]> git.ipfire.org Git - thirdparty/hostap.git/blame - tests/hwsim/test_ap_ft.py
projects / thirdparty / hostap.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
Write multi_ap_backhaul_sta to wpa_supplicant config
[thirdparty/hostap.git] / tests / hwsim / test_ap_ft.py
CommitLineData
cd7f1b9a 1# Fast BSS Transition tests
02a4ac0f 2# Copyright (c) 2013-2019, Jouni Malinen <j@w1.fi>
cd7f1b9a
JM		 3#
4# This software may be distributed under the terms of the BSD license.
5# See README for more details.
6
9fd6804d 7from remotehost import remote_compatible
5b3c40a6
JM		 8import binascii
9import os
cd7f1b9a 10import time
cd7f1b9a 11import logging
c9aa4308 12logger = logging.getLogger()
02a4ac0f 13import signal
c8942286 14import struct
02a4ac0f 15import subprocess
cd7f1b9a
JM		 16
17import hwsim_utils
02a4ac0f 18from hwsim import HWSimRadio
cd7f1b9a 19import hostapd
d7f0bef9 20from tshark import run_tshark
c8942286 21from utils import HwsimSkip, alloc_fail, fail_test, wait_fail_trigger, skip_with_fips, parse_ie
cd7f1b9a 22from wlantest import Wlantest
5b3c40a6 23from test_ap_psk import check_mib, find_wpas_process, read_process_memory, verify_not_present, get_key_locations
392aba4e 24from test_rrm import check_beacon_req
cd7f1b9a
JM		 25
26def ft_base_rsn():
27 params = { "wpa": "2",
28 "wpa_key_mgmt": "FT-PSK",
29 "rsn_pairwise": "CCMP" }
30 return params
31
32def ft_base_mixed():
33 params = { "wpa": "3",
34 "wpa_key_mgmt": "WPA-PSK FT-PSK",
35 "wpa_pairwise": "TKIP",
36 "rsn_pairwise": "CCMP" }
37 return params
38
39def ft_params(rsn=True, ssid=None, passphrase=None):
40 if rsn:
41 params = ft_base_rsn()
42 else:
43 params = ft_base_mixed()
44 if ssid:
45 params["ssid"] = ssid
46 if passphrase:
47 params["wpa_passphrase"] = passphrase
48
49 params["mobility_domain"] = "a1b2"
50 params["r0_key_lifetime"] = "10000"
51 params["pmk_r1_push"] = "1"
52 params["reassociation_deadline"] = "1000"
53 return params
54
d0175d6e 55def ft_params1a(rsn=True, ssid=None, passphrase=None):
cd7f1b9a
JM		 56 params = ft_params(rsn, ssid, passphrase)
57 params['nas_identifier'] = "nas1.w1.fi"
58 params['r1_key_holder'] = "000102030405"
d0175d6e
MB		 59 return params
60
942b52a8 61def ft_params1(rsn=True, ssid=None, passphrase=None, discovery=False):
d0175d6e 62 params = ft_params1a(rsn, ssid, passphrase)
942b52a8
MB		 63 if discovery:
64 params['r0kh'] = "ff:ff:ff:ff:ff:ff * 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f"
65 params['r1kh'] = "00:00:00:00:00:00 00:00:00:00:00:00 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f"
66 else:
67 params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f",
68 "02:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f300102030405060708090a0b0c0d0e0f" ]
69 params['r1kh'] = "02:00:00:00:04:00 00:01:02:03:04:06 200102030405060708090a0b0c0d0e0f200102030405060708090a0b0c0d0e0f"
cd7f1b9a
JM		 70 return params
71
c95dd8e4
JM		 72def ft_params1_old_key(rsn=True, ssid=None, passphrase=None):
73 params = ft_params1a(rsn, ssid, passphrase)
74 params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f",
75 "02:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f" ]
76 params['r1kh'] = "02:00:00:00:04:00 00:01:02:03:04:06 200102030405060708090a0b0c0d0e0f"
77 return params
78
d0175d6e 79def ft_params2a(rsn=True, ssid=None, passphrase=None):
cd7f1b9a
JM		 80 params = ft_params(rsn, ssid, passphrase)
81 params['nas_identifier'] = "nas2.w1.fi"
82 params['r1_key_holder'] = "000102030406"
d0175d6e
MB		 83 return params
84
942b52a8 85def ft_params2(rsn=True, ssid=None, passphrase=None, discovery=False):
d0175d6e 86 params = ft_params2a(rsn, ssid, passphrase)
942b52a8
MB		 87 if discovery:
88 params['r0kh'] = "ff:ff:ff:ff:ff:ff * 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f"
89 params['r1kh'] = "00:00:00:00:00:00 00:00:00:00:00:00 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f"
90 else:
91 params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f200102030405060708090a0b0c0d0e0f",
92 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f000102030405060708090a0b0c0d0e0f" ]
93 params['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0e0f300102030405060708090a0b0c0d0e0f"
cd7f1b9a
JM		 94 return params
95
c95dd8e4
JM		 96def ft_params2_old_key(rsn=True, ssid=None, passphrase=None):
97 params = ft_params2a(rsn, ssid, passphrase)
98 params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f",
99 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f" ]
100 params['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0e0f"
101 return params
102
3b808945
JM		 103def ft_params1_r0kh_mismatch(rsn=True, ssid=None, passphrase=None):
104 params = ft_params(rsn, ssid, passphrase)
105 params['nas_identifier'] = "nas1.w1.fi"
106 params['r1_key_holder'] = "000102030405"
9441a227
MB		 107 params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f",
108 "12:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f300102030405060708090a0b0c0d0e0f" ]
109 params['r1kh'] = "12:00:00:00:04:00 10:01:02:03:04:06 200102030405060708090a0b0c0d0e0f200102030405060708090a0b0c0d0e0f"
3b808945
JM		 110 return params
111
112def ft_params2_incorrect_rrb_key(rsn=True, ssid=None, passphrase=None):
113 params = ft_params(rsn, ssid, passphrase)
114 params['nas_identifier'] = "nas2.w1.fi"
115 params['r1_key_holder'] = "000102030406"
9441a227
MB		 116 params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0ef1200102030405060708090a0b0c0d0ef1",
117 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0ef2000102030405060708090a0b0c0d0ef2" ]
118 params['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0ef3300102030405060708090a0b0c0d0ef3"
3b808945
JM		 119 return params
120
121def ft_params2_r0kh_mismatch(rsn=True, ssid=None, passphrase=None):
122 params = ft_params(rsn, ssid, passphrase)
123 params['nas_identifier'] = "nas2.w1.fi"
124 params['r1_key_holder'] = "000102030406"
9441a227
MB		 125 params['r0kh'] = [ "12:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f200102030405060708090a0b0c0d0e0f",
126 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f000102030405060708090a0b0c0d0e0f" ]
127 params['r1kh'] = "12:00:00:00:03:00 10:01:02:03:04:05 300102030405060708090a0b0c0d0e0f300102030405060708090a0b0c0d0e0f"
3b808945
JM		 128 return params
129
7b741a53
JM		 130def run_roams(dev, apdev, hapd0, hapd1, ssid, passphrase, over_ds=False,
131 sae=False, eap=False, fail_test=False, roams=1,
fd7205fa 132 pairwise_cipher="CCMP", group_cipher="TKIP CCMP", ptk_rekey="0",
473e5176 133 test_connectivity=True, eap_identity="gpsk user", conndev=False,
ffcaca68 134 force_initial_conn_to_first_ap=False, sha384=False,
e63d8837 135 group_mgmt=None, ocv=None):
cd7f1b9a 136 logger.info("Connect to first AP")
473e5176
MB		 137
138 copts = {}
139 copts["proto"] = "WPA2"
140 copts["ieee80211w"] = "1"
141 copts["scan_freq"] = "2412"
142 copts["pairwise"] = pairwise_cipher
143 copts["group"] = group_cipher
144 copts["wpa_ptk_rekey"] = ptk_rekey
ffcaca68
JM		 145 if group_mgmt:
146 copts["group_mgmt"] = group_mgmt
e63d8837
MV		 147 if ocv:
148 copts["ocv"] = ocv
6f62809b 149 if eap:
55b3cda7 150 copts["key_mgmt"] = "FT-EAP-SHA384" if sha384 else "FT-EAP"
473e5176
MB		 151 copts["eap"] = "GPSK"
152 copts["identity"] = eap_identity
153 copts["password"] = "abcdefghijklmnop0123456789abcdef"
6e658cc4 154 else:
6f62809b 155 if sae:
473e5176 156 copts["key_mgmt"] = "FT-SAE"
6f62809b 157 else:
473e5176
MB		 158 copts["key_mgmt"] = "FT-PSK"
159 copts["psk"] = passphrase
160 if force_initial_conn_to_first_ap:
161 copts["bssid"] = apdev[0]['bssid']
162 dev.connect(ssid, **copts)
163
cd7f1b9a
JM		 164 if dev.get_status_field('bssid') == apdev[0]['bssid']:
165 ap1 = apdev[0]
166 ap2 = apdev[1]
a8375c94
JM		 167 hapd1ap = hapd0
168 hapd2ap = hapd1
cd7f1b9a
JM		 169 else:
170 ap1 = apdev[1]
171 ap2 = apdev[0]
a8375c94
JM		 172 hapd1ap = hapd1
173 hapd2ap = hapd0
fd7205fa 174 if test_connectivity:
9c50a6d3
MB		 175 if conndev:
176 hwsim_utils.test_connectivity_iface(dev, hapd1ap, conndev)
177 else:
178 hwsim_utils.test_connectivity(dev, hapd1ap)
cd7f1b9a 179
655bc8bf 180 dev.scan_for_bss(ap2['bssid'], freq="2412")
40602101
JM		 181
182 for i in range(0, roams):
e0382291
MB		 183 # Roaming artificially fast can make data test fail because the key is
184 # set later.
185 time.sleep(0.01)
40602101
JM		 186 logger.info("Roam to the second AP")
187 if over_ds:
188 dev.roam_over_ds(ap2['bssid'], fail_test=fail_test)
189 else:
190 dev.roam(ap2['bssid'], fail_test=fail_test)
191 if fail_test:
192 return
193 if dev.get_status_field('bssid') != ap2['bssid']:
194 raise Exception("Did not connect to correct AP")
fd7205fa 195 if (i == 0 or i == roams - 1) and test_connectivity:
9c50a6d3
MB		 196 if conndev:
197 hwsim_utils.test_connectivity_iface(dev, hapd2ap, conndev)
198 else:
199 hwsim_utils.test_connectivity(dev, hapd2ap)
40602101 200
e0382291
MB		 201 # Roaming artificially fast can make data test fail because the key is
202 # set later.
203 time.sleep(0.01)
40602101
JM		 204 logger.info("Roam back to the first AP")
205 if over_ds:
206 dev.roam_over_ds(ap1['bssid'])
207 else:
208 dev.roam(ap1['bssid'])
209 if dev.get_status_field('bssid') != ap1['bssid']:
210 raise Exception("Did not connect to correct AP")
fd7205fa 211 if (i == 0 or i == roams - 1) and test_connectivity:
9c50a6d3
MB		 212 if conndev:
213 hwsim_utils.test_connectivity_iface(dev, hapd1ap, conndev)
214 else:
215 hwsim_utils.test_connectivity(dev, hapd1ap)
cd7f1b9a
JM		 216
217def test_ap_ft(dev, apdev):
218 """WPA2-PSK-FT AP"""
219 ssid = "test-ft"
220 passphrase="12345678"
221
222 params = ft_params1(ssid=ssid, passphrase=passphrase)
8b8a1864 223 hapd0 = hostapd.add_ap(apdev[0], params)
cd7f1b9a 224 params = ft_params2(ssid=ssid, passphrase=passphrase)
8b8a1864 225 hapd1 = hostapd.add_ap(apdev[1], params)
cd7f1b9a 226
a8375c94 227 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
91bc6c36
JM		 228 if "[WPA2-FT/PSK-CCMP]" not in dev[0].request("SCAN_RESULTS"):
229 raise Exception("Scan results missing RSN element info")
cd7f1b9a 230
c95dd8e4
JM		 231def test_ap_ft_old_key(dev, apdev):
232 """WPA2-PSK-FT AP (old key)"""
233 ssid = "test-ft"
234 passphrase="12345678"
235
236 params = ft_params1_old_key(ssid=ssid, passphrase=passphrase)
237 hapd0 = hostapd.add_ap(apdev[0], params)
238 params = ft_params2_old_key(ssid=ssid, passphrase=passphrase)
239 hapd1 = hostapd.add_ap(apdev[1], params)
240
241 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
242
e4612f84
JM		 243def test_ap_ft_multi_akm(dev, apdev):
244 """WPA2-PSK-FT AP with non-FT AKMs enabled"""
245 ssid = "test-ft"
246 passphrase="12345678"
247
248 params = ft_params1(ssid=ssid, passphrase=passphrase)
249 params["wpa_key_mgmt"] = "FT-PSK WPA-PSK WPA-PSK-SHA256"
250 hapd0 = hostapd.add_ap(apdev[0], params)
251 params = ft_params2(ssid=ssid, passphrase=passphrase)
252 params["wpa_key_mgmt"] = "FT-PSK WPA-PSK WPA-PSK-SHA256"
253 hapd1 = hostapd.add_ap(apdev[1], params)
254
255 Wlantest.setup(hapd0)
256 wt = Wlantest()
257 wt.flush()
258 wt.add_passphrase(passphrase)
259
260 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
261 if "[WPA2-PSK+FT/PSK+PSK-SHA256-CCMP]" not in dev[0].request("SCAN_RESULTS"):
262 raise Exception("Scan results missing RSN element info")
263 dev[1].connect(ssid, psk=passphrase, scan_freq="2412")
264 dev[2].connect(ssid, psk=passphrase, key_mgmt="WPA-PSK-SHA256",
265 scan_freq="2412")
266
d0175d6e
MB		 267def test_ap_ft_local_key_gen(dev, apdev):
268 """WPA2-PSK-FT AP with local key generation (without pull/push)"""
269 ssid = "test-ft"
270 passphrase="12345678"
271
272 params = ft_params1a(ssid=ssid, passphrase=passphrase)
273 params['ft_psk_generate_local'] = "1";
8344ba12 274 del params['pmk_r1_push']
b098542c 275 hapd0 = hostapd.add_ap(apdev[0], params)
d0175d6e
MB		 276 params = ft_params2a(ssid=ssid, passphrase=passphrase)
277 params['ft_psk_generate_local'] = "1";
8344ba12 278 del params['pmk_r1_push']
b098542c 279 hapd1 = hostapd.add_ap(apdev[1], params)
d0175d6e
MB		 280
281 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
282 if "[WPA2-FT/PSK-CCMP]" not in dev[0].request("SCAN_RESULTS"):
283 raise Exception("Scan results missing RSN element info")
284
473e5176
MB		 285def test_ap_ft_vlan(dev, apdev):
286 """WPA2-PSK-FT AP with VLAN"""
287 ssid = "test-ft"
288 passphrase="12345678"
289
290 params = ft_params1(ssid=ssid, passphrase=passphrase)
291 params['dynamic_vlan'] = "1";
292 params['accept_mac_file'] = "hostapd.accept";
293 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
294
295 params = ft_params2(ssid=ssid, passphrase=passphrase)
296 params['dynamic_vlan'] = "1";
297 params['accept_mac_file'] = "hostapd.accept";
298 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
299
300 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, conndev="brvlan1")
301 if "[WPA2-FT/PSK-CCMP]" not in dev[0].request("SCAN_RESULTS"):
302 raise Exception("Scan results missing RSN element info")
303
304def test_ap_ft_vlan_disconnected(dev, apdev):
305 """WPA2-PSK-FT AP with VLAN and local key generation"""
306 ssid = "test-ft"
307 passphrase="12345678"
308
309 params = ft_params1a(ssid=ssid, passphrase=passphrase)
310 params['dynamic_vlan'] = "1";
311 params['accept_mac_file'] = "hostapd.accept";
312 params['ft_psk_generate_local'] = "1";
313 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
314
315 params = ft_params2a(ssid=ssid, passphrase=passphrase)
316 params['dynamic_vlan'] = "1";
317 params['accept_mac_file'] = "hostapd.accept";
318 params['ft_psk_generate_local'] = "1";
319 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
320
321 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, conndev="brvlan1")
322 if "[WPA2-FT/PSK-CCMP]" not in dev[0].request("SCAN_RESULTS"):
323 raise Exception("Scan results missing RSN element info")
324
325def test_ap_ft_vlan_2(dev, apdev):
326 """WPA2-PSK-FT AP with VLAN and dest-AP does not have VLAN info locally"""
327 ssid = "test-ft"
328 passphrase="12345678"
329
330 params = ft_params1(ssid=ssid, passphrase=passphrase)
331 params['dynamic_vlan'] = "1";
332 params['accept_mac_file'] = "hostapd.accept";
333 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
334
335 params = ft_params2(ssid=ssid, passphrase=passphrase)
336 params['dynamic_vlan'] = "1";
337 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
338
339 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, conndev="brvlan1",
340 force_initial_conn_to_first_ap=True)
341 if "[WPA2-FT/PSK-CCMP]" not in dev[0].request("SCAN_RESULTS"):
342 raise Exception("Scan results missing RSN element info")
343
40602101
JM		 344def test_ap_ft_many(dev, apdev):
345 """WPA2-PSK-FT AP multiple times"""
346 ssid = "test-ft"
347 passphrase="12345678"
348
349 params = ft_params1(ssid=ssid, passphrase=passphrase)
8b8a1864 350 hapd0 = hostapd.add_ap(apdev[0], params)
40602101 351 params = ft_params2(ssid=ssid, passphrase=passphrase)
8b8a1864 352 hapd1 = hostapd.add_ap(apdev[1], params)
40602101 353
a8375c94 354 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, roams=50)
40602101 355
473e5176
MB		 356def test_ap_ft_many_vlan(dev, apdev):
357 """WPA2-PSK-FT AP with VLAN multiple times"""
358 ssid = "test-ft"
359 passphrase="12345678"
360
361 params = ft_params1(ssid=ssid, passphrase=passphrase)
362 params['dynamic_vlan'] = "1";
363 params['accept_mac_file'] = "hostapd.accept";
364 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
365
366 params = ft_params2(ssid=ssid, passphrase=passphrase)
367 params['dynamic_vlan'] = "1";
368 params['accept_mac_file'] = "hostapd.accept";
369 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
370
371 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, roams=50,
372 conndev="brvlan1")
373
cd7f1b9a
JM		 374def test_ap_ft_mixed(dev, apdev):
375 """WPA2-PSK-FT mixed-mode AP"""
376 ssid = "test-ft-mixed"
377 passphrase="12345678"
378
379 params = ft_params1(rsn=False, ssid=ssid, passphrase=passphrase)
8b8a1864 380 hapd = hostapd.add_ap(apdev[0], params)
65038313
JM		 381 key_mgmt = hapd.get_config()['key_mgmt']
382 vals = key_mgmt.split(' ')
383 if vals[0] != "WPA-PSK" or vals[1] != "FT-PSK":
384 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
cd7f1b9a 385 params = ft_params2(rsn=False, ssid=ssid, passphrase=passphrase)
8b8a1864 386 hapd1 = hostapd.add_ap(apdev[1], params)
cd7f1b9a 387
a8375c94 388 run_roams(dev[0], apdev, hapd, hapd1, ssid, passphrase)
cd7f1b9a
JM		 389
390def test_ap_ft_pmf(dev, apdev):
391 """WPA2-PSK-FT AP with PMF"""
392 ssid = "test-ft"
393 passphrase="12345678"
394
395 params = ft_params1(ssid=ssid, passphrase=passphrase)
bc6e3288 396 params["ieee80211w"] = "2"
8b8a1864 397 hapd0 = hostapd.add_ap(apdev[0], params)
cd7f1b9a 398 params = ft_params2(ssid=ssid, passphrase=passphrase)
bc6e3288 399 params["ieee80211w"] = "2"
8b8a1864 400 hapd1 = hostapd.add_ap(apdev[1], params)
cd7f1b9a 401
a8375c94 402 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
b553eab1 403
ffcaca68
JM		 404def test_ap_ft_pmf_bip_cmac_128(dev, apdev):
405 """WPA2-PSK-FT AP with PMF/BIP-CMAC-128"""
406 run_ap_ft_pmf_bip(dev, apdev, "AES-128-CMAC")
407
408def test_ap_ft_pmf_bip_gmac_128(dev, apdev):
409 """WPA2-PSK-FT AP with PMF/BIP-GMAC-128"""
410 run_ap_ft_pmf_bip(dev, apdev, "BIP-GMAC-128")
411
412def test_ap_ft_pmf_bip_gmac_256(dev, apdev):
413 """WPA2-PSK-FT AP with PMF/BIP-GMAC-256"""
414 run_ap_ft_pmf_bip(dev, apdev, "BIP-GMAC-256")
415
416def test_ap_ft_pmf_bip_cmac_256(dev, apdev):
417 """WPA2-PSK-FT AP with PMF/BIP-CMAC-256"""
418 run_ap_ft_pmf_bip(dev, apdev, "BIP-CMAC-256")
419
420def run_ap_ft_pmf_bip(dev, apdev, cipher):
421 if cipher not in dev[0].get_capability("group_mgmt"):
422 raise HwsimSkip("Cipher %s not supported" % cipher)
423
424 ssid = "test-ft"
425 passphrase="12345678"
426
427 params = ft_params1(ssid=ssid, passphrase=passphrase)
428 params["ieee80211w"] = "2"
429 params["group_mgmt_cipher"] = cipher
430 hapd0 = hostapd.add_ap(apdev[0], params)
431 params = ft_params2(ssid=ssid, passphrase=passphrase)
432 params["ieee80211w"] = "2"
433 params["group_mgmt_cipher"] = cipher
434 hapd1 = hostapd.add_ap(apdev[1], params)
435
436 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase,
437 group_mgmt=cipher)
438
e63d8837
MV		 439def test_ap_ft_ocv(dev, apdev):
440 """WPA2-PSK-FT AP with OCV"""
441 ssid = "test-ft"
442 passphrase="12345678"
443
444 params = ft_params1(ssid=ssid, passphrase=passphrase)
445 params["ieee80211w"] = "2"
446 params["ocv"] = "1"
447 try:
448 hapd0 = hostapd.add_ap(apdev[0], params)
449 except Exception, e:
450 if "Failed to set hostapd parameter ocv" in str(e):
451 raise HwsimSkip("OCV not supported")
452 raise
453 params = ft_params2(ssid=ssid, passphrase=passphrase)
454 params["ieee80211w"] = "2"
455 params["ocv"] = "1"
456 hapd1 = hostapd.add_ap(apdev[1], params)
457
458 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, ocv="1")
459
b553eab1
JM		 460def test_ap_ft_over_ds(dev, apdev):
461 """WPA2-PSK-FT AP over DS"""
462 ssid = "test-ft"
463 passphrase="12345678"
464
465 params = ft_params1(ssid=ssid, passphrase=passphrase)
8b8a1864 466 hapd0 = hostapd.add_ap(apdev[0], params)
b553eab1 467 params = ft_params2(ssid=ssid, passphrase=passphrase)
8b8a1864 468 hapd1 = hostapd.add_ap(apdev[1], params)
b553eab1 469
a8375c94 470 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True)
eaf3f9b1
JM		 471 check_mib(dev[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-4"),
472 ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-4") ])
b553eab1 473
02a4ac0f
JM		 474def cleanup_ap_ft_separate_hostapd():
475 subprocess.call(["brctl", "delif", "br0ft", "veth0"],
476 stderr=open('/dev/null', 'w'))
477 subprocess.call(["brctl", "delif", "br1ft", "veth1"],
478 stderr=open('/dev/null', 'w'))
479 subprocess.call(["ip", "link", "del", "veth0"],
480 stderr=open('/dev/null', 'w'))
481 subprocess.call(["ip", "link", "del", "veth1"],
482 stderr=open('/dev/null', 'w'))
483 for ifname in [ 'br0ft', 'br1ft', 'br-ft' ]:
484 subprocess.call(['ip', 'link', 'set', 'dev', ifname, 'down'],
485 stderr=open('/dev/null', 'w'))
486 subprocess.call(['brctl', 'delbr', ifname],
487 stderr=open('/dev/null', 'w'))
488
489def test_ap_ft_separate_hostapd(dev, apdev, params):
490 """WPA2-PSK-FT AP and separate hostapd process"""
491 try:
492 run_ap_ft_separate_hostapd(dev, apdev, params, False)
493 finally:
494 cleanup_ap_ft_separate_hostapd()
495
496def test_ap_ft_over_ds_separate_hostapd(dev, apdev, params):
497 """WPA2-PSK-FT AP over DS and separate hostapd process"""
498 try:
499 run_ap_ft_separate_hostapd(dev, apdev, params, True)
500 finally:
501 cleanup_ap_ft_separate_hostapd()
502
503def run_ap_ft_separate_hostapd(dev, apdev, params, over_ds):
504 ssid = "test-ft"
505 passphrase="12345678"
506 logdir = params['logdir']
507 pidfile = os.path.join(logdir, 'ap_ft_over_ds_separate_hostapd.pid')
508 logfile = os.path.join(logdir, 'ap_ft_over_ds_separate_hostapd.hapd')
509 global_ctrl = '/var/run/hostapd-ft'
510 br_ifname = 'br-ft'
511
512 try:
513 subprocess.check_call(['brctl', 'addbr', br_ifname])
514 subprocess.check_call(['brctl', 'setfd', br_ifname, '0'])
515 subprocess.check_call(['ip', 'link', 'set', 'dev', br_ifname, 'up'])
516
517 subprocess.check_call([ "ip", "link", "add", "veth0", "type", "veth",
518 "peer", "name", "veth0br" ])
519 subprocess.check_call([ "ip", "link", "add", "veth1", "type", "veth",
520 "peer", "name", "veth1br" ])
521 subprocess.check_call(['ip', 'link', 'set', 'dev', 'veth0br', 'up'])
522 subprocess.check_call(['ip', 'link', 'set', 'dev', 'veth1br', 'up'])
523 subprocess.check_call(['brctl', 'addif', br_ifname, 'veth0br'])
524 subprocess.check_call(['brctl', 'addif', br_ifname, 'veth1br'])
525
526 subprocess.check_call(['brctl', 'addbr', 'br0ft'])
527 subprocess.check_call(['brctl', 'setfd', 'br0ft', '0'])
528 subprocess.check_call(['ip', 'link', 'set', 'dev', 'br0ft', 'up'])
529 subprocess.check_call(['ip', 'link', 'set', 'dev', 'veth0', 'up'])
530 subprocess.check_call(['brctl', 'addif', 'br0ft', 'veth0'])
531 subprocess.check_call(['brctl', 'addbr', 'br1ft'])
532 subprocess.check_call(['brctl', 'setfd', 'br1ft', '0'])
533 subprocess.check_call(['ip', 'link', 'set', 'dev', 'br1ft', 'up'])
534 subprocess.check_call(['ip', 'link', 'set', 'dev', 'veth1', 'up'])
535 subprocess.check_call(['brctl', 'addif', 'br1ft', 'veth1'])
536 except subprocess.CalledProcessError:
537 raise HwsimSkip("Bridge or veth not supported (kernel CONFIG_VETH)")
538
539 with HWSimRadio() as (radio, iface):
540 prg = os.path.join(logdir, 'alt-hostapd/hostapd/hostapd')
541 if not os.path.exists(prg):
542 prg = '../../hostapd/hostapd'
543 cmd = [ prg, '-B', '-ddKt',
544 '-P', pidfile, '-f', logfile, '-g', global_ctrl ]
545 subprocess.check_call(cmd)
546
547 hglobal = hostapd.HostapdGlobal(global_ctrl_override=global_ctrl)
548 apdev_ft = { 'ifname': iface }
549 apdev2 = [ apdev_ft, apdev[1] ]
550
551 params = ft_params1(ssid=ssid, passphrase=passphrase)
552 params["r0kh"] = "ff:ff:ff:ff:ff:ff * 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
553 params["r1kh"] = "00:00:00:00:00:00 00:00:00:00:00:00 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
554 params['bridge'] = 'br0ft'
555 hapd0 = hostapd.add_ap(apdev2[0], params,
556 global_ctrl_override=global_ctrl)
557 apdev2[0]['bssid'] = hapd0.own_addr()
558 params = ft_params2(ssid=ssid, passphrase=passphrase)
559 params["r0kh"] = "ff:ff:ff:ff:ff:ff * 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
560 params["r1kh"] = "00:00:00:00:00:00 00:00:00:00:00:00 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
561 params['bridge'] = 'br1ft'
562 hapd1 = hostapd.add_ap(apdev2[1], params)
563
564 run_roams(dev[0], apdev2, hapd0, hapd1, ssid, passphrase,
565 over_ds=over_ds, test_connectivity=False)
566
567 hglobal.terminate()
568
569 if os.path.exists(pidfile):
570 with open(pidfile, 'r') as f:
571 pid = int(f.read())
572 f.close()
573 os.kill(pid, signal.SIGTERM)
574
e63d8837
MV		 575def test_ap_ft_over_ds_ocv(dev, apdev):
576 """WPA2-PSK-FT AP over DS"""
577 ssid = "test-ft"
578 passphrase="12345678"
579
580 params = ft_params1(ssid=ssid, passphrase=passphrase)
581 params["ieee80211w"] = "2"
582 params["ocv"] = "1"
583 try:
584 hapd0 = hostapd.add_ap(apdev[0], params)
585 except Exception, e:
586 if "Failed to set hostapd parameter ocv" in str(e):
587 raise HwsimSkip("OCV not supported")
588 raise
589 params = ft_params2(ssid=ssid, passphrase=passphrase)
590 params["ieee80211w"] = "2"
591 params["ocv"] = "1"
592 hapd1 = hostapd.add_ap(apdev[1], params)
593
594 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
595 ocv="1")
596
55139acb
JM		 597def test_ap_ft_over_ds_disabled(dev, apdev):
598 """WPA2-PSK-FT AP over DS disabled"""
599 ssid = "test-ft"
600 passphrase="12345678"
601
602 params = ft_params1(ssid=ssid, passphrase=passphrase)
603 params['ft_over_ds'] = '0'
604 hapd0 = hostapd.add_ap(apdev[0], params)
605 params = ft_params2(ssid=ssid, passphrase=passphrase)
606 params['ft_over_ds'] = '0'
607 hapd1 = hostapd.add_ap(apdev[1], params)
608
609 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
610 fail_test=True)
611
473e5176
MB		 612def test_ap_ft_vlan_over_ds(dev, apdev):
613 """WPA2-PSK-FT AP over DS with VLAN"""
614 ssid = "test-ft"
615 passphrase="12345678"
616
617 params = ft_params1(ssid=ssid, passphrase=passphrase)
618 params['dynamic_vlan'] = "1";
619 params['accept_mac_file'] = "hostapd.accept";
620 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
621 params = ft_params2(ssid=ssid, passphrase=passphrase)
622 params['dynamic_vlan'] = "1";
623 params['accept_mac_file'] = "hostapd.accept";
624 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
625
626 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
627 conndev="brvlan1")
628 check_mib(dev[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-4"),
629 ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-4") ])
630
40602101
JM		 631def test_ap_ft_over_ds_many(dev, apdev):
632 """WPA2-PSK-FT AP over DS multiple times"""
633 ssid = "test-ft"
634 passphrase="12345678"
635
636 params = ft_params1(ssid=ssid, passphrase=passphrase)
8b8a1864 637 hapd0 = hostapd.add_ap(apdev[0], params)
40602101 638 params = ft_params2(ssid=ssid, passphrase=passphrase)
8b8a1864 639 hapd1 = hostapd.add_ap(apdev[1], params)
40602101 640
a8375c94
JM		 641 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
642 roams=50)
40602101 643
473e5176
MB		 644def test_ap_ft_vlan_over_ds_many(dev, apdev):
645 """WPA2-PSK-FT AP over DS with VLAN multiple times"""
646 ssid = "test-ft"
647 passphrase="12345678"
648
649 params = ft_params1(ssid=ssid, passphrase=passphrase)
650 params['dynamic_vlan'] = "1";
651 params['accept_mac_file'] = "hostapd.accept";
652 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
653 params = ft_params2(ssid=ssid, passphrase=passphrase)
654 params['dynamic_vlan'] = "1";
655 params['accept_mac_file'] = "hostapd.accept";
656 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
657
658 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
659 roams=50, conndev="brvlan1")
660
9fd6804d 661@remote_compatible
c337d07a
JM		 662def test_ap_ft_over_ds_unknown_target(dev, apdev):
663 """WPA2-PSK-FT AP"""
664 ssid = "test-ft"
665 passphrase="12345678"
666
667 params = ft_params1(ssid=ssid, passphrase=passphrase)
8b8a1864 668 hapd0 = hostapd.add_ap(apdev[0], params)
c337d07a
JM		 669
670 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
671 scan_freq="2412")
672 dev[0].roam_over_ds("02:11:22:33:44:55", fail_test=True)
673
9fd6804d 674@remote_compatible
211bb7c5
JM		 675def test_ap_ft_over_ds_unexpected(dev, apdev):
676 """WPA2-PSK-FT AP over DS and unexpected response"""
677 ssid = "test-ft"
678 passphrase="12345678"
679
680 params = ft_params1(ssid=ssid, passphrase=passphrase)
8b8a1864 681 hapd0 = hostapd.add_ap(apdev[0], params)
211bb7c5 682 params = ft_params2(ssid=ssid, passphrase=passphrase)
8b8a1864 683 hapd1 = hostapd.add_ap(apdev[1], params)
211bb7c5
JM		 684
685 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
686 scan_freq="2412")
687 if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
688 ap1 = apdev[0]
689 ap2 = apdev[1]
690 hapd1ap = hapd0
691 hapd2ap = hapd1
692 else:
693 ap1 = apdev[1]
694 ap2 = apdev[0]
695 hapd1ap = hapd1
696 hapd2ap = hapd0
697
698 addr = dev[0].own_addr()
699 hapd1ap.set("ext_mgmt_frame_handling", "1")
700 logger.info("Foreign STA address")
701 msg = {}
702 msg['fc'] = 13 << 4
703 msg['da'] = addr
704 msg['sa'] = ap1['bssid']
705 msg['bssid'] = ap1['bssid']
706 msg['payload'] = binascii.unhexlify("06021122334455660102030405060000")
707 hapd1ap.mgmt_tx(msg)
708
709 logger.info("No over-the-DS in progress")
710 msg['payload'] = binascii.unhexlify("0602" + addr.replace(':', '') + "0102030405060000")
711 hapd1ap.mgmt_tx(msg)
712
713 logger.info("Non-zero status code")
714 msg['payload'] = binascii.unhexlify("0602" + addr.replace(':', '') + "0102030405060100")
715 hapd1ap.mgmt_tx(msg)
716
717 hapd1ap.dump_monitor()
718
719 dev[0].scan_for_bss(ap2['bssid'], freq="2412")
720 if "OK" not in dev[0].request("FT_DS " + ap2['bssid']):
721 raise Exception("FT_DS failed")
722
723 req = hapd1ap.mgmt_rx()
724
725 logger.info("Foreign Target AP")
726 msg['payload'] = binascii.unhexlify("0602" + addr.replace(':', '') + "0102030405060000")
727 hapd1ap.mgmt_tx(msg)
728
729 addrs = addr.replace(':', '') + ap2['bssid'].replace(':', '')
730
731 logger.info("No IEs")
732 msg['payload'] = binascii.unhexlify("0602" + addrs + "0000")
733 hapd1ap.mgmt_tx(msg)
734
735 logger.info("Invalid IEs (trigger parsing failure)")
736 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003700")
737 hapd1ap.mgmt_tx(msg)
738
739 logger.info("Too short MDIE")
740 msg['payload'] = binascii.unhexlify("0602" + addrs + "000036021122")
741 hapd1ap.mgmt_tx(msg)
742
743 logger.info("Mobility domain mismatch")
744 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603112201")
745 hapd1ap.mgmt_tx(msg)
746
747 logger.info("No FTIE")
748 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201")
749 hapd1ap.mgmt_tx(msg)
750
751 logger.info("FTIE SNonce mismatch")
752 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + "1000000000000000000000000000000000000000000000000000000000000001" + "030a6e6173322e77312e6669")
753 hapd1ap.mgmt_tx(msg)
754
755 logger.info("No R0KH-ID subelem in FTIE")
756 snonce = binascii.hexlify(req['payload'][111:111+32])
757 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b20137520000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce)
758 hapd1ap.mgmt_tx(msg)
759
760 logger.info("No R0KH-ID subelem mismatch in FTIE")
761 snonce = binascii.hexlify(req['payload'][111:111+32])
762 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce + "030a11223344556677889900")
763 hapd1ap.mgmt_tx(msg)
764
765 logger.info("No R1KH-ID subelem in FTIE")
766 r0khid = binascii.hexlify(req['payload'][145:145+10])
767 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce + "030a" + r0khid)
768 hapd1ap.mgmt_tx(msg)
769
770 logger.info("No RSNE")
771 r0khid = binascii.hexlify(req['payload'][145:145+10])
772 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b20137660000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce + "030a" + r0khid + "0106000102030405")
773 hapd1ap.mgmt_tx(msg)
774
b553eab1
JM		 775def test_ap_ft_pmf_over_ds(dev, apdev):
776 """WPA2-PSK-FT AP over DS with PMF"""
777 ssid = "test-ft"
778 passphrase="12345678"
779
780 params = ft_params1(ssid=ssid, passphrase=passphrase)
bc6e3288 781 params["ieee80211w"] = "2"
8b8a1864 782 hapd0 = hostapd.add_ap(apdev[0], params)
b553eab1 783 params = ft_params2(ssid=ssid, passphrase=passphrase)
bc6e3288 784 params["ieee80211w"] = "2"
8b8a1864 785 hapd1 = hostapd.add_ap(apdev[1], params)
b553eab1 786
ffcaca68
JM		 787def test_ap_ft_pmf_bip_cmac_128_over_ds(dev, apdev):
788 """WPA2-PSK-FT AP over DS with PMF/BIP-CMAC-128"""
789 run_ap_ft_pmf_bip_over_ds(dev, apdev, "AES-128-CMAC")
790
791def test_ap_ft_pmf_bip_gmac_128_over_ds(dev, apdev):
792 """WPA2-PSK-FT AP over DS with PMF/BIP-GMAC-128"""
793 run_ap_ft_pmf_bip_over_ds(dev, apdev, "BIP-GMAC-128")
794
795def test_ap_ft_pmf_bip_gmac_256_over_ds(dev, apdev):
796 """WPA2-PSK-FT AP over DS with PMF/BIP-GMAC-256"""
797 run_ap_ft_pmf_bip_over_ds(dev, apdev, "BIP-GMAC-256")
798
799def test_ap_ft_pmf_bip_cmac_256_over_ds(dev, apdev):
800 """WPA2-PSK-FT AP over DS with PMF/BIP-CMAC-256"""
801 run_ap_ft_pmf_bip_over_ds(dev, apdev, "BIP-CMAC-256")
802
803def run_ap_ft_pmf_bip_over_ds(dev, apdev, cipher):
804 if cipher not in dev[0].get_capability("group_mgmt"):
805 raise HwsimSkip("Cipher %s not supported" % cipher)
806
807 ssid = "test-ft"
808 passphrase="12345678"
809
810 params = ft_params1(ssid=ssid, passphrase=passphrase)
811 params["ieee80211w"] = "2"
812 params["group_mgmt_cipher"] = cipher
813 hapd0 = hostapd.add_ap(apdev[0], params)
814 params = ft_params2(ssid=ssid, passphrase=passphrase)
815 params["ieee80211w"] = "2"
816 params["group_mgmt_cipher"] = cipher
817 hapd1 = hostapd.add_ap(apdev[1], params)
818
819 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
820 group_mgmt=cipher)
6e658cc4 821
aaba98d3
JM		 822def test_ap_ft_over_ds_pull(dev, apdev):
823 """WPA2-PSK-FT AP over DS (pull PMK)"""
824 ssid = "test-ft"
825 passphrase="12345678"
826
827 params = ft_params1(ssid=ssid, passphrase=passphrase)
828 params["pmk_r1_push"] = "0"
8b8a1864 829 hapd0 = hostapd.add_ap(apdev[0], params)
aaba98d3
JM		 830 params = ft_params2(ssid=ssid, passphrase=passphrase)
831 params["pmk_r1_push"] = "0"
8b8a1864 832 hapd1 = hostapd.add_ap(apdev[1], params)
aaba98d3 833
a8375c94 834 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True)
aaba98d3 835
c95dd8e4
JM		 836def test_ap_ft_over_ds_pull_old_key(dev, apdev):
837 """WPA2-PSK-FT AP over DS (pull PMK; old key)"""
838 ssid = "test-ft"
839 passphrase="12345678"
840
841 params = ft_params1_old_key(ssid=ssid, passphrase=passphrase)
842 params["pmk_r1_push"] = "0"
843 hapd0 = hostapd.add_ap(apdev[0], params)
844 params = ft_params2_old_key(ssid=ssid, passphrase=passphrase)
845 params["pmk_r1_push"] = "0"
846 hapd1 = hostapd.add_ap(apdev[1], params)
847
848 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True)
849
473e5176
MB		 850def test_ap_ft_over_ds_pull_vlan(dev, apdev):
851 """WPA2-PSK-FT AP over DS (pull PMK) with VLAN"""
852 ssid = "test-ft"
853 passphrase="12345678"
854
855 params = ft_params1(ssid=ssid, passphrase=passphrase)
856 params["pmk_r1_push"] = "0"
857 params['dynamic_vlan'] = "1";
858 params['accept_mac_file'] = "hostapd.accept";
859 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
860 params = ft_params2(ssid=ssid, passphrase=passphrase)
861 params["pmk_r1_push"] = "0"
862 params['dynamic_vlan'] = "1";
863 params['accept_mac_file'] = "hostapd.accept";
864 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
865
866 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
867 conndev="brvlan1")
868
6e658cc4
JM		 869def test_ap_ft_sae(dev, apdev):
870 """WPA2-PSK-FT-SAE AP"""
b9749b6a
JM		 871 if "SAE" not in dev[0].get_capability("auth_alg"):
872 raise HwsimSkip("SAE not supported")
6e658cc4
JM		 873 ssid = "test-ft"
874 passphrase="12345678"
875
876 params = ft_params1(ssid=ssid, passphrase=passphrase)
877 params['wpa_key_mgmt'] = "FT-SAE"
8b8a1864 878 hapd0 = hostapd.add_ap(apdev[0], params)
6e658cc4
JM		 879 params = ft_params2(ssid=ssid, passphrase=passphrase)
880 params['wpa_key_mgmt'] = "FT-SAE"
8b8a1864 881 hapd = hostapd.add_ap(apdev[1], params)
65038313
JM		 882 key_mgmt = hapd.get_config()['key_mgmt']
883 if key_mgmt.split(' ')[0] != "FT-SAE":
884 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
6e658cc4 885
17ffdf39 886 dev[0].request("SET sae_groups ")
a8375c94 887 run_roams(dev[0], apdev, hapd0, hapd, ssid, passphrase, sae=True)
6e658cc4
JM		 888
889def test_ap_ft_sae_over_ds(dev, apdev):
890 """WPA2-PSK-FT-SAE AP over DS"""
b9749b6a
JM		 891 if "SAE" not in dev[0].get_capability("auth_alg"):
892 raise HwsimSkip("SAE not supported")
6e658cc4
JM		 893 ssid = "test-ft"
894 passphrase="12345678"
895
896 params = ft_params1(ssid=ssid, passphrase=passphrase)
897 params['wpa_key_mgmt'] = "FT-SAE"
8b8a1864 898 hapd0 = hostapd.add_ap(apdev[0], params)
6e658cc4
JM		 899 params = ft_params2(ssid=ssid, passphrase=passphrase)
900 params['wpa_key_mgmt'] = "FT-SAE"
8b8a1864 901 hapd1 = hostapd.add_ap(apdev[1], params)
6e658cc4 902
17ffdf39 903 dev[0].request("SET sae_groups ")
a8375c94
JM		 904 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, sae=True,
905 over_ds=True)
6f62809b 906
d269740a
MB		 907def generic_ap_ft_eap(dev, apdev, vlan=False, cui=False, over_ds=False,
908 discovery=False, roams=1):
6f62809b
JM		 909 ssid = "test-ft"
910 passphrase="12345678"
9c50a6d3
MB		 911 if vlan:
912 identity="gpsk-vlan1"
913 conndev="brvlan1"
d269740a
MB		 914 elif cui:
915 identity="gpsk-cui"
916 conndev=False
9c50a6d3
MB		 917 else:
918 identity="gpsk user"
919 conndev=False
6f62809b
JM		 920
921 radius = hostapd.radius_params()
942b52a8 922 params = ft_params1(ssid=ssid, passphrase=passphrase, discovery=discovery)
6f62809b
JM		 923 params['wpa_key_mgmt'] = "FT-EAP"
924 params["ieee8021x"] = "1"
9c50a6d3
MB		 925 if vlan:
926 params["dynamic_vlan"] = "1"
6f62809b 927 params = dict(radius.items() + params.items())
8b8a1864 928 hapd = hostapd.add_ap(apdev[0], params)
65038313
JM		 929 key_mgmt = hapd.get_config()['key_mgmt']
930 if key_mgmt.split(' ')[0] != "FT-EAP":
931 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
942b52a8 932 params = ft_params2(ssid=ssid, passphrase=passphrase, discovery=discovery)
6f62809b
JM		 933 params['wpa_key_mgmt'] = "FT-EAP"
934 params["ieee8021x"] = "1"
9c50a6d3
MB		 935 if vlan:
936 params["dynamic_vlan"] = "1"
6f62809b 937 params = dict(radius.items() + params.items())
8b8a1864 938 hapd1 = hostapd.add_ap(apdev[1], params)
6f62809b 939
942b52a8 940 run_roams(dev[0], apdev, hapd, hapd1, ssid, passphrase, eap=True,
9c50a6d3
MB		 941 over_ds=over_ds, roams=roams, eap_identity=identity,
942 conndev=conndev)
91bc6c36
JM		 943 if "[WPA2-FT/EAP-CCMP]" not in dev[0].request("SCAN_RESULTS"):
944 raise Exception("Scan results missing RSN element info")
eaf3f9b1
JM		 945 check_mib(dev[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-3"),
946 ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-3") ])
aaba98d3 947
4013d688
JM		 948 # Verify EAPOL reauthentication after FT protocol
949 if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
950 ap = hapd
951 else:
952 ap = hapd1
953 ap.request("EAPOL_REAUTH " + dev[0].own_addr())
954 ev = dev[0].wait_event(["CTRL-EVENT-EAP-STARTED"], timeout=5)
955 if ev is None:
956 raise Exception("EAP authentication did not start")
957 ev = dev[0].wait_event(["CTRL-EVENT-EAP-SUCCESS"], timeout=5)
958 if ev is None:
959 raise Exception("EAP authentication did not succeed")
960 time.sleep(0.1)
9c50a6d3
MB		 961 if conndev:
962 hwsim_utils.test_connectivity_iface(dev[0], ap, conndev)
963 else:
964 hwsim_utils.test_connectivity(dev[0], ap)
4013d688 965
942b52a8
MB		 966def test_ap_ft_eap(dev, apdev):
967 """WPA2-EAP-FT AP"""
968 generic_ap_ft_eap(dev, apdev)
969
d269740a
MB		 970def test_ap_ft_eap_cui(dev, apdev):
971 """WPA2-EAP-FT AP with CUI"""
972 generic_ap_ft_eap(dev, apdev, vlan=False, cui=True)
973
9c50a6d3
MB		 974def test_ap_ft_eap_vlan(dev, apdev):
975 """WPA2-EAP-FT AP with VLAN"""
976 generic_ap_ft_eap(dev, apdev, vlan=True)
977
978def test_ap_ft_eap_vlan_multi(dev, apdev):
979 """WPA2-EAP-FT AP with VLAN"""
980 generic_ap_ft_eap(dev, apdev, vlan=True, roams=50)
981
942b52a8
MB		 982def test_ap_ft_eap_over_ds(dev, apdev):
983 """WPA2-EAP-FT AP using over-the-DS"""
984 generic_ap_ft_eap(dev, apdev, over_ds=True)
985
986def test_ap_ft_eap_dis(dev, apdev):
987 """WPA2-EAP-FT AP with AP discovery"""
988 generic_ap_ft_eap(dev, apdev, discovery=True)
989
990def test_ap_ft_eap_dis_over_ds(dev, apdev):
991 """WPA2-EAP-FT AP with AP discovery and over-the-DS"""
992 generic_ap_ft_eap(dev, apdev, over_ds=True, discovery=True)
993
9c50a6d3
MB		 994def test_ap_ft_eap_vlan(dev, apdev):
995 """WPA2-EAP-FT AP with VLAN"""
996 generic_ap_ft_eap(dev, apdev, vlan=True)
997
998def test_ap_ft_eap_vlan_multi(dev, apdev):
999 """WPA2-EAP-FT AP with VLAN"""
1000 generic_ap_ft_eap(dev, apdev, vlan=True, roams=50)
1001
1002def test_ap_ft_eap_vlan_over_ds(dev, apdev):
1003 """WPA2-EAP-FT AP with VLAN + over_ds"""
1004 generic_ap_ft_eap(dev, apdev, vlan=True, over_ds=True)
1005
1006def test_ap_ft_eap_vlan_over_ds_multi(dev, apdev):
1007 """WPA2-EAP-FT AP with VLAN + over_ds"""
1008 generic_ap_ft_eap(dev, apdev, vlan=True, over_ds=True, roams=50)
1009
1010def generic_ap_ft_eap_pull(dev, apdev, vlan=False):
aaba98d3
JM		 1011 """WPA2-EAP-FT AP (pull PMK)"""
1012 ssid = "test-ft"
1013 passphrase="12345678"
9c50a6d3
MB		 1014 if vlan:
1015 identity="gpsk-vlan1"
1016 conndev="brvlan1"
1017 else:
1018 identity="gpsk user"
1019 conndev=False
aaba98d3
JM		 1020
1021 radius = hostapd.radius_params()
1022 params = ft_params1(ssid=ssid, passphrase=passphrase)
1023 params['wpa_key_mgmt'] = "FT-EAP"
1024 params["ieee8021x"] = "1"
1025 params["pmk_r1_push"] = "0"
9c50a6d3
MB		 1026 if vlan:
1027 params["dynamic_vlan"] = "1"
aaba98d3 1028 params = dict(radius.items() + params.items())
8b8a1864 1029 hapd = hostapd.add_ap(apdev[0], params)
aaba98d3
JM		 1030 key_mgmt = hapd.get_config()['key_mgmt']
1031 if key_mgmt.split(' ')[0] != "FT-EAP":
1032 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
1033 params = ft_params2(ssid=ssid, passphrase=passphrase)
1034 params['wpa_key_mgmt'] = "FT-EAP"
1035 params["ieee8021x"] = "1"
1036 params["pmk_r1_push"] = "0"
9c50a6d3
MB		 1037 if vlan:
1038 params["dynamic_vlan"] = "1"
aaba98d3 1039 params = dict(radius.items() + params.items())
8b8a1864 1040 hapd1 = hostapd.add_ap(apdev[1], params)
aaba98d3 1041
9c50a6d3
MB		 1042 run_roams(dev[0], apdev, hapd, hapd1, ssid, passphrase, eap=True,
1043 eap_identity=identity, conndev=conndev)
1044
1045def test_ap_ft_eap_pull(dev, apdev):
1046 """WPA2-EAP-FT AP (pull PMK)"""
1047 generic_ap_ft_eap_pull(dev, apdev)
1048
1049def test_ap_ft_eap_pull_vlan(dev, apdev):
1050 generic_ap_ft_eap_pull(dev, apdev, vlan=True)
3b808945 1051
f81c1411
JM		 1052def test_ap_ft_eap_pull_wildcard(dev, apdev):
1053 """WPA2-EAP-FT AP (pull PMK) - wildcard R0KH/R1KH"""
1054 ssid = "test-ft"
1055 passphrase="12345678"
1056
1057 radius = hostapd.radius_params()
1058 params = ft_params1(ssid=ssid, passphrase=passphrase, discovery=True)
1059 params['wpa_key_mgmt'] = "WPA-EAP FT-EAP"
1060 params["ieee8021x"] = "1"
1061 params["pmk_r1_push"] = "0"
1062 params["r0kh"] = "ff:ff:ff:ff:ff:ff * 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
1063 params["r1kh"] = "00:00:00:00:00:00 00:00:00:00:00:00 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
1064 params["ft_psk_generate_local"] = "1"
1065 params["eap_server"] = "0"
1066 params = dict(radius.items() + params.items())
1067 hapd = hostapd.add_ap(apdev[0], params)
1068 params = ft_params2(ssid=ssid, passphrase=passphrase, discovery=True)
1069 params['wpa_key_mgmt'] = "WPA-EAP FT-EAP"
1070 params["ieee8021x"] = "1"
1071 params["pmk_r1_push"] = "0"
1072 params["r0kh"] = "ff:ff:ff:ff:ff:ff * 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
1073 params["r1kh"] = "00:00:00:00:00:00 00:00:00:00:00:00 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
1074 params["ft_psk_generate_local"] = "1"
1075 params["eap_server"] = "0"
1076 params = dict(radius.items() + params.items())
1077 hapd1 = hostapd.add_ap(apdev[1], params)
1078
1079 run_roams(dev[0], apdev, hapd, hapd1, ssid, passphrase, eap=True)
1080
9fd6804d 1081@remote_compatible
3b808945
JM		 1082def test_ap_ft_mismatching_rrb_key_push(dev, apdev):
1083 """WPA2-PSK-FT AP over DS with mismatching RRB key (push)"""
1084 ssid = "test-ft"
1085 passphrase="12345678"
1086
1087 params = ft_params1(ssid=ssid, passphrase=passphrase)
bc6e3288 1088 params["ieee80211w"] = "2"
8b8a1864 1089 hapd0 = hostapd.add_ap(apdev[0], params)
3b808945 1090 params = ft_params2_incorrect_rrb_key(ssid=ssid, passphrase=passphrase)
bc6e3288 1091 params["ieee80211w"] = "2"
8b8a1864 1092 hapd1 = hostapd.add_ap(apdev[1], params)
3b808945 1093
a8375c94
JM		 1094 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
1095 fail_test=True)
3b808945 1096
9fd6804d 1097@remote_compatible
3b808945
JM		 1098def test_ap_ft_mismatching_rrb_key_pull(dev, apdev):
1099 """WPA2-PSK-FT AP over DS with mismatching RRB key (pull)"""
1100 ssid = "test-ft"
1101 passphrase="12345678"
1102
1103 params = ft_params1(ssid=ssid, passphrase=passphrase)
1104 params["pmk_r1_push"] = "0"
8b8a1864 1105 hapd0 = hostapd.add_ap(apdev[0], params)
3b808945
JM		 1106 params = ft_params2_incorrect_rrb_key(ssid=ssid, passphrase=passphrase)
1107 params["pmk_r1_push"] = "0"
8b8a1864 1108 hapd1 = hostapd.add_ap(apdev[1], params)
3b808945 1109
a8375c94
JM		 1110 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
1111 fail_test=True)
3b808945 1112
9fd6804d 1113@remote_compatible
ae14a2e2
JM		 1114def test_ap_ft_mismatching_r0kh_id_pull(dev, apdev):
1115 """WPA2-PSK-FT AP over DS with mismatching R0KH-ID (pull)"""
1116 ssid = "test-ft"
1117 passphrase="12345678"
1118
1119 params = ft_params1(ssid=ssid, passphrase=passphrase)
1120 params["pmk_r1_push"] = "0"
1121 params["nas_identifier"] = "nas0.w1.fi"
8b8a1864 1122 hostapd.add_ap(apdev[0], params)
2f816c21
JM		 1123 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1124 scan_freq="2412")
ae14a2e2
JM		 1125
1126 params = ft_params2(ssid=ssid, passphrase=passphrase)
1127 params["pmk_r1_push"] = "0"
8b8a1864 1128 hostapd.add_ap(apdev[1], params)
ae14a2e2
JM		 1129
1130 dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
1131 dev[0].roam_over_ds(apdev[1]['bssid'], fail_test=True)
1132
9fd6804d 1133@remote_compatible
3b808945
JM		 1134def test_ap_ft_mismatching_rrb_r0kh_push(dev, apdev):
1135 """WPA2-PSK-FT AP over DS with mismatching R0KH key (push)"""
1136 ssid = "test-ft"
1137 passphrase="12345678"
1138
1139 params = ft_params1(ssid=ssid, passphrase=passphrase)
bc6e3288 1140 params["ieee80211w"] = "2"
8b8a1864 1141 hapd0 = hostapd.add_ap(apdev[0], params)
3b808945 1142 params = ft_params2_r0kh_mismatch(ssid=ssid, passphrase=passphrase)
bc6e3288 1143 params["ieee80211w"] = "2"
8b8a1864 1144 hapd1 = hostapd.add_ap(apdev[1], params)
3b808945 1145
a8375c94
JM		 1146 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
1147 fail_test=True)
3b808945 1148
9fd6804d 1149@remote_compatible
3b808945
JM		 1150def test_ap_ft_mismatching_rrb_r0kh_pull(dev, apdev):
1151 """WPA2-PSK-FT AP over DS with mismatching R0KH key (pull)"""
1152 ssid = "test-ft"
1153 passphrase="12345678"
1154
1155 params = ft_params1_r0kh_mismatch(ssid=ssid, passphrase=passphrase)
1156 params["pmk_r1_push"] = "0"
8b8a1864 1157 hapd0 = hostapd.add_ap(apdev[0], params)
3b808945
JM		 1158 params = ft_params2(ssid=ssid, passphrase=passphrase)
1159 params["pmk_r1_push"] = "0"
8b8a1864 1160 hapd1 = hostapd.add_ap(apdev[1], params)
3b808945 1161
a8375c94
JM		 1162 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
1163 fail_test=True)
c6b6e105 1164
150948e6
MB		 1165def test_ap_ft_mismatching_rrb_key_push_eap(dev, apdev):
1166 """WPA2-EAP-FT AP over DS with mismatching RRB key (push)"""
1167 ssid = "test-ft"
1168 passphrase="12345678"
1169
1170 radius = hostapd.radius_params()
1171 params = ft_params1(ssid=ssid, passphrase=passphrase)
1172 params["ieee80211w"] = "2";
1173 params['wpa_key_mgmt'] = "FT-EAP"
1174 params["ieee8021x"] = "1"
1175 params = dict(radius.items() + params.items())
b098542c 1176 hapd0 = hostapd.add_ap(apdev[0], params)
150948e6
MB		 1177 params = ft_params2_incorrect_rrb_key(ssid=ssid, passphrase=passphrase)
1178 params["ieee80211w"] = "2";
1179 params['wpa_key_mgmt'] = "FT-EAP"
1180 params["ieee8021x"] = "1"
1181 params = dict(radius.items() + params.items())
b098542c 1182 hapd1 = hostapd.add_ap(apdev[1], params)
150948e6
MB		 1183
1184 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
1185 fail_test=True, eap=True)
1186
1187def test_ap_ft_mismatching_rrb_key_pull_eap(dev, apdev):
1188 """WPA2-EAP-FT AP over DS with mismatching RRB key (pull)"""
1189 ssid = "test-ft"
1190 passphrase="12345678"
1191
1192 radius = hostapd.radius_params()
1193 params = ft_params1(ssid=ssid, passphrase=passphrase)
1194 params["pmk_r1_push"] = "0"
1195 params['wpa_key_mgmt'] = "FT-EAP"
1196 params["ieee8021x"] = "1"
1197 params = dict(radius.items() + params.items())
b098542c 1198 hapd0 = hostapd.add_ap(apdev[0], params)
150948e6
MB		 1199 params = ft_params2_incorrect_rrb_key(ssid=ssid, passphrase=passphrase)
1200 params["pmk_r1_push"] = "0"
1201 params['wpa_key_mgmt'] = "FT-EAP"
1202 params["ieee8021x"] = "1"
1203 params = dict(radius.items() + params.items())
b098542c 1204 hapd1 = hostapd.add_ap(apdev[1], params)
150948e6
MB		 1205
1206 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
1207 fail_test=True, eap=True)
1208
1209def test_ap_ft_mismatching_r0kh_id_pull_eap(dev, apdev):
1210 """WPA2-EAP-FT AP over DS with mismatching R0KH-ID (pull)"""
1211 ssid = "test-ft"
1212 passphrase="12345678"
1213
1214 radius = hostapd.radius_params()
1215 params = ft_params1(ssid=ssid, passphrase=passphrase)
1216 params["pmk_r1_push"] = "0"
1217 params["nas_identifier"] = "nas0.w1.fi"
1218 params['wpa_key_mgmt'] = "FT-EAP"
1219 params["ieee8021x"] = "1"
1220 params = dict(radius.items() + params.items())
b098542c 1221 hostapd.add_ap(apdev[0], params)
150948e6
MB		 1222 dev[0].connect(ssid, key_mgmt="FT-EAP", proto="WPA2", ieee80211w="1",
1223 eap="GPSK", identity="gpsk user",
1224 password="abcdefghijklmnop0123456789abcdef",
1225 scan_freq="2412")
1226
1227 params = ft_params2(ssid=ssid, passphrase=passphrase)
1228 params["pmk_r1_push"] = "0"
1229 params['wpa_key_mgmt'] = "FT-EAP"
1230 params["ieee8021x"] = "1"
1231 params = dict(radius.items() + params.items())
b098542c 1232 hostapd.add_ap(apdev[1], params)
150948e6
MB		 1233
1234 dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
1235 dev[0].roam_over_ds(apdev[1]['bssid'], fail_test=True)
1236
1237def test_ap_ft_mismatching_rrb_r0kh_push_eap(dev, apdev):
1238 """WPA2-EAP-FT AP over DS with mismatching R0KH key (push)"""
1239 ssid = "test-ft"
1240 passphrase="12345678"
1241
1242 radius = hostapd.radius_params()
1243 params = ft_params1(ssid=ssid, passphrase=passphrase)
1244 params["ieee80211w"] = "2";
1245 params['wpa_key_mgmt'] = "FT-EAP"
1246 params["ieee8021x"] = "1"
1247 params = dict(radius.items() + params.items())
b098542c 1248 hapd0 = hostapd.add_ap(apdev[0], params)
150948e6
MB		 1249 params = ft_params2_r0kh_mismatch(ssid=ssid, passphrase=passphrase)
1250 params["ieee80211w"] = "2";
1251 params['wpa_key_mgmt'] = "FT-EAP"
1252 params["ieee8021x"] = "1"
1253 params = dict(radius.items() + params.items())
b098542c 1254 hapd1 = hostapd.add_ap(apdev[1], params)
150948e6
MB		 1255
1256 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
1257 fail_test=True, eap=True)
1258
1259def test_ap_ft_mismatching_rrb_r0kh_pull_eap(dev, apdev):
1260 """WPA2-EAP-FT AP over DS with mismatching R0KH key (pull)"""
1261 ssid = "test-ft"
1262 passphrase="12345678"
1263
1264 radius = hostapd.radius_params()
1265 params = ft_params1_r0kh_mismatch(ssid=ssid, passphrase=passphrase)
1266 params["pmk_r1_push"] = "0"
1267 params['wpa_key_mgmt'] = "FT-EAP"
1268 params["ieee8021x"] = "1"
1269 params = dict(radius.items() + params.items())
b098542c 1270 hapd0 = hostapd.add_ap(apdev[0], params)
150948e6
MB		 1271 params = ft_params2(ssid=ssid, passphrase=passphrase)
1272 params["pmk_r1_push"] = "0"
1273 params['wpa_key_mgmt'] = "FT-EAP"
1274 params["ieee8021x"] = "1"
1275 params = dict(radius.items() + params.items())
b098542c 1276 hapd1 = hostapd.add_ap(apdev[1], params)
150948e6
MB		 1277
1278 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
1279 fail_test=True, eap=True)
1280
c6b6e105
JM		 1281def test_ap_ft_gtk_rekey(dev, apdev):
1282 """WPA2-PSK-FT AP and GTK rekey"""
1283 ssid = "test-ft"
1284 passphrase="12345678"
1285
1286 params = ft_params1(ssid=ssid, passphrase=passphrase)
1287 params['wpa_group_rekey'] = '1'
8b8a1864 1288 hapd = hostapd.add_ap(apdev[0], params)
c6b6e105
JM		 1289
1290 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
2f816c21 1291 ieee80211w="1", scan_freq="2412")
c6b6e105
JM		 1292
1293 ev = dev[0].wait_event(["WPA: Group rekeying completed"], timeout=2)
1294 if ev is None:
1295 raise Exception("GTK rekey timed out after initial association")
a8375c94 1296 hwsim_utils.test_connectivity(dev[0], hapd)
c6b6e105
JM		 1297
1298 params = ft_params2(ssid=ssid, passphrase=passphrase)
1299 params['wpa_group_rekey'] = '1'
8b8a1864 1300 hapd1 = hostapd.add_ap(apdev[1], params)
c6b6e105
JM		 1301
1302 dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
1303 dev[0].roam(apdev[1]['bssid'])
1304 if dev[0].get_status_field('bssid') != apdev[1]['bssid']:
1305 raise Exception("Did not connect to correct AP")
a8375c94 1306 hwsim_utils.test_connectivity(dev[0], hapd1)
c6b6e105
JM		 1307
1308 ev = dev[0].wait_event(["WPA: Group rekeying completed"], timeout=2)
1309 if ev is None:
1310 raise Exception("GTK rekey timed out after FT protocol")
a8375c94 1311 hwsim_utils.test_connectivity(dev[0], hapd1)
5b3c40a6
JM		 1312
1313def test_ft_psk_key_lifetime_in_memory(dev, apdev, params):
1314 """WPA2-PSK-FT and key lifetime in memory"""
1315 ssid = "test-ft"
1316 passphrase="04c2726b4b8d5f1b4db9c07aa4d9e9d8f765cb5d25ec817e6cc4fcdd5255db0"
1317 psk = '93c90846ff67af9037ed83fb72b63dbeddaa81d47f926c20909b5886f1d9358d'
1318 pmk = binascii.unhexlify(psk)
1319 p = ft_params1(ssid=ssid, passphrase=passphrase)
8b8a1864 1320 hapd0 = hostapd.add_ap(apdev[0], p)
5b3c40a6 1321 p = ft_params2(ssid=ssid, passphrase=passphrase)
8b8a1864 1322 hapd1 = hostapd.add_ap(apdev[1], p)
5b3c40a6
JM		 1323
1324 pid = find_wpas_process(dev[0])
1325
1326 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1327 scan_freq="2412")
8e416cec
JM		 1328 # The decrypted copy of GTK is freed only after the CTRL-EVENT-CONNECTED
1329 # event has been delivered, so verify that wpa_supplicant has returned to
1330 # eloop before reading process memory.
54f2cae2 1331 time.sleep(1)
8e416cec 1332 dev[0].ping()
5b3c40a6
JM		 1333
1334 buf = read_process_memory(pid, pmk)
1335
1336 dev[0].request("DISCONNECT")
1337 dev[0].wait_disconnected()
1338
1339 dev[0].relog()
1340 pmkr0 = None
1341 pmkr1 = None
1342 ptk = None
1343 gtk = None
1344 with open(os.path.join(params['logdir'], 'log0'), 'r') as f:
1345 for l in f.readlines():
1346 if "FT: PMK-R0 - hexdump" in l:
1347 val = l.strip().split(':')[3].replace(' ', '')
1348 pmkr0 = binascii.unhexlify(val)
1349 if "FT: PMK-R1 - hexdump" in l:
1350 val = l.strip().split(':')[3].replace(' ', '')
1351 pmkr1 = binascii.unhexlify(val)
f918b95b 1352 if "FT: KCK - hexdump" in l:
5b3c40a6 1353 val = l.strip().split(':')[3].replace(' ', '')
f918b95b
JM		 1354 kck = binascii.unhexlify(val)
1355 if "FT: KEK - hexdump" in l:
1356 val = l.strip().split(':')[3].replace(' ', '')
1357 kek = binascii.unhexlify(val)
1358 if "FT: TK - hexdump" in l:
1359 val = l.strip().split(':')[3].replace(' ', '')
1360 tk = binascii.unhexlify(val)
5b3c40a6
JM		 1361 if "WPA: Group Key - hexdump" in l:
1362 val = l.strip().split(':')[3].replace(' ', '')
1363 gtk = binascii.unhexlify(val)
f918b95b 1364 if not pmkr0 or not pmkr1 or not kck or not kek or not tk or not gtk:
5b3c40a6
JM		 1365 raise Exception("Could not find keys from debug log")
1366 if len(gtk) != 16:
1367 raise Exception("Unexpected GTK length")
1368
5b3c40a6
JM		 1369 logger.info("Checking keys in memory while associated")
1370 get_key_locations(buf, pmk, "PMK")
1371 get_key_locations(buf, pmkr0, "PMK-R0")
1372 get_key_locations(buf, pmkr1, "PMK-R1")
1373 if pmk not in buf:
81e787b7 1374 raise HwsimSkip("PMK not found while associated")
5b3c40a6 1375 if pmkr0 not in buf:
81e787b7 1376 raise HwsimSkip("PMK-R0 not found while associated")
5b3c40a6 1377 if pmkr1 not in buf:
81e787b7 1378 raise HwsimSkip("PMK-R1 not found while associated")
5b3c40a6
JM		 1379 if kck not in buf:
1380 raise Exception("KCK not found while associated")
1381 if kek not in buf:
1382 raise Exception("KEK not found while associated")
b74f82a4
JM		 1383 #if tk in buf:
1384 # raise Exception("TK found from memory")
5b3c40a6
JM		 1385
1386 logger.info("Checking keys in memory after disassociation")
1387 buf = read_process_memory(pid, pmk)
1388 get_key_locations(buf, pmk, "PMK")
1389 get_key_locations(buf, pmkr0, "PMK-R0")
1390 get_key_locations(buf, pmkr1, "PMK-R1")
1391
1392 # Note: PMK/PSK is still present in network configuration
1393
1394 fname = os.path.join(params['logdir'],
1395 'ft_psk_key_lifetime_in_memory.memctx-')
1396 verify_not_present(buf, pmkr0, fname, "PMK-R0")
1397 verify_not_present(buf, pmkr1, fname, "PMK-R1")
1398 verify_not_present(buf, kck, fname, "KCK")
1399 verify_not_present(buf, kek, fname, "KEK")
1400 verify_not_present(buf, tk, fname, "TK")
6db556b2
JM		 1401 if gtk in buf:
1402 get_key_locations(buf, gtk, "GTK")
5b3c40a6
JM		 1403 verify_not_present(buf, gtk, fname, "GTK")
1404
1405 dev[0].request("REMOVE_NETWORK all")
1406
1407 logger.info("Checking keys in memory after network profile removal")
1408 buf = read_process_memory(pid, pmk)
1409 get_key_locations(buf, pmk, "PMK")
1410 get_key_locations(buf, pmkr0, "PMK-R0")
1411 get_key_locations(buf, pmkr1, "PMK-R1")
1412
1413 verify_not_present(buf, pmk, fname, "PMK")
1414 verify_not_present(buf, pmkr0, fname, "PMK-R0")
1415 verify_not_present(buf, pmkr1, fname, "PMK-R1")
1416 verify_not_present(buf, kck, fname, "KCK")
1417 verify_not_present(buf, kek, fname, "KEK")
1418 verify_not_present(buf, tk, fname, "TK")
1419 verify_not_present(buf, gtk, fname, "GTK")
664093b5 1420
9fd6804d 1421@remote_compatible
664093b5
JM		 1422def test_ap_ft_invalid_resp(dev, apdev):
1423 """WPA2-PSK-FT AP and invalid response IEs"""
1424 ssid = "test-ft"
1425 passphrase="12345678"
1426
1427 params = ft_params1(ssid=ssid, passphrase=passphrase)
8b8a1864 1428 hapd0 = hostapd.add_ap(apdev[0], params)
664093b5
JM		 1429 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1430 scan_freq="2412")
1431
1432 params = ft_params2(ssid=ssid, passphrase=passphrase)
8b8a1864 1433 hapd1 = hostapd.add_ap(apdev[1], params)
664093b5
JM		 1434
1435 tests = [
1436 # Various IEs for test coverage. The last one is FTIE with invalid
1437 # R1KH-ID subelement.
1438 "020002000000" + "3800" + "38051122334455" + "3754000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010100",
1439 # FTIE with invalid R0KH-ID subelement (len=0).
1440 "020002000000" + "3754000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010300",
1441 # FTIE with invalid R0KH-ID subelement (len=49).
1442 "020002000000" + "378500010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001033101020304050607080910111213141516171819202122232425262728293031323334353637383940414243444546474849",
1443 # Invalid RSNE.
1444 "020002000000" + "3000",
1445 # Required IEs missing from protected IE count.
1446 "020002000000" + "3603a1b201" + "375200010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900",
1447 # RIC missing from protected IE count.
1448 "020002000000" + "3603a1b201" + "375200020203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900",
1449 # Protected IE missing.
1450 "020002000000" + "3603a1b201" + "375200ff0203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900" + "0000" ]
1451 for t in tests:
1452 dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
1453 hapd1.set("ext_mgmt_frame_handling", "1")
1454 hapd1.dump_monitor()
1455 if "OK" not in dev[0].request("ROAM " + apdev[1]['bssid']):
1456 raise Exception("ROAM failed")
1457 auth = None
1458 for i in range(20):
1459 msg = hapd1.mgmt_rx()
1460 if msg['subtype'] == 11:
1461 auth = msg
1462 break
1463 if not auth:
1464 raise Exception("Authentication frame not seen")
1465
1466 resp = {}
1467 resp['fc'] = auth['fc']
1468 resp['da'] = auth['sa']
1469 resp['sa'] = auth['da']
1470 resp['bssid'] = auth['bssid']
1471 resp['payload'] = binascii.unhexlify(t)
1472 hapd1.mgmt_tx(resp)
1473 hapd1.set("ext_mgmt_frame_handling", "0")
1474 dev[0].wait_disconnected()
1475
1476 dev[0].request("RECONNECT")
1477 dev[0].wait_connected()
7b741a53
JM		 1478
1479def test_ap_ft_gcmp_256(dev, apdev):
1480 """WPA2-PSK-FT AP with GCMP-256 cipher"""
1481 if "GCMP-256" not in dev[0].get_capability("pairwise"):
1482 raise HwsimSkip("Cipher GCMP-256 not supported")
1483 ssid = "test-ft"
1484 passphrase="12345678"
1485
1486 params = ft_params1(ssid=ssid, passphrase=passphrase)
1487 params['rsn_pairwise'] = "GCMP-256"
8b8a1864 1488 hapd0 = hostapd.add_ap(apdev[0], params)
7b741a53
JM		 1489 params = ft_params2(ssid=ssid, passphrase=passphrase)
1490 params['rsn_pairwise'] = "GCMP-256"
8b8a1864 1491 hapd1 = hostapd.add_ap(apdev[1], params)
7b741a53
JM		 1492
1493 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase,
1494 pairwise_cipher="GCMP-256", group_cipher="GCMP-256")
cf671d54 1495
63a7683b 1496def setup_ap_ft_oom(dev, apdev):
38934ed1 1497 skip_with_fips(dev[0])
cf671d54
JM		 1498 ssid = "test-ft"
1499 passphrase="12345678"
1500
1501 params = ft_params1(ssid=ssid, passphrase=passphrase)
8b8a1864 1502 hapd0 = hostapd.add_ap(apdev[0], params)
cf671d54 1503 params = ft_params2(ssid=ssid, passphrase=passphrase)
8b8a1864 1504 hapd1 = hostapd.add_ap(apdev[1], params)
cf671d54
JM		 1505
1506 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1507 scan_freq="2412")
1508 if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
1509 dst = apdev[1]['bssid']
1510 else:
1511 dst = apdev[0]['bssid']
1512
1513 dev[0].scan_for_bss(dst, freq="2412")
63a7683b
JM		 1514
1515 return dst
1516
1517def test_ap_ft_oom(dev, apdev):
1518 """WPA2-PSK-FT and OOM"""
1519 dst = setup_ap_ft_oom(dev, apdev)
cf671d54
JM		 1520 with alloc_fail(dev[0], 1, "wpa_ft_gen_req_ies"):
1521 dev[0].roam(dst)
63a7683b
JM		 1522
1523def test_ap_ft_oom2(dev, apdev):
1524 """WPA2-PSK-FT and OOM (2)"""
1525 dst = setup_ap_ft_oom(dev, apdev)
7cbc8e67 1526 with fail_test(dev[0], 1, "wpa_ft_mic"):
63a7683b
JM		 1527 dev[0].roam(dst, fail_test=True, assoc_reject_ok=True)
1528
1529def test_ap_ft_oom3(dev, apdev):
1530 """WPA2-PSK-FT and OOM (3)"""
1531 dst = setup_ap_ft_oom(dev, apdev)
cf671d54 1532 with fail_test(dev[0], 1, "os_get_random;wpa_ft_prepare_auth_request"):
63a7683b 1533 dev[0].roam(dst)
34d3eaa8 1534
63a7683b
JM		 1535def test_ap_ft_oom4(dev, apdev):
1536 """WPA2-PSK-FT and OOM (4)"""
1537 ssid = "test-ft"
1538 passphrase="12345678"
1539 dst = setup_ap_ft_oom(dev, apdev)
dcbb5d80
JM		 1540 dev[0].request("REMOVE_NETWORK all")
1541 with alloc_fail(dev[0], 1, "=sme_update_ft_ies"):
1542 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1543 scan_freq="2412")
1544
682a79f0
JM		 1545def test_ap_ft_ap_oom(dev, apdev):
1546 """WPA2-PSK-FT and AP OOM"""
1547 ssid = "test-ft"
1548 passphrase="12345678"
1549
1550 params = ft_params1(ssid=ssid, passphrase=passphrase)
1551 hapd0 = hostapd.add_ap(apdev[0], params)
1552 bssid0 = hapd0.own_addr()
1553
1554 dev[0].scan_for_bss(bssid0, freq="2412")
1555 with alloc_fail(hapd0, 1, "wpa_ft_store_pmk_r0"):
1556 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1557 scan_freq="2412")
1558
1559 params = ft_params2(ssid=ssid, passphrase=passphrase)
1560 hapd1 = hostapd.add_ap(apdev[1], params)
1561 bssid1 = hapd1.own_addr()
1562 dev[0].scan_for_bss(bssid1, freq="2412")
1563 # This roam will fail due to missing PMK-R0 (OOM prevented storing it)
1564 dev[0].roam(bssid1)
1565
1566def test_ap_ft_ap_oom2(dev, apdev):
1567 """WPA2-PSK-FT and AP OOM 2"""
1568 ssid = "test-ft"
1569 passphrase="12345678"
1570
1571 params = ft_params1(ssid=ssid, passphrase=passphrase)
1572 hapd0 = hostapd.add_ap(apdev[0], params)
1573 bssid0 = hapd0.own_addr()
1574
1575 dev[0].scan_for_bss(bssid0, freq="2412")
1576 with alloc_fail(hapd0, 1, "wpa_ft_store_pmk_r1"):
1577 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1578 scan_freq="2412")
1579
1580 params = ft_params2(ssid=ssid, passphrase=passphrase)
1581 hapd1 = hostapd.add_ap(apdev[1], params)
1582 bssid1 = hapd1.own_addr()
1583 dev[0].scan_for_bss(bssid1, freq="2412")
1584 dev[0].roam(bssid1)
1585 if dev[0].get_status_field('bssid') != bssid1:
1586 raise Exception("Did not roam to AP1")
1587 # This roam will fail due to missing PMK-R1 (OOM prevented storing it)
1588 dev[0].roam(bssid0)
1589
1590def test_ap_ft_ap_oom3(dev, apdev):
1591 """WPA2-PSK-FT and AP OOM 3"""
1592 ssid = "test-ft"
1593 passphrase="12345678"
1594
1595 params = ft_params1(ssid=ssid, passphrase=passphrase)
1596 hapd0 = hostapd.add_ap(apdev[0], params)
1597 bssid0 = hapd0.own_addr()
1598
1599 dev[0].scan_for_bss(bssid0, freq="2412")
1600 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1601 scan_freq="2412")
1602
1603 params = ft_params2(ssid=ssid, passphrase=passphrase)
1604 hapd1 = hostapd.add_ap(apdev[1], params)
1605 bssid1 = hapd1.own_addr()
1606 dev[0].scan_for_bss(bssid1, freq="2412")
1607 with alloc_fail(hapd1, 1, "wpa_ft_pull_pmk_r1"):
1608 # This will fail due to not being able to send out PMK-R1 pull request
1609 dev[0].roam(bssid1)
1610
ba88dd65 1611 with fail_test(hapd1, 2, "os_get_random;wpa_ft_pull_pmk_r1"):
682a79f0
JM		 1612 # This will fail due to not being able to send out PMK-R1 pull request
1613 dev[0].roam(bssid1)
1614
ba88dd65
MB		 1615 with fail_test(hapd1, 2, "aes_siv_encrypt;wpa_ft_pull_pmk_r1"):
1616 # This will fail due to not being able to send out PMK-R1 pull request
1617 dev[0].roam(bssid1)
1618
1619def test_ap_ft_ap_oom3b(dev, apdev):
1620 """WPA2-PSK-FT and AP OOM 3b"""
1621 ssid = "test-ft"
1622 passphrase="12345678"
1623
1624 params = ft_params1(ssid=ssid, passphrase=passphrase)
1625 hapd0 = hostapd.add_ap(apdev[0], params)
1626 bssid0 = hapd0.own_addr()
1627
1628 dev[0].scan_for_bss(bssid0, freq="2412")
1629 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1630 scan_freq="2412")
1631
1632 params = ft_params2(ssid=ssid, passphrase=passphrase)
1633 hapd1 = hostapd.add_ap(apdev[1], params)
1634 bssid1 = hapd1.own_addr()
1635 dev[0].scan_for_bss(bssid1, freq="2412")
1636 with fail_test(hapd1, 1, "os_get_random;wpa_ft_pull_pmk_r1"):
682a79f0
JM		 1637 # This will fail due to not being able to send out PMK-R1 pull request
1638 dev[0].roam(bssid1)
1639
1640def test_ap_ft_ap_oom4(dev, apdev):
1641 """WPA2-PSK-FT and AP OOM 4"""
1642 ssid = "test-ft"
1643 passphrase="12345678"
1644
1645 params = ft_params1(ssid=ssid, passphrase=passphrase)
1646 hapd0 = hostapd.add_ap(apdev[0], params)
1647 bssid0 = hapd0.own_addr()
1648
1649 dev[0].scan_for_bss(bssid0, freq="2412")
1650 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1651 scan_freq="2412")
1652
1653 params = ft_params2(ssid=ssid, passphrase=passphrase)
1654 hapd1 = hostapd.add_ap(apdev[1], params)
1655 bssid1 = hapd1.own_addr()
1656 dev[0].scan_for_bss(bssid1, freq="2412")
1657 with alloc_fail(hapd1, 1, "wpa_ft_gtk_subelem"):
1658 dev[0].roam(bssid1)
1659 if dev[0].get_status_field('bssid') != bssid1:
1660 raise Exception("Did not roam to AP1")
1661
1662 with fail_test(hapd0, 1, "wpa_auth_get_seqnum;wpa_ft_gtk_subelem"):
1663 dev[0].roam(bssid0)
1664 if dev[0].get_status_field('bssid') != bssid0:
1665 raise Exception("Did not roam to AP0")
1666
1667 with fail_test(hapd0, 1, "aes_wrap;wpa_ft_gtk_subelem"):
1668 dev[0].roam(bssid1)
1669 if dev[0].get_status_field('bssid') != bssid1:
1670 raise Exception("Did not roam to AP1")
1671
1672def test_ap_ft_ap_oom5(dev, apdev):
1673 """WPA2-PSK-FT and AP OOM 5"""
1674 ssid = "test-ft"
1675 passphrase="12345678"
1676
1677 params = ft_params1(ssid=ssid, passphrase=passphrase)
1678 hapd0 = hostapd.add_ap(apdev[0], params)
1679 bssid0 = hapd0.own_addr()
1680
1681 dev[0].scan_for_bss(bssid0, freq="2412")
1682 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1683 scan_freq="2412")
1684
1685 params = ft_params2(ssid=ssid, passphrase=passphrase)
1686 hapd1 = hostapd.add_ap(apdev[1], params)
1687 bssid1 = hapd1.own_addr()
1688 dev[0].scan_for_bss(bssid1, freq="2412")
1689 with alloc_fail(hapd1, 1, "=wpa_ft_process_auth_req"):
1690 # This will fail to roam
1691 dev[0].roam(bssid1)
1692
1693 with fail_test(hapd1, 1, "os_get_random;wpa_ft_process_auth_req"):
1694 # This will fail to roam
1695 dev[0].roam(bssid1)
1696
1697 with fail_test(hapd1, 1, "sha256_prf_bits;wpa_pmk_r1_to_ptk;wpa_ft_process_auth_req"):
1698 # This will fail to roam
1699 dev[0].roam(bssid1)
1700
1701 with fail_test(hapd1, 3, "wpa_pmk_r1_to_ptk;wpa_ft_process_auth_req"):
1702 # This will fail to roam
1703 dev[0].roam(bssid1)
1704
1705 with fail_test(hapd1, 1, "wpa_derive_pmk_r1_name;wpa_ft_process_auth_req"):
1706 # This will fail to roam
1707 dev[0].roam(bssid1)
1708
1709def test_ap_ft_ap_oom6(dev, apdev):
1710 """WPA2-PSK-FT and AP OOM 6"""
1711 ssid = "test-ft"
1712 passphrase="12345678"
1713
1714 params = ft_params1(ssid=ssid, passphrase=passphrase)
1715 hapd0 = hostapd.add_ap(apdev[0], params)
1716 bssid0 = hapd0.own_addr()
1717
1718 dev[0].scan_for_bss(bssid0, freq="2412")
1719 with fail_test(hapd0, 1, "wpa_derive_pmk_r0;wpa_auth_derive_ptk_ft"):
1720 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1721 scan_freq="2412")
1722 dev[0].request("REMOVE_NETWORK all")
1723 dev[0].wait_disconnected()
1724 with fail_test(hapd0, 1, "wpa_derive_pmk_r1;wpa_auth_derive_ptk_ft"):
1725 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1726 scan_freq="2412")
1727 dev[0].request("REMOVE_NETWORK all")
1728 dev[0].wait_disconnected()
1729 with fail_test(hapd0, 1, "wpa_pmk_r1_to_ptk;wpa_auth_derive_ptk_ft"):
1730 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1731 scan_freq="2412")
1732
c5262648
JM		 1733def test_ap_ft_ap_oom7a(dev, apdev):
1734 """WPA2-PSK-FT and AP OOM 7a"""
682a79f0
JM		 1735 ssid = "test-ft"
1736 passphrase="12345678"
1737
1738 params = ft_params1(ssid=ssid, passphrase=passphrase)
1739 params["ieee80211w"] = "2"
1740 hapd0 = hostapd.add_ap(apdev[0], params)
1741 bssid0 = hapd0.own_addr()
1742
1743 dev[0].scan_for_bss(bssid0, freq="2412")
1744 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1745 ieee80211w="2", scan_freq="2412")
1746
1747 params = ft_params2(ssid=ssid, passphrase=passphrase)
1748 params["ieee80211w"] = "2"
1749 hapd1 = hostapd.add_ap(apdev[1], params)
1750 bssid1 = hapd1.own_addr()
1751 dev[0].scan_for_bss(bssid1, freq="2412")
1752 with alloc_fail(hapd1, 1, "wpa_ft_igtk_subelem"):
1753 # This will fail to roam
1754 dev[0].roam(bssid1)
c5262648
JM		 1755
1756def test_ap_ft_ap_oom7b(dev, apdev):
1757 """WPA2-PSK-FT and AP OOM 7b"""
1758 ssid = "test-ft"
1759 passphrase="12345678"
1760
1761 params = ft_params1(ssid=ssid, passphrase=passphrase)
1762 params["ieee80211w"] = "2"
1763 hapd0 = hostapd.add_ap(apdev[0], params)
1764 bssid0 = hapd0.own_addr()
1765
1766 dev[0].scan_for_bss(bssid0, freq="2412")
1767 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1768 ieee80211w="2", scan_freq="2412")
1769
1770 params = ft_params2(ssid=ssid, passphrase=passphrase)
1771 params["ieee80211w"] = "2"
1772 hapd1 = hostapd.add_ap(apdev[1], params)
1773 bssid1 = hapd1.own_addr()
1774 dev[0].scan_for_bss(bssid1, freq="2412")
682a79f0
JM		 1775 with fail_test(hapd1, 1, "aes_wrap;wpa_ft_igtk_subelem"):
1776 # This will fail to roam
1777 dev[0].roam(bssid1)
c5262648
JM		 1778
1779def test_ap_ft_ap_oom7c(dev, apdev):
1780 """WPA2-PSK-FT and AP OOM 7c"""
1781 ssid = "test-ft"
1782 passphrase="12345678"
1783
1784 params = ft_params1(ssid=ssid, passphrase=passphrase)
1785 params["ieee80211w"] = "2"
1786 hapd0 = hostapd.add_ap(apdev[0], params)
1787 bssid0 = hapd0.own_addr()
1788
1789 dev[0].scan_for_bss(bssid0, freq="2412")
1790 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1791 ieee80211w="2", scan_freq="2412")
1792
1793 params = ft_params2(ssid=ssid, passphrase=passphrase)
1794 params["ieee80211w"] = "2"
1795 hapd1 = hostapd.add_ap(apdev[1], params)
1796 bssid1 = hapd1.own_addr()
1797 dev[0].scan_for_bss(bssid1, freq="2412")
682a79f0
JM		 1798 with alloc_fail(hapd1, 1, "=wpa_sm_write_assoc_resp_ies"):
1799 # This will fail to roam
1800 dev[0].roam(bssid1)
c5262648
JM		 1801
1802def test_ap_ft_ap_oom7d(dev, apdev):
1803 """WPA2-PSK-FT and AP OOM 7d"""
1804 ssid = "test-ft"
1805 passphrase="12345678"
1806
1807 params = ft_params1(ssid=ssid, passphrase=passphrase)
1808 params["ieee80211w"] = "2"
1809 hapd0 = hostapd.add_ap(apdev[0], params)
1810 bssid0 = hapd0.own_addr()
1811
1812 dev[0].scan_for_bss(bssid0, freq="2412")
1813 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1814 ieee80211w="2", scan_freq="2412")
1815
1816 params = ft_params2(ssid=ssid, passphrase=passphrase)
1817 params["ieee80211w"] = "2"
1818 hapd1 = hostapd.add_ap(apdev[1], params)
1819 bssid1 = hapd1.own_addr()
1820 dev[0].scan_for_bss(bssid1, freq="2412")
682a79f0
JM		 1821 with fail_test(hapd1, 1, "wpa_ft_mic;wpa_sm_write_assoc_resp_ies"):
1822 # This will fail to roam
1823 dev[0].roam(bssid1)
1824
1825def test_ap_ft_ap_oom8(dev, apdev):
1826 """WPA2-PSK-FT and AP OOM 8"""
1827 ssid = "test-ft"
1828 passphrase="12345678"
1829
1830 params = ft_params1(ssid=ssid, passphrase=passphrase)
1831 params['ft_psk_generate_local'] = "1";
1832 hapd0 = hostapd.add_ap(apdev[0], params)
1833 bssid0 = hapd0.own_addr()
1834
1835 dev[0].scan_for_bss(bssid0, freq="2412")
1836 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1837 scan_freq="2412")
1838
1839 params = ft_params2(ssid=ssid, passphrase=passphrase)
1840 params['ft_psk_generate_local'] = "1";
1841 hapd1 = hostapd.add_ap(apdev[1], params)
1842 bssid1 = hapd1.own_addr()
1843 dev[0].scan_for_bss(bssid1, freq="2412")
1844 with fail_test(hapd1, 1, "wpa_derive_pmk_r0;wpa_ft_psk_pmk_r1"):
1845 # This will fail to roam
1846 dev[0].roam(bssid1)
1847 with fail_test(hapd1, 1, "wpa_derive_pmk_r1;wpa_ft_psk_pmk_r1"):
1848 # This will fail to roam
1849 dev[0].roam(bssid1)
1850
1851def test_ap_ft_ap_oom9(dev, apdev):
1852 """WPA2-PSK-FT and AP OOM 9"""
1853 ssid = "test-ft"
1854 passphrase="12345678"
1855
1856 params = ft_params1(ssid=ssid, passphrase=passphrase)
1857 hapd0 = hostapd.add_ap(apdev[0], params)
1858 bssid0 = hapd0.own_addr()
1859
1860 dev[0].scan_for_bss(bssid0, freq="2412")
1861 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1862 scan_freq="2412")
1863
1864 params = ft_params2(ssid=ssid, passphrase=passphrase)
1865 hapd1 = hostapd.add_ap(apdev[1], params)
1866 bssid1 = hapd1.own_addr()
1867 dev[0].scan_for_bss(bssid1, freq="2412")
1868
1869 with alloc_fail(hapd0, 1, "wpa_ft_action_rx"):
1870 # This will fail to roam
1871 if "OK" not in dev[0].request("FT_DS " + bssid1):
1872 raise Exception("FT_DS failed")
1873 wait_fail_trigger(hapd0, "GET_ALLOC_FAIL")
1874
1875 with alloc_fail(hapd1, 1, "wpa_ft_rrb_rx_request"):
1876 # This will fail to roam
1877 if "OK" not in dev[0].request("FT_DS " + bssid1):
1878 raise Exception("FT_DS failed")
1879 wait_fail_trigger(hapd1, "GET_ALLOC_FAIL")
1880
1881 with alloc_fail(hapd1, 1, "wpa_ft_send_rrb_auth_resp"):
1882 # This will fail to roam
1883 if "OK" not in dev[0].request("FT_DS " + bssid1):
1884 raise Exception("FT_DS failed")
1885 wait_fail_trigger(hapd1, "GET_ALLOC_FAIL")
1886
1887def test_ap_ft_ap_oom10(dev, apdev):
1888 """WPA2-PSK-FT and AP OOM 10"""
1889 ssid = "test-ft"
1890 passphrase="12345678"
1891
1892 params = ft_params1(ssid=ssid, passphrase=passphrase)
1893 hapd0 = hostapd.add_ap(apdev[0], params)
1894 bssid0 = hapd0.own_addr()
1895
1896 dev[0].scan_for_bss(bssid0, freq="2412")
1897 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1898 scan_freq="2412")
1899
1900 params = ft_params2(ssid=ssid, passphrase=passphrase)
1901 hapd1 = hostapd.add_ap(apdev[1], params)
1902 bssid1 = hapd1.own_addr()
1903 dev[0].scan_for_bss(bssid1, freq="2412")
1904
9441a227 1905 with fail_test(hapd0, 1, "aes_siv_decrypt;wpa_ft_rrb_rx_pull"):
682a79f0
JM		 1906 # This will fail to roam
1907 if "OK" not in dev[0].request("FT_DS " + bssid1):
1908 raise Exception("FT_DS failed")
1909 wait_fail_trigger(hapd0, "GET_FAIL")
1910
1911 with fail_test(hapd0, 1, "wpa_derive_pmk_r1;wpa_ft_rrb_rx_pull"):
1912 # This will fail to roam
1913 if "OK" not in dev[0].request("FT_DS " + bssid1):
1914 raise Exception("FT_DS failed")
1915 wait_fail_trigger(hapd0, "GET_FAIL")
1916
9441a227 1917 with fail_test(hapd0, 1, "aes_siv_encrypt;wpa_ft_rrb_rx_pull"):
682a79f0
JM		 1918 # This will fail to roam
1919 if "OK" not in dev[0].request("FT_DS " + bssid1):
1920 raise Exception("FT_DS failed")
1921 wait_fail_trigger(hapd0, "GET_FAIL")
1922
9441a227 1923 with fail_test(hapd1, 1, "aes_siv_decrypt;wpa_ft_rrb_rx_resp"):
682a79f0
JM		 1924 # This will fail to roam
1925 if "OK" not in dev[0].request("FT_DS " + bssid1):
1926 raise Exception("FT_DS failed")
1927 wait_fail_trigger(hapd1, "GET_FAIL")
1928
1929def test_ap_ft_ap_oom11(dev, apdev):
1930 """WPA2-PSK-FT and AP OOM 11"""
1931 ssid = "test-ft"
1932 passphrase="12345678"
1933
1934 params = ft_params1(ssid=ssid, passphrase=passphrase)
1935 hapd0 = hostapd.add_ap(apdev[0], params)
1936 bssid0 = hapd0.own_addr()
1937
1938 dev[0].scan_for_bss(bssid0, freq="2412")
1939 with fail_test(hapd0, 1, "wpa_derive_pmk_r1;wpa_ft_generate_pmk_r1"):
1940 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1941 scan_freq="2412")
1942 wait_fail_trigger(hapd0, "GET_FAIL")
1943
1944 dev[1].scan_for_bss(bssid0, freq="2412")
9441a227 1945 with fail_test(hapd0, 1, "aes_siv_encrypt;wpa_ft_generate_pmk_r1"):
682a79f0
JM		 1946 dev[1].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1947 scan_freq="2412")
1948 wait_fail_trigger(hapd0, "GET_FAIL")
1949
a04e6f3d
JM		 1950def test_ap_ft_over_ds_proto_ap(dev, apdev):
1951 """WPA2-PSK-FT AP over DS protocol testing for AP processing"""
1952 ssid = "test-ft"
1953 passphrase="12345678"
1954
1955 params = ft_params1(ssid=ssid, passphrase=passphrase)
1956 hapd0 = hostapd.add_ap(apdev[0], params)
1957 bssid0 = hapd0.own_addr()
1958 _bssid0 = bssid0.replace(':', '')
1959 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1960 scan_freq="2412")
1961 addr = dev[0].own_addr()
1962 _addr = addr.replace(':', '')
1963
1964 params = ft_params2(ssid=ssid, passphrase=passphrase)
1965 hapd1 = hostapd.add_ap(apdev[1], params)
1966 bssid1 = hapd1.own_addr()
1967 _bssid1 = bssid1.replace(':', '')
1968
1969 hapd0.set("ext_mgmt_frame_handling", "1")
1970 hdr = "d0003a01" + _bssid0 + _addr + _bssid0 + "1000"
1971 valid = "0601" + _addr + _bssid1
1972 tests = [ "0601",
1973 "0601" + _addr,
1974 "0601" + _addr + _bssid0,
1975 "0601" + _addr + "ffffffffffff",
1976 "0601" + _bssid0 + _bssid0,
1977 valid,
1978 valid + "01",
1979 valid + "3700",
1980 valid + "3600",
1981 valid + "3603ffffff",
1982 valid + "3603a1b2ff",
1983 valid + "3603a1b2ff" + "3700",
1984 valid + "3603a1b2ff" + "37520000" + 16*"00" + 32*"00" + 32*"00",
1985 valid + "3603a1b2ff" + "37520001" + 16*"00" + 32*"00" + 32*"00",
1986 valid + "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa",
1987 valid + "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa" + "3000",
1988 valid + "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa" + "30260100000fac040100000fac040100000facff00000100a225368fe0983b5828a37a0acb37f253",
1989 valid + "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa" + "30260100000fac040100000fac030100000fac0400000100a225368fe0983b5828a37a0acb37f253",
1990 valid + "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa" + "30260100000fac040100000fac040100000fac0400000100a225368fe0983b5828a37a0acb37f253",
1991 valid + "0001" ]
1992 for t in tests:
1993 hapd0.dump_monitor()
1994 if "OK" not in hapd0.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + hdr + t):
1995 raise Exception("MGMT_RX_PROCESS failed")
1996
1997 hapd0.set("ext_mgmt_frame_handling", "0")
1998
34d3eaa8
JM		 1999def test_ap_ft_over_ds_proto(dev, apdev):
2000 """WPA2-PSK-FT AP over DS protocol testing"""
2001 ssid = "test-ft"
2002 passphrase="12345678"
2003
2004 params = ft_params1(ssid=ssid, passphrase=passphrase)
8b8a1864 2005 hapd0 = hostapd.add_ap(apdev[0], params)
34d3eaa8
JM		 2006 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
2007 scan_freq="2412")
2008
2009 # FT Action Response while no FT-over-DS in progress
2010 msg = {}
2011 msg['fc'] = 13 << 4
2012 msg['da'] = dev[0].own_addr()
2013 msg['sa'] = apdev[0]['bssid']
2014 msg['bssid'] = apdev[0]['bssid']
2015 msg['payload'] = binascii.unhexlify("06020200000000000200000004000000")
2016 hapd0.mgmt_tx(msg)
2017
2018 params = ft_params2(ssid=ssid, passphrase=passphrase)
8b8a1864 2019 hapd1 = hostapd.add_ap(apdev[1], params)
34d3eaa8
JM		 2020 dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
2021 hapd0.set("ext_mgmt_frame_handling", "1")
2022 hapd0.dump_monitor()
2023 dev[0].request("FT_DS " + apdev[1]['bssid'])
2024 for i in range(0, 10):
2025 req = hapd0.mgmt_rx()
2026 if req is None:
2027 raise Exception("MGMT RX wait timed out")
2028 if req['subtype'] == 13:
2029 break
2030 req = None
2031 if not req:
2032 raise Exception("FT Action frame not received")
2033
2034 # FT Action Response for unexpected Target AP
2035 msg['payload'] = binascii.unhexlify("0602020000000000" + "f20000000400" + "0000")
2036 hapd0.mgmt_tx(msg)
2037
2038 # FT Action Response without MDIE
2039 msg['payload'] = binascii.unhexlify("0602020000000000" + "020000000400" + "0000")
2040 hapd0.mgmt_tx(msg)
2041
2042 # FT Action Response without FTIE
2043 msg['payload'] = binascii.unhexlify("0602020000000000" + "020000000400" + "0000" + "3603a1b201")
2044 hapd0.mgmt_tx(msg)
2045
2046 # FT Action Response with FTIE SNonce mismatch
2047 msg['payload'] = binascii.unhexlify("0602020000000000" + "020000000400" + "0000" + "3603a1b201" + "3766000000000000000000000000000000000000c4e67ac1999bebd00ff4ae4d5dcaf87896bb060b469f7c78d49623fb395c3455ffffff6b693fe6f8d8c5dfac0a22344750775bd09437f98b238c9f87b97f790c0106000102030406030a6e6173312e77312e6669")
2048 hapd0.mgmt_tx(msg)
6f3815c0 2049
9fd6804d 2050@remote_compatible
6f3815c0
JM		 2051def test_ap_ft_rrb(dev, apdev):
2052 """WPA2-PSK-FT RRB protocol testing"""
2053 ssid = "test-ft"
2054 passphrase="12345678"
2055
2056 params = ft_params1(ssid=ssid, passphrase=passphrase)
8b8a1864 2057 hapd0 = hostapd.add_ap(apdev[0], params)
6f3815c0
JM		 2058
2059 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
2060 scan_freq="2412")
2061
2062 _dst_ll = binascii.unhexlify(apdev[0]['bssid'].replace(':',''))
2063 _src_ll = binascii.unhexlify(dev[0].own_addr().replace(':',''))
2064 proto = '\x89\x0d'
2065 ehdr = _dst_ll + _src_ll + proto
2066
2067 # Too short RRB frame
2068 pkt = ehdr + '\x01'
2069 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
2070 raise Exception("DATA_TEST_FRAME failed")
2071
2072 # RRB discarded frame wikth unrecognized type
2073 pkt = ehdr + '\x02' + '\x02' + '\x01\x00' + _src_ll
2074 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
2075 raise Exception("DATA_TEST_FRAME failed")
2076
2077 # RRB frame too short for action frame
2078 pkt = ehdr + '\x01' + '\x02' + '\x01\x00' + _src_ll
2079 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
2080 raise Exception("DATA_TEST_FRAME failed")
2081
2082 # Too short RRB frame (not enough room for Action Frame body)
2083 pkt = ehdr + '\x01' + '\x02' + '\x00\x00' + _src_ll
2084 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
2085 raise Exception("DATA_TEST_FRAME failed")
2086
2087 # Unexpected Action frame category
2088 pkt = ehdr + '\x01' + '\x02' + '\x0e\x00' + _src_ll + '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
2089 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
2090 raise Exception("DATA_TEST_FRAME failed")
2091
2092 # Unexpected Action in RRB Request
2093 pkt = ehdr + '\x01' + '\x00' + '\x0e\x00' + _src_ll + '\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
2094 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
2095 raise Exception("DATA_TEST_FRAME failed")
2096
2097 # Target AP address in RRB Request does not match with own address
2098 pkt = ehdr + '\x01' + '\x00' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
2099 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
2100 raise Exception("DATA_TEST_FRAME failed")
2101
2102 # Not enough room for status code in RRB Response
2103 pkt = ehdr + '\x01' + '\x01' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
2104 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
2105 raise Exception("DATA_TEST_FRAME failed")
2106
2107 # RRB discarded frame with unknown packet_type
2108 pkt = ehdr + '\x01' + '\x02' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
2109 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
2110 raise Exception("DATA_TEST_FRAME failed")
2111
2112 # RRB Response with non-zero status code; no STA match
2113 pkt = ehdr + '\x01' + '\x01' + '\x10\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00' + '\xff\xff'
2114 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
2115 raise Exception("DATA_TEST_FRAME failed")
2116
2117 # RRB Response with zero status code and extra data; STA match
2118 pkt = ehdr + '\x01' + '\x01' + '\x11\x00' + _src_ll + '\x06\x01' + _src_ll + '\x00\x00\x00\x00\x00\x00' + '\x00\x00' + '\x00'
2119 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
2120 raise Exception("DATA_TEST_FRAME failed")
2121
2122 # Too short PMK-R1 pull
2123 pkt = ehdr + '\x01' + '\xc8' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
2124 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
2125 raise Exception("DATA_TEST_FRAME failed")
2126
2127 # Too short PMK-R1 resp
2128 pkt = ehdr + '\x01' + '\xc9' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
2129 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
2130 raise Exception("DATA_TEST_FRAME failed")
2131
2132 # Too short PMK-R1 push
2133 pkt = ehdr + '\x01' + '\xca' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
2134 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
2135 raise Exception("DATA_TEST_FRAME failed")
2136
2137 # No matching R0KH address found for PMK-R0 pull response
2138 pkt = ehdr + '\x01' + '\xc9' + '\x5a\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00' + 76*'\00'
2139 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
2140 raise Exception("DATA_TEST_FRAME failed")
ecafa0cf 2141
9fd6804d 2142@remote_compatible
ecafa0cf
JM		 2143def test_rsn_ie_proto_ft_psk_sta(dev, apdev):
2144 """RSN element protocol testing for FT-PSK + PMF cases on STA side"""
2145 bssid = apdev[0]['bssid']
2146 ssid = "test-ft"
2147 passphrase="12345678"
2148
2149 params = ft_params1(ssid=ssid, passphrase=passphrase)
bc6e3288 2150 params["ieee80211w"] = "1"
ecafa0cf
JM		 2151 # This is the RSN element used normally by hostapd
2152 params['own_ie_override'] = '30140100000fac040100000fac040100000fac048c00' + '3603a1b201'
8b8a1864 2153 hapd = hostapd.add_ap(apdev[0], params)
ecafa0cf
JM		 2154 id = dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
2155 ieee80211w="1", scan_freq="2412",
2156 pairwise="CCMP", group="CCMP")
2157
2158 tests = [ ('PMKIDCount field included',
2159 '30160100000fac040100000fac040100000fac048c000000' + '3603a1b201'),
2160 ('Extra IE before RSNE',
2161 'dd0400000000' + '30140100000fac040100000fac040100000fac048c00' + '3603a1b201'),
2162 ('PMKIDCount and Group Management Cipher suite fields included',
2163 '301a0100000fac040100000fac040100000fac048c000000000fac06' + '3603a1b201'),
2164 ('Extra octet after defined fields (future extensibility)',
2165 '301b0100000fac040100000fac040100000fac048c000000000fac0600' + '3603a1b201'),
2166 ('No RSN Capabilities field (PMF disabled in practice)',
2167 '30120100000fac040100000fac040100000fac04' + '3603a1b201') ]
2168 for txt,ie in tests:
2169 dev[0].request("DISCONNECT")
2170 dev[0].wait_disconnected()
2171 logger.info(txt)
2172 hapd.disable()
2173 hapd.set('own_ie_override', ie)
2174 hapd.enable()
2175 dev[0].request("BSS_FLUSH 0")
2176 dev[0].scan_for_bss(bssid, 2412, force_scan=True, only_new=True)
2177 dev[0].select_network(id, freq=2412)
2178 dev[0].wait_connected()
2179
2180 dev[0].request("DISCONNECT")
2181 dev[0].wait_disconnected()
2182
2183 logger.info('Invalid RSNE causing internal hostapd error')
2184 hapd.disable()
2185 hapd.set('own_ie_override', '30130100000fac040100000fac040100000fac048c' + '3603a1b201')
2186 hapd.enable()
2187 dev[0].request("BSS_FLUSH 0")
2188 dev[0].scan_for_bss(bssid, 2412, force_scan=True, only_new=True)
2189 dev[0].select_network(id, freq=2412)
2190 # hostapd fails to generate EAPOL-Key msg 3/4, so this connection cannot
2191 # complete.
2192 ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED"], timeout=1)
2193 if ev is not None:
2194 raise Exception("Unexpected connection")
2195 dev[0].request("DISCONNECT")
2196
2197 logger.info('Unexpected PMKID causing internal hostapd error')
2198 hapd.disable()
2199 hapd.set('own_ie_override', '30260100000fac040100000fac040100000fac048c000100ffffffffffffffffffffffffffffffff' + '3603a1b201')
2200 hapd.enable()
2201 dev[0].request("BSS_FLUSH 0")
2202 dev[0].scan_for_bss(bssid, 2412, force_scan=True, only_new=True)
2203 dev[0].select_network(id, freq=2412)
2204 # hostapd fails to generate EAPOL-Key msg 3/4, so this connection cannot
2205 # complete.
2206 ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED"], timeout=1)
2207 if ev is not None:
2208 raise Exception("Unexpected connection")
2209 dev[0].request("DISCONNECT")
1025603b
JM		 2210
2211def test_ap_ft_ptk_rekey(dev, apdev):
2212 """WPA2-PSK-FT PTK rekeying triggered by station after roam"""
2213 ssid = "test-ft"
2214 passphrase="12345678"
2215
2216 params = ft_params1(ssid=ssid, passphrase=passphrase)
8b8a1864 2217 hapd0 = hostapd.add_ap(apdev[0], params)
1025603b 2218 params = ft_params2(ssid=ssid, passphrase=passphrase)
8b8a1864 2219 hapd1 = hostapd.add_ap(apdev[1], params)
1025603b
JM		 2220
2221 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, ptk_rekey="1")
2222
2223 ev = dev[0].wait_event(["CTRL-EVENT-DISCONNECTED",
2224 "WPA: Key negotiation completed"], timeout=5)
2225 if ev is None:
2226 raise Exception("No event received after roam")
2227 if "CTRL-EVENT-DISCONNECTED" in ev:
2228 raise Exception("Unexpected disconnection after roam")
2229
2230 if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
2231 hapd = hapd0
2232 else:
2233 hapd = hapd1
2234 hwsim_utils.test_connectivity(dev[0], hapd)
2235
2236def test_ap_ft_ptk_rekey_ap(dev, apdev):
2237 """WPA2-PSK-FT PTK rekeying triggered by AP after roam"""
2238 ssid = "test-ft"
2239 passphrase="12345678"
2240
2241 params = ft_params1(ssid=ssid, passphrase=passphrase)
2242 params['wpa_ptk_rekey'] = '2'
8b8a1864 2243 hapd0 = hostapd.add_ap(apdev[0], params)
1025603b
JM		 2244 params = ft_params2(ssid=ssid, passphrase=passphrase)
2245 params['wpa_ptk_rekey'] = '2'
8b8a1864 2246 hapd1 = hostapd.add_ap(apdev[1], params)
1025603b
JM		 2247
2248 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
2249
2250 ev = dev[0].wait_event(["CTRL-EVENT-DISCONNECTED",
2251 "WPA: Key negotiation completed"], timeout=5)
2252 if ev is None:
2253 raise Exception("No event received after roam")
2254 if "CTRL-EVENT-DISCONNECTED" in ev:
2255 raise Exception("Unexpected disconnection after roam")
2256
2257 if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
2258 hapd = hapd0
2259 else:
2260 hapd = hapd1
2261 hwsim_utils.test_connectivity(dev[0], hapd)
186ca473
MB		 2262
2263def test_ap_ft_internal_rrb_check(dev, apdev):
2264 """RRB internal delivery only to WPA enabled BSS"""
2265 ssid = "test-ft"
2266 passphrase="12345678"
2267
2268 radius = hostapd.radius_params()
2269 params = ft_params1(ssid=ssid, passphrase=passphrase)
2270 params['wpa_key_mgmt'] = "FT-EAP"
2271 params["ieee8021x"] = "1"
2272 params = dict(radius.items() + params.items())
8b8a1864 2273 hapd = hostapd.add_ap(apdev[0], params)
186ca473
MB		 2274 key_mgmt = hapd.get_config()['key_mgmt']
2275 if key_mgmt.split(' ')[0] != "FT-EAP":
2276 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
2277
8b8a1864 2278 hapd1 = hostapd.add_ap(apdev[1], { "ssid" : ssid })
186ca473
MB		 2279
2280 # Connect to WPA enabled AP
2281 dev[0].connect(ssid, key_mgmt="FT-EAP", proto="WPA2", ieee80211w="1",
2282 eap="GPSK", identity="gpsk user",
2283 password="abcdefghijklmnop0123456789abcdef",
2284 scan_freq="2412")
2285
2286 # Try over_ds roaming to non-WPA-enabled AP.
2287 # If hostapd does not check hapd->wpa_auth internally, it will crash now.
2288 dev[0].roam_over_ds(apdev[1]['bssid'], fail_test=True)
c85fcff2
JM		 2289
2290def test_ap_ft_extra_ie(dev, apdev):
2291 """WPA2-PSK-FT AP with WPA2-PSK enabled and unexpected MDE"""
2292 ssid = "test-ft"
2293 passphrase="12345678"
2294
2295 params = ft_params1(ssid=ssid, passphrase=passphrase)
2296 params["wpa_key_mgmt"] = "WPA-PSK FT-PSK"
2297 hapd0 = hostapd.add_ap(apdev[0], params)
2298 dev[1].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
2299 scan_freq="2412")
2300 dev[2].connect(ssid, psk=passphrase, key_mgmt="WPA-PSK", proto="WPA2",
2301 scan_freq="2412")
2302 try:
2303 # Add Mobility Domain element to test AP validation code.
2304 dev[0].request("VENDOR_ELEM_ADD 13 3603a1b201")
2305 dev[0].connect(ssid, psk=passphrase, key_mgmt="WPA-PSK", proto="WPA2",
2306 scan_freq="2412", wait_connect=False)
2307 ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED",
2308 "CTRL-EVENT-ASSOC-REJECT"], timeout=10)
2309 if ev is None:
2310 raise Exception("No connection result")
2311 if "CTRL-EVENT-CONNECTED" in ev:
2312 raise Exception("Non-FT association accepted with MDE")
2313 if "status_code=43" not in ev:
2314 raise Exception("Unexpected status code: " + ev)
2315 dev[0].request("DISCONNECT")
2316 finally:
2317 dev[0].request("VENDOR_ELEM_REMOVE 13 *")
fd7205fa
JM		 2318
2319def test_ap_ft_ric(dev, apdev):
2320 """WPA2-PSK-FT AP and RIC"""
2321 ssid = "test-ft"
2322 passphrase="12345678"
2323
2324 params = ft_params1(ssid=ssid, passphrase=passphrase)
2325 hapd0 = hostapd.add_ap(apdev[0], params)
2326 params = ft_params2(ssid=ssid, passphrase=passphrase)
2327 hapd1 = hostapd.add_ap(apdev[1], params)
2328
2329 dev[0].set("ric_ies", "")
2330 dev[0].set("ric_ies", '""')
2331 if "FAIL" not in dev[0].request("SET ric_ies q"):
2332 raise Exception("Invalid ric_ies value accepted")
2333
2334 tests = [ "3900",
2335 "3900ff04eeeeeeee",
2336 "390400000000",
2337 "390400000000" + "390400000000",
2338 "390400000000" + "dd050050f20202",
2339 "390400000000" + "dd3d0050f2020201" + 55*"00",
2340 "390400000000" + "dd3d0050f2020201aa300010270000000000000000000000000000000000000000000000000000ffffff7f00000000000000000000000040420f00ffff0000",
2341 "390401010000" + "dd3d0050f2020201aa3000dc050000000000000000000000000000000000000000000000000000dc050000000000000000000000000000808d5b0028230000" ]
2342 for t in tests:
2343 dev[0].set("ric_ies", t)
2344 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase,
2345 test_connectivity=False)
2346 dev[0].request("REMOVE_NETWORK all")
2347 dev[0].wait_disconnected()
2348 dev[0].dump_monitor()
c8942286
JM		 2349
2350def ie_hex(ies, id):
2351 return binascii.hexlify(struct.pack('BB', id, len(ies[id])) + ies[id])
2352
2353def test_ap_ft_reassoc_proto(dev, apdev):
2354 """WPA2-PSK-FT AP Reassociation Request frame parsing"""
2355 ssid = "test-ft"
2356 passphrase="12345678"
2357
2358 params = ft_params1(ssid=ssid, passphrase=passphrase)
2359 hapd0 = hostapd.add_ap(apdev[0], params)
2360 params = ft_params2(ssid=ssid, passphrase=passphrase)
2361 hapd1 = hostapd.add_ap(apdev[1], params)
2362
2363 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
2364 ieee80211w="1", scan_freq="2412")
2365 if dev[0].get_status_field('bssid') == hapd0.own_addr():
2366 hapd1ap = hapd0
2367 hapd2ap = hapd1
2368 else:
2369 hapd1ap = hapd1
2370 hapd2ap = hapd0
2371
2372 dev[0].scan_for_bss(hapd2ap.own_addr(), freq="2412")
2373 hapd2ap.set("ext_mgmt_frame_handling", "1")
2374 dev[0].request("ROAM " + hapd2ap.own_addr())
2375
2376 while True:
2377 req = hapd2ap.mgmt_rx()
2378 hapd2ap.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + binascii.hexlify(req['frame']))
2379 if req['subtype'] == 11:
2380 break
2381
2382 while True:
2383 req = hapd2ap.mgmt_rx()
2384 if req['subtype'] == 2:
2385 break
2386 hapd2ap.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + binascii.hexlify(req['frame']))
2387
2388 # IEEE 802.11 header + fixed fields before IEs
2389 hdr = binascii.hexlify(req['frame'][0:34])
2390 ies = parse_ie(binascii.hexlify(req['frame'][34:]))
2391 # First elements: SSID, Supported Rates, Extended Supported Rates
2392 ies1 = ie_hex(ies, 0) + ie_hex(ies, 1) + ie_hex(ies, 50)
2393
2394 rsne = ie_hex(ies, 48)
2395 mde = ie_hex(ies, 54)
2396 fte = ie_hex(ies, 55)
2397 tests = [ ]
2398 # RSN: Trying to use FT, but MDIE not included
2399 tests += [ rsne ]
2400 # RSN: Attempted to use unknown MDIE
2401 tests += [ rsne + "3603000000" ]
2402 # Invalid RSN pairwise cipher
2403 tests += [ "30260100000fac040100000fac030100000fac040000010029208a42cd25c85aa571567dce10dae3" ]
2404 # FT: No PMKID in RSNIE
2405 tests += [ "30160100000fac040100000fac040100000fac0400000000" + ie_hex(ies, 54) ]
2406 # FT: Invalid FTIE
2407 tests += [ rsne + mde ]
2408 # FT: RIC IE(s) in the frame, but not included in protected IE count
2409 # FT: Failed to parse FT IEs
2410 tests += [ rsne + mde + fte + "3900" ]
2411 # FT: SNonce mismatch in FTIE
2412 tests += [ rsne + mde + "37520000" + 16*"00" + 32*"00" + 32*"00" ]
2413 # FT: ANonce mismatch in FTIE
2414 tests += [ rsne + mde + fte[0:40] + 32*"00" + fte[104:] ]
2415 # FT: No R0KH-ID subelem in FTIE
2416 tests += [ rsne + mde + "3752" + fte[4:168] ]
2417 # FT: R0KH-ID in FTIE did not match with the current R0KH-ID
2418 tests += [ rsne + mde + "3755" + fte[4:168] + "0301ff" ]
2419 # FT: No R1KH-ID subelem in FTIE
2420 tests += [ rsne + mde + "375e" + fte[4:168] + "030a" + "nas1.w1.fi".encode("hex") ]
2421 # FT: Unknown R1KH-ID used in ReassocReq
2422 tests += [ rsne + mde + "3766" + fte[4:168] + "030a" + "nas1.w1.fi".encode("hex") + "0106000000000000" ]
2423 # FT: PMKID in Reassoc Req did not match with the PMKR1Name derived from auth request
2424 tests += [ rsne[:-32] + 16*"00" + mde + fte ]
2425 # Invalid MIC in FTIE
2426 tests += [ rsne + mde + fte[0:8] + 16*"00" + fte[40:] ]
2427 for t in tests:
2428 hapd2ap.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + hdr + ies1 + t)
2429
2430def test_ap_ft_reassoc_local_fail(dev, apdev):
2431 """WPA2-PSK-FT AP Reassociation Request frame and local failure"""
2432 ssid = "test-ft"
2433 passphrase="12345678"
2434
2435 params = ft_params1(ssid=ssid, passphrase=passphrase)
2436 hapd0 = hostapd.add_ap(apdev[0], params)
2437 params = ft_params2(ssid=ssid, passphrase=passphrase)
2438 hapd1 = hostapd.add_ap(apdev[1], params)
2439
2440 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
2441 ieee80211w="1", scan_freq="2412")
2442 if dev[0].get_status_field('bssid') == hapd0.own_addr():
2443 hapd1ap = hapd0
2444 hapd2ap = hapd1
2445 else:
2446 hapd1ap = hapd1
2447 hapd2ap = hapd0
2448
2449 dev[0].scan_for_bss(hapd2ap.own_addr(), freq="2412")
2450 # FT: Failed to calculate MIC
2451 with fail_test(hapd2ap, 1, "wpa_ft_validate_reassoc"):
2452 dev[0].request("ROAM " + hapd2ap.own_addr())
2453 ev = dev[0].wait_event(["CTRL-EVENT-ASSOC-REJECT"], timeout=10)
2454 dev[0].request("DISCONNECT")
2455 if ev is None:
2456 raise Exception("Association reject not seen")
d7f0bef9
JM		 2457
2458def test_ap_ft_reassoc_replay(dev, apdev, params):
2459 """WPA2-PSK-FT AP and replayed Reassociation Request frame"""
2460 capfile = os.path.join(params['logdir'], "hwsim0.pcapng")
2461 ssid = "test-ft"
2462 passphrase="12345678"
2463
2464 params = ft_params1(ssid=ssid, passphrase=passphrase)
2465 hapd0 = hostapd.add_ap(apdev[0], params)
2466 params = ft_params2(ssid=ssid, passphrase=passphrase)
2467 hapd1 = hostapd.add_ap(apdev[1], params)
2468
2469 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
2470 scan_freq="2412")
2471 if dev[0].get_status_field('bssid') == hapd0.own_addr():
2472 hapd1ap = hapd0
2473 hapd2ap = hapd1
2474 else:
2475 hapd1ap = hapd1
2476 hapd2ap = hapd0
2477
2478 dev[0].scan_for_bss(hapd2ap.own_addr(), freq="2412")
2479 hapd2ap.set("ext_mgmt_frame_handling", "1")
2480 dev[0].dump_monitor()
2481 if "OK" not in dev[0].request("ROAM " + hapd2ap.own_addr()):
2482 raise Exception("ROAM failed")
2483
2484 reassocreq = None
2485 count = 0
2486 while count < 100:
2487 req = hapd2ap.mgmt_rx()
2488 count += 1
2489 hapd2ap.dump_monitor()
2490 hapd2ap.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + binascii.hexlify(req['frame']))
2491 if req['subtype'] == 2:
2492 reassocreq = req
2493 ev = hapd2ap.wait_event(["MGMT-TX-STATUS"], timeout=5)
2494 if ev is None:
2495 raise Exception("No TX status seen")
2496 cmd = "MGMT_TX_STATUS_PROCESS %s" % (" ".join(ev.split(' ')[1:4]))
2497 if "OK" not in hapd2ap.request(cmd):
2498 raise Exception("MGMT_TX_STATUS_PROCESS failed")
2499 break
2500 hapd2ap.set("ext_mgmt_frame_handling", "0")
2501 if reassocreq is None:
2502 raise Exception("No Reassociation Request frame seen")
2503 dev[0].wait_connected()
2504 dev[0].dump_monitor()
2505 hapd2ap.dump_monitor()
2506
2507 hwsim_utils.test_connectivity(dev[0], hapd2ap)
2508
2509 logger.info("Replay the last Reassociation Request frame")
2510 hapd2ap.dump_monitor()
2511 hapd2ap.set("ext_mgmt_frame_handling", "1")
2512 hapd2ap.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + binascii.hexlify(req['frame']))
2513 ev = hapd2ap.wait_event(["MGMT-TX-STATUS"], timeout=5)
2514 if ev is None:
2515 raise Exception("No TX status seen")
2516 cmd = "MGMT_TX_STATUS_PROCESS %s" % (" ".join(ev.split(' ')[1:4]))
2517 if "OK" not in hapd2ap.request(cmd):
2518 raise Exception("MGMT_TX_STATUS_PROCESS failed")
2519 hapd2ap.set("ext_mgmt_frame_handling", "0")
2520
2521 try:
2522 hwsim_utils.test_connectivity(dev[0], hapd2ap)
2523 ok = True
2524 except:
2525 ok = False
2526
2527 ap = hapd2ap.own_addr()
2528 sta = dev[0].own_addr()
2529 filt = "wlan.fc.type == 2 && " + \
2530 "wlan.da == " + sta + " && " + \
2531 "wlan.sa == " + ap
2532 fields = [ "wlan.ccmp.extiv" ]
2533 res = run_tshark(capfile, filt, fields)
2534 vals = res.splitlines()
2535 logger.info("CCMP PN: " + str(vals))
2536 if len(vals) < 2:
2537 raise Exception("Could not find all CCMP protected frames from capture")
2538 if len(set(vals)) < len(vals):
2539 raise Exception("Duplicate CCMP PN used")
2540
2541 if not ok:
2542 raise Exception("The second hwsim connectivity test failed")
0dc3c5f2
JM		 2543
2544def test_ap_ft_psk_file(dev, apdev):
2545 """WPA2-PSK-FT AP with PSK from a file"""
2546 ssid = "test-ft"
2547 passphrase="12345678"
2548
2549 params = ft_params1a(ssid=ssid, passphrase=passphrase)
2550 params['wpa_psk_file'] = 'hostapd.wpa_psk'
2551 hapd = hostapd.add_ap(apdev[0], params)
2552
2553 dev[1].connect(ssid, psk="very secret",
2554 key_mgmt="FT-PSK", proto="WPA2", ieee80211w="1",
2555 scan_freq="2412", wait_connect=False)
2556 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
2557 ieee80211w="1", scan_freq="2412")
2558 dev[0].request("REMOVE_NETWORK all")
2559 dev[0].wait_disconnected()
2560 dev[0].connect(ssid, psk="very secret", key_mgmt="FT-PSK", proto="WPA2",
2561 ieee80211w="1", scan_freq="2412")
2562 dev[0].request("REMOVE_NETWORK all")
2563 dev[0].wait_disconnected()
2564 dev[0].connect(ssid, psk="secret passphrase",
2565 key_mgmt="FT-PSK", proto="WPA2", ieee80211w="1",
2566 scan_freq="2412")
2567 dev[2].connect(ssid, psk="another passphrase for all STAs",
2568 key_mgmt="FT-PSK", proto="WPA2", ieee80211w="1",
2569 scan_freq="2412")
2570 ev = dev[1].wait_event(["WPA: 4-Way Handshake failed"], timeout=10)
2571 if ev is None:
2572 raise Exception("Timed out while waiting for failure report")
2573 dev[1].request("REMOVE_NETWORK all")
62566bc2
JM		 2574
2575def test_ap_ft_eap_ap_config_change(dev, apdev):
2576 """WPA2-EAP-FT AP changing from 802.1X-only to FT-only"""
2577 ssid = "test-ft"
2578 passphrase="12345678"
2579 bssid = apdev[0]['bssid']
2580
2581 radius = hostapd.radius_params()
2582 params = ft_params1(ssid=ssid, passphrase=passphrase, discovery=True)
2583 params['wpa_key_mgmt'] = "WPA-EAP"
2584 params["ieee8021x"] = "1"
2585 params["pmk_r1_push"] = "0"
2586 params["r0kh"] = "ff:ff:ff:ff:ff:ff * 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
2587 params["r1kh"] = "00:00:00:00:00:00 00:00:00:00:00:00 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
2588 params["eap_server"] = "0"
2589 params = dict(radius.items() + params.items())
2590 hapd = hostapd.add_ap(apdev[0], params)
2591
2592 dev[0].connect(ssid, key_mgmt="FT-EAP WPA-EAP", proto="WPA2",
2593 eap="GPSK", identity="gpsk user",
2594 password="abcdefghijklmnop0123456789abcdef",
2595 scan_freq="2412")
2596 dev[0].request("DISCONNECT")
2597 dev[0].wait_disconnected()
2598 dev[0].dump_monitor()
2599
2600 hapd.disable()
2601 hapd.set('wpa_key_mgmt', "FT-EAP")
2602 hapd.enable()
2603
2604 dev[0].request("BSS_FLUSH 0")
2605 dev[0].scan_for_bss(bssid, 2412, force_scan=True, only_new=True)
2606
2607 dev[0].request("RECONNECT")
2608 dev[0].wait_connected()
55b3cda7
JM		 2609
2610def test_ap_ft_eap_sha384(dev, apdev):
2611 """WPA2-EAP-FT with SHA384"""
2612 ssid = "test-ft"
2613 passphrase="12345678"
2614
2615 radius = hostapd.radius_params()
2616 params = ft_params1(ssid=ssid, passphrase=passphrase)
2617 params["ieee80211w"] = "2";
2618 params['wpa_key_mgmt'] = "FT-EAP-SHA384"
2619 params["ieee8021x"] = "1"
2620 params = dict(radius.items() + params.items())
2621 hapd0 = hostapd.add_ap(apdev[0], params)
2622 params = ft_params2(ssid=ssid, passphrase=passphrase)
2623 params["ieee80211w"] = "2";
2624 params['wpa_key_mgmt'] = "FT-EAP-SHA384"
2625 params["ieee8021x"] = "1"
2626 params = dict(radius.items() + params.items())
2627 hapd1 = hostapd.add_ap(apdev[1], params)
2628
2629 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, eap=True,
2630 sha384=True)
2631
2632def test_ap_ft_eap_sha384_over_ds(dev, apdev):
2633 """WPA2-EAP-FT with SHA384 over DS"""
2634 ssid = "test-ft"
2635 passphrase="12345678"
2636
2637 radius = hostapd.radius_params()
2638 params = ft_params1(ssid=ssid, passphrase=passphrase)
2639 params["ieee80211w"] = "2";
2640 params['wpa_key_mgmt'] = "FT-EAP-SHA384"
2641 params["ieee8021x"] = "1"
2642 params = dict(radius.items() + params.items())
2643 hapd0 = hostapd.add_ap(apdev[0], params)
2644 params = ft_params2(ssid=ssid, passphrase=passphrase)
2645 params["ieee80211w"] = "2";
2646 params['wpa_key_mgmt'] = "FT-EAP-SHA384"
2647 params["ieee8021x"] = "1"
2648 params = dict(radius.items() + params.items())
2649 hapd1 = hostapd.add_ap(apdev[1], params)
2650
2651 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
2652 eap=True, sha384=True)
392aba4e
JM		 2653
2654def test_ap_ft_roam_rrm(dev, apdev):
2655 """WPA2-PSK-FT AP and radio measurement request"""
2656 ssid = "test-ft"
2657 passphrase="12345678"
2658
2659 params = ft_params1(ssid=ssid, passphrase=passphrase)
2660 params["rrm_beacon_report"] = "1"
2661 hapd0 = hostapd.add_ap(apdev[0], params)
2662 bssid0 = hapd0.own_addr()
2663
2664 addr = dev[0].own_addr()
2665 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
2666 scan_freq="2412")
2667 check_beacon_req(hapd0, addr, 1)
2668
2669 params = ft_params2(ssid=ssid, passphrase=passphrase)
2670 params["rrm_beacon_report"] = "1"
2671 hapd1 = hostapd.add_ap(apdev[1], params)
2672 bssid1 = hapd1.own_addr()
2673
2674 dev[0].scan_for_bss(bssid1, freq=2412)
2675 dev[0].roam(bssid1)
2676 check_beacon_req(hapd1, addr, 2)
2677
2678 dev[0].scan_for_bss(bssid0, freq=2412)
2679 dev[0].roam(bssid0)
2680 check_beacon_req(hapd0, addr, 3)
Unnamed repository; edit this file 'description' to name the repository.