two more test cases handled

Author: nitneuqr

src/rust/src/pkcs7.rs

@@ -848,9 +848,10 @@ fn verify_der<'p>(
                         },
                         _ => {
                             return Err(CryptographyError::from(
-                                pyo3::exceptions::PyValueError::new_err(
-                                    "Unsupported hash algorithm with RSA.",
-                                ),
+                                exceptions::UnsupportedAlgorithm::new_err((
+                                    "Only SHA-256 is currently supported for content verification with RSA.",
+                                    exceptions::Reasons::UNSUPPORTED_SERIALIZATION,
+                                )),
                             ))
                         }
                     },

tests/hazmat/primitives/test_pkcs7.py

@@ -1174,6 +1174,22 @@ def test_pkcs7_verify_der_no_content(
         with pytest.raises(ValueError):
             pkcs7.pkcs7_verify_der(signature)
 
+    def test_pkcs7_verify_der_ecdsa_certificate(self, backend, data):
+        # Getting an ECDSA certificate
+        certificate, private_key = _load_cert_key()
+
+        # Signature
+        builder = (
+            pkcs7.PKCS7SignatureBuilder()
+            .set_data(data)
+            .add_signer(certificate, private_key, hashes.SHA256())
+        )
+        signature = builder.sign(serialization.Encoding.DER, [])
+
+        # Verification with another certificate
+        options = [pkcs7.PKCS7Options.NoVerify]
+        pkcs7.pkcs7_verify_der(signature, options=options)
+
     def test_pkcs7_verify_invalid_signature(
         self, backend, data, certificate, private_key
     ):
@@ -1209,6 +1225,21 @@ def test_pkcs7_verify_der_wrong_certificate(
         with pytest.raises(ValueError):
             pkcs7.pkcs7_verify_der(signature, certificate=rsa_certificate)
 
+    def test_pkcs7_verify_der_unsupported_digest_algorithm(
+        self, backend, data, certificate, private_key
+    ):
+        # Signature
+        builder = (
+            pkcs7.PKCS7SignatureBuilder()
+            .set_data(data)
+            .add_signer(certificate, private_key, hashes.SHA384())
+        )
+        signature = builder.sign(serialization.Encoding.DER, [])
+
+        # Verification with another certificate
+        with pytest.raises(exceptions.UnsupportedAlgorithm):
+            pkcs7.pkcs7_verify_der(signature)
+
     def test_pkcs7_verify_pem(self, backend, data, certificate, private_key):
         # Signature
         builder = (