Added test for cipher suites

hashicorp · Feb 27, 2019 · 3388f6c · 3388f6c
1 parent cc370d0
commit 3388f6c
Showing 1 changed file with 17 additions and 0 deletions.
diff --git a/command/server/cipher_suites_test.go b/command/server/cipher_suites_test.go
@@ -0,0 +1,17 @@
+package server
+
+import (
+	"crypto/tls"
+	"testing"
+)
+
+func TestIsBadCipher(t *testing.T) {
+	badCipher := tls.TLS_RSA_WITH_AES_128_CBC_SHA
+	if !isBadCipher(badCipher) {
+		t.Fatalf("TLS_RSA_WITH_AES_128_CBC_SHA is a bad cipher but has not been detected")
+	}
+	goodCipher := tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+	if isBadCipher(goodCipher) {
+		t.Fatalf("TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 is a good cipher but has been detected")
+	}
+}