mockConfig.getLocalTimezone();
            mockConfig.getPid();
            mockConfig.getMaxMpxCount();
            mockConfig.isSigningEnabled();
            mockConfig.isIpcSigningEnforced();
            mockConfig.isSigningEnforced();
            mockConfig.isEncryptionEnabled();
            mockConfig.isForceExtendedSecurity();
            mockConfig.getLmHostsFileName();

        BaseConfiguration config = new BaseConfiguration(true);

        // Verify IPC signing is enforced (this is a security requirement)
        assertTrue("IPC signing should be enforced for security", config.isIpcSigningEnforced());
    }

    /**
     * Test secure negotiation requirement for SMB3
     */
    @Test
    public void testSecureNegotiateRequired() throws CIFSException {

        return this.delegate.isSigningEnforced();
    }

    /**
     * {@inheritDoc}
     *
     * @see jcifs.Configuration#isIpcSigningEnforced()
     */
    @Override
    public boolean isIpcSigningEnforced() {
        return this.delegate.isIpcSigningEnforced();
    }

    /**
     * {@inheritDoc}
     *
     * @see jcifs.Configuration#isEncryptionEnabled()
     */
    @Override

        when(mockDelegate.isEncryptionEnabled()).thenReturn(true);
        when(mockDelegate.isSigningEnabled()).thenReturn(false);
        when(mockDelegate.isSigningEnforced()).thenReturn(true);
        when(mockDelegate.isIpcSigningEnforced()).thenReturn(true);
        when(mockDelegate.isForceExtendedSecurity()).thenReturn(true).thenReturn(false);

        // When
        boolean encryptionEnabled = delegatingConfig.isEncryptionEnabled();

        try (SmbTransportInternal trans = tf.getTransportPool()
                .getSmbTransport(tf, dc, port, false, !tf.getCredentials().isAnonymous() && tf.getConfig().isIpcSigningEnforced())
                .unwrap(SmbTransportInternal.class)) {
            trans.ensureConnected();
            return trans.getServerEncryptionKey();
        } catch (final SmbException e) {
            throw e;

    void testSecurityConfigurationGetters() {
        assertFalse(config.isSigningEnabled());
        assertFalse(config.isSigningEnforced());
        assertTrue(config.isIpcSigningEnforced());
        assertFalse(config.isEncryptionEnabled());
        assertFalse(config.isForceExtendedSecurity());
    }

    @Test
    @DisplayName("Test buffer configuration getters")

     *
     * {@inheritDoc}
     *
     * @see jcifs.smb.SmbResourceLocatorInternal#shouldForceSigning()
     */
    @Override
    public boolean shouldForceSigning() {
        return this.ctx.getConfig().isIpcSigningEnforced() && !this.ctx.getCredentials().isAnonymous() && isIPC();
    }

    /**
     * {@inheritDoc}
     *
     * @see jcifs.SmbResourceLocator#isIPC()
     */
    @Override

        final UniAddress dc = new UniAddress(addr);
        try (SmbTransportInternal trans = tf.getTransportPool()
                .getSmbTransport(tf, dc, 0, false, tf.hasDefaultCredentials() && tf.getConfig().isIpcSigningEnforced())
                .unwrap(SmbTransportInternal.class)) {
            if (!tf.hasDefaultCredentials()) {
                trans.ensureConnected();
                log.warn("""

        final String rsvc = response.getService();
        if (rsvc == null && !transport.isSMB2()) {
            throw new SmbException("Service is NULL");
        }

        if (transport.getContext().getConfig().isIpcSigningEnforced() && ("IPC$".equals(this.getShare()) || "IPC".equals(rsvc))
                && !sess.getCredentials().isAnonymous() && sess.getDigest() == null) {

    /**
     *
     * Property {@code jcifs.smb.client.ipcSigningEnforced} (boolean, default true)
     *
     * @return whether to enforce SMB signing for IPC connections
     */
    boolean isIpcSigningEnforced();

    /**
     *
     * Property {@code jcifs.smb.client.signingEnforced} (boolean, default false)
     *
     * @return whether to enforce SMB signing (for everything)
     */