From a169a1cef5332a409efc2db07bcc1ae9b72f217e Mon Sep 17 00:00:00 2001
From: Dimitri Staessens <dimitri@ouroboros.rocks>
Date: Sun, 21 Jun 2026 13:18:35 +0200
Subject: lib: Group sec_config authentication fields

Nest the flat req_auth and cacert members of struct sec_config into a
sub-struct a { req; cacert; }, keeping the authentication settings
together.

Signed-off-by: Dimitri Staessens <dimitri@ouroboros.rocks>
Signed-off-by: Sander Vrijders <sander@ouroboros.rocks>
---
 src/lib/tests/kex_test.c | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

(limited to 'src/lib/tests/kex_test.c')

diff --git a/src/lib/tests/kex_test.c b/src/lib/tests/kex_test.c
index 786e1977..0a00ccab 100644
--- a/src/lib/tests/kex_test.c
+++ b/src/lib/tests/kex_test.c
@@ -890,7 +890,7 @@ static int test_kex_parse_config_auth(void)
                 goto fail;
         }
 
-        if (!kex.req_auth) {
+        if (!kex.a.req) {
                 printf("auth=required not parsed correctly.\n");
                 fclose(fp);
                 goto fail;
@@ -946,7 +946,7 @@ static int test_kex_parse_config_auth_seed(void)
         TEST_START();
 
         memset(&kex, 0, sizeof(kex));
-        kex.req_auth = true;
+        kex.a.req = true;
 
         fp = FMEMOPEN_STR(KEX_CONFIG_NO_ENC);
         if (fp == NULL) {
@@ -960,7 +960,7 @@ static int test_kex_parse_config_auth_seed(void)
                 goto fail;
         }
 
-        if (!kex.req_auth) {
+        if (!kex.a.req) {
                 printf("Seeded req_auth should survive parsing.\n");
                 fclose(fp);
                 goto fail;
@@ -985,7 +985,7 @@ static int test_kex_parse_config_auth_optional(void)
         TEST_START();
 
         memset(&kex, 0, sizeof(kex));
-        kex.req_auth = true;
+        kex.a.req = true;
 
         fp = FMEMOPEN_STR(KEX_CONFIG_AUTH_OPTIONAL);
         if (fp == NULL) {
@@ -999,7 +999,7 @@ static int test_kex_parse_config_auth_optional(void)
                 goto fail;
         }
 
-        if (kex.req_auth) {
+        if (kex.a.req) {
                 printf("auth=optional should clear req_auth.\n");
                 fclose(fp);
                 goto fail;
@@ -1037,7 +1037,7 @@ static int test_kex_parse_config_auth_no_enc(const char * config)
                 goto fail;
         }
 
-        if (!kex.req_auth) {
+        if (!kex.a.req) {
                 printf("encryption=none should not drop required auth.\n");
                 fclose(fp);
                 goto fail;
@@ -1086,14 +1086,14 @@ static int test_kex_parse_config_cacert(void)
                 goto fail;
         }
 
-        if (strcmp(kex.cacert,
+        if (strcmp(kex.a.cacert,
                    "/etc/ouroboros/security/cacert/ca.crt") != 0) {
                 printf("cacert not parsed correctly.\n");
                 fclose(fp);
                 goto fail;
         }
 
-        if (kex.req_auth) {
+        if (kex.a.req) {
                 printf("cacert must not imply req_auth.\n");
                 fclose(fp);
                 goto fail;
-- 
cgit v1.2.3