ssh-handler 1.0.7__tar.gz → 1.0.9__tar.gz

{ssh_handler-1.0.7/ssh_handler.egg-info → ssh_handler-1.0.9}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ssh-handler
-Version: 1.0.7
+Version: 1.0.9
 Summary: Extensive SSH/SFTP/SCP/FTP handler built on Paramiko, for test automation, CLIs and PyQt5 tools.
 Author: ssh-handler contributors
 License-Expression: MIT

{ssh_handler-1.0.7 → ssh_handler-1.0.9}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "ssh-handler"
-version = "1.0.7"
+version = "1.0.9"
 description = "Extensive SSH/SFTP/SCP/FTP handler built on Paramiko, for test automation, CLIs and PyQt5 tools."
 readme = "README.md"
 requires-python = ">=3.8"

{ssh_handler-1.0.7 → ssh_handler-1.0.9}/ssh_handler/__init__.py

@@ -22,7 +22,7 @@ dependencies (PyQt5 / scp) don't break the core package.
 
 from __future__ import annotations
 
-__version__ = "1.0.7"
+__version__ = "1.0.9"
 
 from .config import SSHConfig, FTPConfig
 from .core import SSHHandler, ShellSession

{ssh_handler-1.0.7 → ssh_handler-1.0.9}/ssh_handler/config.py

@@ -70,7 +70,11 @@ class SSHConfig:
     winrm_transport: str = "ntlm"           # ntlm works with domain creds, no Kerberos
 
     # --- host key policy ---
-    host_key_policy: str = "auto"         # "auto" | "reject" | "warn"
+    # "auto"   -> add unknown host keys, but reject a CHANGED key
+    # "ignore" -> accept any key incl. changed ones (lab / reimaged / DHCP hosts)
+    # "reject" -> strict; only keys already in known_hosts
+    # "warn"   -> warn on unknown keys
+    host_key_policy: str = "auto"
     known_hosts: Optional[str] = None
 
     # --- jump host / bastion (ProxyJump) ---

{ssh_handler-1.0.7 → ssh_handler-1.0.9}/ssh_handler/core.py

@@ -220,6 +220,12 @@ class SSHHandler:
 
     def _make_client(self) -> paramiko.SSHClient:
         client = paramiko.SSHClient()
+        if self.config.host_key_policy == "ignore":
+            # Lab mode: don't load any known_hosts and accept whatever key the
+            # server presents - even a CHANGED one. Use for reimaged / DHCP
+            # devices whose host keys rotate (avoids BadHostKeyException).
+            client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
+            return client
         if self.config.known_hosts:
             try:
                 client.load_host_keys(os.path.expanduser(self.config.known_hosts))

{ssh_handler-1.0.7 → ssh_handler-1.0.9}/ssh_handler/setup_openssh_server.ps1

@@ -114,6 +114,21 @@ else {
         if (-not (Test-Path $installer)) { throw "install-sshd.ps1 missing in $dest" }
         & powershell -NoProfile -ExecutionPolicy Bypass -File $installer | Out-Null
         Write-Host "  OpenSSH Server installed." -ForegroundColor Green
+
+        # Generate host keys and fix their ACLs. Without this, ZIP installs often
+        # accept the TCP connection but fail the handshake -> clients see
+        # "Error reading SSH protocol banner".
+        $keygen = Join-Path $dest 'ssh-keygen.exe'
+        if (Test-Path $keygen) {
+            & $keygen -A | Out-Null
+            Write-Host "  Host keys generated." -ForegroundColor Green
+        }
+        $fixPerms = Join-Path $dest 'FixHostFilePermissions.ps1'
+        if (Test-Path $fixPerms) {
+            & powershell -NoProfile -ExecutionPolicy Bypass -File $fixPerms `
+                -Confirm:$false | Out-Null
+            Write-Host "  Host key permissions fixed." -ForegroundColor Green
+        }
     }
     finally {
         if (Test-Path $tmp) { Remove-Item $tmp -Recurse -Force -ErrorAction SilentlyContinue }
@@ -129,7 +144,11 @@ else {
 # --- 4. Service + firewall -------------------------------------------------- #
 Write-Host "Configuring sshd service and firewall..."
 Set-Service -Name sshd -StartupType Automatic
-Start-Service sshd
+if ((Get-Service sshd).Status -eq 'Running') {
+    Restart-Service sshd      # pick up freshly generated host keys
+} else {
+    Start-Service sshd
+}
 
 $ruleName = "OpenSSH-Server-In-TCP"
 if (-not (Get-NetFirewallRule -Name $ruleName -ErrorAction SilentlyContinue)) {

{ssh_handler-1.0.7 → ssh_handler-1.0.9/ssh_handler.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: ssh-handler
-Version: 1.0.7
+Version: 1.0.9
 Summary: Extensive SSH/SFTP/SCP/FTP handler built on Paramiko, for test automation, CLIs and PyQt5 tools.
 Author: ssh-handler contributors
 License-Expression: MIT