Add tests for insecure cipher suite config

Signed-off-by: Ricardo Herrera <rickhl@outlook.com>

config/config_test.go

@@ -405,6 +405,23 @@ func TestMinTLSVersion(t *testing.T) {
 	})
 }
 
+func TestExcludeInsecureCipherSuites(t *testing.T) {
+
+	t.Run("test default", func(t *testing.T) {
+		cfg := new(Config)
+		if cfg.filterCipherSuites() != nil {
+			t.Error("No cipher suites should be filtered by default")
+		}
+	})
+	t.Run("test excluded insecure cipher suites", func(t *testing.T) {
+		cfg := new(Config)
+		cfg.ExcludeInsecureCipherSuites = true
+		if cfg.filterCipherSuites() == nil {
+			t.Error(`Failed to get list of filtered cipher suites`)
+		}
+	})
+}
+
 type testFormatter struct {
 	messages map[string]log.Level
 }

skipper_test.go

@@ -186,6 +186,13 @@ func TestOptionsTLSConfig(t *testing.T) {
 	require.NoError(t, err)
 	require.Equal(t, uint16(tls.VersionTLS13), c.MinVersion)
 	require.Equal(t, []tls.Certificate{cert, cert2}, c.Certificates)
+
+	// TLS Cipher Suites
+	o = &Options{CipherSuites: []uint16{1}}
+	c, err = o.tlsConfig(cr)
+	require.NoError(t, err)
+	assert.Equal(t, len(c.CipherSuites), 1)
+
 }
 
 func TestOptionsTLSConfigInvalidPaths(t *testing.T) {