mcp-security-framework 1.2.2__py3-none-any.whl → 1.2.3__py3-none-any.whl

mcp_security_framework/__init__.py

@@ -71,7 +71,7 @@ from mcp_security_framework.schemas.responses import (
 )
 
 # Version information
-__version__ = "1.2.2"
+__version__ = "1.2.3"
 __author__ = "Vasiliy Zdanovskiy"
 __email__ = "vasilyvz@gmail.com"
 __license__ = "MIT"

mcp_security_framework/core/cert_manager.py

@@ -1953,6 +1953,11 @@ WvWwM6xqxW0Sf6s5AxJmTn3amZ0G+aP4Y2AEojlbQR7g5aigKbFQqGDFW07egp6
         if not self.config.enabled:
             return
 
+        # BUGFIX: Skip CA path validation if in CA creation mode
+        if self.config.ca_creation_mode:
+            self.logger.info("CA creation mode enabled, skipping CA path validation")
+            return
+
         if not self.config.ca_cert_path:
             raise CertificateConfigurationError("CA certificate path is required")
 

{mcp_security_framework-1.2.2.dist-info → mcp_security_framework-1.2.3.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mcp-security-framework
-Version: 1.2.2
+Version: 1.2.3
 Summary: Universal security framework for microservices with SSL/TLS, authentication, authorization, and rate limiting. Requires cryptography>=42.0.0 for certificate operations.
 Author-email: Vasiliy Zdanovskiy <vasilyvz@gmail.com>
 Maintainer-email: Vasiliy Zdanovskiy <vasilyvz@gmail.com>

{mcp_security_framework-1.2.2.dist-info → mcp_security_framework-1.2.3.dist-info}/RECORD

@@ -1,11 +1,11 @@
-mcp_security_framework/__init__.py,sha256=C9V1poQA2xvUsTjT2DulR-ePlspAJ1ouYFLZ-GgfsuE,3172
+mcp_security_framework/__init__.py,sha256=ljFr1tiyy5JeHkk8a77Z3YuC6usyvIwlS01XuL1bsp8,3172
 mcp_security_framework/constants.py,sha256=k7NMSrgc83Cci8aoilybQxdC7jir7J-mVFE_EpqVrDk,5307
 mcp_security_framework/cli/__init__.py,sha256=plpWdiWMp2dcLvUuGwXynRg5CDjz8YKnNTBn7lcta08,369
 mcp_security_framework/cli/cert_cli.py,sha256=LdZ3SYKM3e3dP5LsVR5Y0OENtlG0ENu64aHefHjuiN8,23818
 mcp_security_framework/cli/security_cli.py,sha256=Thine_Zzfesz7j29y2k_XZFYUK5YSrhCc6w2FilgEiE,28486
 mcp_security_framework/core/__init__.py,sha256=LiX8_M5qWiTXccJFjSLxup9emhklp-poq57SvznsKEg,1729
 mcp_security_framework/core/auth_manager.py,sha256=GqGAW83Qg1_z2HJ0-FEVTmlli_DBSOPOap2jJMEU1_k,39882
-mcp_security_framework/core/cert_manager.py,sha256=RJgZxElPgMV15Lj_N2uCyO7Ofb9z-MclM1hf8wzFwSc,88882
+mcp_security_framework/core/cert_manager.py,sha256=F3rWpqi-YZtaCt3g-KpoqJ1WY22TGaVLEkacKKTrHxw,89094
 mcp_security_framework/core/permission_manager.py,sha256=SADS_oXpwp9MhXHKJMCsvjEq8KWcz7vPYL05Yr-zfio,26478
 mcp_security_framework/core/rate_limiter.py,sha256=6qjVBxK2YHouSxQuCcbr0PBpRqA5toQss_Ce178RElY,20682
 mcp_security_framework/core/security_manager.py,sha256=mAF-5znqxin-MSSgXISB7t1kTkqHltEqGzzmlLAhRGs,37766
@@ -45,7 +45,7 @@ tests/test_cli/test_cert_cli.py,sha256=Rm7z-20VAvnmYKY3sgxS-qVNks1vbniQJSpSxjsx_
 tests/test_cli/test_security_cli.py,sha256=Bpd31IPJSUl_V1Xzy74ZCOvQpwlbj8Da83C46T8Jewg,25569
 tests/test_core/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 tests/test_core/test_auth_manager.py,sha256=7Z2DLfJLqKtiwX5Q-lR85hN6NxHbE2Q_FT7IsoyKPQk,22568
-tests/test_core/test_cert_manager.py,sha256=4YMAkRedkAZW3PEZYEbo1PyrzMntUrKfl7arPsHXDCE,36356
+tests/test_core/test_cert_manager.py,sha256=AVaJlWrWTFMO4MqxzVx39QAwB5zbYhVHQwdYUgNNplk,38091
 tests/test_core/test_permission_manager.py,sha256=0XeghWXZqVpKyyRuhuDu1dkLUSwuZaFWkRQxQhkkFVI,14966
 tests/test_core/test_rate_limiter.py,sha256=YzzlhlxZm-A7YGMiIV8LXDA0zmb_6uRF9GRx9s21Q0U,22544
 tests/test_core/test_security_manager.py,sha256=C5uPFALAkitmHbi-L8xF1OyfOmVHQSq1g-PLkwl_LDU,35007
@@ -78,8 +78,8 @@ tests/test_utils/test_crypto_utils.py,sha256=yEb4hzG6-irj2DPoXY0DUboJfbeR87ussgT
 tests/test_utils/test_datetime_compat.py,sha256=n8S4X5HN-_ejSNpgymDXRyZkmxhnyxwwjxFPdX23I40,5656
 tests/test_utils/test_unitid_compat.py,sha256=MWh03A4FwzQyZa20PKHEWz4W03YtARwBOd_1JbABznQ,25544
 tests/test_utils/test_validation_utils.py,sha256=lus_wHJ2WyVnBGQ28S7dSv78uWcCIuLhn5uflJw-uGw,18569
-mcp_security_framework-1.2.2.dist-info/METADATA,sha256=JSoJc0AxNbssfj8K6IyR-JCfySC8L9pmys2d7PnLj9o,11771
-mcp_security_framework-1.2.2.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
-mcp_security_framework-1.2.2.dist-info/entry_points.txt,sha256=qBh92fVDmd1m2f3xeW0hTu3Ksg8QfGJyV8UEkdA2itg,142
-mcp_security_framework-1.2.2.dist-info/top_level.txt,sha256=ifUiGrTDcD574MXSOoAN2rp2wpUvWlb4jD9LTUgDWCA,29
-mcp_security_framework-1.2.2.dist-info/RECORD,,
+mcp_security_framework-1.2.3.dist-info/METADATA,sha256=4v-tLjiCOSD0yJE-WcvjV4Ryds0OVQBwlIrECAfzUZ0,11771
+mcp_security_framework-1.2.3.dist-info/WHEEL,sha256=_zCd3N1l69ArxyTb8rzEoP9TpbYXkqRFSNOD5OuxnTs,91
+mcp_security_framework-1.2.3.dist-info/entry_points.txt,sha256=qBh92fVDmd1m2f3xeW0hTu3Ksg8QfGJyV8UEkdA2itg,142
+mcp_security_framework-1.2.3.dist-info/top_level.txt,sha256=ifUiGrTDcD574MXSOoAN2rp2wpUvWlb4jD9LTUgDWCA,29
+mcp_security_framework-1.2.3.dist-info/RECORD,,

tests/test_core/test_cert_manager.py

@@ -676,6 +676,50 @@ class TestCertificateManager:
 
         assert "CA certificate and key paths are required" in str(exc_info.value)
 
+    def test_ca_creation_mode_bypasses_validation(self):
+        """Test that CA creation mode bypasses CA path validation in CertificateManager."""
+        config = CertificateConfig(
+            enabled=True,
+            ca_creation_mode=True,
+            cert_storage_path=self.temp_dir,
+            key_storage_path=self.temp_dir
+        )
+        
+        # This should not raise an exception
+        cert_manager = CertificateManager(config)
+        assert cert_manager is not None
+        assert cert_manager.config.ca_creation_mode is True
+
+    def test_ca_creation_mode_with_ca_paths(self):
+        """Test that CA creation mode works even with CA paths provided."""
+        config = CertificateConfig(
+            enabled=True,
+            ca_creation_mode=True,
+            ca_cert_path=self.ca_cert_path,
+            ca_key_path=self.ca_key_path,
+            cert_storage_path=self.temp_dir,
+            key_storage_path=self.temp_dir
+        )
+        
+        # This should not raise an exception
+        cert_manager = CertificateManager(config)
+        assert cert_manager is not None
+        assert cert_manager.config.ca_creation_mode is True
+        assert cert_manager.config.ca_cert_path == self.ca_cert_path
+        assert cert_manager.config.ca_key_path == self.ca_key_path
+
+    def test_normal_mode_requires_ca_paths(self):
+        """Test that normal mode requires CA paths."""
+        with pytest.raises(ValidationError) as exc_info:
+            CertificateConfig(
+                enabled=True,
+                ca_creation_mode=False,
+                cert_storage_path=self.temp_dir,
+                key_storage_path=self.temp_dir
+            )
+
+        assert "ca_creation_mode=True" in str(exc_info.value)
+
     def test_create_output_directory(self):
         """Test automatic output directory creation."""
         # Create new temp directory