void testVerifySignatureErrorWithSecureNegotiate() {
            byte[] buffer = new byte[100];
            response.setDigest(mockDigest);
            response.setStatusForTest(NtStatus.NT_STATUS_ACCESS_DENIED);
            when(mockConfig.isRequireSecureNegotiate()).thenReturn(true);
            when(mockDigest.verify(buffer, 0, 100, 0, response)).thenReturn(false);

    int NT_STATUS_NO_SUCH_FILE = 0xC000000f;
    /** More processing is required to complete this request */
    int NT_STATUS_MORE_PROCESSING_REQUIRED = 0xC0000016;
    /** Access is denied */
    int NT_STATUS_ACCESS_DENIED = 0xC0000022;
    /** The data area passed to a system call is too small */
    int NT_STATUS_BUFFER_TOO_SMALL = 0xC0000023;
    /** The object name is invalid */
    int NT_STATUS_OBJECT_NAME_INVALID = 0xC0000033;

    int NT_STATUS_END_OF_FILE = 0xC0000011;
    /** More processing is required to complete this request */
    int NT_STATUS_MORE_PROCESSING_REQUIRED = 0xC0000016;
    /** Access is denied */
    int NT_STATUS_ACCESS_DENIED = 0xC0000022;
    /** The data area passed to a system call is too small */
    int NT_STATUS_BUFFER_TOO_SMALL = 0xC0000023;
    /** The object name is invalid */
    int NT_STATUS_OBJECT_NAME_INVALID = 0xC0000033;

    class ErrorCodeTests {

        @Test
        @DisplayName("Should get error code from status")
        void testGetErrorCode() throws Exception {
            int status = NtStatus.NT_STATUS_ACCESS_DENIED;
            setStatus(echoResponse, status);

            assertEquals(status, echoResponse.getErrorCode());
        }
    }

    @Nested
    @DisplayName("Signed Flag Tests")

        Smb2SessionSetupResponse resp = newResponse();

        byte[] buf = new byte[256];
        int headerStart = 0;
        buildHeader(buf, headerStart, NtStatus.NT_STATUS_ACCESS_DENIED, 0x0001, 0x0L);

        int bodyStart = headerStart + Smb2Constants.SMB2_HEADER_LENGTH;
        // Error response structure: size(2)=9, errorContextCount(1), reserved(1), bc(4), errorData(bc)

                log.warn("Failed to set file attributes on " + path, e);
            } catch (final SmbException se) {
                log.trace("copyTo0", se);
                if (se.getNtStatus() != NtStatus.NT_STATUS_ACCESS_DENIED && se.getNtStatus() != NtStatus.NT_STATUS_OBJECT_NAME_COLLISION) {
                    throw se;
                }
            }
        }

        setStatus(response, NtStatus.NT_STATUS_SUCCESS);
        assertFalse(response.isErrorResponseStatus());

        // Test with error status
        setStatus(response, NtStatus.NT_STATUS_ACCESS_DENIED);
        assertTrue(response.isErrorResponseStatus());

        // Test with another error status
        setStatus(response, NtStatus.NT_STATUS_INVALID_PARAMETER);

        // Given - Use reflection to set status
        Field statusField = ServerMessageBlock2.class.getDeclaredField("status");
        statusField.setAccessible(true);
        statusField.set(response, NtStatus.NT_STATUS_ACCESS_DENIED);

        // When
        boolean isError = response.isErrorResponseStatus();

        // Then
        assertTrue(isError);
    }

    @Test

            }
            log.trace("VALIDATE_NEGOTIATE_INFO returned error", e);
            if (req.getResponse().isReceived() && req.getResponse().isVerifyFailed()
                    || e.getNtStatus() == NtStatus.NT_STATUS_ACCESS_DENIED) {
                // this is the signature error
                throw new SMBProtocolDowngradeException("Signature error during negotiate validation", e);
            }

        }
        switch (resp.getErrorCode()) {
        case NtStatus.NT_STATUS_SUCCESS:
            cont = true;
            break;
        case NtStatus.NT_STATUS_ACCESS_DENIED:
        case NtStatus.NT_STATUS_WRONG_PASSWORD:
        case NtStatus.NT_STATUS_LOGON_FAILURE:
        case NtStatus.NT_STATUS_ACCOUNT_RESTRICTION:
        case NtStatus.NT_STATUS_INVALID_LOGON_HOURS: