]> git.ipfire.org Git - thirdparty/hostap.git/blame - tests/hwsim/test_ap_ft.py
projects / thirdparty / hostap.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
tests: Add more memory details on key-lifetime-in-memory
[thirdparty/hostap.git] / tests / hwsim / test_ap_ft.py
CommitLineData
cd7f1b9a 1# Fast BSS Transition tests
34d3eaa8 2# Copyright (c) 2013-2015, Jouni Malinen <j@w1.fi>
cd7f1b9a
JM		 3#
4# This software may be distributed under the terms of the BSD license.
5# See README for more details.
6
5b3c40a6
JM		 7import binascii
8import os
cd7f1b9a
JM		 9import time
10import subprocess
11import logging
c9aa4308 12logger = logging.getLogger()
cd7f1b9a
JM		 13
14import hwsim_utils
15import hostapd
38934ed1 16from utils import HwsimSkip, alloc_fail, fail_test, skip_with_fips
cd7f1b9a 17from wlantest import Wlantest
5b3c40a6 18from test_ap_psk import check_mib, find_wpas_process, read_process_memory, verify_not_present, get_key_locations
cd7f1b9a
JM		 19
20def ft_base_rsn():
21 params = { "wpa": "2",
22 "wpa_key_mgmt": "FT-PSK",
23 "rsn_pairwise": "CCMP" }
24 return params
25
26def ft_base_mixed():
27 params = { "wpa": "3",
28 "wpa_key_mgmt": "WPA-PSK FT-PSK",
29 "wpa_pairwise": "TKIP",
30 "rsn_pairwise": "CCMP" }
31 return params
32
33def ft_params(rsn=True, ssid=None, passphrase=None):
34 if rsn:
35 params = ft_base_rsn()
36 else:
37 params = ft_base_mixed()
38 if ssid:
39 params["ssid"] = ssid
40 if passphrase:
41 params["wpa_passphrase"] = passphrase
42
43 params["mobility_domain"] = "a1b2"
44 params["r0_key_lifetime"] = "10000"
45 params["pmk_r1_push"] = "1"
46 params["reassociation_deadline"] = "1000"
47 return params
48
49def ft_params1(rsn=True, ssid=None, passphrase=None):
50 params = ft_params(rsn, ssid, passphrase)
51 params['nas_identifier'] = "nas1.w1.fi"
52 params['r1_key_holder'] = "000102030405"
53 params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f",
54 "02:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f" ]
55 params['r1kh'] = "02:00:00:00:04:00 00:01:02:03:04:06 200102030405060708090a0b0c0d0e0f"
56 return params
57
58def ft_params2(rsn=True, ssid=None, passphrase=None):
59 params = ft_params(rsn, ssid, passphrase)
60 params['nas_identifier'] = "nas2.w1.fi"
61 params['r1_key_holder'] = "000102030406"
62 params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f",
63 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f" ]
64 params['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0e0f"
65 return params
66
3b808945
JM		 67def ft_params1_r0kh_mismatch(rsn=True, ssid=None, passphrase=None):
68 params = ft_params(rsn, ssid, passphrase)
69 params['nas_identifier'] = "nas1.w1.fi"
70 params['r1_key_holder'] = "000102030405"
71 params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f",
72 "12:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f" ]
73 params['r1kh'] = "12:00:00:00:04:00 10:01:02:03:04:06 200102030405060708090a0b0c0d0e0f"
74 return params
75
76def ft_params2_incorrect_rrb_key(rsn=True, ssid=None, passphrase=None):
77 params = ft_params(rsn, ssid, passphrase)
78 params['nas_identifier'] = "nas2.w1.fi"
79 params['r1_key_holder'] = "000102030406"
80 params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0ef1",
81 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0ef2" ]
82 params['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0ef3"
83 return params
84
85def ft_params2_r0kh_mismatch(rsn=True, ssid=None, passphrase=None):
86 params = ft_params(rsn, ssid, passphrase)
87 params['nas_identifier'] = "nas2.w1.fi"
88 params['r1_key_holder'] = "000102030406"
89 params['r0kh'] = [ "12:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f",
90 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f" ]
91 params['r1kh'] = "12:00:00:00:03:00 10:01:02:03:04:05 300102030405060708090a0b0c0d0e0f"
92 return params
93
7b741a53
JM		 94def run_roams(dev, apdev, hapd0, hapd1, ssid, passphrase, over_ds=False,
95 sae=False, eap=False, fail_test=False, roams=1,
1025603b 96 pairwise_cipher="CCMP", group_cipher="TKIP CCMP", ptk_rekey="0"):
cd7f1b9a 97 logger.info("Connect to first AP")
6f62809b
JM		 98 if eap:
99 dev.connect(ssid, key_mgmt="FT-EAP", proto="WPA2", ieee80211w="1",
2f816c21
JM		 100 eap="GPSK", identity="gpsk user",
101 password="abcdefghijklmnop0123456789abcdef",
7b741a53 102 scan_freq="2412",
1025603b
JM		 103 pairwise=pairwise_cipher, group=group_cipher,
104 wpa_ptk_rekey=ptk_rekey)
6e658cc4 105 else:
6f62809b
JM		 106 if sae:
107 key_mgmt="FT-SAE"
108 else:
109 key_mgmt="FT-PSK"
110 dev.connect(ssid, psk=passphrase, key_mgmt=key_mgmt, proto="WPA2",
7b741a53 111 ieee80211w="1", scan_freq="2412",
1025603b
JM		 112 pairwise=pairwise_cipher, group=group_cipher,
113 wpa_ptk_rekey=ptk_rekey)
cd7f1b9a
JM		 114 if dev.get_status_field('bssid') == apdev[0]['bssid']:
115 ap1 = apdev[0]
116 ap2 = apdev[1]
a8375c94
JM		 117 hapd1ap = hapd0
118 hapd2ap = hapd1
cd7f1b9a
JM		 119 else:
120 ap1 = apdev[1]
121 ap2 = apdev[0]
a8375c94
JM		 122 hapd1ap = hapd1
123 hapd2ap = hapd0
124 hwsim_utils.test_connectivity(dev, hapd1ap)
cd7f1b9a 125
655bc8bf 126 dev.scan_for_bss(ap2['bssid'], freq="2412")
40602101
JM		 127
128 for i in range(0, roams):
129 logger.info("Roam to the second AP")
130 if over_ds:
131 dev.roam_over_ds(ap2['bssid'], fail_test=fail_test)
132 else:
133 dev.roam(ap2['bssid'], fail_test=fail_test)
134 if fail_test:
135 return
136 if dev.get_status_field('bssid') != ap2['bssid']:
137 raise Exception("Did not connect to correct AP")
138 if i == 0 or i == roams - 1:
a8375c94 139 hwsim_utils.test_connectivity(dev, hapd2ap)
40602101
JM		 140
141 logger.info("Roam back to the first AP")
142 if over_ds:
143 dev.roam_over_ds(ap1['bssid'])
144 else:
145 dev.roam(ap1['bssid'])
146 if dev.get_status_field('bssid') != ap1['bssid']:
147 raise Exception("Did not connect to correct AP")
148 if i == 0 or i == roams - 1:
a8375c94 149 hwsim_utils.test_connectivity(dev, hapd1ap)
cd7f1b9a
JM		 150
151def test_ap_ft(dev, apdev):
152 """WPA2-PSK-FT AP"""
153 ssid = "test-ft"
154 passphrase="12345678"
155
156 params = ft_params1(ssid=ssid, passphrase=passphrase)
a8375c94 157 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
cd7f1b9a 158 params = ft_params2(ssid=ssid, passphrase=passphrase)
a8375c94 159 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
cd7f1b9a 160
a8375c94 161 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
91bc6c36
JM		 162 if "[WPA2-FT/PSK-CCMP]" not in dev[0].request("SCAN_RESULTS"):
163 raise Exception("Scan results missing RSN element info")
cd7f1b9a 164
40602101
JM		 165def test_ap_ft_many(dev, apdev):
166 """WPA2-PSK-FT AP multiple times"""
167 ssid = "test-ft"
168 passphrase="12345678"
169
170 params = ft_params1(ssid=ssid, passphrase=passphrase)
a8375c94 171 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
40602101 172 params = ft_params2(ssid=ssid, passphrase=passphrase)
a8375c94 173 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
40602101 174
a8375c94 175 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, roams=50)
40602101 176
cd7f1b9a
JM		 177def test_ap_ft_mixed(dev, apdev):
178 """WPA2-PSK-FT mixed-mode AP"""
179 ssid = "test-ft-mixed"
180 passphrase="12345678"
181
182 params = ft_params1(rsn=False, ssid=ssid, passphrase=passphrase)
65038313
JM		 183 hapd = hostapd.add_ap(apdev[0]['ifname'], params)
184 key_mgmt = hapd.get_config()['key_mgmt']
185 vals = key_mgmt.split(' ')
186 if vals[0] != "WPA-PSK" or vals[1] != "FT-PSK":
187 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
cd7f1b9a 188 params = ft_params2(rsn=False, ssid=ssid, passphrase=passphrase)
a8375c94 189 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
cd7f1b9a 190
a8375c94 191 run_roams(dev[0], apdev, hapd, hapd1, ssid, passphrase)
cd7f1b9a
JM		 192
193def test_ap_ft_pmf(dev, apdev):
194 """WPA2-PSK-FT AP with PMF"""
195 ssid = "test-ft"
196 passphrase="12345678"
197
198 params = ft_params1(ssid=ssid, passphrase=passphrase)
199 params["ieee80211w"] = "2";
a8375c94 200 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
cd7f1b9a
JM		 201 params = ft_params2(ssid=ssid, passphrase=passphrase)
202 params["ieee80211w"] = "2";
a8375c94 203 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
cd7f1b9a 204
a8375c94 205 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
b553eab1
JM		 206
207def test_ap_ft_over_ds(dev, apdev):
208 """WPA2-PSK-FT AP over DS"""
209 ssid = "test-ft"
210 passphrase="12345678"
211
212 params = ft_params1(ssid=ssid, passphrase=passphrase)
a8375c94 213 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
b553eab1 214 params = ft_params2(ssid=ssid, passphrase=passphrase)
a8375c94 215 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
b553eab1 216
a8375c94 217 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True)
eaf3f9b1
JM		 218 check_mib(dev[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-4"),
219 ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-4") ])
b553eab1 220
40602101
JM		 221def test_ap_ft_over_ds_many(dev, apdev):
222 """WPA2-PSK-FT AP over DS multiple times"""
223 ssid = "test-ft"
224 passphrase="12345678"
225
226 params = ft_params1(ssid=ssid, passphrase=passphrase)
a8375c94 227 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
40602101 228 params = ft_params2(ssid=ssid, passphrase=passphrase)
a8375c94 229 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
40602101 230
a8375c94
JM		 231 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
232 roams=50)
40602101 233
c337d07a
JM		 234def test_ap_ft_over_ds_unknown_target(dev, apdev):
235 """WPA2-PSK-FT AP"""
236 ssid = "test-ft"
237 passphrase="12345678"
238
239 params = ft_params1(ssid=ssid, passphrase=passphrase)
240 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
241
242 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
243 scan_freq="2412")
244 dev[0].roam_over_ds("02:11:22:33:44:55", fail_test=True)
245
211bb7c5
JM		 246def test_ap_ft_over_ds_unexpected(dev, apdev):
247 """WPA2-PSK-FT AP over DS and unexpected response"""
248 ssid = "test-ft"
249 passphrase="12345678"
250
251 params = ft_params1(ssid=ssid, passphrase=passphrase)
252 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
253 params = ft_params2(ssid=ssid, passphrase=passphrase)
254 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
255
256 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
257 scan_freq="2412")
258 if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
259 ap1 = apdev[0]
260 ap2 = apdev[1]
261 hapd1ap = hapd0
262 hapd2ap = hapd1
263 else:
264 ap1 = apdev[1]
265 ap2 = apdev[0]
266 hapd1ap = hapd1
267 hapd2ap = hapd0
268
269 addr = dev[0].own_addr()
270 hapd1ap.set("ext_mgmt_frame_handling", "1")
271 logger.info("Foreign STA address")
272 msg = {}
273 msg['fc'] = 13 << 4
274 msg['da'] = addr
275 msg['sa'] = ap1['bssid']
276 msg['bssid'] = ap1['bssid']
277 msg['payload'] = binascii.unhexlify("06021122334455660102030405060000")
278 hapd1ap.mgmt_tx(msg)
279
280 logger.info("No over-the-DS in progress")
281 msg['payload'] = binascii.unhexlify("0602" + addr.replace(':', '') + "0102030405060000")
282 hapd1ap.mgmt_tx(msg)
283
284 logger.info("Non-zero status code")
285 msg['payload'] = binascii.unhexlify("0602" + addr.replace(':', '') + "0102030405060100")
286 hapd1ap.mgmt_tx(msg)
287
288 hapd1ap.dump_monitor()
289
290 dev[0].scan_for_bss(ap2['bssid'], freq="2412")
291 if "OK" not in dev[0].request("FT_DS " + ap2['bssid']):
292 raise Exception("FT_DS failed")
293
294 req = hapd1ap.mgmt_rx()
295
296 logger.info("Foreign Target AP")
297 msg['payload'] = binascii.unhexlify("0602" + addr.replace(':', '') + "0102030405060000")
298 hapd1ap.mgmt_tx(msg)
299
300 addrs = addr.replace(':', '') + ap2['bssid'].replace(':', '')
301
302 logger.info("No IEs")
303 msg['payload'] = binascii.unhexlify("0602" + addrs + "0000")
304 hapd1ap.mgmt_tx(msg)
305
306 logger.info("Invalid IEs (trigger parsing failure)")
307 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003700")
308 hapd1ap.mgmt_tx(msg)
309
310 logger.info("Too short MDIE")
311 msg['payload'] = binascii.unhexlify("0602" + addrs + "000036021122")
312 hapd1ap.mgmt_tx(msg)
313
314 logger.info("Mobility domain mismatch")
315 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603112201")
316 hapd1ap.mgmt_tx(msg)
317
318 logger.info("No FTIE")
319 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201")
320 hapd1ap.mgmt_tx(msg)
321
322 logger.info("FTIE SNonce mismatch")
323 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + "1000000000000000000000000000000000000000000000000000000000000001" + "030a6e6173322e77312e6669")
324 hapd1ap.mgmt_tx(msg)
325
326 logger.info("No R0KH-ID subelem in FTIE")
327 snonce = binascii.hexlify(req['payload'][111:111+32])
328 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b20137520000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce)
329 hapd1ap.mgmt_tx(msg)
330
331 logger.info("No R0KH-ID subelem mismatch in FTIE")
332 snonce = binascii.hexlify(req['payload'][111:111+32])
333 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce + "030a11223344556677889900")
334 hapd1ap.mgmt_tx(msg)
335
336 logger.info("No R1KH-ID subelem in FTIE")
337 r0khid = binascii.hexlify(req['payload'][145:145+10])
338 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce + "030a" + r0khid)
339 hapd1ap.mgmt_tx(msg)
340
341 logger.info("No RSNE")
342 r0khid = binascii.hexlify(req['payload'][145:145+10])
343 msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b20137660000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce + "030a" + r0khid + "0106000102030405")
344 hapd1ap.mgmt_tx(msg)
345
b553eab1
JM		 346def test_ap_ft_pmf_over_ds(dev, apdev):
347 """WPA2-PSK-FT AP over DS with PMF"""
348 ssid = "test-ft"
349 passphrase="12345678"
350
351 params = ft_params1(ssid=ssid, passphrase=passphrase)
352 params["ieee80211w"] = "2";
a8375c94 353 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
b553eab1
JM		 354 params = ft_params2(ssid=ssid, passphrase=passphrase)
355 params["ieee80211w"] = "2";
a8375c94 356 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
b553eab1 357
a8375c94 358 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True)
6e658cc4 359
aaba98d3
JM		 360def test_ap_ft_over_ds_pull(dev, apdev):
361 """WPA2-PSK-FT AP over DS (pull PMK)"""
362 ssid = "test-ft"
363 passphrase="12345678"
364
365 params = ft_params1(ssid=ssid, passphrase=passphrase)
366 params["pmk_r1_push"] = "0"
a8375c94 367 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
aaba98d3
JM		 368 params = ft_params2(ssid=ssid, passphrase=passphrase)
369 params["pmk_r1_push"] = "0"
a8375c94 370 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
aaba98d3 371
a8375c94 372 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True)
aaba98d3 373
6e658cc4
JM		 374def test_ap_ft_sae(dev, apdev):
375 """WPA2-PSK-FT-SAE AP"""
b9749b6a
JM		 376 if "SAE" not in dev[0].get_capability("auth_alg"):
377 raise HwsimSkip("SAE not supported")
6e658cc4
JM		 378 ssid = "test-ft"
379 passphrase="12345678"
380
381 params = ft_params1(ssid=ssid, passphrase=passphrase)
382 params['wpa_key_mgmt'] = "FT-SAE"
a8375c94 383 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
6e658cc4
JM		 384 params = ft_params2(ssid=ssid, passphrase=passphrase)
385 params['wpa_key_mgmt'] = "FT-SAE"
65038313
JM		 386 hapd = hostapd.add_ap(apdev[1]['ifname'], params)
387 key_mgmt = hapd.get_config()['key_mgmt']
388 if key_mgmt.split(' ')[0] != "FT-SAE":
389 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
6e658cc4 390
17ffdf39 391 dev[0].request("SET sae_groups ")
a8375c94 392 run_roams(dev[0], apdev, hapd0, hapd, ssid, passphrase, sae=True)
6e658cc4
JM		 393
394def test_ap_ft_sae_over_ds(dev, apdev):
395 """WPA2-PSK-FT-SAE AP over DS"""
b9749b6a
JM		 396 if "SAE" not in dev[0].get_capability("auth_alg"):
397 raise HwsimSkip("SAE not supported")
6e658cc4
JM		 398 ssid = "test-ft"
399 passphrase="12345678"
400
401 params = ft_params1(ssid=ssid, passphrase=passphrase)
402 params['wpa_key_mgmt'] = "FT-SAE"
a8375c94 403 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
6e658cc4
JM		 404 params = ft_params2(ssid=ssid, passphrase=passphrase)
405 params['wpa_key_mgmt'] = "FT-SAE"
a8375c94 406 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
6e658cc4 407
17ffdf39 408 dev[0].request("SET sae_groups ")
a8375c94
JM		 409 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, sae=True,
410 over_ds=True)
6f62809b
JM		 411
412def test_ap_ft_eap(dev, apdev):
413 """WPA2-EAP-FT AP"""
414 ssid = "test-ft"
415 passphrase="12345678"
416
417 radius = hostapd.radius_params()
418 params = ft_params1(ssid=ssid, passphrase=passphrase)
419 params['wpa_key_mgmt'] = "FT-EAP"
420 params["ieee8021x"] = "1"
421 params = dict(radius.items() + params.items())
65038313
JM		 422 hapd = hostapd.add_ap(apdev[0]['ifname'], params)
423 key_mgmt = hapd.get_config()['key_mgmt']
424 if key_mgmt.split(' ')[0] != "FT-EAP":
425 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
6f62809b
JM		 426 params = ft_params2(ssid=ssid, passphrase=passphrase)
427 params['wpa_key_mgmt'] = "FT-EAP"
428 params["ieee8021x"] = "1"
429 params = dict(radius.items() + params.items())
a8375c94 430 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
6f62809b 431
a8375c94 432 run_roams(dev[0], apdev, hapd, hapd1, ssid, passphrase, eap=True)
91bc6c36
JM		 433 if "[WPA2-FT/EAP-CCMP]" not in dev[0].request("SCAN_RESULTS"):
434 raise Exception("Scan results missing RSN element info")
eaf3f9b1
JM		 435 check_mib(dev[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-3"),
436 ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-3") ])
aaba98d3 437
4013d688
JM		 438 # Verify EAPOL reauthentication after FT protocol
439 if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
440 ap = hapd
441 else:
442 ap = hapd1
443 ap.request("EAPOL_REAUTH " + dev[0].own_addr())
444 ev = dev[0].wait_event(["CTRL-EVENT-EAP-STARTED"], timeout=5)
445 if ev is None:
446 raise Exception("EAP authentication did not start")
447 ev = dev[0].wait_event(["CTRL-EVENT-EAP-SUCCESS"], timeout=5)
448 if ev is None:
449 raise Exception("EAP authentication did not succeed")
450 time.sleep(0.1)
451 hwsim_utils.test_connectivity(dev[0], ap)
452
aaba98d3
JM		 453def test_ap_ft_eap_pull(dev, apdev):
454 """WPA2-EAP-FT AP (pull PMK)"""
455 ssid = "test-ft"
456 passphrase="12345678"
457
458 radius = hostapd.radius_params()
459 params = ft_params1(ssid=ssid, passphrase=passphrase)
460 params['wpa_key_mgmt'] = "FT-EAP"
461 params["ieee8021x"] = "1"
462 params["pmk_r1_push"] = "0"
463 params = dict(radius.items() + params.items())
464 hapd = hostapd.add_ap(apdev[0]['ifname'], params)
465 key_mgmt = hapd.get_config()['key_mgmt']
466 if key_mgmt.split(' ')[0] != "FT-EAP":
467 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
468 params = ft_params2(ssid=ssid, passphrase=passphrase)
469 params['wpa_key_mgmt'] = "FT-EAP"
470 params["ieee8021x"] = "1"
471 params["pmk_r1_push"] = "0"
472 params = dict(radius.items() + params.items())
a8375c94 473 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
aaba98d3 474
a8375c94 475 run_roams(dev[0], apdev, hapd, hapd1, ssid, passphrase, eap=True)
3b808945
JM		 476
477def test_ap_ft_mismatching_rrb_key_push(dev, apdev):
478 """WPA2-PSK-FT AP over DS with mismatching RRB key (push)"""
479 ssid = "test-ft"
480 passphrase="12345678"
481
482 params = ft_params1(ssid=ssid, passphrase=passphrase)
483 params["ieee80211w"] = "2";
a8375c94 484 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
3b808945
JM		 485 params = ft_params2_incorrect_rrb_key(ssid=ssid, passphrase=passphrase)
486 params["ieee80211w"] = "2";
a8375c94 487 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
3b808945 488
a8375c94
JM		 489 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
490 fail_test=True)
3b808945
JM		 491
492def test_ap_ft_mismatching_rrb_key_pull(dev, apdev):
493 """WPA2-PSK-FT AP over DS with mismatching RRB key (pull)"""
494 ssid = "test-ft"
495 passphrase="12345678"
496
497 params = ft_params1(ssid=ssid, passphrase=passphrase)
498 params["pmk_r1_push"] = "0"
a8375c94 499 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
3b808945
JM		 500 params = ft_params2_incorrect_rrb_key(ssid=ssid, passphrase=passphrase)
501 params["pmk_r1_push"] = "0"
a8375c94 502 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
3b808945 503
a8375c94
JM		 504 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
505 fail_test=True)
3b808945 506
ae14a2e2
JM		 507def test_ap_ft_mismatching_r0kh_id_pull(dev, apdev):
508 """WPA2-PSK-FT AP over DS with mismatching R0KH-ID (pull)"""
509 ssid = "test-ft"
510 passphrase="12345678"
511
512 params = ft_params1(ssid=ssid, passphrase=passphrase)
513 params["pmk_r1_push"] = "0"
514 params["nas_identifier"] = "nas0.w1.fi"
515 hostapd.add_ap(apdev[0]['ifname'], params)
2f816c21
JM		 516 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
517 scan_freq="2412")
ae14a2e2
JM		 518
519 params = ft_params2(ssid=ssid, passphrase=passphrase)
520 params["pmk_r1_push"] = "0"
521 hostapd.add_ap(apdev[1]['ifname'], params)
522
523 dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
524 dev[0].roam_over_ds(apdev[1]['bssid'], fail_test=True)
525
3b808945
JM		 526def test_ap_ft_mismatching_rrb_r0kh_push(dev, apdev):
527 """WPA2-PSK-FT AP over DS with mismatching R0KH key (push)"""
528 ssid = "test-ft"
529 passphrase="12345678"
530
531 params = ft_params1(ssid=ssid, passphrase=passphrase)
532 params["ieee80211w"] = "2";
a8375c94 533 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
3b808945
JM		 534 params = ft_params2_r0kh_mismatch(ssid=ssid, passphrase=passphrase)
535 params["ieee80211w"] = "2";
a8375c94 536 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
3b808945 537
a8375c94
JM		 538 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
539 fail_test=True)
3b808945
JM		 540
541def test_ap_ft_mismatching_rrb_r0kh_pull(dev, apdev):
542 """WPA2-PSK-FT AP over DS with mismatching R0KH key (pull)"""
543 ssid = "test-ft"
544 passphrase="12345678"
545
546 params = ft_params1_r0kh_mismatch(ssid=ssid, passphrase=passphrase)
547 params["pmk_r1_push"] = "0"
a8375c94 548 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
3b808945
JM		 549 params = ft_params2(ssid=ssid, passphrase=passphrase)
550 params["pmk_r1_push"] = "0"
a8375c94 551 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
3b808945 552
a8375c94
JM		 553 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
554 fail_test=True)
c6b6e105
JM		 555
556def test_ap_ft_gtk_rekey(dev, apdev):
557 """WPA2-PSK-FT AP and GTK rekey"""
558 ssid = "test-ft"
559 passphrase="12345678"
560
561 params = ft_params1(ssid=ssid, passphrase=passphrase)
562 params['wpa_group_rekey'] = '1'
a8375c94 563 hapd = hostapd.add_ap(apdev[0]['ifname'], params)
c6b6e105
JM		 564
565 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
2f816c21 566 ieee80211w="1", scan_freq="2412")
c6b6e105
JM		 567
568 ev = dev[0].wait_event(["WPA: Group rekeying completed"], timeout=2)
569 if ev is None:
570 raise Exception("GTK rekey timed out after initial association")
a8375c94 571 hwsim_utils.test_connectivity(dev[0], hapd)
c6b6e105
JM		 572
573 params = ft_params2(ssid=ssid, passphrase=passphrase)
574 params['wpa_group_rekey'] = '1'
a8375c94 575 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
c6b6e105
JM		 576
577 dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
578 dev[0].roam(apdev[1]['bssid'])
579 if dev[0].get_status_field('bssid') != apdev[1]['bssid']:
580 raise Exception("Did not connect to correct AP")
a8375c94 581 hwsim_utils.test_connectivity(dev[0], hapd1)
c6b6e105
JM		 582
583 ev = dev[0].wait_event(["WPA: Group rekeying completed"], timeout=2)
584 if ev is None:
585 raise Exception("GTK rekey timed out after FT protocol")
a8375c94 586 hwsim_utils.test_connectivity(dev[0], hapd1)
5b3c40a6
JM		 587
588def test_ft_psk_key_lifetime_in_memory(dev, apdev, params):
589 """WPA2-PSK-FT and key lifetime in memory"""
590 ssid = "test-ft"
591 passphrase="04c2726b4b8d5f1b4db9c07aa4d9e9d8f765cb5d25ec817e6cc4fcdd5255db0"
592 psk = '93c90846ff67af9037ed83fb72b63dbeddaa81d47f926c20909b5886f1d9358d'
593 pmk = binascii.unhexlify(psk)
594 p = ft_params1(ssid=ssid, passphrase=passphrase)
595 hapd0 = hostapd.add_ap(apdev[0]['ifname'], p)
596 p = ft_params2(ssid=ssid, passphrase=passphrase)
597 hapd1 = hostapd.add_ap(apdev[1]['ifname'], p)
598
599 pid = find_wpas_process(dev[0])
600
601 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
602 scan_freq="2412")
54f2cae2 603 time.sleep(1)
5b3c40a6
JM		 604
605 buf = read_process_memory(pid, pmk)
606
607 dev[0].request("DISCONNECT")
608 dev[0].wait_disconnected()
609
610 dev[0].relog()
611 pmkr0 = None
612 pmkr1 = None
613 ptk = None
614 gtk = None
615 with open(os.path.join(params['logdir'], 'log0'), 'r') as f:
616 for l in f.readlines():
617 if "FT: PMK-R0 - hexdump" in l:
618 val = l.strip().split(':')[3].replace(' ', '')
619 pmkr0 = binascii.unhexlify(val)
620 if "FT: PMK-R1 - hexdump" in l:
621 val = l.strip().split(':')[3].replace(' ', '')
622 pmkr1 = binascii.unhexlify(val)
f918b95b 623 if "FT: KCK - hexdump" in l:
5b3c40a6 624 val = l.strip().split(':')[3].replace(' ', '')
f918b95b
JM		 625 kck = binascii.unhexlify(val)
626 if "FT: KEK - hexdump" in l:
627 val = l.strip().split(':')[3].replace(' ', '')
628 kek = binascii.unhexlify(val)
629 if "FT: TK - hexdump" in l:
630 val = l.strip().split(':')[3].replace(' ', '')
631 tk = binascii.unhexlify(val)
5b3c40a6
JM		 632 if "WPA: Group Key - hexdump" in l:
633 val = l.strip().split(':')[3].replace(' ', '')
634 gtk = binascii.unhexlify(val)
f918b95b 635 if not pmkr0 or not pmkr1 or not kck or not kek or not tk or not gtk:
5b3c40a6
JM		 636 raise Exception("Could not find keys from debug log")
637 if len(gtk) != 16:
638 raise Exception("Unexpected GTK length")
639
5b3c40a6
JM		 640 logger.info("Checking keys in memory while associated")
641 get_key_locations(buf, pmk, "PMK")
642 get_key_locations(buf, pmkr0, "PMK-R0")
643 get_key_locations(buf, pmkr1, "PMK-R1")
644 if pmk not in buf:
81e787b7 645 raise HwsimSkip("PMK not found while associated")
5b3c40a6 646 if pmkr0 not in buf:
81e787b7 647 raise HwsimSkip("PMK-R0 not found while associated")
5b3c40a6 648 if pmkr1 not in buf:
81e787b7 649 raise HwsimSkip("PMK-R1 not found while associated")
5b3c40a6
JM		 650 if kck not in buf:
651 raise Exception("KCK not found while associated")
652 if kek not in buf:
653 raise Exception("KEK not found while associated")
654 if tk in buf:
655 raise Exception("TK found from memory")
656 if gtk in buf:
8eb45bde 657 get_key_locations(buf, gtk, "GTK")
5b3c40a6
JM		 658 raise Exception("GTK found from memory")
659
660 logger.info("Checking keys in memory after disassociation")
661 buf = read_process_memory(pid, pmk)
662 get_key_locations(buf, pmk, "PMK")
663 get_key_locations(buf, pmkr0, "PMK-R0")
664 get_key_locations(buf, pmkr1, "PMK-R1")
665
666 # Note: PMK/PSK is still present in network configuration
667
668 fname = os.path.join(params['logdir'],
669 'ft_psk_key_lifetime_in_memory.memctx-')
670 verify_not_present(buf, pmkr0, fname, "PMK-R0")
671 verify_not_present(buf, pmkr1, fname, "PMK-R1")
672 verify_not_present(buf, kck, fname, "KCK")
673 verify_not_present(buf, kek, fname, "KEK")
674 verify_not_present(buf, tk, fname, "TK")
675 verify_not_present(buf, gtk, fname, "GTK")
676
677 dev[0].request("REMOVE_NETWORK all")
678
679 logger.info("Checking keys in memory after network profile removal")
680 buf = read_process_memory(pid, pmk)
681 get_key_locations(buf, pmk, "PMK")
682 get_key_locations(buf, pmkr0, "PMK-R0")
683 get_key_locations(buf, pmkr1, "PMK-R1")
684
685 verify_not_present(buf, pmk, fname, "PMK")
686 verify_not_present(buf, pmkr0, fname, "PMK-R0")
687 verify_not_present(buf, pmkr1, fname, "PMK-R1")
688 verify_not_present(buf, kck, fname, "KCK")
689 verify_not_present(buf, kek, fname, "KEK")
690 verify_not_present(buf, tk, fname, "TK")
691 verify_not_present(buf, gtk, fname, "GTK")
664093b5
JM		 692
693def test_ap_ft_invalid_resp(dev, apdev):
694 """WPA2-PSK-FT AP and invalid response IEs"""
695 ssid = "test-ft"
696 passphrase="12345678"
697
698 params = ft_params1(ssid=ssid, passphrase=passphrase)
699 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
700 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
701 scan_freq="2412")
702
703 params = ft_params2(ssid=ssid, passphrase=passphrase)
704 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
705
706 tests = [
707 # Various IEs for test coverage. The last one is FTIE with invalid
708 # R1KH-ID subelement.
709 "020002000000" + "3800" + "38051122334455" + "3754000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010100",
710 # FTIE with invalid R0KH-ID subelement (len=0).
711 "020002000000" + "3754000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010300",
712 # FTIE with invalid R0KH-ID subelement (len=49).
713 "020002000000" + "378500010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001033101020304050607080910111213141516171819202122232425262728293031323334353637383940414243444546474849",
714 # Invalid RSNE.
715 "020002000000" + "3000",
716 # Required IEs missing from protected IE count.
717 "020002000000" + "3603a1b201" + "375200010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900",
718 # RIC missing from protected IE count.
719 "020002000000" + "3603a1b201" + "375200020203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900",
720 # Protected IE missing.
721 "020002000000" + "3603a1b201" + "375200ff0203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900" + "0000" ]
722 for t in tests:
723 dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
724 hapd1.set("ext_mgmt_frame_handling", "1")
725 hapd1.dump_monitor()
726 if "OK" not in dev[0].request("ROAM " + apdev[1]['bssid']):
727 raise Exception("ROAM failed")
728 auth = None
729 for i in range(20):
730 msg = hapd1.mgmt_rx()
731 if msg['subtype'] == 11:
732 auth = msg
733 break
734 if not auth:
735 raise Exception("Authentication frame not seen")
736
737 resp = {}
738 resp['fc'] = auth['fc']
739 resp['da'] = auth['sa']
740 resp['sa'] = auth['da']
741 resp['bssid'] = auth['bssid']
742 resp['payload'] = binascii.unhexlify(t)
743 hapd1.mgmt_tx(resp)
744 hapd1.set("ext_mgmt_frame_handling", "0")
745 dev[0].wait_disconnected()
746
747 dev[0].request("RECONNECT")
748 dev[0].wait_connected()
7b741a53
JM		 749
750def test_ap_ft_gcmp_256(dev, apdev):
751 """WPA2-PSK-FT AP with GCMP-256 cipher"""
752 if "GCMP-256" not in dev[0].get_capability("pairwise"):
753 raise HwsimSkip("Cipher GCMP-256 not supported")
754 ssid = "test-ft"
755 passphrase="12345678"
756
757 params = ft_params1(ssid=ssid, passphrase=passphrase)
758 params['rsn_pairwise'] = "GCMP-256"
759 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
760 params = ft_params2(ssid=ssid, passphrase=passphrase)
761 params['rsn_pairwise'] = "GCMP-256"
762 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
763
764 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase,
765 pairwise_cipher="GCMP-256", group_cipher="GCMP-256")
cf671d54
JM		 766
767def test_ap_ft_oom(dev, apdev):
768 """WPA2-PSK-FT and OOM"""
38934ed1 769 skip_with_fips(dev[0])
cf671d54
JM		 770 ssid = "test-ft"
771 passphrase="12345678"
772
773 params = ft_params1(ssid=ssid, passphrase=passphrase)
774 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
775 params = ft_params2(ssid=ssid, passphrase=passphrase)
776 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
777
778 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
779 scan_freq="2412")
780 if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
781 dst = apdev[1]['bssid']
782 else:
783 dst = apdev[0]['bssid']
784
785 dev[0].scan_for_bss(dst, freq="2412")
786 with alloc_fail(dev[0], 1, "wpa_ft_gen_req_ies"):
787 dev[0].roam(dst)
788 with alloc_fail(dev[0], 1, "wpa_ft_mic"):
789 dev[0].roam(dst, fail_test=True)
790 with fail_test(dev[0], 1, "os_get_random;wpa_ft_prepare_auth_request"):
791 dev[0].roam(dst, fail_test=True)
34d3eaa8
JM		 792
793def test_ap_ft_over_ds_proto(dev, apdev):
794 """WPA2-PSK-FT AP over DS protocol testing"""
795 ssid = "test-ft"
796 passphrase="12345678"
797
798 params = ft_params1(ssid=ssid, passphrase=passphrase)
799 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
800 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
801 scan_freq="2412")
802
803 # FT Action Response while no FT-over-DS in progress
804 msg = {}
805 msg['fc'] = 13 << 4
806 msg['da'] = dev[0].own_addr()
807 msg['sa'] = apdev[0]['bssid']
808 msg['bssid'] = apdev[0]['bssid']
809 msg['payload'] = binascii.unhexlify("06020200000000000200000004000000")
810 hapd0.mgmt_tx(msg)
811
812 params = ft_params2(ssid=ssid, passphrase=passphrase)
813 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
814 dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
815 hapd0.set("ext_mgmt_frame_handling", "1")
816 hapd0.dump_monitor()
817 dev[0].request("FT_DS " + apdev[1]['bssid'])
818 for i in range(0, 10):
819 req = hapd0.mgmt_rx()
820 if req is None:
821 raise Exception("MGMT RX wait timed out")
822 if req['subtype'] == 13:
823 break
824 req = None
825 if not req:
826 raise Exception("FT Action frame not received")
827
828 # FT Action Response for unexpected Target AP
829 msg['payload'] = binascii.unhexlify("0602020000000000" + "f20000000400" + "0000")
830 hapd0.mgmt_tx(msg)
831
832 # FT Action Response without MDIE
833 msg['payload'] = binascii.unhexlify("0602020000000000" + "020000000400" + "0000")
834 hapd0.mgmt_tx(msg)
835
836 # FT Action Response without FTIE
837 msg['payload'] = binascii.unhexlify("0602020000000000" + "020000000400" + "0000" + "3603a1b201")
838 hapd0.mgmt_tx(msg)
839
840 # FT Action Response with FTIE SNonce mismatch
841 msg['payload'] = binascii.unhexlify("0602020000000000" + "020000000400" + "0000" + "3603a1b201" + "3766000000000000000000000000000000000000c4e67ac1999bebd00ff4ae4d5dcaf87896bb060b469f7c78d49623fb395c3455ffffff6b693fe6f8d8c5dfac0a22344750775bd09437f98b238c9f87b97f790c0106000102030406030a6e6173312e77312e6669")
842 hapd0.mgmt_tx(msg)
6f3815c0
JM		 843
844def test_ap_ft_rrb(dev, apdev):
845 """WPA2-PSK-FT RRB protocol testing"""
846 ssid = "test-ft"
847 passphrase="12345678"
848
849 params = ft_params1(ssid=ssid, passphrase=passphrase)
850 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
851
852 dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
853 scan_freq="2412")
854
855 _dst_ll = binascii.unhexlify(apdev[0]['bssid'].replace(':',''))
856 _src_ll = binascii.unhexlify(dev[0].own_addr().replace(':',''))
857 proto = '\x89\x0d'
858 ehdr = _dst_ll + _src_ll + proto
859
860 # Too short RRB frame
861 pkt = ehdr + '\x01'
862 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
863 raise Exception("DATA_TEST_FRAME failed")
864
865 # RRB discarded frame wikth unrecognized type
866 pkt = ehdr + '\x02' + '\x02' + '\x01\x00' + _src_ll
867 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
868 raise Exception("DATA_TEST_FRAME failed")
869
870 # RRB frame too short for action frame
871 pkt = ehdr + '\x01' + '\x02' + '\x01\x00' + _src_ll
872 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
873 raise Exception("DATA_TEST_FRAME failed")
874
875 # Too short RRB frame (not enough room for Action Frame body)
876 pkt = ehdr + '\x01' + '\x02' + '\x00\x00' + _src_ll
877 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
878 raise Exception("DATA_TEST_FRAME failed")
879
880 # Unexpected Action frame category
881 pkt = ehdr + '\x01' + '\x02' + '\x0e\x00' + _src_ll + '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
882 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
883 raise Exception("DATA_TEST_FRAME failed")
884
885 # Unexpected Action in RRB Request
886 pkt = ehdr + '\x01' + '\x00' + '\x0e\x00' + _src_ll + '\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
887 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
888 raise Exception("DATA_TEST_FRAME failed")
889
890 # Target AP address in RRB Request does not match with own address
891 pkt = ehdr + '\x01' + '\x00' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
892 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
893 raise Exception("DATA_TEST_FRAME failed")
894
895 # Not enough room for status code in RRB Response
896 pkt = ehdr + '\x01' + '\x01' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
897 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
898 raise Exception("DATA_TEST_FRAME failed")
899
900 # RRB discarded frame with unknown packet_type
901 pkt = ehdr + '\x01' + '\x02' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
902 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
903 raise Exception("DATA_TEST_FRAME failed")
904
905 # RRB Response with non-zero status code; no STA match
906 pkt = ehdr + '\x01' + '\x01' + '\x10\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00' + '\xff\xff'
907 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
908 raise Exception("DATA_TEST_FRAME failed")
909
910 # RRB Response with zero status code and extra data; STA match
911 pkt = ehdr + '\x01' + '\x01' + '\x11\x00' + _src_ll + '\x06\x01' + _src_ll + '\x00\x00\x00\x00\x00\x00' + '\x00\x00' + '\x00'
912 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
913 raise Exception("DATA_TEST_FRAME failed")
914
915 # Too short PMK-R1 pull
916 pkt = ehdr + '\x01' + '\xc8' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
917 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
918 raise Exception("DATA_TEST_FRAME failed")
919
920 # Too short PMK-R1 resp
921 pkt = ehdr + '\x01' + '\xc9' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
922 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
923 raise Exception("DATA_TEST_FRAME failed")
924
925 # Too short PMK-R1 push
926 pkt = ehdr + '\x01' + '\xca' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
927 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
928 raise Exception("DATA_TEST_FRAME failed")
929
930 # No matching R0KH address found for PMK-R0 pull response
931 pkt = ehdr + '\x01' + '\xc9' + '\x5a\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00' + 76*'\00'
932 if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
933 raise Exception("DATA_TEST_FRAME failed")
ecafa0cf
JM		 934
935def test_rsn_ie_proto_ft_psk_sta(dev, apdev):
936 """RSN element protocol testing for FT-PSK + PMF cases on STA side"""
937 bssid = apdev[0]['bssid']
938 ssid = "test-ft"
939 passphrase="12345678"
940
941 params = ft_params1(ssid=ssid, passphrase=passphrase)
942 params["ieee80211w"] = "1";
943 # This is the RSN element used normally by hostapd
944 params['own_ie_override'] = '30140100000fac040100000fac040100000fac048c00' + '3603a1b201'
945 hapd = hostapd.add_ap(apdev[0]['ifname'], params)
946 id = dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
947 ieee80211w="1", scan_freq="2412",
948 pairwise="CCMP", group="CCMP")
949
950 tests = [ ('PMKIDCount field included',
951 '30160100000fac040100000fac040100000fac048c000000' + '3603a1b201'),
952 ('Extra IE before RSNE',
953 'dd0400000000' + '30140100000fac040100000fac040100000fac048c00' + '3603a1b201'),
954 ('PMKIDCount and Group Management Cipher suite fields included',
955 '301a0100000fac040100000fac040100000fac048c000000000fac06' + '3603a1b201'),
956 ('Extra octet after defined fields (future extensibility)',
957 '301b0100000fac040100000fac040100000fac048c000000000fac0600' + '3603a1b201'),
958 ('No RSN Capabilities field (PMF disabled in practice)',
959 '30120100000fac040100000fac040100000fac04' + '3603a1b201') ]
960 for txt,ie in tests:
961 dev[0].request("DISCONNECT")
962 dev[0].wait_disconnected()
963 logger.info(txt)
964 hapd.disable()
965 hapd.set('own_ie_override', ie)
966 hapd.enable()
967 dev[0].request("BSS_FLUSH 0")
968 dev[0].scan_for_bss(bssid, 2412, force_scan=True, only_new=True)
969 dev[0].select_network(id, freq=2412)
970 dev[0].wait_connected()
971
972 dev[0].request("DISCONNECT")
973 dev[0].wait_disconnected()
974
975 logger.info('Invalid RSNE causing internal hostapd error')
976 hapd.disable()
977 hapd.set('own_ie_override', '30130100000fac040100000fac040100000fac048c' + '3603a1b201')
978 hapd.enable()
979 dev[0].request("BSS_FLUSH 0")
980 dev[0].scan_for_bss(bssid, 2412, force_scan=True, only_new=True)
981 dev[0].select_network(id, freq=2412)
982 # hostapd fails to generate EAPOL-Key msg 3/4, so this connection cannot
983 # complete.
984 ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED"], timeout=1)
985 if ev is not None:
986 raise Exception("Unexpected connection")
987 dev[0].request("DISCONNECT")
988
989 logger.info('Unexpected PMKID causing internal hostapd error')
990 hapd.disable()
991 hapd.set('own_ie_override', '30260100000fac040100000fac040100000fac048c000100ffffffffffffffffffffffffffffffff' + '3603a1b201')
992 hapd.enable()
993 dev[0].request("BSS_FLUSH 0")
994 dev[0].scan_for_bss(bssid, 2412, force_scan=True, only_new=True)
995 dev[0].select_network(id, freq=2412)
996 # hostapd fails to generate EAPOL-Key msg 3/4, so this connection cannot
997 # complete.
998 ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED"], timeout=1)
999 if ev is not None:
1000 raise Exception("Unexpected connection")
1001 dev[0].request("DISCONNECT")
1025603b
JM		 1002
1003def test_ap_ft_ptk_rekey(dev, apdev):
1004 """WPA2-PSK-FT PTK rekeying triggered by station after roam"""
1005 ssid = "test-ft"
1006 passphrase="12345678"
1007
1008 params = ft_params1(ssid=ssid, passphrase=passphrase)
1009 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
1010 params = ft_params2(ssid=ssid, passphrase=passphrase)
1011 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
1012
1013 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, ptk_rekey="1")
1014
1015 ev = dev[0].wait_event(["CTRL-EVENT-DISCONNECTED",
1016 "WPA: Key negotiation completed"], timeout=5)
1017 if ev is None:
1018 raise Exception("No event received after roam")
1019 if "CTRL-EVENT-DISCONNECTED" in ev:
1020 raise Exception("Unexpected disconnection after roam")
1021
1022 if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
1023 hapd = hapd0
1024 else:
1025 hapd = hapd1
1026 hwsim_utils.test_connectivity(dev[0], hapd)
1027
1028def test_ap_ft_ptk_rekey_ap(dev, apdev):
1029 """WPA2-PSK-FT PTK rekeying triggered by AP after roam"""
1030 ssid = "test-ft"
1031 passphrase="12345678"
1032
1033 params = ft_params1(ssid=ssid, passphrase=passphrase)
1034 params['wpa_ptk_rekey'] = '2'
1035 hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
1036 params = ft_params2(ssid=ssid, passphrase=passphrase)
1037 params['wpa_ptk_rekey'] = '2'
1038 hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
1039
1040 run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
1041
1042 ev = dev[0].wait_event(["CTRL-EVENT-DISCONNECTED",
1043 "WPA: Key negotiation completed"], timeout=5)
1044 if ev is None:
1045 raise Exception("No event received after roam")
1046 if "CTRL-EVENT-DISCONNECTED" in ev:
1047 raise Exception("Unexpected disconnection after roam")
1048
1049 if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
1050 hapd = hapd0
1051 else:
1052 hapd = hapd1
1053 hwsim_utils.test_connectivity(dev[0], hapd)
Unnamed repository; edit this file 'description' to name the repository.