From: James Kaddu <kaddujames501@gmail.com>
Date: Fri, 31 Oct 2025 12:56:57 +0000 (+0300)
Subject: tests: add test for force-hash YAML validation.
X-Git-Tag: suricata-7.0.14~20
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ca886f3fa7ceac82f4f2ca8c10dde9a4c6dd366a;p=thirdparty%2Fsuricata-verify.git

tests: add test for force-hash YAML validation.

Add test to ensure Suricata rejects invalid force-hash algorithm values
in file logging configuration. The test verifies that an invalid hash
type (e.g., 'shanani') causes Suricata to exit with an error during
configuration validation.

Issue: OISF#4330
---

diff --git a/tests/file-force-hash-invalid/README.md b/tests/file-force-hash-invalid/README.md
new file mode 100644
index 000000000..df5b73463
--- /dev/null
+++ b/tests/file-force-hash-invalid/README.md
@@ -0,0 +1,4 @@
+Tests that Suricata properly validates the `force-hash` configuration option
+for EVE file logging and rejects invalid hash algorithm names.
+
+https://redmine.openinfosecfoundation.org/issues/4330
diff --git a/tests/file-force-hash-invalid/suricata.yaml b/tests/file-force-hash-invalid/suricata.yaml
new file mode 100644
index 000000000..0a8872fb3
--- /dev/null
+++ b/tests/file-force-hash-invalid/suricata.yaml
@@ -0,0 +1,10 @@
+%YAML 1.1
+---
+
+outputs:
+  - eve-log:
+      enabled: yes
+      types:
+        - files:
+            force-hash: [shanani]
+
diff --git a/tests/file-force-hash-invalid/test.yaml b/tests/file-force-hash-invalid/test.yaml
new file mode 100644
index 000000000..a7573eae7
--- /dev/null
+++ b/tests/file-force-hash-invalid/test.yaml
@@ -0,0 +1,13 @@
+requires:
+  min-version: 9
+
+pcap: false
+
+args:
+  - -T
+
+exit-code: 1
+
+checks:
+  - shell:
+      args: "grep 'Invalid configuration: force-hash algorithm' stderr"