missing host key should raise exception by default

pushyrpc / pushy

Easy-as RPC. Zero-server RPC for Python and Java.

45 stars 18 forks source link

missing host key should raise exception by default #2

Closed axw closed 12 years ago

axw commented 12 years ago

Pushy configures Paramiko with the "AutoAddPolicy", which opens users to "man in the middle" attacks. This was fine when Pushy was used only by me, in a controlled network, but needs to be changed now. It should be configurable, with the default to reject.

Imported from Launchpad using lp2gh.

date created: 2011-02-24T13:09:48Z
owner: axwalk
the launchpad url was https://bugs.launchpad.net/bugs/724296

axw commented 12 years ago

(by axwalk) There is now a "missing_host_key_policy" keyword parameter for the Paramiko SSH transport. This should be set to one of the strings "reject" (the default), "warning", or "autoadd". Alternatively, it can be set to an instance of paramiko.MissingHostKeyPolicy (or a subclass).