]>
git.ipfire.org Git - thirdparty/hostap.git/blob - tests/hwsim/test_ap_ft.py
1 # Fast BSS Transition tests
2 # Copyright (c) 2013-2014, Jouni Malinen <j@w1.fi>
4 # This software may be distributed under the terms of the BSD license.
5 # See README for more details.
10 logger
= logging
.getLogger()
14 from wlantest
import Wlantest
15 from test_ap_psk
import check_mib
18 params
= { "wpa": "2",
19 "wpa_key_mgmt": "FT-PSK",
20 "rsn_pairwise": "CCMP" }
24 params
= { "wpa": "3",
25 "wpa_key_mgmt": "WPA-PSK FT-PSK",
26 "wpa_pairwise": "TKIP",
27 "rsn_pairwise": "CCMP" }
30 def ft_params(rsn
=True, ssid
=None, passphrase
=None):
32 params
= ft_base_rsn()
34 params
= ft_base_mixed()
38 params
["wpa_passphrase"] = passphrase
40 params
["mobility_domain"] = "a1b2"
41 params
["r0_key_lifetime"] = "10000"
42 params
["pmk_r1_push"] = "1"
43 params
["reassociation_deadline"] = "1000"
46 def ft_params1(rsn
=True, ssid
=None, passphrase
=None):
47 params
= ft_params(rsn
, ssid
, passphrase
)
48 params
['nas_identifier'] = "nas1.w1.fi"
49 params
['r1_key_holder'] = "000102030405"
50 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f",
51 "02:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f" ]
52 params
['r1kh'] = "02:00:00:00:04:00 00:01:02:03:04:06 200102030405060708090a0b0c0d0e0f"
55 def ft_params2(rsn
=True, ssid
=None, passphrase
=None):
56 params
= ft_params(rsn
, ssid
, passphrase
)
57 params
['nas_identifier'] = "nas2.w1.fi"
58 params
['r1_key_holder'] = "000102030406"
59 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f",
60 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f" ]
61 params
['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0e0f"
64 def ft_params1_r0kh_mismatch(rsn
=True, ssid
=None, passphrase
=None):
65 params
= ft_params(rsn
, ssid
, passphrase
)
66 params
['nas_identifier'] = "nas1.w1.fi"
67 params
['r1_key_holder'] = "000102030405"
68 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f",
69 "12:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f" ]
70 params
['r1kh'] = "12:00:00:00:04:00 10:01:02:03:04:06 200102030405060708090a0b0c0d0e0f"
73 def ft_params2_incorrect_rrb_key(rsn
=True, ssid
=None, passphrase
=None):
74 params
= ft_params(rsn
, ssid
, passphrase
)
75 params
['nas_identifier'] = "nas2.w1.fi"
76 params
['r1_key_holder'] = "000102030406"
77 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0ef1",
78 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0ef2" ]
79 params
['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0ef3"
82 def ft_params2_r0kh_mismatch(rsn
=True, ssid
=None, passphrase
=None):
83 params
= ft_params(rsn
, ssid
, passphrase
)
84 params
['nas_identifier'] = "nas2.w1.fi"
85 params
['r1_key_holder'] = "000102030406"
86 params
['r0kh'] = [ "12:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f",
87 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f" ]
88 params
['r1kh'] = "12:00:00:00:03:00 10:01:02:03:04:05 300102030405060708090a0b0c0d0e0f"
91 def run_roams(dev
, apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=False, sae
=False, eap
=False, fail_test
=False, roams
=1):
92 logger
.info("Connect to first AP")
94 dev
.connect(ssid
, key_mgmt
="FT-EAP", proto
="WPA2", ieee80211w
="1",
95 eap
="GPSK", identity
="gpsk user",
96 password
="abcdefghijklmnop0123456789abcdef",
103 dev
.connect(ssid
, psk
=passphrase
, key_mgmt
=key_mgmt
, proto
="WPA2",
104 ieee80211w
="1", scan_freq
="2412")
105 if dev
.get_status_field('bssid') == apdev
[0]['bssid']:
115 hwsim_utils
.test_connectivity(dev
, hapd1ap
)
117 dev
.scan_for_bss(ap2
['bssid'], freq
="2412")
119 for i
in range(0, roams
):
120 logger
.info("Roam to the second AP")
122 dev
.roam_over_ds(ap2
['bssid'], fail_test
=fail_test
)
124 dev
.roam(ap2
['bssid'], fail_test
=fail_test
)
127 if dev
.get_status_field('bssid') != ap2
['bssid']:
128 raise Exception("Did not connect to correct AP")
129 if i
== 0 or i
== roams
- 1:
130 hwsim_utils
.test_connectivity(dev
, hapd2ap
)
132 logger
.info("Roam back to the first AP")
134 dev
.roam_over_ds(ap1
['bssid'])
136 dev
.roam(ap1
['bssid'])
137 if dev
.get_status_field('bssid') != ap1
['bssid']:
138 raise Exception("Did not connect to correct AP")
139 if i
== 0 or i
== roams
- 1:
140 hwsim_utils
.test_connectivity(dev
, hapd1ap
)
142 def test_ap_ft(dev
, apdev
):
145 passphrase
="12345678"
147 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
148 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
149 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
150 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
152 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
)
153 if "[WPA2-FT/PSK-CCMP]" not in dev
[0].request("SCAN_RESULTS"):
154 raise Exception("Scan results missing RSN element info")
156 def test_ap_ft_many(dev
, apdev
):
157 """WPA2-PSK-FT AP multiple times"""
159 passphrase
="12345678"
161 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
162 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
163 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
164 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
166 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, roams
=50)
168 def test_ap_ft_mixed(dev
, apdev
):
169 """WPA2-PSK-FT mixed-mode AP"""
170 ssid
= "test-ft-mixed"
171 passphrase
="12345678"
173 params
= ft_params1(rsn
=False, ssid
=ssid
, passphrase
=passphrase
)
174 hapd
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
175 key_mgmt
= hapd
.get_config()['key_mgmt']
176 vals
= key_mgmt
.split(' ')
177 if vals
[0] != "WPA-PSK" or vals
[1] != "FT-PSK":
178 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
179 params
= ft_params2(rsn
=False, ssid
=ssid
, passphrase
=passphrase
)
180 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
182 run_roams(dev
[0], apdev
, hapd
, hapd1
, ssid
, passphrase
)
184 def test_ap_ft_pmf(dev
, apdev
):
185 """WPA2-PSK-FT AP with PMF"""
187 passphrase
="12345678"
189 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
190 params
["ieee80211w"] = "2";
191 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
192 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
193 params
["ieee80211w"] = "2";
194 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
196 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
)
198 def test_ap_ft_over_ds(dev
, apdev
):
199 """WPA2-PSK-FT AP over DS"""
201 passphrase
="12345678"
203 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
204 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
205 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
206 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
208 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True)
209 check_mib(dev
[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-4"),
210 ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-4") ])
212 def test_ap_ft_over_ds_many(dev
, apdev
):
213 """WPA2-PSK-FT AP over DS multiple times"""
215 passphrase
="12345678"
217 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
218 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
219 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
220 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
222 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
225 def test_ap_ft_over_ds_unknown_target(dev
, apdev
):
228 passphrase
="12345678"
230 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
231 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
233 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
235 dev
[0].roam_over_ds("02:11:22:33:44:55", fail_test
=True)
237 def test_ap_ft_pmf_over_ds(dev
, apdev
):
238 """WPA2-PSK-FT AP over DS with PMF"""
240 passphrase
="12345678"
242 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
243 params
["ieee80211w"] = "2";
244 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
245 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
246 params
["ieee80211w"] = "2";
247 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
249 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True)
251 def test_ap_ft_over_ds_pull(dev
, apdev
):
252 """WPA2-PSK-FT AP over DS (pull PMK)"""
254 passphrase
="12345678"
256 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
257 params
["pmk_r1_push"] = "0"
258 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
259 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
260 params
["pmk_r1_push"] = "0"
261 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
263 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True)
265 def test_ap_ft_sae(dev
, apdev
):
266 """WPA2-PSK-FT-SAE AP"""
268 passphrase
="12345678"
270 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
271 params
['wpa_key_mgmt'] = "FT-SAE"
272 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
273 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
274 params
['wpa_key_mgmt'] = "FT-SAE"
275 hapd
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
276 key_mgmt
= hapd
.get_config()['key_mgmt']
277 if key_mgmt
.split(' ')[0] != "FT-SAE":
278 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
280 dev
[0].request("SET sae_groups ")
281 run_roams(dev
[0], apdev
, hapd0
, hapd
, ssid
, passphrase
, sae
=True)
283 def test_ap_ft_sae_over_ds(dev
, apdev
):
284 """WPA2-PSK-FT-SAE AP over DS"""
286 passphrase
="12345678"
288 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
289 params
['wpa_key_mgmt'] = "FT-SAE"
290 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
291 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
292 params
['wpa_key_mgmt'] = "FT-SAE"
293 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
295 dev
[0].request("SET sae_groups ")
296 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, sae
=True,
299 def test_ap_ft_eap(dev
, apdev
):
302 passphrase
="12345678"
304 radius
= hostapd
.radius_params()
305 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
306 params
['wpa_key_mgmt'] = "FT-EAP"
307 params
["ieee8021x"] = "1"
308 params
= dict(radius
.items() + params
.items())
309 hapd
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
310 key_mgmt
= hapd
.get_config()['key_mgmt']
311 if key_mgmt
.split(' ')[0] != "FT-EAP":
312 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
313 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
314 params
['wpa_key_mgmt'] = "FT-EAP"
315 params
["ieee8021x"] = "1"
316 params
= dict(radius
.items() + params
.items())
317 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
319 run_roams(dev
[0], apdev
, hapd
, hapd1
, ssid
, passphrase
, eap
=True)
320 if "[WPA2-FT/EAP-CCMP]" not in dev
[0].request("SCAN_RESULTS"):
321 raise Exception("Scan results missing RSN element info")
322 check_mib(dev
[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-3"),
323 ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-3") ])
325 def test_ap_ft_eap_pull(dev
, apdev
):
326 """WPA2-EAP-FT AP (pull PMK)"""
328 passphrase
="12345678"
330 radius
= hostapd
.radius_params()
331 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
332 params
['wpa_key_mgmt'] = "FT-EAP"
333 params
["ieee8021x"] = "1"
334 params
["pmk_r1_push"] = "0"
335 params
= dict(radius
.items() + params
.items())
336 hapd
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
337 key_mgmt
= hapd
.get_config()['key_mgmt']
338 if key_mgmt
.split(' ')[0] != "FT-EAP":
339 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
340 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
341 params
['wpa_key_mgmt'] = "FT-EAP"
342 params
["ieee8021x"] = "1"
343 params
["pmk_r1_push"] = "0"
344 params
= dict(radius
.items() + params
.items())
345 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
347 run_roams(dev
[0], apdev
, hapd
, hapd1
, ssid
, passphrase
, eap
=True)
349 def test_ap_ft_mismatching_rrb_key_push(dev
, apdev
):
350 """WPA2-PSK-FT AP over DS with mismatching RRB key (push)"""
352 passphrase
="12345678"
354 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
355 params
["ieee80211w"] = "2";
356 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
357 params
= ft_params2_incorrect_rrb_key(ssid
=ssid
, passphrase
=passphrase
)
358 params
["ieee80211w"] = "2";
359 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
361 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
364 def test_ap_ft_mismatching_rrb_key_pull(dev
, apdev
):
365 """WPA2-PSK-FT AP over DS with mismatching RRB key (pull)"""
367 passphrase
="12345678"
369 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
370 params
["pmk_r1_push"] = "0"
371 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
372 params
= ft_params2_incorrect_rrb_key(ssid
=ssid
, passphrase
=passphrase
)
373 params
["pmk_r1_push"] = "0"
374 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
376 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
379 def test_ap_ft_mismatching_r0kh_id_pull(dev
, apdev
):
380 """WPA2-PSK-FT AP over DS with mismatching R0KH-ID (pull)"""
382 passphrase
="12345678"
384 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
385 params
["pmk_r1_push"] = "0"
386 params
["nas_identifier"] = "nas0.w1.fi"
387 hostapd
.add_ap(apdev
[0]['ifname'], params
)
388 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
391 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
392 params
["pmk_r1_push"] = "0"
393 hostapd
.add_ap(apdev
[1]['ifname'], params
)
395 dev
[0].scan_for_bss(apdev
[1]['bssid'], freq
="2412")
396 dev
[0].roam_over_ds(apdev
[1]['bssid'], fail_test
=True)
398 def test_ap_ft_mismatching_rrb_r0kh_push(dev
, apdev
):
399 """WPA2-PSK-FT AP over DS with mismatching R0KH key (push)"""
401 passphrase
="12345678"
403 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
404 params
["ieee80211w"] = "2";
405 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
406 params
= ft_params2_r0kh_mismatch(ssid
=ssid
, passphrase
=passphrase
)
407 params
["ieee80211w"] = "2";
408 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
410 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
413 def test_ap_ft_mismatching_rrb_r0kh_pull(dev
, apdev
):
414 """WPA2-PSK-FT AP over DS with mismatching R0KH key (pull)"""
416 passphrase
="12345678"
418 params
= ft_params1_r0kh_mismatch(ssid
=ssid
, passphrase
=passphrase
)
419 params
["pmk_r1_push"] = "0"
420 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
421 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
422 params
["pmk_r1_push"] = "0"
423 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
425 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
428 def test_ap_ft_gtk_rekey(dev
, apdev
):
429 """WPA2-PSK-FT AP and GTK rekey"""
431 passphrase
="12345678"
433 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
434 params
['wpa_group_rekey'] = '1'
435 hapd
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
437 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
438 ieee80211w
="1", scan_freq
="2412")
440 ev
= dev
[0].wait_event(["WPA: Group rekeying completed"], timeout
=2)
442 raise Exception("GTK rekey timed out after initial association")
443 hwsim_utils
.test_connectivity(dev
[0], hapd
)
445 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
446 params
['wpa_group_rekey'] = '1'
447 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
449 dev
[0].scan_for_bss(apdev
[1]['bssid'], freq
="2412")
450 dev
[0].roam(apdev
[1]['bssid'])
451 if dev
[0].get_status_field('bssid') != apdev
[1]['bssid']:
452 raise Exception("Did not connect to correct AP")
453 hwsim_utils
.test_connectivity(dev
[0], hapd1
)
455 ev
= dev
[0].wait_event(["WPA: Group rekeying completed"], timeout
=2)
457 raise Exception("GTK rekey timed out after FT protocol")
458 hwsim_utils
.test_connectivity(dev
[0], hapd1
)