Add test for CipherSuite + Certificate mismatch

Resolves #350
pion · Jun 3, 2024 · e70f03b · e70f03b
1 parent edc7ad0
commit e70f03b
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/conn_test.go b/conn_test.go
@@ -376,6 +376,17 @@ func TestHandshakeWithAlert(t *testing.T) {
 			errServer: &alertError{&alert.Alert{Level: alert.Fatal, Description: alert.InsufficientSecurity}},
 			errClient: errNoAvailableSignatureSchemes,
 		},
+		// Servers have agreement on Ciphersuite, but attempted to use RSA CipherSuite with ECDSA certificate
+		"RSACipherWithECDSACertificate": {
+			configServer: &Config{
+				CipherSuites: []CipherSuiteID{TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256},
+			},
+			configClient: &Config{
+				CipherSuites: []CipherSuiteID{TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256},
+			},
+			errServer: errCipherSuiteNoIntersection,
+			errClient: &alertError{&alert.Alert{Level: alert.Fatal, Description: alert.InsufficientSecurity}},
+		},
 	}
 
 	for name, testCase := range cases {