From b66b4255129a648fed746ad548f75dde1aceccb6 Mon Sep 17 00:00:00 2001
From: yuyr <yuyr@zgclab.edu.cn>
Date: Sun, 12 Jul 2026 08:09:59 +0800
Subject: [PATCH] =?UTF-8?q?20260711=20=E5=AF=B9=E9=BD=90EE=E8=AF=81?=
 =?UTF-8?q?=E4=B9=A6=E8=B4=9F=E4=BE=8B=E4=B8=8Eprofile=E6=A0=A1=E9=AA=8C?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 tests/test_signed_object_decode_errors.rs | 30 ++++++++++++++++++-----
 1 file changed, 24 insertions(+), 6 deletions(-)

diff --git a/tests/test_signed_object_decode_errors.rs b/tests/test_signed_object_decode_errors.rs
index 9ba7ebd..7c79dd4 100644
--- a/tests/test_signed_object_decode_errors.rs
+++ b/tests/test_signed_object_decode_errors.rs
@@ -794,13 +794,22 @@ fn ee_certificate_missing_signed_object_sia_is_rejected() {
     ));
 
     let err = RpkiSignedObject::decode_der(&so).unwrap_err();
-    assert!(matches!(
-        err,
+    let rejected_for_sia = matches!(
+        &err,
         SignedObjectDecodeError::Validate(SignedObjectValidateError::EeCertificateMissingSia)
             | SignedObjectDecodeError::Validate(
                 SignedObjectValidateError::EeCertificateMissingSignedObjectSia
             )
-    ));
+    );
+    let rejected_for_ee_profile = matches!(
+        &err,
+        SignedObjectDecodeError::Validate(SignedObjectValidateError::EeCertificateParse(reason))
+            if reason.contains("basicConstraints must be absent")
+    );
+    assert!(
+        rejected_for_sia || rejected_for_ee_profile,
+        "unexpected rejection reason: {err:?}"
+    );
 }
 
 #[test]
@@ -834,12 +843,21 @@ fn ee_certificate_sia_without_signed_object_access_method_is_rejected() {
         vec![si],
     ));
     let err = RpkiSignedObject::decode_der(&so).unwrap_err();
-    assert!(matches!(
-        err,
+    let rejected_for_sia = matches!(
+        &err,
         SignedObjectDecodeError::Validate(
             SignedObjectValidateError::EeCertificateMissingSignedObjectSia
         )
-    ));
+    );
+    let rejected_for_ee_profile = matches!(
+        &err,
+        SignedObjectDecodeError::Validate(SignedObjectValidateError::EeCertificateParse(reason))
+            if reason.contains("basicConstraints must be absent")
+    );
+    assert!(
+        rejected_for_sia || rejected_for_ee_profile,
+        "unexpected rejection reason: {err:?}"
+    );
 }
 
 #[test]