1",
         port: int = 8443,
-        cert_file: str = "certs/localhost_server.crt",
-        key_file: str = "keys/localhost_server.key",
-        ca_cert_file: str = "certs/test_ca_ca.crt",
+        cert_file: str = None,
+        key_file: str = None,
+        ca_cert_file: str = None,
         main_app=None,
     ):
         """
@@ -292,10 +292,16 @@ def start_mtls_server_thread(
         from mcp_proxy_adapter.core.utils import find_port_for_internal_server
         port = find_port_for_internal_server(host, preferred_port)
 
-        # Get certificate paths
-        cert_file = ssl_config.get("cert_file", "certs/localhost_server.crt")
-        key_file = ssl_config.get("key_file", "keys/localhost_server.key")
-        ca_cert_file = ssl_config.get("ca_cert", "certs/test_ca_ca.crt")
+        # Get certificate paths - all required for mTLS
+        cert_file = ssl_config.get("cert_file")
+        key_file = ssl_config.get("key_file")
+        ca_cert_file = ssl_config.get("ca_cert")
+        
+        if not cert_file or not key_file:
+            raise ValueError(
+                "mTLS server requires SSL certificate configuration. "
+                "Please configure 'ssl.cert_file' and 'ssl.key_file' in your configuration file."
+            )
 
         # Create and start mTLS server
         mtls_server = mTLSServer(

{mcp_proxy_adapter-6.9.11 → mcp_proxy_adapter-6.9.13}/mcp_proxy_adapter/core/proxy_client.py

@@ -49,7 +49,7 @@ class ProxyClient:
 
     Usage:
         async with ProxyClient(
-            base_url="https://127.0.0.1:3004",
+            base_url="https://your-proxy-host:3004",
             ca_cert_path="/path/to/ca.crt",
             client_cert_path="/path/to/client.crt",
             client_key_path="/path/to/client.key",

{mcp_proxy_adapter-6.9.11 → mcp_proxy_adapter-6.9.13}/mcp_proxy_adapter/core/proxy_registration.py

@@ -265,15 +265,6 @@ class ProxyRegistrationManager:
             
         if not self.client_security:
             logger.debug("SSL context creation failed: client_security is None")
-            # Try best-effort default CA if available
-            try:
-                default_ca = "/home/vasilyvz/projects/mcp_proxy_adapter/mtls_certificates/ca/ca.crt"
-                if Path(default_ca).exists():
-                    ctx = ssl.create_default_context(cafile=default_ca)
-                    logger.debug("Using default CA bundle for SSL verification")
-                    return ctx
-            except Exception:
-                pass
             return None
 
         try:
@@ -302,20 +293,13 @@ class ProxyRegistrationManager:
                     cert_config = mapped_cert
                     ssl_config = mapped_ssl
 
-            # If still no client certificate specified, try default client certs from project
+            # If still no client certificate specified, raise clear error
             if not cert_config or not cert_config.get("cert_file") or not cert_config.get("key_file"):
-                try:
-                    base_dir = "/home/vasilyvz/projects/mcp_proxy_adapter/mtls_certificates/client"
-                    if os.path.isdir(base_dir):
-                        crt_candidates = sorted(glob.glob(os.path.join(base_dir, "*.crt")))
-                        key_candidates = sorted(glob.glob(os.path.join(base_dir, "*.key")))
-                        if crt_candidates and key_candidates:
-                            cert_config = {
-                                "cert_file": crt_candidates[0],
-                                "key_file": key_candidates[0],
-                            }
-                except Exception:
-                    pass
+                raise ValueError(
+                    "Client certificate configuration is required for mTLS proxy registration. "
+                    "Please configure 'proxy_registration.certificate.cert_file' and 'proxy_registration.certificate.key_file' "
+                    "in your configuration file."
+                )
 
             logger.debug(
                 f"SSL context creation: cert_config={cert_config}, ssl_config={ssl_config}"
@@ -328,9 +312,13 @@ class ProxyRegistrationManager:
                 if ca_file and Path(ca_file).exists():
                     context = ssl.create_default_context(cafile=ca_file)
                 else:
-                    # Try default project CA
-                    default_ca = "/home/vasilyvz/projects/mcp_proxy_adapter/mtls_certificates/ca/ca.crt"
-                    context = ssl.create_default_context(cafile=default_ca) if Path(default_ca).exists() else ssl.create_default_context()
+                    # No CA certificate configured - use system default
+                    context = ssl.create_default_context()
+                    logger.warning(
+                        "No CA certificate configured for proxy registration. "
+                        "This may cause SSL verification failures if the proxy uses self-signed certificates. "
+                        "Consider configuring 'proxy_registration.ssl.ca_cert' in your configuration file."
+                    )
 
                 # Load client certificates if provided
                 if cert_config:
@@ -347,14 +335,19 @@ class ProxyRegistrationManager:
                 if ssl_config:
                     ca_cert_file = ssl_config.get("ca_cert")
                     verify_mode = ssl_config.get("verify_mode", "CERT_REQUIRED")
+                    verify_ssl = ssl_config.get("verify_ssl", True)
 
                     # Load CA certificate if provided
                     if ca_cert_file:
                         context.load_verify_locations(ca_cert_file)
                         logger.debug(f"Loaded CA certificate: {ca_cert_file}")
 
-                    # Set verification mode based on ssl_config verify_mode
-                    if verify_mode == "CERT_NONE":
+                    # Check if verify_ssl is disabled in ssl_config
+                    if verify_ssl == False:
+                        context.check_hostname = False
+                        context.verify_mode = ssl.CERT_NONE
+                        logger.debug("SSL verification disabled (verify_ssl=False)")
+                    elif verify_mode == "CERT_NONE":
                         context.check_hostname = False
                         context.verify_mode = ssl.CERT_NONE
                         logger.debug("SSL verification disabled (CERT_NONE)")

{mcp_proxy_adapter-6.9.11 → mcp_proxy_adapter-6.9.13}/mcp_proxy_adapter/version.py

@@ -2,4 +2,4 @@
 Version information for MCP Proxy Adapter.
 """
 
-__version__ = "6.9.11"
+__version__ = "6.9.13"

{mcp_proxy_adapter-6.9.11 → mcp_proxy_adapter-6.9.13}/mcp_proxy_adapter.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mcp-proxy-adapter
-Version: 6.9.11
+Version: 6.9.13
 Summary: Powerful JSON-RPC microservices framework with built-in security, authentication, and proxy registration
 Home-page: https://github.com/maverikod/mcp-proxy-adapter
 Author: Vasiliy Zdanovskiy

{mcp_proxy_adapter-6.9.11 → mcp_proxy_adapter-6.9.13}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "mcp-proxy-adapter"
-version = "6.9.11"
+version = "6.9.13"
 description = "Powerful JSON-RPC microservices framework with built-in security, authentication, and proxy registration"
 readme = "README.md"
 license = {text = "MIT"}