for (int i = 0; i < 3; i++) {
            boolQueryBuilder.add(new TermQuery(new Term("must" + i, "value" + i)), BooleanClause.Occur.MUST);
            boolQueryBuilder.add(new TermQuery(new Term("should" + i, "value" + i)), BooleanClause.Occur.SHOULD);
            boolQueryBuilder.add(new TermQuery(new Term("mustNot" + i, "value" + i)), BooleanClause.Occur.MUST_NOT);
        }

        BooleanQuery booleanQuery = boolQueryBuilder.build();

    @Mock
    private SMBSigningDigest digest;

    @BeforeEach
    void setUp() {
        MockitoAnnotations.openMocks(this);
    }

    @Test
    @DisplayName("Test decode method with valid buffer")
    void testDecodeWithValidBuffer() throws SMBProtocolDecodingException {
        // Given
        byte[] buffer = new byte[256];
        int bufferIndex = 0;
        int expectedLength = 100;

        assertFalse(encryptedStr.contains("TestPassword456"), "Plaintext should not be visible in encrypted string");

        // Should be valid base64
        assertTrue(encryptedStr.matches("^[A-Za-z0-9+/]*={0,2}$"), "Should be valid Base64 format");

        // Decrypt from string
        char[] decrypted = storage.decryptFromString(encryptedStr);

     * so we only verify its acceptance here.
     */
    @Test
    void testConstructor() {
        // The constructor should not throw any exceptions with valid inputs.
        new DosFileFilter("*.*", SmbFile.ATTR_ARCHIVE);
        new DosFileFilter("?", SmbFile.ATTR_DIRECTORY);
        new DosFileFilter("file.txt", SmbFile.ATTR_READONLY | SmbFile.ATTR_HIDDEN);
    }

    /**

# Checks TFCI_BAZEL_COMMON_ARGS for "gpu" or "cuda", implying that the test is
# relevant. All of the GPU test machines have CUDA installed via other means,
# so I am not sure how to verify that the dependencies themselves are valid for
# the moment.
if [[ "$TFCI_BAZEL_COMMON_ARGS" =~ gpu|cuda ]]; then
  echo "Checking to make sure tensorflow[and-cuda] is installable..."

        // Test that default ID value is 0
        assertEquals(0L, dictionaryItem.getId());
    }

    public void test_getId_afterSetting() {
        // Test getting ID after setting it
        dictionaryItem.id = 123L;
        assertEquals(123L, dictionaryItem.getId());
    }

    public void test_getId_negativeValue() {
        // Test with negative ID value
        dictionaryItem.id = -456L;

        doNothing().when(mockBufferCache).releaseBuffer(buffer);

        // When & Then
        assertDoesNotThrow(() -> {
            mockBufferCache.releaseBuffer(buffer);
        }, "releaseBuffer should handle valid buffers");
    }

    @Test
    @DisplayName("getBuffer should return buffers for use")
    void testGetBufferBasicUsage() {
        // When
        byte[] buffer1 = testCache.getBuffer();

          listOf(
            AttributeTypeAndValue(
              type = ORGANIZATIONAL_UNIT_NAME,
              value = organizationalUnit,
            ),
          )
      }

      result +=
        listOf(
          AttributeTypeAndValue(
            type = ObjectIdentifiers.COMMON_NAME,
            value = commonName ?: UUID.randomUUID().toString(),
          ),
        )

      return result
    }

<img src="/img/deployment/https/https03.drawio.svg">

The client already **trusts** the entity that generated that TLS certificate (in this case Let's Encrypt, but we'll see about that later), so it can **verify** that the certificate is valid.

Then, using the certificate, the client and the TLS Termination Proxy **decide how to encrypt** the rest of the **TCP communication**. This completes the **TLS Handshake** part.

	{
		ObjectKey:  [32]byte{},
		ObjectInfo: ObjectInfo{ETag: "20000f00f27834c9a2654927546df57f9e998187496394d4ee80f3d9978f85f3c7d81f72600cdbe03d80dc5a13d6935"},
		ETag:       "",
		ShouldFail: true, // ETag is not a valid hex value
	},
	{
		ObjectKey:  [32]byte{},
		ObjectInfo: ObjectInfo{ETag: "00000f00f27834c9a2654927546df57f9e998187496394d4ee80f3d9978f85f3c7d81f72600cdbe03d80dc5a13d69354"},
		ETag:       "",