// [x509_extensions]
    // subjectAltName=DNS:localhost.localdomain,DNS:localhost,IP:127.0.0.1
    //
    // $ openssl req -x509 -nodes -days 36500 -subj '/CN=localhost' -config ./cert.cnf \
    //     -newkey rsa:512 -out cert.pem
    val certificate =
      certificate(
        """
        -----BEGIN CERTIFICATE-----
        MIIBWDCCAQKgAwIBAgIJANS1EtICX2AZMA0GCSqGSIb3DQEBBQUAMBQxEjAQBgNV

                    FileSystemInformation.FS_FULL_SIZE_INFO, (byte) 0, (byte) 1, (byte) 127, (byte) -128 };

            for (byte fsClass : classes) {
                TestAllocInfo allocInfo = new TestAllocInfo(1024L, 512L, fsClass);
                assertEquals(fsClass, allocInfo.getFileSystemInformationClass());
            }
        }
    }

    @Nested
    @DisplayName("Edge Cases and Boundary Tests")

pkg debug/pe, const IMAGE_DLLCHARACTERISTICS_NO_BIND = 2048
pkg debug/pe, const IMAGE_DLLCHARACTERISTICS_NO_BIND ideal-int
pkg debug/pe, const IMAGE_DLLCHARACTERISTICS_NO_ISOLATION = 512
pkg debug/pe, const IMAGE_DLLCHARACTERISTICS_NO_ISOLATION ideal-int
pkg debug/pe, const IMAGE_DLLCHARACTERISTICS_NO_SEH = 1024
pkg debug/pe, const IMAGE_DLLCHARACTERISTICS_NO_SEH ideal-int

    }

    @Test
    void testWriteParametersWireFormat() {
        trans2QueryPathInfo = new Trans2QueryPathInformation(config, TEST_FILENAME, TEST_INFO_LEVEL);

        byte[] buffer = new byte[512];
        int written = trans2QueryPathInfo.writeParametersWireFormat(buffer, 0);

        // Check information level (first 2 bytes)
        int actualInfoLevel = SMBUtil.readInt2(buffer, 0);

        when(mockConfig.getMinimumVersion()).thenReturn(DialectVersion.SMB210);
        request = new Smb2NegotiateRequest(mockConfig, Smb2Constants.SMB2_NEGOTIATE_SIGNING_REQUIRED);

        byte[] buffer = new byte[512];

        // When
        int bytesWritten = request.writeBytesWireFormat(buffer, 0);

        // Then
        assertTrue(bytesWritten > 0);

        // Verify structure size

        // Setup SMB3.1.1 negotiation
        when(negotiateResponse.getSelectedDialect()).thenReturn(DialectVersion.SMB311);
        when(negotiateResponse.getSelectedPreauthHash()).thenReturn(1); // SHA-512
        setPrivateField(transport, "smb2", true);
        setPrivateField(transport, "negotiated", negotiateResponse);

        int threadCount = 10;
        CountDownLatch startLatch = new CountDownLatch(1);

        // idFileSystem (4 bytes, skipped)
        writeInt4(100, buffer, 4); // sectPerAlloc
        writeInt4(1000, buffer, 8); // alloc
        writeInt4(500, buffer, 12); // free
        writeInt2(512, buffer, 16); // bytesPerSect

        int bytesRead = response.readDataWireFormat(buffer, 0, buffer.length);

        assertEquals(20, bytesRead, "Should read 20 bytes");

reached the end of their useful life.

Valid values: 

```
******@****.***
hmac-sha2-512******@****.***
hmac-sha2-256
hmac-sha2-512
hmac-sha1
hmac-sha1-96
```

### Certificate-based authentication

`--sftp=trusted-user-ca-key=...` specifies a file containing public key of certificate authority that is trusted

    @DisplayName("Should test writeBytesWireFormat directly")
    void testWriteBytesWireFormatDirect() {
        // Given
        byte[] buffer = new byte[512];
        int offset = 100;

        // First encode to set headerStart
        byte[] tempBuffer = new byte[512];
        request.encode(tempBuffer, 50);

        // When
        int bytesWritten = request.writeBytesWireFormat(buffer, offset);

        // Then

    void testReadBytesWireFormatValidStructureSize() throws Exception {
        response = new Smb2QueryDirectoryResponse(mockConfig, Smb2QueryDirectoryRequest.FILE_BOTH_DIRECTORY_INFO);

        byte[] buffer = new byte[512];
        int bufferIndex = 0;

        // Set structure size to 9 (valid)
        SMBUtil.writeInt2(9, buffer, bufferIndex);
        // Set buffer offset (relative to header start)