anchor.diff:           decode_empty_server_sni_correctly/1,
            select_proper_tls_1_2_rsa_default_hashsign/1,
            ignore_hassign_extension_pre_tls_1_2/1,
  -         unorded_chain/1,
            signature_algorithms/1,
            encode_decode_srp/1]).
   
  
positive.code:     %%% Ignore
      {md5sha, rsa} = ssl_handshake:select_hashsign({HashSigns, undefined}, Cert, ecdhe_rsa, tls_v1:default_signature_algs({3,2}), {3,2}),
      {md5sha, rsa} = ssl_handshake:select_hashsign({HashSigns, undefined}, Cert, ecdhe_rsa, tls_v1:default_signature_algs({3,0}), {3,0}).
  
  unorded_chain(Config) when is_list(Config) ->
      DefConf = ssl_test_lib:default_cert_chain_conf(),
      CertChainConf = ssl_test_lib:gen_conf(rsa, rsa, DefConf, DefConf),
      #{server_config := ServerConf,
        client_config := _ClientConf} = public_key:pkix_test_data(CertChainConf),
      PeerCert = proplists:get_value(cert, ServerConf),
      CaCerts = [_, C1, C2] = proplists:get_value(cacerts, ServerConf),
      {ok,  ExtractedCerts} = ssl_pkix_db:extract_trusted_certs({der, CaCerts}),
      UnordedChain = case public_key:pkix_is_self_signed(C1) of
                         true ->
                             [C1, C2];
                         false ->
                             [C2, C1]
                     end,
      OrderedChain = [PeerCert | lists:reverse(UnordedChain)],
      {ok, _, OrderedChain} = 
          ssl_certificate:certificate_chain(PeerCert, ets:new(foo, []), ExtractedCerts, UnordedChain).
  
  encode_decode_srp(_Config) ->
      Exts = #{srp => #srp{username = <<"foo">>},
  
negative.code: 	  decode_empty_server_sni_correctly,
  	  select_proper_tls_1_2_rsa_default_hashsign,
  	  ignore_hassign_extension_pre_tls_1_2,
  	  signature_algorithms,
  	  encode_decode_srp].
  
  %%--------------------------------------------------------------------
  