*/
    @Test
    public void testSecureNegotiateRequired() throws CIFSException {
        BaseConfiguration config = new BaseConfiguration(true);

        // Verify secure negotiate is required for SMB3
        assertTrue("Secure negotiate should be required for SMB3", config.isRequireSecureNegotiate());
    }

    }

    /**
     * Returns the server capabilities negotiated during the SMB handshake.
     *
     * @return the negotiated capabilities
     */
    public int getNegotiatedCapabilities() {
        return this.capabilities;
    }

    /**
     * Gets the negotiated send buffer size.
     *
     * @return negotiated send buffer size
     */
    public int getNegotiatedSendBufferSize() {

 * to a remote host. Newer TLS options are quite useful:
 *
 *  * Server Name Indication (SNI) enables one IP address to negotiate secure connections for
 *    multiple domain names.
 *
 *  * Application Layer Protocol Negotiation (ALPN) enables the HTTPS port (443) to be used to
 *    negotiate HTTP/2.
 *
 * Unfortunately, older HTTPS servers refuse to connect when such options are presented. Rather than

        when(httpSession.getAttribute("NtlmHttpAuth")).thenReturn(null);

        // Create a custom filter that overrides negotiate to test skipAuthentication
        NtlmHttpFilter customFilter = new NtlmHttpFilter() {
            @Override
            protected NtlmPasswordAuthentication negotiate(HttpServletRequest req, HttpServletResponse resp, boolean skipAuthentication)
                    throws IOException, ServletException {

     */
    @Override
    public byte[] getServerEncryptionKey() {
        if (this.negotiated == null) {
            return null;
        }

        if (this.negotiated instanceof SmbComNegotiateResponse) {
            return ((SmbComNegotiateResponse) this.negotiated).getServerData().encryptionKey;
        }
        return null;
    }

    @Override

        when(transport.isSMB2()).thenReturn(false);
        when(transport.getContext()).thenReturn(context);
        when(session.getTargetHost()).thenReturn("localhost");

        // Mock negotiate response for SMB1
        SmbComNegotiateResponse nego = mock(SmbComNegotiateResponse.class);
        ServerData serverData = new ServerData();
        when(nego.getServerData()).thenReturn(serverData);

import jcifs.Decodable;
import jcifs.internal.SMBProtocolDecodingException;
import jcifs.internal.util.SMBUtil;

/**
 * SMB2 Validate Negotiate Info response data structure. This structure contains the server's
 * validation of the originally negotiated SMB2 dialect.
 *
 * @author mbechler
 *
 */
public class ValidateNegotiateInfoResponse implements Decodable {

    /**

 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 */
package jcifs.internal;

/**
 * Interface for SMB protocol negotiation request messages.
 * Represents the client's request to negotiate SMB protocol version and capabilities
 * with the server, including security requirements like message signing.
 *
 * @author mbechler
 */
public interface SmbNegotiationRequest {

    /**

        byte[] initialHash = preauthService.getCurrentPreauthHash(sessionId);
        assertNotNull(initialHash);

        // Update with negotiate message
        byte[] negotiateMessage = "SMB2 Negotiate Request".getBytes();
        preauthService.updatePreauthHash(sessionId, negotiateMessage);

        byte[] afterNegotiateHash = preauthService.getCurrentPreauthHash(sessionId);

        try {
            resp = send(req, RequestParam.NO_RETRY);
        } catch (final SMBSignatureValidationException e) {
            throw new SMBProtocolDowngradeException("Signature error during negotiate validation", e);
        } catch (final SmbException e) {
            if (log.isDebugEnabled()) {
                log.debug(String.format("VALIDATE_NEGOTIATE_INFO response code 0x%x", e.getNtStatus()));
            }