]> git.ipfire.org Git - thirdparty/hostap.git/blame - tests/hwsim/test_ap_ft.py
projects / thirdparty / hostap.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
tests: Allow FIPS error case for openssl_cipher_suite_config_wpas
[thirdparty/hostap.git] / tests / hwsim / test_ap_ft.py
CommitLineData
cd7f1b9a 1# Fast BSS Transition tests
34d3eaa8 2# Copyright (c) 2013-2015, Jouni Malinen <j@w1.fi>
cd7f1b9a
JM		 3#
4# This software may be distributed under the terms of the BSD license.
5# See README for more details.
6
5b3c40a6
JM		 7import binascii
8import os
cd7f1b9a
JM		 9import time
10import subprocess
11import logging
c9aa4308 12logger = logging.getLogger()
cd7f1b9a
JM		 13
14import hwsim_utils
15import hostapd
cf671d54 16from utils import HwsimSkip, alloc_fail, fail_test
cd7f1b9a 17from wlantest import Wlantest
5b3c40a6 18from test_ap_psk import check_mib, find_wpas_process, read_process_memory, verify_not_present, get_key_locations
cd7f1b9a
JM		 19
20def ft_base_rsn():
21 params = { "wpa": "2",
22 "wpa_key_mgmt": "FT-PSK",
23 "rsn_pairwise": "CCMP" }
24 return params
25
26def ft_base_mixed():
27 params = { "wpa": "3",
28 "wpa_key_mgmt": "WPA-PSK FT-PSK",
29 "wpa_pairwise": "TKIP",
30 "rsn_pairwise": "CCMP" }
31 return params
32
33def ft_params(rsn=True, ssid=None, passphrase=None):
34 if rsn:
35 params = ft_base_rsn()
36 else:
37 params = ft_base_mixed()
38 if ssid:
39 params["ssid"] = ssid
40 if passphrase:
41 params["wpa_passphrase"] = passphrase
42
43 params["mobility_domain"] = "a1b2"
44 params["r0_key_lifetime"] = "10000"
45 params["pmk_r1_push"] = "1"
46 params["reassociation_deadline"] = "1000"
47 return params
48
49def ft_params1(rsn=True, ssid=None, passphrase=None):
50 params = ft_params(rsn, ssid, passphrase)
51 params['nas_identifier'] = "nas1.w1.fi"
52 params['r1_key_holder'] = "000102030405"
53 params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f",
54 "02:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f" ]
55 params['r1kh'] = "02:00:00:00:04:00 00:01:02:03:04:06 200102030405060708090a0b0c0d0e0f"
56 return params
57
58def ft_params2(rsn=True, ssid=None, passphrase=None):
59 params = ft_params(rsn, ssid, passphrase)
60 params['nas_identifier'] = "nas2.w1.fi"
61 params['r1_key_holder'] = "000102030406"
62 params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f",
63 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f" ]
64 params['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0e0f"
65 return params
66
3b808945
JM		 67def ft_params1_r0kh_mismatch(rsn=True, ssid=None, passphrase=None):
68 params = ft_params(rsn, ssid, passphrase)
69 params['nas_identifier'] = "nas1.w1.fi"
70 params['r1_key_holder'] = "000102030405"
71 params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f",
72 "12:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f" ]
73 params['r1kh'] = "12:00:00:00:04:00 10:01:02:03:04:06 200102030405060708090a0b0c0d0e0f"
74 return params
75
76def ft_params2_incorrect_rrb_key(rsn=True, ssid=None, passphrase=None):
77 params = ft_params(rsn, ssid, passphrase)
78 params['nas_identifier'] = "nas2.w1.fi"
79 params['r1_key_holder'] = "000102030406"
80 params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0ef1",
81 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0ef2" ]
82 params['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0ef3"
83 return params
84
85def ft_params2_r0kh_mismatch(rsn=True, ssid=None, passphrase=None):
86 params = ft_params(rsn, ssid, passphrase)
87 params['nas_identifier'] = "nas2.w1.fi"
88 params['r1_key_holder'] = "000102030406"
89 params['r0kh'] = [ "12:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f",
90 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f" ]
91 params['r1kh'] = "12:00:00:00:03:00 10:01:02:03:04:05 300102030405060708090a0b0c0d0e0f"
92 return params
93
7b741a53
JM		 94def run_roams(dev, apdev, hapd0, hapd1, ssid, passphrase, over_ds=False,
95 sae=False, eap=False, fail_test=False, roams=1,
96 pairwise_cipher="CCMP", group_cipher="TKIP CCMP"):
cd7f1b9a 97 logger.info("Connect to first AP")
6f62809b
JM		 98 if eap:
99 dev.connect(ssid, key_mgmt="FT-EAP", proto="WPA2", ieee80211w="1",
2f816c21
JM		 100 eap="GPSK", identity="gpsk user",
101 password="abcdefghijklmnop0123456789abcdef",
7b741a53
JM		 102 scan_freq="2412",
103 pairwise=pairwise_cipher, group=group_cipher)
6e658cc4 104 else:
6f62809b
JM		 105 if sae:
106 key_mgmt="FT-SAE"
107 else:
108 key_mgmt="FT-PSK"
109 dev.connect(ssid, psk=passphrase, key_mgmt=key_mgmt, proto="WPA2",
7b741a53
JM		 110 ieee80211w="1", scan_freq="2412",
111 pairwise=pairwise_cipher, group=group_cipher)
cd7f1b9a
JM		 112 if dev.get_status_field('bssid') == apdev[0]['bssid']:
113 ap1 = apdev[0]
114 ap2 = apdev[1]
a8375c94
JM		 115 hapd1ap = hapd0
116 hapd2ap = hapd1
cd7f1b9a
JM		 117 else:
118 ap1 = apdev[1]
119 ap2 = apdev[0]
a8375c94
JM		 120 hapd1ap = hapd1
121 hapd2ap = hapd0
122 hwsim_utils.test_connectivity(dev, hapd1ap)
cd7f1b9a 123
655bc8bf 124 dev.scan_for_bss(ap2['bssid'], freq="2412")
40602101
JM		 125
126 for i in range(0, roams):
127 logger.info("Roam to the second AP")
128 if over_ds:
129 dev.roam_over_ds(ap2['bssid'], fail_test=fail_test)
130 else:
131 dev.roam(ap2['bssid'], fail_test=fail_test)
132 if fail_test:
133 return
134 if dev.get_status_field('bssid') != ap2['bssid']:
135 raise Exception("Did not connect to correct AP")
136 if i == 0 or i == roams - 1:
a8375c94 137 hwsim_utils.test_connectivity(dev, hapd2ap)
40602101
JM		 138
139 logger.info("Roam back to the first AP")
140 if over_ds:
141 dev.roam_over_ds(ap1['bssid'])
142 else:
143 dev.roam(ap1['bssid'])
144 if dev.get_status_field('bssid') != ap1['bssid']:
145 raise Exception("Did not connect to correct AP")
146 if i == 0 or i == roams - 1:
a8375c94 147 hwsim_utils.test_connectivity(dev, hapd1ap)
cd7f1b9a
JM		 148
149def test_ap_ft(dev, apdev):
150 """WPA2-PSK-FT AP"""
151 ssid = "test-ft"
152 passphrase="12345678"
153
154 params = ft_params1(ssid=ssid, passphrase=passphrase)
a8375c94 155 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
cd7f1b9a 156 params = ft_params2(ssid=ssid, passphrase=passphrase)
a8375c94 157 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
cd7f1b9a 158
a8375c94 159 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
91bc6c36
JM		 160 if "[WPA2-FT/PSK-CCMP]" not in dev[0].request("SCAN_RESULTS"):
161 raise Exception("Scan results missing RSN element info")
cd7f1b9a 162
40602101
JM		 163def test_ap_ft_many(dev, apdev):
164 """WPA2-PSK-FT AP multiple times"""
165 ssid = "test-ft"
166 passphrase="12345678"
167
168 params = ft_params1(ssid=ssid, passphrase=passphrase)
a8375c94 169 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
40602101 170 params = ft_params2(ssid=ssid, passphrase=passphrase)
a8375c94 171 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
40602101 172
a8375c94 173 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, roams=50)
40602101 174
cd7f1b9a
JM		 175def test_ap_ft_mixed(dev, apdev):
176 """WPA2-PSK-FT mixed-mode AP"""
177 ssid = "test-ft-mixed"
178 passphrase="12345678"
179
180 params = ft_params1(rsn=False, ssid=ssid, passphrase=passphrase)
65038313
JM		 181 hapd = hostapd.add_ap(apdev[0]['ifname'], params)
182 key_mgmt = hapd.get_config()['key_mgmt']
183 vals = key_mgmt.split(' ')
184 if vals[0] != "WPA-PSK" or vals[1] != "FT-PSK":
185 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
cd7f1b9a 186 params = ft_params2(rsn=False, ssid=ssid, passphrase=passphrase)
a8375c94 187 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
cd7f1b9a 188
a8375c94 189 run_roams(dev[0], apdev, hapd, hapd1, ssid, passphrase)
cd7f1b9a
JM		 190
191def test_ap_ft_pmf(dev, apdev):
192 """WPA2-PSK-FT AP with PMF"""
193 ssid = "test-ft"
194 passphrase="12345678"
195
196 params = ft_params1(ssid=ssid, passphrase=passphrase)
197 params["ieee80211w"] = "2";
a8375c94 198 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
cd7f1b9a
JM		 199 params = ft_params2(ssid=ssid, passphrase=passphrase)
200 params["ieee80211w"] = "2";
a8375c94 201 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
cd7f1b9a 202
a8375c94 203 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
b553eab1
JM		 204
205def test_ap_ft_over_ds(dev, apdev):
206 """WPA2-PSK-FT AP over DS"""
207 ssid = "test-ft"
208 passphrase="12345678"
209
210 params = ft_params1(ssid=ssid, passphrase=passphrase)
a8375c94 211 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
b553eab1 212 params = ft_params2(ssid=ssid, passphrase=passphrase)
a8375c94 213 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
b553eab1 214
a8375c94 215 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True)
eaf3f9b1
JM		 216 check_mib(dev[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-4"),
217 ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-4") ])
b553eab1 218
40602101
JM		 219def test_ap_ft_over_ds_many(dev, apdev):
220 """WPA2-PSK-FT AP over DS multiple times"""
221 ssid = "test-ft"
222 passphrase="12345678"
223
224 params = ft_params1(ssid=ssid, passphrase=passphrase)
a8375c94 225 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
40602101 226 params = ft_params2(ssid=ssid, passphrase=passphrase)
a8375c94 227 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
40602101 228
a8375c94
JM		 229 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
230 roams=50)
40602101 231
c337d07a
JM		 232def test_ap_ft_over_ds_unknown_target(dev, apdev):
233 """WPA2-PSK-FT AP"""
234 ssid = "test-ft"
235 passphrase="12345678"
236
237 params = ft_params1(ssid=ssid, passphrase=passphrase)
238 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
239
240 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
241 scan_freq="2412")
242 dev[0].roam_over_ds("02:11:22:33:44:55", fail_test=True)
243
211bb7c5
JM		 244def test_ap_ft_over_ds_unexpected(dev, apdev):
245 """WPA2-PSK-FT AP over DS and unexpected response"""
246 ssid = "test-ft"
247 passphrase="12345678"
248
249 params = ft_params1(ssid=ssid, passphrase=passphrase)
250 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
251 params = ft_params2(ssid=ssid, passphrase=passphrase)
252 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
253
254 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
255 scan_freq="2412")
256 if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
257 ap1 = apdev[0]
258 ap2 = apdev[1]
259 hapd1ap = hapd0
260 hapd2ap = hapd1
261 else:
262 ap1 = apdev[1]
263 ap2 = apdev[0]
264 hapd1ap = hapd1
265 hapd2ap = hapd0
266
267 addr = dev[0].own_addr()
268 hapd1ap.set("ext_mgmt_frame_handling", "1")
269 logger.info("Foreign STA address")
270 msg = {}
271 msg['fc'] = 13 << 4
272 msg['da'] = addr
273 msg['sa'] = ap1['bssid']
274 msg['bssid'] = ap1['bssid']
275 msg['payload'] = binascii.unhexlify("06021122334455660102030405060000")
276 hapd1ap.mgmt_tx(msg)
277
278 logger.info("No over-the-DS in progress")
279 msg['payload'] = binascii.unhexlify("0602" + addr.replace(':', '') + "0102030405060000")
280 hapd1ap.mgmt_tx(msg)
281
282 logger.info("Non-zero status code")
283 msg['payload'] = binascii.unhexlify("0602" + addr.replace(':', '') + "0102030405060100")
284 hapd1ap.mgmt_tx(msg)
285
286 hapd1ap.dump_monitor()
287
288 dev[0].scan_for_bss(ap2['bssid'], freq="2412")
289 if "OK" not in dev[0].request("FT_DS " + ap2['bssid']):
290 raise Exception("FT_DS failed")
291
292 req = hapd1ap.mgmt_rx()
293
294 logger.info("Foreign Target AP")
295 msg['payload'] = binascii.unhexlify("0602" + addr.replace(':', '') + "0102030405060000")
296 hapd1ap.mgmt_tx(msg)
297
298 addrs = addr.replace(':', '') + ap2['bssid'].replace(':', '')
299
300 logger.info("No IEs")
301 msg['payload'] = binascii.unhexlify("0602" + addrs + "0000")
302 hapd1ap.mgmt_tx(msg)
303
304 logger.info("Invalid IEs (trigger parsing failure)")
305 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003700")
306 hapd1ap.mgmt_tx(msg)
307
308 logger.info("Too short MDIE")
309 msg['payload'] = binascii.unhexlify("0602" + addrs + "000036021122")
310 hapd1ap.mgmt_tx(msg)
311
312 logger.info("Mobility domain mismatch")
313 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603112201")
314 hapd1ap.mgmt_tx(msg)
315
316 logger.info("No FTIE")
317 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201")
318 hapd1ap.mgmt_tx(msg)
319
320 logger.info("FTIE SNonce mismatch")
321 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + "1000000000000000000000000000000000000000000000000000000000000001" + "030a6e6173322e77312e6669")
322 hapd1ap.mgmt_tx(msg)
323
324 logger.info("No R0KH-ID subelem in FTIE")
325 snonce = binascii.hexlify(req['payload'][111:111+32])
326 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b20137520000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce)
327 hapd1ap.mgmt_tx(msg)
328
329 logger.info("No R0KH-ID subelem mismatch in FTIE")
330 snonce = binascii.hexlify(req['payload'][111:111+32])
331 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce + "030a11223344556677889900")
332 hapd1ap.mgmt_tx(msg)
333
334 logger.info("No R1KH-ID subelem in FTIE")
335 r0khid = binascii.hexlify(req['payload'][145:145+10])
336 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce + "030a" + r0khid)
337 hapd1ap.mgmt_tx(msg)
338
339 logger.info("No RSNE")
340 r0khid = binascii.hexlify(req['payload'][145:145+10])
341 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b20137660000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce + "030a" + r0khid + "0106000102030405")
342 hapd1ap.mgmt_tx(msg)
343
b553eab1
JM		 344def test_ap_ft_pmf_over_ds(dev, apdev):
345 """WPA2-PSK-FT AP over DS with PMF"""
346 ssid = "test-ft"
347 passphrase="12345678"
348
349 params = ft_params1(ssid=ssid, passphrase=passphrase)
350 params["ieee80211w"] = "2";
a8375c94 351 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
b553eab1
JM		 352 params = ft_params2(ssid=ssid, passphrase=passphrase)
353 params["ieee80211w"] = "2";
a8375c94 354 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
b553eab1 355
a8375c94 356 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True)
6e658cc4 357
aaba98d3
JM		 358def test_ap_ft_over_ds_pull(dev, apdev):
359 """WPA2-PSK-FT AP over DS (pull PMK)"""
360 ssid = "test-ft"
361 passphrase="12345678"
362
363 params = ft_params1(ssid=ssid, passphrase=passphrase)
364 params["pmk_r1_push"] = "0"
a8375c94 365 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
aaba98d3
JM		 366 params = ft_params2(ssid=ssid, passphrase=passphrase)
367 params["pmk_r1_push"] = "0"
a8375c94 368 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
aaba98d3 369
a8375c94 370 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True)
aaba98d3 371
6e658cc4
JM		 372def test_ap_ft_sae(dev, apdev):
373 """WPA2-PSK-FT-SAE AP"""
b9749b6a
JM		 374 if "SAE" not in dev[0].get_capability("auth_alg"):
375 raise HwsimSkip("SAE not supported")
6e658cc4
JM		 376 ssid = "test-ft"
377 passphrase="12345678"
378
379 params = ft_params1(ssid=ssid, passphrase=passphrase)
380 params['wpa_key_mgmt'] = "FT-SAE"
a8375c94 381 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
6e658cc4
JM		 382 params = ft_params2(ssid=ssid, passphrase=passphrase)
383 params['wpa_key_mgmt'] = "FT-SAE"
65038313
JM		 384 hapd = hostapd.add_ap(apdev[1]['ifname'], params)
385 key_mgmt = hapd.get_config()['key_mgmt']
386 if key_mgmt.split(' ')[0] != "FT-SAE":
387 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
6e658cc4 388
17ffdf39 389 dev[0].request("SET sae_groups ")
a8375c94 390 run_roams(dev[0], apdev, hapd0, hapd, ssid, passphrase, sae=True)
6e658cc4
JM		 391
392def test_ap_ft_sae_over_ds(dev, apdev):
393 """WPA2-PSK-FT-SAE AP over DS"""
b9749b6a
JM		 394 if "SAE" not in dev[0].get_capability("auth_alg"):
395 raise HwsimSkip("SAE not supported")
6e658cc4
JM		 396 ssid = "test-ft"
397 passphrase="12345678"
398
399 params = ft_params1(ssid=ssid, passphrase=passphrase)
400 params['wpa_key_mgmt'] = "FT-SAE"
a8375c94 401 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
6e658cc4
JM		 402 params = ft_params2(ssid=ssid, passphrase=passphrase)
403 params['wpa_key_mgmt'] = "FT-SAE"
a8375c94 404 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
6e658cc4 405
17ffdf39 406 dev[0].request("SET sae_groups ")
a8375c94
JM		 407 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, sae=True,
408 over_ds=True)
6f62809b
JM		 409
410def test_ap_ft_eap(dev, apdev):
411 """WPA2-EAP-FT AP"""
412 ssid = "test-ft"
413 passphrase="12345678"
414
415 radius = hostapd.radius_params()
416 params = ft_params1(ssid=ssid, passphrase=passphrase)
417 params['wpa_key_mgmt'] = "FT-EAP"
418 params["ieee8021x"] = "1"
419 params = dict(radius.items() + params.items())
65038313
JM		 420 hapd = hostapd.add_ap(apdev[0]['ifname'], params)
421 key_mgmt = hapd.get_config()['key_mgmt']
422 if key_mgmt.split(' ')[0] != "FT-EAP":
423 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
6f62809b
JM		 424 params = ft_params2(ssid=ssid, passphrase=passphrase)
425 params['wpa_key_mgmt'] = "FT-EAP"
426 params["ieee8021x"] = "1"
427 params = dict(radius.items() + params.items())
a8375c94 428 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
6f62809b 429
a8375c94 430 run_roams(dev[0], apdev, hapd, hapd1, ssid, passphrase, eap=True)
91bc6c36
JM		 431 if "[WPA2-FT/EAP-CCMP]" not in dev[0].request("SCAN_RESULTS"):
432 raise Exception("Scan results missing RSN element info")
eaf3f9b1
JM		 433 check_mib(dev[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-3"),
434 ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-3") ])
aaba98d3
JM		 435
436def test_ap_ft_eap_pull(dev, apdev):
437 """WPA2-EAP-FT AP (pull PMK)"""
438 ssid = "test-ft"
439 passphrase="12345678"
440
441 radius = hostapd.radius_params()
442 params = ft_params1(ssid=ssid, passphrase=passphrase)
443 params['wpa_key_mgmt'] = "FT-EAP"
444 params["ieee8021x"] = "1"
445 params["pmk_r1_push"] = "0"
446 params = dict(radius.items() + params.items())
447 hapd = hostapd.add_ap(apdev[0]['ifname'], params)
448 key_mgmt = hapd.get_config()['key_mgmt']
449 if key_mgmt.split(' ')[0] != "FT-EAP":
450 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
451 params = ft_params2(ssid=ssid, passphrase=passphrase)
452 params['wpa_key_mgmt'] = "FT-EAP"
453 params["ieee8021x"] = "1"
454 params["pmk_r1_push"] = "0"
455 params = dict(radius.items() + params.items())
a8375c94 456 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
aaba98d3 457
a8375c94 458 run_roams(dev[0], apdev, hapd, hapd1, ssid, passphrase, eap=True)
3b808945
JM		 459
460def test_ap_ft_mismatching_rrb_key_push(dev, apdev):
461 """WPA2-PSK-FT AP over DS with mismatching RRB key (push)"""
462 ssid = "test-ft"
463 passphrase="12345678"
464
465 params = ft_params1(ssid=ssid, passphrase=passphrase)
466 params["ieee80211w"] = "2";
a8375c94 467 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
3b808945
JM		 468 params = ft_params2_incorrect_rrb_key(ssid=ssid, passphrase=passphrase)
469 params["ieee80211w"] = "2";
a8375c94 470 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
3b808945 471
a8375c94
JM		 472 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
473 fail_test=True)
3b808945
JM		 474
475def test_ap_ft_mismatching_rrb_key_pull(dev, apdev):
476 """WPA2-PSK-FT AP over DS with mismatching RRB key (pull)"""
477 ssid = "test-ft"
478 passphrase="12345678"
479
480 params = ft_params1(ssid=ssid, passphrase=passphrase)
481 params["pmk_r1_push"] = "0"
a8375c94 482 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
3b808945
JM		 483 params = ft_params2_incorrect_rrb_key(ssid=ssid, passphrase=passphrase)
484 params["pmk_r1_push"] = "0"
a8375c94 485 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
3b808945 486
a8375c94
JM		 487 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
488 fail_test=True)
3b808945 489
ae14a2e2
JM		 490def test_ap_ft_mismatching_r0kh_id_pull(dev, apdev):
491 """WPA2-PSK-FT AP over DS with mismatching R0KH-ID (pull)"""
492 ssid = "test-ft"
493 passphrase="12345678"
494
495 params = ft_params1(ssid=ssid, passphrase=passphrase)
496 params["pmk_r1_push"] = "0"
497 params["nas_identifier"] = "nas0.w1.fi"
498 hostapd.add_ap(apdev[0]['ifname'], params)
2f816c21
JM		 499 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
500 scan_freq="2412")
ae14a2e2
JM		 501
502 params = ft_params2(ssid=ssid, passphrase=passphrase)
503 params["pmk_r1_push"] = "0"
504 hostapd.add_ap(apdev[1]['ifname'], params)
505
506 dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
507 dev[0].roam_over_ds(apdev[1]['bssid'], fail_test=True)
508
3b808945
JM		 509def test_ap_ft_mismatching_rrb_r0kh_push(dev, apdev):
510 """WPA2-PSK-FT AP over DS with mismatching R0KH key (push)"""
511 ssid = "test-ft"
512 passphrase="12345678"
513
514 params = ft_params1(ssid=ssid, passphrase=passphrase)
515 params["ieee80211w"] = "2";
a8375c94 516 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
3b808945
JM		 517 params = ft_params2_r0kh_mismatch(ssid=ssid, passphrase=passphrase)
518 params["ieee80211w"] = "2";
a8375c94 519 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
3b808945 520
a8375c94
JM		 521 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
522 fail_test=True)
3b808945
JM		 523
524def test_ap_ft_mismatching_rrb_r0kh_pull(dev, apdev):
525 """WPA2-PSK-FT AP over DS with mismatching R0KH key (pull)"""
526 ssid = "test-ft"
527 passphrase="12345678"
528
529 params = ft_params1_r0kh_mismatch(ssid=ssid, passphrase=passphrase)
530 params["pmk_r1_push"] = "0"
a8375c94 531 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
3b808945
JM		 532 params = ft_params2(ssid=ssid, passphrase=passphrase)
533 params["pmk_r1_push"] = "0"
a8375c94 534 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
3b808945 535
a8375c94
JM		 536 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
537 fail_test=True)
c6b6e105
JM		 538
539def test_ap_ft_gtk_rekey(dev, apdev):
540 """WPA2-PSK-FT AP and GTK rekey"""
541 ssid = "test-ft"
542 passphrase="12345678"
543
544 params = ft_params1(ssid=ssid, passphrase=passphrase)
545 params['wpa_group_rekey'] = '1'
a8375c94 546 hapd = hostapd.add_ap(apdev[0]['ifname'], params)
c6b6e105
JM		 547
548 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
2f816c21 549 ieee80211w="1", scan_freq="2412")
c6b6e105
JM		 550
551 ev = dev[0].wait_event(["WPA: Group rekeying completed"], timeout=2)
552 if ev is None:
553 raise Exception("GTK rekey timed out after initial association")
a8375c94 554 hwsim_utils.test_connectivity(dev[0], hapd)
c6b6e105
JM		 555
556 params = ft_params2(ssid=ssid, passphrase=passphrase)
557 params['wpa_group_rekey'] = '1'
a8375c94 558 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
c6b6e105
JM		 559
560 dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
561 dev[0].roam(apdev[1]['bssid'])
562 if dev[0].get_status_field('bssid') != apdev[1]['bssid']:
563 raise Exception("Did not connect to correct AP")
a8375c94 564 hwsim_utils.test_connectivity(dev[0], hapd1)
c6b6e105
JM		 565
566 ev = dev[0].wait_event(["WPA: Group rekeying completed"], timeout=2)
567 if ev is None:
568 raise Exception("GTK rekey timed out after FT protocol")
a8375c94 569 hwsim_utils.test_connectivity(dev[0], hapd1)
5b3c40a6
JM		 570
571def test_ft_psk_key_lifetime_in_memory(dev, apdev, params):
572 """WPA2-PSK-FT and key lifetime in memory"""
573 ssid = "test-ft"
574 passphrase="04c2726b4b8d5f1b4db9c07aa4d9e9d8f765cb5d25ec817e6cc4fcdd5255db0"
575 psk = '93c90846ff67af9037ed83fb72b63dbeddaa81d47f926c20909b5886f1d9358d'
576 pmk = binascii.unhexlify(psk)
577 p = ft_params1(ssid=ssid, passphrase=passphrase)
578 hapd0 = hostapd.add_ap(apdev[0]['ifname'], p)
579 p = ft_params2(ssid=ssid, passphrase=passphrase)
580 hapd1 = hostapd.add_ap(apdev[1]['ifname'], p)
581
582 pid = find_wpas_process(dev[0])
583
584 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
585 scan_freq="2412")
54f2cae2 586 time.sleep(1)
5b3c40a6
JM		 587
588 buf = read_process_memory(pid, pmk)
589
590 dev[0].request("DISCONNECT")
591 dev[0].wait_disconnected()
592
593 dev[0].relog()
594 pmkr0 = None
595 pmkr1 = None
596 ptk = None
597 gtk = None
598 with open(os.path.join(params['logdir'], 'log0'), 'r') as f:
599 for l in f.readlines():
600 if "FT: PMK-R0 - hexdump" in l:
601 val = l.strip().split(':')[3].replace(' ', '')
602 pmkr0 = binascii.unhexlify(val)
603 if "FT: PMK-R1 - hexdump" in l:
604 val = l.strip().split(':')[3].replace(' ', '')
605 pmkr1 = binascii.unhexlify(val)
f918b95b 606 if "FT: KCK - hexdump" in l:
5b3c40a6 607 val = l.strip().split(':')[3].replace(' ', '')
f918b95b
JM		 608 kck = binascii.unhexlify(val)
609 if "FT: KEK - hexdump" in l:
610 val = l.strip().split(':')[3].replace(' ', '')
611 kek = binascii.unhexlify(val)
612 if "FT: TK - hexdump" in l:
613 val = l.strip().split(':')[3].replace(' ', '')
614 tk = binascii.unhexlify(val)
5b3c40a6
JM		 615 if "WPA: Group Key - hexdump" in l:
616 val = l.strip().split(':')[3].replace(' ', '')
617 gtk = binascii.unhexlify(val)
f918b95b 618 if not pmkr0 or not pmkr1 or not kck or not kek or not tk or not gtk:
5b3c40a6
JM		 619 raise Exception("Could not find keys from debug log")
620 if len(gtk) != 16:
621 raise Exception("Unexpected GTK length")
622
5b3c40a6
JM		 623 logger.info("Checking keys in memory while associated")
624 get_key_locations(buf, pmk, "PMK")
625 get_key_locations(buf, pmkr0, "PMK-R0")
626 get_key_locations(buf, pmkr1, "PMK-R1")
627 if pmk not in buf:
81e787b7 628 raise HwsimSkip("PMK not found while associated")
5b3c40a6 629 if pmkr0 not in buf:
81e787b7 630 raise HwsimSkip("PMK-R0 not found while associated")
5b3c40a6 631 if pmkr1 not in buf:
81e787b7 632 raise HwsimSkip("PMK-R1 not found while associated")
5b3c40a6
JM		 633 if kck not in buf:
634 raise Exception("KCK not found while associated")
635 if kek not in buf:
636 raise Exception("KEK not found while associated")
637 if tk in buf:
638 raise Exception("TK found from memory")
639 if gtk in buf:
640 raise Exception("GTK found from memory")
641
642 logger.info("Checking keys in memory after disassociation")
643 buf = read_process_memory(pid, pmk)
644 get_key_locations(buf, pmk, "PMK")
645 get_key_locations(buf, pmkr0, "PMK-R0")
646 get_key_locations(buf, pmkr1, "PMK-R1")
647
648 # Note: PMK/PSK is still present in network configuration
649
650 fname = os.path.join(params['logdir'],
651 'ft_psk_key_lifetime_in_memory.memctx-')
652 verify_not_present(buf, pmkr0, fname, "PMK-R0")
653 verify_not_present(buf, pmkr1, fname, "PMK-R1")
654 verify_not_present(buf, kck, fname, "KCK")
655 verify_not_present(buf, kek, fname, "KEK")
656 verify_not_present(buf, tk, fname, "TK")
657 verify_not_present(buf, gtk, fname, "GTK")
658
659 dev[0].request("REMOVE_NETWORK all")
660
661 logger.info("Checking keys in memory after network profile removal")
662 buf = read_process_memory(pid, pmk)
663 get_key_locations(buf, pmk, "PMK")
664 get_key_locations(buf, pmkr0, "PMK-R0")
665 get_key_locations(buf, pmkr1, "PMK-R1")
666
667 verify_not_present(buf, pmk, fname, "PMK")
668 verify_not_present(buf, pmkr0, fname, "PMK-R0")
669 verify_not_present(buf, pmkr1, fname, "PMK-R1")
670 verify_not_present(buf, kck, fname, "KCK")
671 verify_not_present(buf, kek, fname, "KEK")
672 verify_not_present(buf, tk, fname, "TK")
673 verify_not_present(buf, gtk, fname, "GTK")
664093b5
JM		 674
675def test_ap_ft_invalid_resp(dev, apdev):
676 """WPA2-PSK-FT AP and invalid response IEs"""
677 ssid = "test-ft"
678 passphrase="12345678"
679
680 params = ft_params1(ssid=ssid, passphrase=passphrase)
681 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
682 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
683 scan_freq="2412")
684
685 params = ft_params2(ssid=ssid, passphrase=passphrase)
686 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
687
688 tests = [
689 # Various IEs for test coverage. The last one is FTIE with invalid
690 # R1KH-ID subelement.
691 "020002000000" + "3800" + "38051122334455" + "3754000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010100",
692 # FTIE with invalid R0KH-ID subelement (len=0).
693 "020002000000" + "3754000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010300",
694 # FTIE with invalid R0KH-ID subelement (len=49).
695 "020002000000" + "378500010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001033101020304050607080910111213141516171819202122232425262728293031323334353637383940414243444546474849",
696 # Invalid RSNE.
697 "020002000000" + "3000",
698 # Required IEs missing from protected IE count.
699 "020002000000" + "3603a1b201" + "375200010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900",
700 # RIC missing from protected IE count.
701 "020002000000" + "3603a1b201" + "375200020203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900",
702 # Protected IE missing.
703 "020002000000" + "3603a1b201" + "375200ff0203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900" + "0000" ]
704 for t in tests:
705 dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
706 hapd1.set("ext_mgmt_frame_handling", "1")
707 hapd1.dump_monitor()
708 if "OK" not in dev[0].request("ROAM " + apdev[1]['bssid']):
709 raise Exception("ROAM failed")
710 auth = None
711 for i in range(20):
712 msg = hapd1.mgmt_rx()
713 if msg['subtype'] == 11:
714 auth = msg
715 break
716 if not auth:
717 raise Exception("Authentication frame not seen")
718
719 resp = {}
720 resp['fc'] = auth['fc']
721 resp['da'] = auth['sa']
722 resp['sa'] = auth['da']
723 resp['bssid'] = auth['bssid']
724 resp['payload'] = binascii.unhexlify(t)
725 hapd1.mgmt_tx(resp)
726 hapd1.set("ext_mgmt_frame_handling", "0")
727 dev[0].wait_disconnected()
728
729 dev[0].request("RECONNECT")
730 dev[0].wait_connected()
7b741a53
JM		 731
732def test_ap_ft_gcmp_256(dev, apdev):
733 """WPA2-PSK-FT AP with GCMP-256 cipher"""
734 if "GCMP-256" not in dev[0].get_capability("pairwise"):
735 raise HwsimSkip("Cipher GCMP-256 not supported")
736 ssid = "test-ft"
737 passphrase="12345678"
738
739 params = ft_params1(ssid=ssid, passphrase=passphrase)
740 params['rsn_pairwise'] = "GCMP-256"
741 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
742 params = ft_params2(ssid=ssid, passphrase=passphrase)
743 params['rsn_pairwise'] = "GCMP-256"
744 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
745
746 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase,
747 pairwise_cipher="GCMP-256", group_cipher="GCMP-256")
cf671d54
JM		 748
749def test_ap_ft_oom(dev, apdev):
750 """WPA2-PSK-FT and OOM"""
751 ssid = "test-ft"
752 passphrase="12345678"
753
754 params = ft_params1(ssid=ssid, passphrase=passphrase)
755 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
756 params = ft_params2(ssid=ssid, passphrase=passphrase)
757 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
758
759 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
760 scan_freq="2412")
761 if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
762 dst = apdev[1]['bssid']
763 else:
764 dst = apdev[0]['bssid']
765
766 dev[0].scan_for_bss(dst, freq="2412")
767 with alloc_fail(dev[0], 1, "wpa_ft_gen_req_ies"):
768 dev[0].roam(dst)
769 with alloc_fail(dev[0], 1, "wpa_ft_mic"):
770 dev[0].roam(dst, fail_test=True)
771 with fail_test(dev[0], 1, "os_get_random;wpa_ft_prepare_auth_request"):
772 dev[0].roam(dst, fail_test=True)
34d3eaa8
JM		 773
774def test_ap_ft_over_ds_proto(dev, apdev):
775 """WPA2-PSK-FT AP over DS protocol testing"""
776 ssid = "test-ft"
777 passphrase="12345678"
778
779 params = ft_params1(ssid=ssid, passphrase=passphrase)
780 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
781 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
782 scan_freq="2412")
783
784 # FT Action Response while no FT-over-DS in progress
785 msg = {}
786 msg['fc'] = 13 << 4
787 msg['da'] = dev[0].own_addr()
788 msg['sa'] = apdev[0]['bssid']
789 msg['bssid'] = apdev[0]['bssid']
790 msg['payload'] = binascii.unhexlify("06020200000000000200000004000000")
791 hapd0.mgmt_tx(msg)
792
793 params = ft_params2(ssid=ssid, passphrase=passphrase)
794 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
795 dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
796 hapd0.set("ext_mgmt_frame_handling", "1")
797 hapd0.dump_monitor()
798 dev[0].request("FT_DS " + apdev[1]['bssid'])
799 for i in range(0, 10):
800 req = hapd0.mgmt_rx()
801 if req is None:
802 raise Exception("MGMT RX wait timed out")
803 if req['subtype'] == 13:
804 break
805 req = None
806 if not req:
807 raise Exception("FT Action frame not received")
808
809 # FT Action Response for unexpected Target AP
810 msg['payload'] = binascii.unhexlify("0602020000000000" + "f20000000400" + "0000")
811 hapd0.mgmt_tx(msg)
812
813 # FT Action Response without MDIE
814 msg['payload'] = binascii.unhexlify("0602020000000000" + "020000000400" + "0000")
815 hapd0.mgmt_tx(msg)
816
817 # FT Action Response without FTIE
818 msg['payload'] = binascii.unhexlify("0602020000000000" + "020000000400" + "0000" + "3603a1b201")
819 hapd0.mgmt_tx(msg)
820
821 # FT Action Response with FTIE SNonce mismatch
822 msg['payload'] = binascii.unhexlify("0602020000000000" + "020000000400" + "0000" + "3603a1b201" + "3766000000000000000000000000000000000000c4e67ac1999bebd00ff4ae4d5dcaf87896bb060b469f7c78d49623fb395c3455ffffff6b693fe6f8d8c5dfac0a22344750775bd09437f98b238c9f87b97f790c0106000102030406030a6e6173312e77312e6669")
823 hapd0.mgmt_tx(msg)
6f3815c0
JM		 824
825def test_ap_ft_rrb(dev, apdev):
826 """WPA2-PSK-FT RRB protocol testing"""
827 ssid = "test-ft"
828 passphrase="12345678"
829
830 params = ft_params1(ssid=ssid, passphrase=passphrase)
831 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
832
833 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
834 scan_freq="2412")
835
836 _dst_ll = binascii.unhexlify(apdev[0]['bssid'].replace(':',''))
837 _src_ll = binascii.unhexlify(dev[0].own_addr().replace(':',''))
838 proto = '\x89\x0d'
839 ehdr = _dst_ll + _src_ll + proto
840
841 # Too short RRB frame
842 pkt = ehdr + '\x01'
843 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
844 raise Exception("DATA_TEST_FRAME failed")
845
846 # RRB discarded frame wikth unrecognized type
847 pkt = ehdr + '\x02' + '\x02' + '\x01\x00' + _src_ll
848 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
849 raise Exception("DATA_TEST_FRAME failed")
850
851 # RRB frame too short for action frame
852 pkt = ehdr + '\x01' + '\x02' + '\x01\x00' + _src_ll
853 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
854 raise Exception("DATA_TEST_FRAME failed")
855
856 # Too short RRB frame (not enough room for Action Frame body)
857 pkt = ehdr + '\x01' + '\x02' + '\x00\x00' + _src_ll
858 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
859 raise Exception("DATA_TEST_FRAME failed")
860
861 # Unexpected Action frame category
862 pkt = ehdr + '\x01' + '\x02' + '\x0e\x00' + _src_ll + '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
863 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
864 raise Exception("DATA_TEST_FRAME failed")
865
866 # Unexpected Action in RRB Request
867 pkt = ehdr + '\x01' + '\x00' + '\x0e\x00' + _src_ll + '\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
868 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
869 raise Exception("DATA_TEST_FRAME failed")
870
871 # Target AP address in RRB Request does not match with own address
872 pkt = ehdr + '\x01' + '\x00' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
873 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
874 raise Exception("DATA_TEST_FRAME failed")
875
876 # Not enough room for status code in RRB Response
877 pkt = ehdr + '\x01' + '\x01' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
878 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
879 raise Exception("DATA_TEST_FRAME failed")
880
881 # RRB discarded frame with unknown packet_type
882 pkt = ehdr + '\x01' + '\x02' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
883 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
884 raise Exception("DATA_TEST_FRAME failed")
885
886 # RRB Response with non-zero status code; no STA match
887 pkt = ehdr + '\x01' + '\x01' + '\x10\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00' + '\xff\xff'
888 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
889 raise Exception("DATA_TEST_FRAME failed")
890
891 # RRB Response with zero status code and extra data; STA match
892 pkt = ehdr + '\x01' + '\x01' + '\x11\x00' + _src_ll + '\x06\x01' + _src_ll + '\x00\x00\x00\x00\x00\x00' + '\x00\x00' + '\x00'
893 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
894 raise Exception("DATA_TEST_FRAME failed")
895
896 # Too short PMK-R1 pull
897 pkt = ehdr + '\x01' + '\xc8' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
898 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
899 raise Exception("DATA_TEST_FRAME failed")
900
901 # Too short PMK-R1 resp
902 pkt = ehdr + '\x01' + '\xc9' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
903 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
904 raise Exception("DATA_TEST_FRAME failed")
905
906 # Too short PMK-R1 push
907 pkt = ehdr + '\x01' + '\xca' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
908 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
909 raise Exception("DATA_TEST_FRAME failed")
910
911 # No matching R0KH address found for PMK-R0 pull response
912 pkt = ehdr + '\x01' + '\xc9' + '\x5a\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00' + 76*'\00'
913 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
914 raise Exception("DATA_TEST_FRAME failed")
Unnamed repository; edit this file 'description' to name the repository.