CERT-MCP-SERVER

The default configuration of `verify_ssl=False` for FortiGate, FortiManager, FortiAnalyzer, and Windows handlers, along with `paramiko.AutoAddPolicy()` for Linux SSH, represents a significant security risk. These settings disable server certificate validation and host key checking, making the system highly vulnerable to Man-in-the-Middle (MITM) attacks. An attacker could intercept sensitive certificate data, private keys, and device credentials. While a temporary hardcoded password (`TempCertPassword123!`) is used for Windows PFX operations, its transient nature and immediate deletion mitigate, but do not eliminate, this minor concern. Users must explicitly enable SSL verification and implement proper SSH host key management for secure operation.