mirror of
https://github.com/sol1/rustguac.git
synced 2026-09-10 17:47:13 +00:00
Dave Kempe
958b675fd2
check_server_key no longer blindly accepts all keys. Jump hosts now support a host_key field stored in Vault alongside credentials. - New POST /api/ssh/probe-host-key endpoint probes an SSH server and returns its public key, fingerprint, and algorithm - Address book UI: "Verify Host Key" button per jump host probes the server, shows fingerprint for confirmation, stores key on save - TunnelHandler verifies the server key against the stored key on connect — rejects with detailed error on mismatch - Unpinned keys accepted with TOFU warning log for backward compat - host_key preserved through credential merging on entry update Closes #95
