tests/hwsim/test_ap_ft.py

   1 # Fast BSS Transition tests
   2 # Copyright (c) 2013-2017, Jouni Malinen <j@w1.fi>
   3 #
   4 # This software may be distributed under the terms of the BSD license.
   5 # See README for more details.
   6
   7 from remotehost import remote_compatible
   8 import binascii
   9 import os
  10 import time
  11 import logging
  12 logger = logging.getLogger()
  13 import struct
  14
  15 import hwsim_utils
  16 import hostapd
  17 from tshark import run_tshark
  18 from utils import HwsimSkip, alloc_fail, fail_test, wait_fail_trigger, skip_with_fips, parse_ie
  19 from wlantest import Wlantest
  20 from test_ap_psk import check_mib, find_wpas_process, read_process_memory, verify_not_present, get_key_locations
  21
  22 def ft_base_rsn():
  23     params = { "wpa": "2",
  24                "wpa_key_mgmt": "FT-PSK",
  25                "rsn_pairwise": "CCMP" }
  26     return params
  27
  28 def ft_base_mixed():
  29     params = { "wpa": "3",
  30                "wpa_key_mgmt": "WPA-PSK FT-PSK",
  31                "wpa_pairwise": "TKIP",
  32                "rsn_pairwise": "CCMP" }
  33     return params
  34
  35 def ft_params(rsn=True, ssid=None, passphrase=None):
  36     if rsn:
  37         params = ft_base_rsn()
  38     else:
  39         params = ft_base_mixed()
  40     if ssid:
  41         params["ssid"] = ssid
  42     if passphrase:
  43         params["wpa_passphrase"] = passphrase
  44
  45     params["mobility_domain"] = "a1b2"
  46     params["r0_key_lifetime"] = "10000"
  47     params["pmk_r1_push"] = "1"
  48     params["reassociation_deadline"] = "1000"
  49     return params
  50
  51 def ft_params1a(rsn=True, ssid=None, passphrase=None):
  52     params = ft_params(rsn, ssid, passphrase)
  53     params['nas_identifier'] = "nas1.w1.fi"
  54     params['r1_key_holder'] = "000102030405"
  55     return params
  56
  57 def ft_params1(rsn=True, ssid=None, passphrase=None, discovery=False):
  58     params = ft_params1a(rsn, ssid, passphrase)
  59     if discovery:
  60         params['r0kh'] = "ff:ff:ff:ff:ff:ff * 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f"
  61         params['r1kh'] = "00:00:00:00:00:00 00:00:00:00:00:00 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f"
  62     else:
  63         params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f",
  64                            "02:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f300102030405060708090a0b0c0d0e0f" ]
  65         params['r1kh'] = "02:00:00:00:04:00 00:01:02:03:04:06 200102030405060708090a0b0c0d0e0f200102030405060708090a0b0c0d0e0f"
  66     return params
  67
  68 def ft_params1_old_key(rsn=True, ssid=None, passphrase=None):
  69     params = ft_params1a(rsn, ssid, passphrase)
  70     params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f",
  71                        "02:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f" ]
  72     params['r1kh'] = "02:00:00:00:04:00 00:01:02:03:04:06 200102030405060708090a0b0c0d0e0f"
  73     return params
  74
  75 def ft_params2a(rsn=True, ssid=None, passphrase=None):
  76     params = ft_params(rsn, ssid, passphrase)
  77     params['nas_identifier'] = "nas2.w1.fi"
  78     params['r1_key_holder'] = "000102030406"
  79     return params
  80
  81 def ft_params2(rsn=True, ssid=None, passphrase=None, discovery=False):
  82     params = ft_params2a(rsn, ssid, passphrase)
  83     if discovery:
  84         params['r0kh'] = "ff:ff:ff:ff:ff:ff * 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f"
  85         params['r1kh'] = "00:00:00:00:00:00 00:00:00:00:00:00 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f"
  86     else:
  87         params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f200102030405060708090a0b0c0d0e0f",
  88                            "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f000102030405060708090a0b0c0d0e0f" ]
  89         params['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0e0f300102030405060708090a0b0c0d0e0f"
  90     return params
  91
  92 def ft_params2_old_key(rsn=True, ssid=None, passphrase=None):
  93     params = ft_params2a(rsn, ssid, passphrase)
  94     params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f",
  95                        "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f" ]
  96     params['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0e0f"
  97     return params
  98
  99 def ft_params1_r0kh_mismatch(rsn=True, ssid=None, passphrase=None):
 100     params = ft_params(rsn, ssid, passphrase)
 101     params['nas_identifier'] = "nas1.w1.fi"
 102     params['r1_key_holder'] = "000102030405"
 103     params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f",
 104                        "12:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f300102030405060708090a0b0c0d0e0f" ]
 105     params['r1kh'] = "12:00:00:00:04:00 10:01:02:03:04:06 200102030405060708090a0b0c0d0e0f200102030405060708090a0b0c0d0e0f"
 106     return params
 107
 108 def ft_params2_incorrect_rrb_key(rsn=True, ssid=None, passphrase=None):
 109     params = ft_params(rsn, ssid, passphrase)
 110     params['nas_identifier'] = "nas2.w1.fi"
 111     params['r1_key_holder'] = "000102030406"
 112     params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0ef1200102030405060708090a0b0c0d0ef1",
 113                        "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0ef2000102030405060708090a0b0c0d0ef2" ]
 114     params['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0ef3300102030405060708090a0b0c0d0ef3"
 115     return params
 116
 117 def ft_params2_r0kh_mismatch(rsn=True, ssid=None, passphrase=None):
 118     params = ft_params(rsn, ssid, passphrase)
 119     params['nas_identifier'] = "nas2.w1.fi"
 120     params['r1_key_holder'] = "000102030406"
 121     params['r0kh'] = [ "12:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f200102030405060708090a0b0c0d0e0f",
 122                        "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f000102030405060708090a0b0c0d0e0f" ]
 123     params['r1kh'] = "12:00:00:00:03:00 10:01:02:03:04:05 300102030405060708090a0b0c0d0e0f300102030405060708090a0b0c0d0e0f"
 124     return params
 125
 126 def run_roams(dev, apdev, hapd0, hapd1, ssid, passphrase, over_ds=False,
 127               sae=False, eap=False, fail_test=False, roams=1,
 128               pairwise_cipher="CCMP", group_cipher="TKIP CCMP", ptk_rekey="0",
 129               test_connectivity=True, eap_identity="gpsk user", conndev=False,
 130               force_initial_conn_to_first_ap=False):
 131     logger.info("Connect to first AP")
 132
 133     copts = {}
 134     copts["proto"] = "WPA2"
 135     copts["ieee80211w"] = "1"
 136     copts["scan_freq"] = "2412"
 137     copts["pairwise"] = pairwise_cipher
 138     copts["group"]  = group_cipher
 139     copts["wpa_ptk_rekey"] = ptk_rekey
 140     if eap:
 141         copts["key_mgmt"] = "FT-EAP"
 142         copts["eap"] = "GPSK"
 143         copts["identity"] = eap_identity
 144         copts["password"] = "abcdefghijklmnop0123456789abcdef"
 145     else:
 146         if sae:
 147             copts["key_mgmt"] = "FT-SAE"
 148         else:
 149             copts["key_mgmt"] = "FT-PSK"
 150         copts["psk"] = passphrase
 151     if force_initial_conn_to_first_ap:
 152         copts["bssid"] = apdev[0]['bssid']
 153     dev.connect(ssid, **copts)
 154
 155     if dev.get_status_field('bssid') == apdev[0]['bssid']:
 156         ap1 = apdev[0]
 157         ap2 = apdev[1]
 158         hapd1ap = hapd0
 159         hapd2ap = hapd1
 160     else:
 161         ap1 = apdev[1]
 162         ap2 = apdev[0]
 163         hapd1ap = hapd1
 164         hapd2ap = hapd0
 165     if test_connectivity:
 166         if conndev:
 167             hwsim_utils.test_connectivity_iface(dev, hapd1ap, conndev)
 168         else:
 169             hwsim_utils.test_connectivity(dev, hapd1ap)
 170
 171     dev.scan_for_bss(ap2['bssid'], freq="2412")
 172
 173     for i in range(0, roams):
 174         # Roaming artificially fast can make data test fail because the key is
 175         # set later.
 176         time.sleep(0.01)
 177         logger.info("Roam to the second AP")
 178         if over_ds:
 179             dev.roam_over_ds(ap2['bssid'], fail_test=fail_test)
 180         else:
 181             dev.roam(ap2['bssid'], fail_test=fail_test)
 182         if fail_test:
 183             return
 184         if dev.get_status_field('bssid') != ap2['bssid']:
 185             raise Exception("Did not connect to correct AP")
 186         if (i == 0 or i == roams - 1) and test_connectivity:
 187             if conndev:
 188                 hwsim_utils.test_connectivity_iface(dev, hapd2ap, conndev)
 189             else:
 190                 hwsim_utils.test_connectivity(dev, hapd2ap)
 191
 192         # Roaming artificially fast can make data test fail because the key is
 193         # set later.
 194         time.sleep(0.01)
 195         logger.info("Roam back to the first AP")
 196         if over_ds:
 197             dev.roam_over_ds(ap1['bssid'])
 198         else:
 199             dev.roam(ap1['bssid'])
 200         if dev.get_status_field('bssid') != ap1['bssid']:
 201             raise Exception("Did not connect to correct AP")
 202         if (i == 0 or i == roams - 1) and test_connectivity:
 203             if conndev:
 204                 hwsim_utils.test_connectivity_iface(dev, hapd1ap, conndev)
 205             else:
 206                 hwsim_utils.test_connectivity(dev, hapd1ap)
 207
 208 def test_ap_ft(dev, apdev):
 209     """WPA2-PSK-FT AP"""
 210     ssid = "test-ft"
 211     passphrase="12345678"
 212
 213     params = ft_params1(ssid=ssid, passphrase=passphrase)
 214     hapd0 = hostapd.add_ap(apdev[0], params)
 215     params = ft_params2(ssid=ssid, passphrase=passphrase)
 216     hapd1 = hostapd.add_ap(apdev[1], params)
 217
 218     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
 219     if "[WPA2-FT/PSK-CCMP]" not in dev[0].request("SCAN_RESULTS"):
 220         raise Exception("Scan results missing RSN element info")
 221
 222 def test_ap_ft_old_key(dev, apdev):
 223     """WPA2-PSK-FT AP (old key)"""
 224     ssid = "test-ft"
 225     passphrase="12345678"
 226
 227     params = ft_params1_old_key(ssid=ssid, passphrase=passphrase)
 228     hapd0 = hostapd.add_ap(apdev[0], params)
 229     params = ft_params2_old_key(ssid=ssid, passphrase=passphrase)
 230     hapd1 = hostapd.add_ap(apdev[1], params)
 231
 232     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
 233
 234 def test_ap_ft_multi_akm(dev, apdev):
 235     """WPA2-PSK-FT AP with non-FT AKMs enabled"""
 236     ssid = "test-ft"
 237     passphrase="12345678"
 238
 239     params = ft_params1(ssid=ssid, passphrase=passphrase)
 240     params["wpa_key_mgmt"] = "FT-PSK WPA-PSK WPA-PSK-SHA256"
 241     hapd0 = hostapd.add_ap(apdev[0], params)
 242     params = ft_params2(ssid=ssid, passphrase=passphrase)
 243     params["wpa_key_mgmt"] = "FT-PSK WPA-PSK WPA-PSK-SHA256"
 244     hapd1 = hostapd.add_ap(apdev[1], params)
 245
 246     Wlantest.setup(hapd0)
 247     wt = Wlantest()
 248     wt.flush()
 249     wt.add_passphrase(passphrase)
 250
 251     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
 252     if "[WPA2-PSK+FT/PSK+PSK-SHA256-CCMP]" not in dev[0].request("SCAN_RESULTS"):
 253         raise Exception("Scan results missing RSN element info")
 254     dev[1].connect(ssid, psk=passphrase, scan_freq="2412")
 255     dev[2].connect(ssid, psk=passphrase, key_mgmt="WPA-PSK-SHA256",
 256                    scan_freq="2412")
 257
 258 def test_ap_ft_local_key_gen(dev, apdev):
 259     """WPA2-PSK-FT AP with local key generation (without pull/push)"""
 260     ssid = "test-ft"
 261     passphrase="12345678"
 262
 263     params = ft_params1a(ssid=ssid, passphrase=passphrase)
 264     params['ft_psk_generate_local'] = "1";
 265     del params['pmk_r1_push']
 266     hapd0 = hostapd.add_ap(apdev[0], params)
 267     params = ft_params2a(ssid=ssid, passphrase=passphrase)
 268     params['ft_psk_generate_local'] = "1";
 269     del params['pmk_r1_push']
 270     hapd1 = hostapd.add_ap(apdev[1], params)
 271
 272     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
 273     if "[WPA2-FT/PSK-CCMP]" not in dev[0].request("SCAN_RESULTS"):
 274         raise Exception("Scan results missing RSN element info")
 275
 276 def test_ap_ft_vlan(dev, apdev):
 277     """WPA2-PSK-FT AP with VLAN"""
 278     ssid = "test-ft"
 279     passphrase="12345678"
 280
 281     params = ft_params1(ssid=ssid, passphrase=passphrase)
 282     params['dynamic_vlan'] = "1";
 283     params['accept_mac_file'] = "hostapd.accept";
 284     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 285
 286     params = ft_params2(ssid=ssid, passphrase=passphrase)
 287     params['dynamic_vlan'] = "1";
 288     params['accept_mac_file'] = "hostapd.accept";
 289     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 290
 291     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, conndev="brvlan1")
 292     if "[WPA2-FT/PSK-CCMP]" not in dev[0].request("SCAN_RESULTS"):
 293         raise Exception("Scan results missing RSN element info")
 294
 295 def test_ap_ft_vlan_disconnected(dev, apdev):
 296     """WPA2-PSK-FT AP with VLAN and local key generation"""
 297     ssid = "test-ft"
 298     passphrase="12345678"
 299
 300     params = ft_params1a(ssid=ssid, passphrase=passphrase)
 301     params['dynamic_vlan'] = "1";
 302     params['accept_mac_file'] = "hostapd.accept";
 303     params['ft_psk_generate_local'] = "1";
 304     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 305
 306     params = ft_params2a(ssid=ssid, passphrase=passphrase)
 307     params['dynamic_vlan'] = "1";
 308     params['accept_mac_file'] = "hostapd.accept";
 309     params['ft_psk_generate_local'] = "1";
 310     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 311
 312     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, conndev="brvlan1")
 313     if "[WPA2-FT/PSK-CCMP]" not in dev[0].request("SCAN_RESULTS"):
 314         raise Exception("Scan results missing RSN element info")
 315
 316 def test_ap_ft_vlan_2(dev, apdev):
 317     """WPA2-PSK-FT AP with VLAN and dest-AP does not have VLAN info locally"""
 318     ssid = "test-ft"
 319     passphrase="12345678"
 320
 321     params = ft_params1(ssid=ssid, passphrase=passphrase)
 322     params['dynamic_vlan'] = "1";
 323     params['accept_mac_file'] = "hostapd.accept";
 324     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 325
 326     params = ft_params2(ssid=ssid, passphrase=passphrase)
 327     params['dynamic_vlan'] = "1";
 328     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 329
 330     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, conndev="brvlan1",
 331               force_initial_conn_to_first_ap=True)
 332     if "[WPA2-FT/PSK-CCMP]" not in dev[0].request("SCAN_RESULTS"):
 333         raise Exception("Scan results missing RSN element info")
 334
 335 def test_ap_ft_many(dev, apdev):
 336     """WPA2-PSK-FT AP multiple times"""
 337     ssid = "test-ft"
 338     passphrase="12345678"
 339
 340     params = ft_params1(ssid=ssid, passphrase=passphrase)
 341     hapd0 = hostapd.add_ap(apdev[0], params)
 342     params = ft_params2(ssid=ssid, passphrase=passphrase)
 343     hapd1 = hostapd.add_ap(apdev[1], params)
 344
 345     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, roams=50)
 346
 347 def test_ap_ft_many_vlan(dev, apdev):
 348     """WPA2-PSK-FT AP with VLAN multiple times"""
 349     ssid = "test-ft"
 350     passphrase="12345678"
 351
 352     params = ft_params1(ssid=ssid, passphrase=passphrase)
 353     params['dynamic_vlan'] = "1";
 354     params['accept_mac_file'] = "hostapd.accept";
 355     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 356
 357     params = ft_params2(ssid=ssid, passphrase=passphrase)
 358     params['dynamic_vlan'] = "1";
 359     params['accept_mac_file'] = "hostapd.accept";
 360     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 361
 362     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, roams=50,
 363               conndev="brvlan1")
 364
 365 def test_ap_ft_mixed(dev, apdev):
 366     """WPA2-PSK-FT mixed-mode AP"""
 367     ssid = "test-ft-mixed"
 368     passphrase="12345678"
 369
 370     params = ft_params1(rsn=False, ssid=ssid, passphrase=passphrase)
 371     hapd = hostapd.add_ap(apdev[0], params)
 372     key_mgmt = hapd.get_config()['key_mgmt']
 373     vals = key_mgmt.split(' ')
 374     if vals[0] != "WPA-PSK" or vals[1] != "FT-PSK":
 375         raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
 376     params = ft_params2(rsn=False, ssid=ssid, passphrase=passphrase)
 377     hapd1 = hostapd.add_ap(apdev[1], params)
 378
 379     run_roams(dev[0], apdev, hapd, hapd1, ssid, passphrase)
 380
 381 def test_ap_ft_pmf(dev, apdev):
 382     """WPA2-PSK-FT AP with PMF"""
 383     ssid = "test-ft"
 384     passphrase="12345678"
 385
 386     params = ft_params1(ssid=ssid, passphrase=passphrase)
 387     params["ieee80211w"] = "2"
 388     hapd0 = hostapd.add_ap(apdev[0], params)
 389     params = ft_params2(ssid=ssid, passphrase=passphrase)
 390     params["ieee80211w"] = "2"
 391     hapd1 = hostapd.add_ap(apdev[1], params)
 392
 393     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
 394
 395 def test_ap_ft_over_ds(dev, apdev):
 396     """WPA2-PSK-FT AP over DS"""
 397     ssid = "test-ft"
 398     passphrase="12345678"
 399
 400     params = ft_params1(ssid=ssid, passphrase=passphrase)
 401     hapd0 = hostapd.add_ap(apdev[0], params)
 402     params = ft_params2(ssid=ssid, passphrase=passphrase)
 403     hapd1 = hostapd.add_ap(apdev[1], params)
 404
 405     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True)
 406     check_mib(dev[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-4"),
 407                         ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-4") ])
 408
 409 def test_ap_ft_over_ds_disabled(dev, apdev):
 410     """WPA2-PSK-FT AP over DS disabled"""
 411     ssid = "test-ft"
 412     passphrase="12345678"
 413
 414     params = ft_params1(ssid=ssid, passphrase=passphrase)
 415     params['ft_over_ds'] = '0'
 416     hapd0 = hostapd.add_ap(apdev[0], params)
 417     params = ft_params2(ssid=ssid, passphrase=passphrase)
 418     params['ft_over_ds'] = '0'
 419     hapd1 = hostapd.add_ap(apdev[1], params)
 420
 421     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
 422               fail_test=True)
 423
 424 def test_ap_ft_vlan_over_ds(dev, apdev):
 425     """WPA2-PSK-FT AP over DS with VLAN"""
 426     ssid = "test-ft"
 427     passphrase="12345678"
 428
 429     params = ft_params1(ssid=ssid, passphrase=passphrase)
 430     params['dynamic_vlan'] = "1";
 431     params['accept_mac_file'] = "hostapd.accept";
 432     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 433     params = ft_params2(ssid=ssid, passphrase=passphrase)
 434     params['dynamic_vlan'] = "1";
 435     params['accept_mac_file'] = "hostapd.accept";
 436     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 437
 438     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
 439               conndev="brvlan1")
 440     check_mib(dev[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-4"),
 441                         ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-4") ])
 442
 443 def test_ap_ft_over_ds_many(dev, apdev):
 444     """WPA2-PSK-FT AP over DS multiple times"""
 445     ssid = "test-ft"
 446     passphrase="12345678"
 447
 448     params = ft_params1(ssid=ssid, passphrase=passphrase)
 449     hapd0 = hostapd.add_ap(apdev[0], params)
 450     params = ft_params2(ssid=ssid, passphrase=passphrase)
 451     hapd1 = hostapd.add_ap(apdev[1], params)
 452
 453     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
 454               roams=50)
 455
 456 def test_ap_ft_vlan_over_ds_many(dev, apdev):
 457     """WPA2-PSK-FT AP over DS with VLAN multiple times"""
 458     ssid = "test-ft"
 459     passphrase="12345678"
 460
 461     params = ft_params1(ssid=ssid, passphrase=passphrase)
 462     params['dynamic_vlan'] = "1";
 463     params['accept_mac_file'] = "hostapd.accept";
 464     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 465     params = ft_params2(ssid=ssid, passphrase=passphrase)
 466     params['dynamic_vlan'] = "1";
 467     params['accept_mac_file'] = "hostapd.accept";
 468     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 469
 470     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
 471               roams=50, conndev="brvlan1")
 472
 473 @remote_compatible
 474 def test_ap_ft_over_ds_unknown_target(dev, apdev):
 475     """WPA2-PSK-FT AP"""
 476     ssid = "test-ft"
 477     passphrase="12345678"
 478
 479     params = ft_params1(ssid=ssid, passphrase=passphrase)
 480     hapd0 = hostapd.add_ap(apdev[0], params)
 481
 482     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
 483                    scan_freq="2412")
 484     dev[0].roam_over_ds("02:11:22:33:44:55", fail_test=True)
 485
 486 @remote_compatible
 487 def test_ap_ft_over_ds_unexpected(dev, apdev):
 488     """WPA2-PSK-FT AP over DS and unexpected response"""
 489     ssid = "test-ft"
 490     passphrase="12345678"
 491
 492     params = ft_params1(ssid=ssid, passphrase=passphrase)
 493     hapd0 = hostapd.add_ap(apdev[0], params)
 494     params = ft_params2(ssid=ssid, passphrase=passphrase)
 495     hapd1 = hostapd.add_ap(apdev[1], params)
 496
 497     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
 498                    scan_freq="2412")
 499     if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
 500         ap1 = apdev[0]
 501         ap2 = apdev[1]
 502         hapd1ap = hapd0
 503         hapd2ap = hapd1
 504     else:
 505         ap1 = apdev[1]
 506         ap2 = apdev[0]
 507         hapd1ap = hapd1
 508         hapd2ap = hapd0
 509
 510     addr = dev[0].own_addr()
 511     hapd1ap.set("ext_mgmt_frame_handling", "1")
 512     logger.info("Foreign STA address")
 513     msg = {}
 514     msg['fc'] = 13 << 4
 515     msg['da'] = addr
 516     msg['sa'] = ap1['bssid']
 517     msg['bssid'] = ap1['bssid']
 518     msg['payload'] = binascii.unhexlify("06021122334455660102030405060000")
 519     hapd1ap.mgmt_tx(msg)
 520
 521     logger.info("No over-the-DS in progress")
 522     msg['payload'] = binascii.unhexlify("0602" + addr.replace(':', '') + "0102030405060000")
 523     hapd1ap.mgmt_tx(msg)
 524
 525     logger.info("Non-zero status code")
 526     msg['payload'] = binascii.unhexlify("0602" + addr.replace(':', '') + "0102030405060100")
 527     hapd1ap.mgmt_tx(msg)
 528
 529     hapd1ap.dump_monitor()
 530
 531     dev[0].scan_for_bss(ap2['bssid'], freq="2412")
 532     if "OK" not in dev[0].request("FT_DS " + ap2['bssid']):
 533             raise Exception("FT_DS failed")
 534
 535     req = hapd1ap.mgmt_rx()
 536
 537     logger.info("Foreign Target AP")
 538     msg['payload'] = binascii.unhexlify("0602" + addr.replace(':', '') + "0102030405060000")
 539     hapd1ap.mgmt_tx(msg)
 540
 541     addrs = addr.replace(':', '') + ap2['bssid'].replace(':', '')
 542
 543     logger.info("No IEs")
 544     msg['payload'] = binascii.unhexlify("0602" + addrs + "0000")
 545     hapd1ap.mgmt_tx(msg)
 546
 547     logger.info("Invalid IEs (trigger parsing failure)")
 548     msg['payload'] = binascii.unhexlify("0602" + addrs + "00003700")
 549     hapd1ap.mgmt_tx(msg)
 550
 551     logger.info("Too short MDIE")
 552     msg['payload'] = binascii.unhexlify("0602" + addrs + "000036021122")
 553     hapd1ap.mgmt_tx(msg)
 554
 555     logger.info("Mobility domain mismatch")
 556     msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603112201")
 557     hapd1ap.mgmt_tx(msg)
 558
 559     logger.info("No FTIE")
 560     msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201")
 561     hapd1ap.mgmt_tx(msg)
 562
 563     logger.info("FTIE SNonce mismatch")
 564     msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + "1000000000000000000000000000000000000000000000000000000000000001" + "030a6e6173322e77312e6669")
 565     hapd1ap.mgmt_tx(msg)
 566
 567     logger.info("No R0KH-ID subelem in FTIE")
 568     snonce = binascii.hexlify(req['payload'][111:111+32])
 569     msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b20137520000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce)
 570     hapd1ap.mgmt_tx(msg)
 571
 572     logger.info("No R0KH-ID subelem mismatch in FTIE")
 573     snonce = binascii.hexlify(req['payload'][111:111+32])
 574     msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce + "030a11223344556677889900")
 575     hapd1ap.mgmt_tx(msg)
 576
 577     logger.info("No R1KH-ID subelem in FTIE")
 578     r0khid = binascii.hexlify(req['payload'][145:145+10])
 579     msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce + "030a" + r0khid)
 580     hapd1ap.mgmt_tx(msg)
 581
 582     logger.info("No RSNE")
 583     r0khid = binascii.hexlify(req['payload'][145:145+10])
 584     msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b20137660000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce + "030a" + r0khid + "0106000102030405")
 585     hapd1ap.mgmt_tx(msg)
 586
 587 def test_ap_ft_pmf_over_ds(dev, apdev):
 588     """WPA2-PSK-FT AP over DS with PMF"""
 589     ssid = "test-ft"
 590     passphrase="12345678"
 591
 592     params = ft_params1(ssid=ssid, passphrase=passphrase)
 593     params["ieee80211w"] = "2"
 594     hapd0 = hostapd.add_ap(apdev[0], params)
 595     params = ft_params2(ssid=ssid, passphrase=passphrase)
 596     params["ieee80211w"] = "2"
 597     hapd1 = hostapd.add_ap(apdev[1], params)
 598
 599     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True)
 600
 601 def test_ap_ft_over_ds_pull(dev, apdev):
 602     """WPA2-PSK-FT AP over DS (pull PMK)"""
 603     ssid = "test-ft"
 604     passphrase="12345678"
 605
 606     params = ft_params1(ssid=ssid, passphrase=passphrase)
 607     params["pmk_r1_push"] = "0"
 608     hapd0 = hostapd.add_ap(apdev[0], params)
 609     params = ft_params2(ssid=ssid, passphrase=passphrase)
 610     params["pmk_r1_push"] = "0"
 611     hapd1 = hostapd.add_ap(apdev[1], params)
 612
 613     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True)
 614
 615 def test_ap_ft_over_ds_pull_old_key(dev, apdev):
 616     """WPA2-PSK-FT AP over DS (pull PMK; old key)"""
 617     ssid = "test-ft"
 618     passphrase="12345678"
 619
 620     params = ft_params1_old_key(ssid=ssid, passphrase=passphrase)
 621     params["pmk_r1_push"] = "0"
 622     hapd0 = hostapd.add_ap(apdev[0], params)
 623     params = ft_params2_old_key(ssid=ssid, passphrase=passphrase)
 624     params["pmk_r1_push"] = "0"
 625     hapd1 = hostapd.add_ap(apdev[1], params)
 626
 627     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True)
 628
 629 def test_ap_ft_over_ds_pull_vlan(dev, apdev):
 630     """WPA2-PSK-FT AP over DS (pull PMK) with VLAN"""
 631     ssid = "test-ft"
 632     passphrase="12345678"
 633
 634     params = ft_params1(ssid=ssid, passphrase=passphrase)
 635     params["pmk_r1_push"] = "0"
 636     params['dynamic_vlan'] = "1";
 637     params['accept_mac_file'] = "hostapd.accept";
 638     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 639     params = ft_params2(ssid=ssid, passphrase=passphrase)
 640     params["pmk_r1_push"] = "0"
 641     params['dynamic_vlan'] = "1";
 642     params['accept_mac_file'] = "hostapd.accept";
 643     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 644
 645     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
 646               conndev="brvlan1")
 647
 648 def test_ap_ft_sae(dev, apdev):
 649     """WPA2-PSK-FT-SAE AP"""
 650     if "SAE" not in dev[0].get_capability("auth_alg"):
 651         raise HwsimSkip("SAE not supported")
 652     ssid = "test-ft"
 653     passphrase="12345678"
 654
 655     params = ft_params1(ssid=ssid, passphrase=passphrase)
 656     params['wpa_key_mgmt'] = "FT-SAE"
 657     hapd0 = hostapd.add_ap(apdev[0], params)
 658     params = ft_params2(ssid=ssid, passphrase=passphrase)
 659     params['wpa_key_mgmt'] = "FT-SAE"
 660     hapd = hostapd.add_ap(apdev[1], params)
 661     key_mgmt = hapd.get_config()['key_mgmt']
 662     if key_mgmt.split(' ')[0] != "FT-SAE":
 663         raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
 664
 665     dev[0].request("SET sae_groups ")
 666     run_roams(dev[0], apdev, hapd0, hapd, ssid, passphrase, sae=True)
 667
 668 def test_ap_ft_sae_over_ds(dev, apdev):
 669     """WPA2-PSK-FT-SAE AP over DS"""
 670     if "SAE" not in dev[0].get_capability("auth_alg"):
 671         raise HwsimSkip("SAE not supported")
 672     ssid = "test-ft"
 673     passphrase="12345678"
 674
 675     params = ft_params1(ssid=ssid, passphrase=passphrase)
 676     params['wpa_key_mgmt'] = "FT-SAE"
 677     hapd0 = hostapd.add_ap(apdev[0], params)
 678     params = ft_params2(ssid=ssid, passphrase=passphrase)
 679     params['wpa_key_mgmt'] = "FT-SAE"
 680     hapd1 = hostapd.add_ap(apdev[1], params)
 681
 682     dev[0].request("SET sae_groups ")
 683     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, sae=True,
 684               over_ds=True)
 685
 686 def generic_ap_ft_eap(dev, apdev, vlan=False, over_ds=False, discovery=False,
 687                       roams=1):
 688     ssid = "test-ft"
 689     passphrase="12345678"
 690     if vlan:
 691         identity="gpsk-vlan1"
 692         conndev="brvlan1"
 693     else:
 694         identity="gpsk user"
 695         conndev=False
 696
 697     radius = hostapd.radius_params()
 698     params = ft_params1(ssid=ssid, passphrase=passphrase, discovery=discovery)
 699     params['wpa_key_mgmt'] = "FT-EAP"
 700     params["ieee8021x"] = "1"
 701     if vlan:
 702         params["dynamic_vlan"] = "1"
 703     params = dict(radius.items() + params.items())
 704     hapd = hostapd.add_ap(apdev[0], params)
 705     key_mgmt = hapd.get_config()['key_mgmt']
 706     if key_mgmt.split(' ')[0] != "FT-EAP":
 707         raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
 708     params = ft_params2(ssid=ssid, passphrase=passphrase, discovery=discovery)
 709     params['wpa_key_mgmt'] = "FT-EAP"
 710     params["ieee8021x"] = "1"
 711     if vlan:
 712         params["dynamic_vlan"] = "1"
 713     params = dict(radius.items() + params.items())
 714     hapd1 = hostapd.add_ap(apdev[1], params)
 715
 716     run_roams(dev[0], apdev, hapd, hapd1, ssid, passphrase, eap=True,
 717               over_ds=over_ds, roams=roams, eap_identity=identity,
 718               conndev=conndev)
 719     if "[WPA2-FT/EAP-CCMP]" not in dev[0].request("SCAN_RESULTS"):
 720         raise Exception("Scan results missing RSN element info")
 721     check_mib(dev[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-3"),
 722                         ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-3") ])
 723
 724     # Verify EAPOL reauthentication after FT protocol
 725     if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
 726         ap = hapd
 727     else:
 728         ap = hapd1
 729     ap.request("EAPOL_REAUTH " + dev[0].own_addr())
 730     ev = dev[0].wait_event(["CTRL-EVENT-EAP-STARTED"], timeout=5)
 731     if ev is None:
 732         raise Exception("EAP authentication did not start")
 733     ev = dev[0].wait_event(["CTRL-EVENT-EAP-SUCCESS"], timeout=5)
 734     if ev is None:
 735         raise Exception("EAP authentication did not succeed")
 736     time.sleep(0.1)
 737     if conndev:
 738         hwsim_utils.test_connectivity_iface(dev[0], ap, conndev)
 739     else:
 740         hwsim_utils.test_connectivity(dev[0], ap)
 741
 742 def test_ap_ft_eap(dev, apdev):
 743     """WPA2-EAP-FT AP"""
 744     generic_ap_ft_eap(dev, apdev)
 745
 746 def test_ap_ft_eap_vlan(dev, apdev):
 747     """WPA2-EAP-FT AP with VLAN"""
 748     generic_ap_ft_eap(dev, apdev, vlan=True)
 749
 750 def test_ap_ft_eap_vlan_multi(dev, apdev):
 751     """WPA2-EAP-FT AP with VLAN"""
 752     generic_ap_ft_eap(dev, apdev, vlan=True, roams=50)
 753
 754 def test_ap_ft_eap_over_ds(dev, apdev):
 755     """WPA2-EAP-FT AP using over-the-DS"""
 756     generic_ap_ft_eap(dev, apdev, over_ds=True)
 757
 758 def test_ap_ft_eap_dis(dev, apdev):
 759     """WPA2-EAP-FT AP with AP discovery"""
 760     generic_ap_ft_eap(dev, apdev, discovery=True)
 761
 762 def test_ap_ft_eap_dis_over_ds(dev, apdev):
 763     """WPA2-EAP-FT AP with AP discovery and over-the-DS"""
 764     generic_ap_ft_eap(dev, apdev, over_ds=True, discovery=True)
 765
 766 def test_ap_ft_eap_vlan(dev, apdev):
 767     """WPA2-EAP-FT AP with VLAN"""
 768     generic_ap_ft_eap(dev, apdev, vlan=True)
 769
 770 def test_ap_ft_eap_vlan_multi(dev, apdev):
 771     """WPA2-EAP-FT AP with VLAN"""
 772     generic_ap_ft_eap(dev, apdev, vlan=True, roams=50)
 773
 774 def test_ap_ft_eap_vlan_over_ds(dev, apdev):
 775     """WPA2-EAP-FT AP with VLAN + over_ds"""
 776     generic_ap_ft_eap(dev, apdev, vlan=True, over_ds=True)
 777
 778 def test_ap_ft_eap_vlan_over_ds_multi(dev, apdev):
 779     """WPA2-EAP-FT AP with VLAN + over_ds"""
 780     generic_ap_ft_eap(dev, apdev, vlan=True, over_ds=True, roams=50)
 781
 782 def generic_ap_ft_eap_pull(dev, apdev, vlan=False):
 783     """WPA2-EAP-FT AP (pull PMK)"""
 784     ssid = "test-ft"
 785     passphrase="12345678"
 786     if vlan:
 787         identity="gpsk-vlan1"
 788         conndev="brvlan1"
 789     else:
 790         identity="gpsk user"
 791         conndev=False
 792
 793     radius = hostapd.radius_params()
 794     params = ft_params1(ssid=ssid, passphrase=passphrase)
 795     params['wpa_key_mgmt'] = "FT-EAP"
 796     params["ieee8021x"] = "1"
 797     params["pmk_r1_push"] = "0"
 798     if vlan:
 799         params["dynamic_vlan"] = "1"
 800     params = dict(radius.items() + params.items())
 801     hapd = hostapd.add_ap(apdev[0], params)
 802     key_mgmt = hapd.get_config()['key_mgmt']
 803     if key_mgmt.split(' ')[0] != "FT-EAP":
 804         raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
 805     params = ft_params2(ssid=ssid, passphrase=passphrase)
 806     params['wpa_key_mgmt'] = "FT-EAP"
 807     params["ieee8021x"] = "1"
 808     params["pmk_r1_push"] = "0"
 809     if vlan:
 810         params["dynamic_vlan"] = "1"
 811     params = dict(radius.items() + params.items())
 812     hapd1 = hostapd.add_ap(apdev[1], params)
 813
 814     run_roams(dev[0], apdev, hapd, hapd1, ssid, passphrase, eap=True,
 815               eap_identity=identity, conndev=conndev)
 816
 817 def test_ap_ft_eap_pull(dev, apdev):
 818     """WPA2-EAP-FT AP (pull PMK)"""
 819     generic_ap_ft_eap_pull(dev, apdev)
 820
 821 def test_ap_ft_eap_pull_vlan(dev, apdev):
 822     generic_ap_ft_eap_pull(dev, apdev, vlan=True)
 823
 824 def test_ap_ft_eap_pull_wildcard(dev, apdev):
 825     """WPA2-EAP-FT AP (pull PMK) - wildcard R0KH/R1KH"""
 826     ssid = "test-ft"
 827     passphrase="12345678"
 828
 829     radius = hostapd.radius_params()
 830     params = ft_params1(ssid=ssid, passphrase=passphrase, discovery=True)
 831     params['wpa_key_mgmt'] = "WPA-EAP FT-EAP"
 832     params["ieee8021x"] = "1"
 833     params["pmk_r1_push"] = "0"
 834     params["r0kh"] = "ff:ff:ff:ff:ff:ff * 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
 835     params["r1kh"] = "00:00:00:00:00:00 00:00:00:00:00:00 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
 836     params["ft_psk_generate_local"] = "1"
 837     params["eap_server"] = "0"
 838     params = dict(radius.items() + params.items())
 839     hapd = hostapd.add_ap(apdev[0], params)
 840     params = ft_params2(ssid=ssid, passphrase=passphrase, discovery=True)
 841     params['wpa_key_mgmt'] = "WPA-EAP FT-EAP"
 842     params["ieee8021x"] = "1"
 843     params["pmk_r1_push"] = "0"
 844     params["r0kh"] = "ff:ff:ff:ff:ff:ff * 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
 845     params["r1kh"] = "00:00:00:00:00:00 00:00:00:00:00:00 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
 846     params["ft_psk_generate_local"] = "1"
 847     params["eap_server"] = "0"
 848     params = dict(radius.items() + params.items())
 849     hapd1 = hostapd.add_ap(apdev[1], params)
 850
 851     run_roams(dev[0], apdev, hapd, hapd1, ssid, passphrase, eap=True)
 852
 853 @remote_compatible
 854 def test_ap_ft_mismatching_rrb_key_push(dev, apdev):
 855     """WPA2-PSK-FT AP over DS with mismatching RRB key (push)"""
 856     ssid = "test-ft"
 857     passphrase="12345678"
 858
 859     params = ft_params1(ssid=ssid, passphrase=passphrase)
 860     params["ieee80211w"] = "2"
 861     hapd0 = hostapd.add_ap(apdev[0], params)
 862     params = ft_params2_incorrect_rrb_key(ssid=ssid, passphrase=passphrase)
 863     params["ieee80211w"] = "2"
 864     hapd1 = hostapd.add_ap(apdev[1], params)
 865
 866     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
 867               fail_test=True)
 868
 869 @remote_compatible
 870 def test_ap_ft_mismatching_rrb_key_pull(dev, apdev):
 871     """WPA2-PSK-FT AP over DS with mismatching RRB key (pull)"""
 872     ssid = "test-ft"
 873     passphrase="12345678"
 874
 875     params = ft_params1(ssid=ssid, passphrase=passphrase)
 876     params["pmk_r1_push"] = "0"
 877     hapd0 = hostapd.add_ap(apdev[0], params)
 878     params = ft_params2_incorrect_rrb_key(ssid=ssid, passphrase=passphrase)
 879     params["pmk_r1_push"] = "0"
 880     hapd1 = hostapd.add_ap(apdev[1], params)
 881
 882     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
 883               fail_test=True)
 884
 885 @remote_compatible
 886 def test_ap_ft_mismatching_r0kh_id_pull(dev, apdev):
 887     """WPA2-PSK-FT AP over DS with mismatching R0KH-ID (pull)"""
 888     ssid = "test-ft"
 889     passphrase="12345678"
 890
 891     params = ft_params1(ssid=ssid, passphrase=passphrase)
 892     params["pmk_r1_push"] = "0"
 893     params["nas_identifier"] = "nas0.w1.fi"
 894     hostapd.add_ap(apdev[0], params)
 895     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
 896                    scan_freq="2412")
 897
 898     params = ft_params2(ssid=ssid, passphrase=passphrase)
 899     params["pmk_r1_push"] = "0"
 900     hostapd.add_ap(apdev[1], params)
 901
 902     dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
 903     dev[0].roam_over_ds(apdev[1]['bssid'], fail_test=True)
 904
 905 @remote_compatible
 906 def test_ap_ft_mismatching_rrb_r0kh_push(dev, apdev):
 907     """WPA2-PSK-FT AP over DS with mismatching R0KH key (push)"""
 908     ssid = "test-ft"
 909     passphrase="12345678"
 910
 911     params = ft_params1(ssid=ssid, passphrase=passphrase)
 912     params["ieee80211w"] = "2"
 913     hapd0 = hostapd.add_ap(apdev[0], params)
 914     params = ft_params2_r0kh_mismatch(ssid=ssid, passphrase=passphrase)
 915     params["ieee80211w"] = "2"
 916     hapd1 = hostapd.add_ap(apdev[1], params)
 917
 918     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
 919               fail_test=True)
 920
 921 @remote_compatible
 922 def test_ap_ft_mismatching_rrb_r0kh_pull(dev, apdev):
 923     """WPA2-PSK-FT AP over DS with mismatching R0KH key (pull)"""
 924     ssid = "test-ft"
 925     passphrase="12345678"
 926
 927     params = ft_params1_r0kh_mismatch(ssid=ssid, passphrase=passphrase)
 928     params["pmk_r1_push"] = "0"
 929     hapd0 = hostapd.add_ap(apdev[0], params)
 930     params = ft_params2(ssid=ssid, passphrase=passphrase)
 931     params["pmk_r1_push"] = "0"
 932     hapd1 = hostapd.add_ap(apdev[1], params)
 933
 934     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
 935               fail_test=True)
 936
 937 def test_ap_ft_mismatching_rrb_key_push_eap(dev, apdev):
 938     """WPA2-EAP-FT AP over DS with mismatching RRB key (push)"""
 939     ssid = "test-ft"
 940     passphrase="12345678"
 941
 942     radius = hostapd.radius_params()
 943     params = ft_params1(ssid=ssid, passphrase=passphrase)
 944     params["ieee80211w"] = "2";
 945     params['wpa_key_mgmt'] = "FT-EAP"
 946     params["ieee8021x"] = "1"
 947     params = dict(radius.items() + params.items())
 948     hapd0 = hostapd.add_ap(apdev[0], params)
 949     params = ft_params2_incorrect_rrb_key(ssid=ssid, passphrase=passphrase)
 950     params["ieee80211w"] = "2";
 951     params['wpa_key_mgmt'] = "FT-EAP"
 952     params["ieee8021x"] = "1"
 953     params = dict(radius.items() + params.items())
 954     hapd1 = hostapd.add_ap(apdev[1], params)
 955
 956     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
 957               fail_test=True, eap=True)
 958
 959 def test_ap_ft_mismatching_rrb_key_pull_eap(dev, apdev):
 960     """WPA2-EAP-FT AP over DS with mismatching RRB key (pull)"""
 961     ssid = "test-ft"
 962     passphrase="12345678"
 963
 964     radius = hostapd.radius_params()
 965     params = ft_params1(ssid=ssid, passphrase=passphrase)
 966     params["pmk_r1_push"] = "0"
 967     params['wpa_key_mgmt'] = "FT-EAP"
 968     params["ieee8021x"] = "1"
 969     params = dict(radius.items() + params.items())
 970     hapd0 = hostapd.add_ap(apdev[0], params)
 971     params = ft_params2_incorrect_rrb_key(ssid=ssid, passphrase=passphrase)
 972     params["pmk_r1_push"] = "0"
 973     params['wpa_key_mgmt'] = "FT-EAP"
 974     params["ieee8021x"] = "1"
 975     params = dict(radius.items() + params.items())
 976     hapd1 = hostapd.add_ap(apdev[1], params)
 977
 978     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
 979               fail_test=True, eap=True)
 980
 981 def test_ap_ft_mismatching_r0kh_id_pull_eap(dev, apdev):
 982     """WPA2-EAP-FT AP over DS with mismatching R0KH-ID (pull)"""
 983     ssid = "test-ft"
 984     passphrase="12345678"
 985
 986     radius = hostapd.radius_params()
 987     params = ft_params1(ssid=ssid, passphrase=passphrase)
 988     params["pmk_r1_push"] = "0"
 989     params["nas_identifier"] = "nas0.w1.fi"
 990     params['wpa_key_mgmt'] = "FT-EAP"
 991     params["ieee8021x"] = "1"
 992     params = dict(radius.items() + params.items())
 993     hostapd.add_ap(apdev[0], params)
 994     dev[0].connect(ssid, key_mgmt="FT-EAP", proto="WPA2", ieee80211w="1",
 995                    eap="GPSK", identity="gpsk user",
 996                    password="abcdefghijklmnop0123456789abcdef",
 997                    scan_freq="2412")
 998
 999     params = ft_params2(ssid=ssid, passphrase=passphrase)
1000     params["pmk_r1_push"] = "0"
1001     params['wpa_key_mgmt'] = "FT-EAP"
1002     params["ieee8021x"] = "1"
1003     params = dict(radius.items() + params.items())
1004     hostapd.add_ap(apdev[1], params)
1005
1006     dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
1007     dev[0].roam_over_ds(apdev[1]['bssid'], fail_test=True)
1008
1009 def test_ap_ft_mismatching_rrb_r0kh_push_eap(dev, apdev):
1010     """WPA2-EAP-FT AP over DS with mismatching R0KH key (push)"""
1011     ssid = "test-ft"
1012     passphrase="12345678"
1013
1014     radius = hostapd.radius_params()
1015     params = ft_params1(ssid=ssid, passphrase=passphrase)
1016     params["ieee80211w"] = "2";
1017     params['wpa_key_mgmt'] = "FT-EAP"
1018     params["ieee8021x"] = "1"
1019     params = dict(radius.items() + params.items())
1020     hapd0 = hostapd.add_ap(apdev[0], params)
1021     params = ft_params2_r0kh_mismatch(ssid=ssid, passphrase=passphrase)
1022     params["ieee80211w"] = "2";
1023     params['wpa_key_mgmt'] = "FT-EAP"
1024     params["ieee8021x"] = "1"
1025     params = dict(radius.items() + params.items())
1026     hapd1 = hostapd.add_ap(apdev[1], params)
1027
1028     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
1029               fail_test=True, eap=True)
1030
1031 def test_ap_ft_mismatching_rrb_r0kh_pull_eap(dev, apdev):
1032     """WPA2-EAP-FT AP over DS with mismatching R0KH key (pull)"""
1033     ssid = "test-ft"
1034     passphrase="12345678"
1035
1036     radius = hostapd.radius_params()
1037     params = ft_params1_r0kh_mismatch(ssid=ssid, passphrase=passphrase)
1038     params["pmk_r1_push"] = "0"
1039     params['wpa_key_mgmt'] = "FT-EAP"
1040     params["ieee8021x"] = "1"
1041     params = dict(radius.items() + params.items())
1042     hapd0 = hostapd.add_ap(apdev[0], params)
1043     params = ft_params2(ssid=ssid, passphrase=passphrase)
1044     params["pmk_r1_push"] = "0"
1045     params['wpa_key_mgmt'] = "FT-EAP"
1046     params["ieee8021x"] = "1"
1047     params = dict(radius.items() + params.items())
1048     hapd1 = hostapd.add_ap(apdev[1], params)
1049
1050     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
1051               fail_test=True, eap=True)
1052
1053 def test_ap_ft_gtk_rekey(dev, apdev):
1054     """WPA2-PSK-FT AP and GTK rekey"""
1055     ssid = "test-ft"
1056     passphrase="12345678"
1057
1058     params = ft_params1(ssid=ssid, passphrase=passphrase)
1059     params['wpa_group_rekey'] = '1'
1060     hapd = hostapd.add_ap(apdev[0], params)
1061
1062     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1063                    ieee80211w="1", scan_freq="2412")
1064
1065     ev = dev[0].wait_event(["WPA: Group rekeying completed"], timeout=2)
1066     if ev is None:
1067         raise Exception("GTK rekey timed out after initial association")
1068     hwsim_utils.test_connectivity(dev[0], hapd)
1069
1070     params = ft_params2(ssid=ssid, passphrase=passphrase)
1071     params['wpa_group_rekey'] = '1'
1072     hapd1 = hostapd.add_ap(apdev[1], params)
1073
1074     dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
1075     dev[0].roam(apdev[1]['bssid'])
1076     if dev[0].get_status_field('bssid') != apdev[1]['bssid']:
1077         raise Exception("Did not connect to correct AP")
1078     hwsim_utils.test_connectivity(dev[0], hapd1)
1079
1080     ev = dev[0].wait_event(["WPA: Group rekeying completed"], timeout=2)
1081     if ev is None:
1082         raise Exception("GTK rekey timed out after FT protocol")
1083     hwsim_utils.test_connectivity(dev[0], hapd1)
1084
1085 def test_ft_psk_key_lifetime_in_memory(dev, apdev, params):
1086     """WPA2-PSK-FT and key lifetime in memory"""
1087     ssid = "test-ft"
1088     passphrase="04c2726b4b8d5f1b4db9c07aa4d9e9d8f765cb5d25ec817e6cc4fcdd5255db0"
1089     psk = '93c90846ff67af9037ed83fb72b63dbeddaa81d47f926c20909b5886f1d9358d'
1090     pmk = binascii.unhexlify(psk)
1091     p = ft_params1(ssid=ssid, passphrase=passphrase)
1092     hapd0 = hostapd.add_ap(apdev[0], p)
1093     p = ft_params2(ssid=ssid, passphrase=passphrase)
1094     hapd1 = hostapd.add_ap(apdev[1], p)
1095
1096     pid = find_wpas_process(dev[0])
1097
1098     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1099                    scan_freq="2412")
1100     # The decrypted copy of GTK is freed only after the CTRL-EVENT-CONNECTED
1101     # event has been delivered, so verify that wpa_supplicant has returned to
1102     # eloop before reading process memory.
1103     time.sleep(1)
1104     dev[0].ping()
1105
1106     buf = read_process_memory(pid, pmk)
1107
1108     dev[0].request("DISCONNECT")
1109     dev[0].wait_disconnected()
1110
1111     dev[0].relog()
1112     pmkr0 = None
1113     pmkr1 = None
1114     ptk = None
1115     gtk = None
1116     with open(os.path.join(params['logdir'], 'log0'), 'r') as f:
1117         for l in f.readlines():
1118             if "FT: PMK-R0 - hexdump" in l:
1119                 val = l.strip().split(':')[3].replace(' ', '')
1120                 pmkr0 = binascii.unhexlify(val)
1121             if "FT: PMK-R1 - hexdump" in l:
1122                 val = l.strip().split(':')[3].replace(' ', '')
1123                 pmkr1 = binascii.unhexlify(val)
1124             if "FT: KCK - hexdump" in l:
1125                 val = l.strip().split(':')[3].replace(' ', '')
1126                 kck = binascii.unhexlify(val)
1127             if "FT: KEK - hexdump" in l:
1128                 val = l.strip().split(':')[3].replace(' ', '')
1129                 kek = binascii.unhexlify(val)
1130             if "FT: TK - hexdump" in l:
1131                 val = l.strip().split(':')[3].replace(' ', '')
1132                 tk = binascii.unhexlify(val)
1133             if "WPA: Group Key - hexdump" in l:
1134                 val = l.strip().split(':')[3].replace(' ', '')
1135                 gtk = binascii.unhexlify(val)
1136     if not pmkr0 or not pmkr1 or not kck or not kek or not tk or not gtk:
1137         raise Exception("Could not find keys from debug log")
1138     if len(gtk) != 16:
1139         raise Exception("Unexpected GTK length")
1140
1141     logger.info("Checking keys in memory while associated")
1142     get_key_locations(buf, pmk, "PMK")
1143     get_key_locations(buf, pmkr0, "PMK-R0")
1144     get_key_locations(buf, pmkr1, "PMK-R1")
1145     if pmk not in buf:
1146         raise HwsimSkip("PMK not found while associated")
1147     if pmkr0 not in buf:
1148         raise HwsimSkip("PMK-R0 not found while associated")
1149     if pmkr1 not in buf:
1150         raise HwsimSkip("PMK-R1 not found while associated")
1151     if kck not in buf:
1152         raise Exception("KCK not found while associated")
1153     if kek not in buf:
1154         raise Exception("KEK not found while associated")
1155     #if tk in buf:
1156     #    raise Exception("TK found from memory")
1157
1158     logger.info("Checking keys in memory after disassociation")
1159     buf = read_process_memory(pid, pmk)
1160     get_key_locations(buf, pmk, "PMK")
1161     get_key_locations(buf, pmkr0, "PMK-R0")
1162     get_key_locations(buf, pmkr1, "PMK-R1")
1163
1164     # Note: PMK/PSK is still present in network configuration
1165
1166     fname = os.path.join(params['logdir'],
1167                          'ft_psk_key_lifetime_in_memory.memctx-')
1168     verify_not_present(buf, pmkr0, fname, "PMK-R0")
1169     verify_not_present(buf, pmkr1, fname, "PMK-R1")
1170     verify_not_present(buf, kck, fname, "KCK")
1171     verify_not_present(buf, kek, fname, "KEK")
1172     verify_not_present(buf, tk, fname, "TK")
1173     if gtk in buf:
1174         get_key_locations(buf, gtk, "GTK")
1175     verify_not_present(buf, gtk, fname, "GTK")
1176
1177     dev[0].request("REMOVE_NETWORK all")
1178
1179     logger.info("Checking keys in memory after network profile removal")
1180     buf = read_process_memory(pid, pmk)
1181     get_key_locations(buf, pmk, "PMK")
1182     get_key_locations(buf, pmkr0, "PMK-R0")
1183     get_key_locations(buf, pmkr1, "PMK-R1")
1184
1185     verify_not_present(buf, pmk, fname, "PMK")
1186     verify_not_present(buf, pmkr0, fname, "PMK-R0")
1187     verify_not_present(buf, pmkr1, fname, "PMK-R1")
1188     verify_not_present(buf, kck, fname, "KCK")
1189     verify_not_present(buf, kek, fname, "KEK")
1190     verify_not_present(buf, tk, fname, "TK")
1191     verify_not_present(buf, gtk, fname, "GTK")
1192
1193 @remote_compatible
1194 def test_ap_ft_invalid_resp(dev, apdev):
1195     """WPA2-PSK-FT AP and invalid response IEs"""
1196     ssid = "test-ft"
1197     passphrase="12345678"
1198
1199     params = ft_params1(ssid=ssid, passphrase=passphrase)
1200     hapd0 = hostapd.add_ap(apdev[0], params)
1201     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1202                    scan_freq="2412")
1203
1204     params = ft_params2(ssid=ssid, passphrase=passphrase)
1205     hapd1 = hostapd.add_ap(apdev[1], params)
1206
1207     tests = [
1208         # Various IEs for test coverage. The last one is FTIE with invalid
1209         # R1KH-ID subelement.
1210         "020002000000" + "3800" + "38051122334455" + "3754000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010100",
1211         # FTIE with invalid R0KH-ID subelement (len=0).
1212         "020002000000" + "3754000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010300",
1213         # FTIE with invalid R0KH-ID subelement (len=49).
1214         "020002000000" + "378500010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001033101020304050607080910111213141516171819202122232425262728293031323334353637383940414243444546474849",
1215         # Invalid RSNE.
1216         "020002000000" + "3000",
1217         # Required IEs missing from protected IE count.
1218         "020002000000" + "3603a1b201" + "375200010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900",
1219         # RIC missing from protected IE count.
1220         "020002000000" + "3603a1b201" + "375200020203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900",
1221         # Protected IE missing.
1222         "020002000000" + "3603a1b201" + "375200ff0203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900" + "0000" ]
1223     for t in tests:
1224         dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
1225         hapd1.set("ext_mgmt_frame_handling", "1")
1226         hapd1.dump_monitor()
1227         if "OK" not in dev[0].request("ROAM " + apdev[1]['bssid']):
1228             raise Exception("ROAM failed")
1229         auth = None
1230         for i in range(20):
1231             msg = hapd1.mgmt_rx()
1232             if msg['subtype'] == 11:
1233                 auth = msg
1234                 break
1235         if not auth:
1236             raise Exception("Authentication frame not seen")
1237
1238         resp = {}
1239         resp['fc'] = auth['fc']
1240         resp['da'] = auth['sa']
1241         resp['sa'] = auth['da']
1242         resp['bssid'] = auth['bssid']
1243         resp['payload'] = binascii.unhexlify(t)
1244         hapd1.mgmt_tx(resp)
1245         hapd1.set("ext_mgmt_frame_handling", "0")
1246         dev[0].wait_disconnected()
1247
1248         dev[0].request("RECONNECT")
1249         dev[0].wait_connected()
1250
1251 def test_ap_ft_gcmp_256(dev, apdev):
1252     """WPA2-PSK-FT AP with GCMP-256 cipher"""
1253     if "GCMP-256" not in dev[0].get_capability("pairwise"):
1254         raise HwsimSkip("Cipher GCMP-256 not supported")
1255     ssid = "test-ft"
1256     passphrase="12345678"
1257
1258     params = ft_params1(ssid=ssid, passphrase=passphrase)
1259     params['rsn_pairwise'] = "GCMP-256"
1260     hapd0 = hostapd.add_ap(apdev[0], params)
1261     params = ft_params2(ssid=ssid, passphrase=passphrase)
1262     params['rsn_pairwise'] = "GCMP-256"
1263     hapd1 = hostapd.add_ap(apdev[1], params)
1264
1265     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase,
1266               pairwise_cipher="GCMP-256", group_cipher="GCMP-256")
1267
1268 def test_ap_ft_oom(dev, apdev):
1269     """WPA2-PSK-FT and OOM"""
1270     skip_with_fips(dev[0])
1271     ssid = "test-ft"
1272     passphrase="12345678"
1273
1274     params = ft_params1(ssid=ssid, passphrase=passphrase)
1275     hapd0 = hostapd.add_ap(apdev[0], params)
1276     params = ft_params2(ssid=ssid, passphrase=passphrase)
1277     hapd1 = hostapd.add_ap(apdev[1], params)
1278
1279     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1280                    scan_freq="2412")
1281     if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
1282         dst = apdev[1]['bssid']
1283     else:
1284         dst = apdev[0]['bssid']
1285
1286     dev[0].scan_for_bss(dst, freq="2412")
1287     with alloc_fail(dev[0], 1, "wpa_ft_gen_req_ies"):
1288         dev[0].roam(dst)
1289     with fail_test(dev[0], 1, "wpa_ft_mic"):
1290         dev[0].roam(dst, fail_test=True)
1291     with fail_test(dev[0], 1, "os_get_random;wpa_ft_prepare_auth_request"):
1292         dev[0].roam(dst, fail_test=True)
1293
1294     dev[0].request("REMOVE_NETWORK all")
1295     with alloc_fail(dev[0], 1, "=sme_update_ft_ies"):
1296         dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1297                        scan_freq="2412")
1298
1299 def test_ap_ft_ap_oom(dev, apdev):
1300     """WPA2-PSK-FT and AP OOM"""
1301     ssid = "test-ft"
1302     passphrase="12345678"
1303
1304     params = ft_params1(ssid=ssid, passphrase=passphrase)
1305     hapd0 = hostapd.add_ap(apdev[0], params)
1306     bssid0 = hapd0.own_addr()
1307
1308     dev[0].scan_for_bss(bssid0, freq="2412")
1309     with alloc_fail(hapd0, 1, "wpa_ft_store_pmk_r0"):
1310         dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1311                        scan_freq="2412")
1312
1313     params = ft_params2(ssid=ssid, passphrase=passphrase)
1314     hapd1 = hostapd.add_ap(apdev[1], params)
1315     bssid1 = hapd1.own_addr()
1316     dev[0].scan_for_bss(bssid1, freq="2412")
1317     # This roam will fail due to missing PMK-R0 (OOM prevented storing it)
1318     dev[0].roam(bssid1)
1319
1320 def test_ap_ft_ap_oom2(dev, apdev):
1321     """WPA2-PSK-FT and AP OOM 2"""
1322     ssid = "test-ft"
1323     passphrase="12345678"
1324
1325     params = ft_params1(ssid=ssid, passphrase=passphrase)
1326     hapd0 = hostapd.add_ap(apdev[0], params)
1327     bssid0 = hapd0.own_addr()
1328
1329     dev[0].scan_for_bss(bssid0, freq="2412")
1330     with alloc_fail(hapd0, 1, "wpa_ft_store_pmk_r1"):
1331         dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1332                        scan_freq="2412")
1333
1334     params = ft_params2(ssid=ssid, passphrase=passphrase)
1335     hapd1 = hostapd.add_ap(apdev[1], params)
1336     bssid1 = hapd1.own_addr()
1337     dev[0].scan_for_bss(bssid1, freq="2412")
1338     dev[0].roam(bssid1)
1339     if dev[0].get_status_field('bssid') != bssid1:
1340         raise Exception("Did not roam to AP1")
1341     # This roam will fail due to missing PMK-R1 (OOM prevented storing it)
1342     dev[0].roam(bssid0)
1343
1344 def test_ap_ft_ap_oom3(dev, apdev):
1345     """WPA2-PSK-FT and AP OOM 3"""
1346     ssid = "test-ft"
1347     passphrase="12345678"
1348
1349     params = ft_params1(ssid=ssid, passphrase=passphrase)
1350     hapd0 = hostapd.add_ap(apdev[0], params)
1351     bssid0 = hapd0.own_addr()
1352
1353     dev[0].scan_for_bss(bssid0, freq="2412")
1354     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1355                    scan_freq="2412")
1356
1357     params = ft_params2(ssid=ssid, passphrase=passphrase)
1358     hapd1 = hostapd.add_ap(apdev[1], params)
1359     bssid1 = hapd1.own_addr()
1360     dev[0].scan_for_bss(bssid1, freq="2412")
1361     with alloc_fail(hapd1, 1, "wpa_ft_pull_pmk_r1"):
1362         # This will fail due to not being able to send out PMK-R1 pull request
1363         dev[0].roam(bssid1)
1364
1365     with fail_test(hapd1, 2, "os_get_random;wpa_ft_pull_pmk_r1"):
1366         # This will fail due to not being able to send out PMK-R1 pull request
1367         dev[0].roam(bssid1)
1368
1369     with fail_test(hapd1, 2, "aes_siv_encrypt;wpa_ft_pull_pmk_r1"):
1370         # This will fail due to not being able to send out PMK-R1 pull request
1371         dev[0].roam(bssid1)
1372
1373 def test_ap_ft_ap_oom3b(dev, apdev):
1374     """WPA2-PSK-FT and AP OOM 3b"""
1375     ssid = "test-ft"
1376     passphrase="12345678"
1377
1378     params = ft_params1(ssid=ssid, passphrase=passphrase)
1379     hapd0 = hostapd.add_ap(apdev[0], params)
1380     bssid0 = hapd0.own_addr()
1381
1382     dev[0].scan_for_bss(bssid0, freq="2412")
1383     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1384                    scan_freq="2412")
1385
1386     params = ft_params2(ssid=ssid, passphrase=passphrase)
1387     hapd1 = hostapd.add_ap(apdev[1], params)
1388     bssid1 = hapd1.own_addr()
1389     dev[0].scan_for_bss(bssid1, freq="2412")
1390     with fail_test(hapd1, 1, "os_get_random;wpa_ft_pull_pmk_r1"):
1391         # This will fail due to not being able to send out PMK-R1 pull request
1392         dev[0].roam(bssid1)
1393
1394 def test_ap_ft_ap_oom4(dev, apdev):
1395     """WPA2-PSK-FT and AP OOM 4"""
1396     ssid = "test-ft"
1397     passphrase="12345678"
1398
1399     params = ft_params1(ssid=ssid, passphrase=passphrase)
1400     hapd0 = hostapd.add_ap(apdev[0], params)
1401     bssid0 = hapd0.own_addr()
1402
1403     dev[0].scan_for_bss(bssid0, freq="2412")
1404     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1405                    scan_freq="2412")
1406
1407     params = ft_params2(ssid=ssid, passphrase=passphrase)
1408     hapd1 = hostapd.add_ap(apdev[1], params)
1409     bssid1 = hapd1.own_addr()
1410     dev[0].scan_for_bss(bssid1, freq="2412")
1411     with alloc_fail(hapd1, 1, "wpa_ft_gtk_subelem"):
1412         dev[0].roam(bssid1)
1413         if dev[0].get_status_field('bssid') != bssid1:
1414             raise Exception("Did not roam to AP1")
1415
1416     with fail_test(hapd0, 1, "wpa_auth_get_seqnum;wpa_ft_gtk_subelem"):
1417         dev[0].roam(bssid0)
1418         if dev[0].get_status_field('bssid') != bssid0:
1419             raise Exception("Did not roam to AP0")
1420
1421     with fail_test(hapd0, 1, "aes_wrap;wpa_ft_gtk_subelem"):
1422         dev[0].roam(bssid1)
1423         if dev[0].get_status_field('bssid') != bssid1:
1424             raise Exception("Did not roam to AP1")
1425
1426 def test_ap_ft_ap_oom5(dev, apdev):
1427     """WPA2-PSK-FT and AP OOM 5"""
1428     ssid = "test-ft"
1429     passphrase="12345678"
1430
1431     params = ft_params1(ssid=ssid, passphrase=passphrase)
1432     hapd0 = hostapd.add_ap(apdev[0], params)
1433     bssid0 = hapd0.own_addr()
1434
1435     dev[0].scan_for_bss(bssid0, freq="2412")
1436     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1437                    scan_freq="2412")
1438
1439     params = ft_params2(ssid=ssid, passphrase=passphrase)
1440     hapd1 = hostapd.add_ap(apdev[1], params)
1441     bssid1 = hapd1.own_addr()
1442     dev[0].scan_for_bss(bssid1, freq="2412")
1443     with alloc_fail(hapd1, 1, "=wpa_ft_process_auth_req"):
1444         # This will fail to roam
1445         dev[0].roam(bssid1)
1446
1447     with fail_test(hapd1, 1, "os_get_random;wpa_ft_process_auth_req"):
1448         # This will fail to roam
1449         dev[0].roam(bssid1)
1450
1451     with fail_test(hapd1, 1, "sha256_prf_bits;wpa_pmk_r1_to_ptk;wpa_ft_process_auth_req"):
1452         # This will fail to roam
1453         dev[0].roam(bssid1)
1454
1455     with fail_test(hapd1, 3, "wpa_pmk_r1_to_ptk;wpa_ft_process_auth_req"):
1456         # This will fail to roam
1457         dev[0].roam(bssid1)
1458
1459     with fail_test(hapd1, 1, "wpa_derive_pmk_r1_name;wpa_ft_process_auth_req"):
1460         # This will fail to roam
1461         dev[0].roam(bssid1)
1462
1463 def test_ap_ft_ap_oom6(dev, apdev):
1464     """WPA2-PSK-FT and AP OOM 6"""
1465     ssid = "test-ft"
1466     passphrase="12345678"
1467
1468     params = ft_params1(ssid=ssid, passphrase=passphrase)
1469     hapd0 = hostapd.add_ap(apdev[0], params)
1470     bssid0 = hapd0.own_addr()
1471
1472     dev[0].scan_for_bss(bssid0, freq="2412")
1473     with fail_test(hapd0, 1, "wpa_derive_pmk_r0;wpa_auth_derive_ptk_ft"):
1474         dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1475                        scan_freq="2412")
1476     dev[0].request("REMOVE_NETWORK all")
1477     dev[0].wait_disconnected()
1478     with fail_test(hapd0, 1, "wpa_derive_pmk_r1;wpa_auth_derive_ptk_ft"):
1479         dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1480                        scan_freq="2412")
1481     dev[0].request("REMOVE_NETWORK all")
1482     dev[0].wait_disconnected()
1483     with fail_test(hapd0, 1, "wpa_pmk_r1_to_ptk;wpa_auth_derive_ptk_ft"):
1484         dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1485                        scan_freq="2412")
1486
1487 def test_ap_ft_ap_oom7(dev, apdev):
1488     """WPA2-PSK-FT and AP OOM 7"""
1489     ssid = "test-ft"
1490     passphrase="12345678"
1491
1492     params = ft_params1(ssid=ssid, passphrase=passphrase)
1493     params["ieee80211w"] = "2"
1494     hapd0 = hostapd.add_ap(apdev[0], params)
1495     bssid0 = hapd0.own_addr()
1496
1497     dev[0].scan_for_bss(bssid0, freq="2412")
1498     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1499                    ieee80211w="2", scan_freq="2412")
1500
1501     params = ft_params2(ssid=ssid, passphrase=passphrase)
1502     params["ieee80211w"] = "2"
1503     hapd1 = hostapd.add_ap(apdev[1], params)
1504     bssid1 = hapd1.own_addr()
1505     dev[0].scan_for_bss(bssid1, freq="2412")
1506     with alloc_fail(hapd1, 1, "wpa_ft_igtk_subelem"):
1507         # This will fail to roam
1508         dev[0].roam(bssid1)
1509     with fail_test(hapd1, 1, "aes_wrap;wpa_ft_igtk_subelem"):
1510         # This will fail to roam
1511         dev[0].roam(bssid1)
1512     with alloc_fail(hapd1, 1, "=wpa_sm_write_assoc_resp_ies"):
1513         # This will fail to roam
1514         dev[0].roam(bssid1)
1515     with fail_test(hapd1, 1, "wpa_ft_mic;wpa_sm_write_assoc_resp_ies"):
1516         # This will fail to roam
1517         dev[0].roam(bssid1)
1518
1519 def test_ap_ft_ap_oom8(dev, apdev):
1520     """WPA2-PSK-FT and AP OOM 8"""
1521     ssid = "test-ft"
1522     passphrase="12345678"
1523
1524     params = ft_params1(ssid=ssid, passphrase=passphrase)
1525     params['ft_psk_generate_local'] = "1";
1526     hapd0 = hostapd.add_ap(apdev[0], params)
1527     bssid0 = hapd0.own_addr()
1528
1529     dev[0].scan_for_bss(bssid0, freq="2412")
1530     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1531                    scan_freq="2412")
1532
1533     params = ft_params2(ssid=ssid, passphrase=passphrase)
1534     params['ft_psk_generate_local'] = "1";
1535     hapd1 = hostapd.add_ap(apdev[1], params)
1536     bssid1 = hapd1.own_addr()
1537     dev[0].scan_for_bss(bssid1, freq="2412")
1538     with fail_test(hapd1, 1, "wpa_derive_pmk_r0;wpa_ft_psk_pmk_r1"):
1539         # This will fail to roam
1540         dev[0].roam(bssid1)
1541     with fail_test(hapd1, 1, "wpa_derive_pmk_r1;wpa_ft_psk_pmk_r1"):
1542         # This will fail to roam
1543         dev[0].roam(bssid1)
1544
1545 def test_ap_ft_ap_oom9(dev, apdev):
1546     """WPA2-PSK-FT and AP OOM 9"""
1547     ssid = "test-ft"
1548     passphrase="12345678"
1549
1550     params = ft_params1(ssid=ssid, passphrase=passphrase)
1551     hapd0 = hostapd.add_ap(apdev[0], params)
1552     bssid0 = hapd0.own_addr()
1553
1554     dev[0].scan_for_bss(bssid0, freq="2412")
1555     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1556                    scan_freq="2412")
1557
1558     params = ft_params2(ssid=ssid, passphrase=passphrase)
1559     hapd1 = hostapd.add_ap(apdev[1], params)
1560     bssid1 = hapd1.own_addr()
1561     dev[0].scan_for_bss(bssid1, freq="2412")
1562
1563     with alloc_fail(hapd0, 1, "wpa_ft_action_rx"):
1564         # This will fail to roam
1565         if "OK" not in dev[0].request("FT_DS " + bssid1):
1566             raise Exception("FT_DS failed")
1567         wait_fail_trigger(hapd0, "GET_ALLOC_FAIL")
1568
1569     with alloc_fail(hapd1, 1, "wpa_ft_rrb_rx_request"):
1570         # This will fail to roam
1571         if "OK" not in dev[0].request("FT_DS " + bssid1):
1572             raise Exception("FT_DS failed")
1573         wait_fail_trigger(hapd1, "GET_ALLOC_FAIL")
1574
1575     with alloc_fail(hapd1, 1, "wpa_ft_send_rrb_auth_resp"):
1576         # This will fail to roam
1577         if "OK" not in dev[0].request("FT_DS " + bssid1):
1578             raise Exception("FT_DS failed")
1579         wait_fail_trigger(hapd1, "GET_ALLOC_FAIL")
1580
1581 def test_ap_ft_ap_oom10(dev, apdev):
1582     """WPA2-PSK-FT and AP OOM 10"""
1583     ssid = "test-ft"
1584     passphrase="12345678"
1585
1586     params = ft_params1(ssid=ssid, passphrase=passphrase)
1587     hapd0 = hostapd.add_ap(apdev[0], params)
1588     bssid0 = hapd0.own_addr()
1589
1590     dev[0].scan_for_bss(bssid0, freq="2412")
1591     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1592                    scan_freq="2412")
1593
1594     params = ft_params2(ssid=ssid, passphrase=passphrase)
1595     hapd1 = hostapd.add_ap(apdev[1], params)
1596     bssid1 = hapd1.own_addr()
1597     dev[0].scan_for_bss(bssid1, freq="2412")
1598
1599     with fail_test(hapd0, 1, "aes_siv_decrypt;wpa_ft_rrb_rx_pull"):
1600         # This will fail to roam
1601         if "OK" not in dev[0].request("FT_DS " + bssid1):
1602             raise Exception("FT_DS failed")
1603         wait_fail_trigger(hapd0, "GET_FAIL")
1604
1605     with fail_test(hapd0, 1, "wpa_derive_pmk_r1;wpa_ft_rrb_rx_pull"):
1606         # This will fail to roam
1607         if "OK" not in dev[0].request("FT_DS " + bssid1):
1608             raise Exception("FT_DS failed")
1609         wait_fail_trigger(hapd0, "GET_FAIL")
1610
1611     with fail_test(hapd0, 1, "aes_siv_encrypt;wpa_ft_rrb_rx_pull"):
1612         # This will fail to roam
1613         if "OK" not in dev[0].request("FT_DS " + bssid1):
1614             raise Exception("FT_DS failed")
1615         wait_fail_trigger(hapd0, "GET_FAIL")
1616
1617     with fail_test(hapd1, 1, "aes_siv_decrypt;wpa_ft_rrb_rx_resp"):
1618         # This will fail to roam
1619         if "OK" not in dev[0].request("FT_DS " + bssid1):
1620             raise Exception("FT_DS failed")
1621         wait_fail_trigger(hapd1, "GET_FAIL")
1622
1623 def test_ap_ft_ap_oom11(dev, apdev):
1624     """WPA2-PSK-FT and AP OOM 11"""
1625     ssid = "test-ft"
1626     passphrase="12345678"
1627
1628     params = ft_params1(ssid=ssid, passphrase=passphrase)
1629     hapd0 = hostapd.add_ap(apdev[0], params)
1630     bssid0 = hapd0.own_addr()
1631
1632     dev[0].scan_for_bss(bssid0, freq="2412")
1633     with fail_test(hapd0, 1, "wpa_derive_pmk_r1;wpa_ft_generate_pmk_r1"):
1634         dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1635                        scan_freq="2412")
1636         wait_fail_trigger(hapd0, "GET_FAIL")
1637
1638     dev[1].scan_for_bss(bssid0, freq="2412")
1639     with fail_test(hapd0, 1, "aes_siv_encrypt;wpa_ft_generate_pmk_r1"):
1640         dev[1].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1641                        scan_freq="2412")
1642         wait_fail_trigger(hapd0, "GET_FAIL")
1643
1644 def test_ap_ft_over_ds_proto_ap(dev, apdev):
1645     """WPA2-PSK-FT AP over DS protocol testing for AP processing"""
1646     ssid = "test-ft"
1647     passphrase="12345678"
1648
1649     params = ft_params1(ssid=ssid, passphrase=passphrase)
1650     hapd0 = hostapd.add_ap(apdev[0], params)
1651     bssid0 = hapd0.own_addr()
1652     _bssid0 = bssid0.replace(':', '')
1653     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1654                    scan_freq="2412")
1655     addr = dev[0].own_addr()
1656     _addr = addr.replace(':', '')
1657
1658     params = ft_params2(ssid=ssid, passphrase=passphrase)
1659     hapd1 = hostapd.add_ap(apdev[1], params)
1660     bssid1 = hapd1.own_addr()
1661     _bssid1 = bssid1.replace(':', '')
1662
1663     hapd0.set("ext_mgmt_frame_handling", "1")
1664     hdr = "d0003a01" + _bssid0 + _addr + _bssid0 + "1000"
1665     valid = "0601" + _addr + _bssid1
1666     tests = [ "0601",
1667               "0601" + _addr,
1668               "0601" + _addr + _bssid0,
1669               "0601" + _addr + "ffffffffffff",
1670               "0601" + _bssid0 + _bssid0,
1671               valid,
1672               valid + "01",
1673               valid + "3700",
1674               valid + "3600",
1675               valid + "3603ffffff",
1676               valid + "3603a1b2ff",
1677               valid + "3603a1b2ff" + "3700",
1678               valid + "3603a1b2ff" + "37520000" + 16*"00" + 32*"00" + 32*"00",
1679               valid + "3603a1b2ff" + "37520001" + 16*"00" + 32*"00" + 32*"00",
1680               valid + "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa",
1681               valid + "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa" + "3000",
1682               valid + "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa" + "30260100000fac040100000fac040100000facff00000100a225368fe0983b5828a37a0acb37f253",
1683               valid + "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa" + "30260100000fac040100000fac030100000fac0400000100a225368fe0983b5828a37a0acb37f253",
1684               valid + "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa" + "30260100000fac040100000fac040100000fac0400000100a225368fe0983b5828a37a0acb37f253",
1685               valid + "0001" ]
1686     for t in tests:
1687         hapd0.dump_monitor()
1688         if "OK" not in hapd0.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + hdr + t):
1689             raise Exception("MGMT_RX_PROCESS failed")
1690
1691     hapd0.set("ext_mgmt_frame_handling", "0")
1692
1693 def test_ap_ft_over_ds_proto(dev, apdev):
1694     """WPA2-PSK-FT AP over DS protocol testing"""
1695     ssid = "test-ft"
1696     passphrase="12345678"
1697
1698     params = ft_params1(ssid=ssid, passphrase=passphrase)
1699     hapd0 = hostapd.add_ap(apdev[0], params)
1700     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1701                    scan_freq="2412")
1702
1703     # FT Action Response while no FT-over-DS in progress
1704     msg = {}
1705     msg['fc'] = 13 << 4
1706     msg['da'] = dev[0].own_addr()
1707     msg['sa'] = apdev[0]['bssid']
1708     msg['bssid'] = apdev[0]['bssid']
1709     msg['payload'] = binascii.unhexlify("06020200000000000200000004000000")
1710     hapd0.mgmt_tx(msg)
1711
1712     params = ft_params2(ssid=ssid, passphrase=passphrase)
1713     hapd1 = hostapd.add_ap(apdev[1], params)
1714     dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
1715     hapd0.set("ext_mgmt_frame_handling", "1")
1716     hapd0.dump_monitor()
1717     dev[0].request("FT_DS " + apdev[1]['bssid'])
1718     for i in range(0, 10):
1719         req = hapd0.mgmt_rx()
1720         if req is None:
1721             raise Exception("MGMT RX wait timed out")
1722         if req['subtype'] == 13:
1723             break
1724         req = None
1725     if not req:
1726         raise Exception("FT Action frame not received")
1727
1728     # FT Action Response for unexpected Target AP
1729     msg['payload'] = binascii.unhexlify("0602020000000000" + "f20000000400" + "0000")
1730     hapd0.mgmt_tx(msg)
1731
1732     # FT Action Response without MDIE
1733     msg['payload'] = binascii.unhexlify("0602020000000000" + "020000000400" + "0000")
1734     hapd0.mgmt_tx(msg)
1735
1736     # FT Action Response without FTIE
1737     msg['payload'] = binascii.unhexlify("0602020000000000" + "020000000400" + "0000" + "3603a1b201")
1738     hapd0.mgmt_tx(msg)
1739
1740     # FT Action Response with FTIE SNonce mismatch
1741     msg['payload'] = binascii.unhexlify("0602020000000000" + "020000000400" + "0000" + "3603a1b201" + "3766000000000000000000000000000000000000c4e67ac1999bebd00ff4ae4d5dcaf87896bb060b469f7c78d49623fb395c3455ffffff6b693fe6f8d8c5dfac0a22344750775bd09437f98b238c9f87b97f790c0106000102030406030a6e6173312e77312e6669")
1742     hapd0.mgmt_tx(msg)
1743
1744 @remote_compatible
1745 def test_ap_ft_rrb(dev, apdev):
1746     """WPA2-PSK-FT RRB protocol testing"""
1747     ssid = "test-ft"
1748     passphrase="12345678"
1749
1750     params = ft_params1(ssid=ssid, passphrase=passphrase)
1751     hapd0 = hostapd.add_ap(apdev[0], params)
1752
1753     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1754                    scan_freq="2412")
1755
1756     _dst_ll = binascii.unhexlify(apdev[0]['bssid'].replace(':',''))
1757     _src_ll = binascii.unhexlify(dev[0].own_addr().replace(':',''))
1758     proto = '\x89\x0d'
1759     ehdr = _dst_ll + _src_ll + proto
1760
1761     # Too short RRB frame
1762     pkt = ehdr + '\x01'
1763     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
1764         raise Exception("DATA_TEST_FRAME failed")
1765
1766     # RRB discarded frame wikth unrecognized type
1767     pkt = ehdr + '\x02' + '\x02' + '\x01\x00' + _src_ll
1768     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
1769         raise Exception("DATA_TEST_FRAME failed")
1770
1771     # RRB frame too short for action frame
1772     pkt = ehdr + '\x01' + '\x02' + '\x01\x00' + _src_ll
1773     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
1774         raise Exception("DATA_TEST_FRAME failed")
1775
1776     # Too short RRB frame (not enough room for Action Frame body)
1777     pkt = ehdr + '\x01' + '\x02' + '\x00\x00' + _src_ll
1778     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
1779         raise Exception("DATA_TEST_FRAME failed")
1780
1781     # Unexpected Action frame category
1782     pkt = ehdr + '\x01' + '\x02' + '\x0e\x00' + _src_ll + '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
1783     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
1784         raise Exception("DATA_TEST_FRAME failed")
1785
1786     # Unexpected Action in RRB Request
1787     pkt = ehdr + '\x01' + '\x00' + '\x0e\x00' + _src_ll + '\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
1788     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
1789         raise Exception("DATA_TEST_FRAME failed")
1790
1791     # Target AP address in RRB Request does not match with own address
1792     pkt = ehdr + '\x01' + '\x00' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
1793     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
1794         raise Exception("DATA_TEST_FRAME failed")
1795
1796     # Not enough room for status code in RRB Response
1797     pkt = ehdr + '\x01' + '\x01' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
1798     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
1799         raise Exception("DATA_TEST_FRAME failed")
1800
1801     # RRB discarded frame with unknown packet_type
1802     pkt = ehdr + '\x01' + '\x02' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
1803     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
1804         raise Exception("DATA_TEST_FRAME failed")
1805
1806     # RRB Response with non-zero status code; no STA match
1807     pkt = ehdr + '\x01' + '\x01' + '\x10\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00' + '\xff\xff'
1808     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
1809         raise Exception("DATA_TEST_FRAME failed")
1810
1811     # RRB Response with zero status code and extra data; STA match
1812     pkt = ehdr + '\x01' + '\x01' + '\x11\x00' + _src_ll + '\x06\x01' + _src_ll + '\x00\x00\x00\x00\x00\x00' + '\x00\x00' + '\x00'
1813     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
1814         raise Exception("DATA_TEST_FRAME failed")
1815
1816     # Too short PMK-R1 pull
1817     pkt = ehdr + '\x01' + '\xc8' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
1818     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
1819         raise Exception("DATA_TEST_FRAME failed")
1820
1821     # Too short PMK-R1 resp
1822     pkt = ehdr + '\x01' + '\xc9' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
1823     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
1824         raise Exception("DATA_TEST_FRAME failed")
1825
1826     # Too short PMK-R1 push
1827     pkt = ehdr + '\x01' + '\xca' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
1828     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
1829         raise Exception("DATA_TEST_FRAME failed")
1830
1831     # No matching R0KH address found for PMK-R0 pull response
1832     pkt = ehdr + '\x01' + '\xc9' + '\x5a\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00' + 76*'\00'
1833     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
1834         raise Exception("DATA_TEST_FRAME failed")
1835
1836 @remote_compatible
1837 def test_rsn_ie_proto_ft_psk_sta(dev, apdev):
1838     """RSN element protocol testing for FT-PSK + PMF cases on STA side"""
1839     bssid = apdev[0]['bssid']
1840     ssid = "test-ft"
1841     passphrase="12345678"
1842
1843     params = ft_params1(ssid=ssid, passphrase=passphrase)
1844     params["ieee80211w"] = "1"
1845     # This is the RSN element used normally by hostapd
1846     params['own_ie_override'] = '30140100000fac040100000fac040100000fac048c00' + '3603a1b201'
1847     hapd = hostapd.add_ap(apdev[0], params)
1848     id = dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1849                         ieee80211w="1", scan_freq="2412",
1850                         pairwise="CCMP", group="CCMP")
1851
1852     tests = [ ('PMKIDCount field included',
1853                '30160100000fac040100000fac040100000fac048c000000' + '3603a1b201'),
1854               ('Extra IE before RSNE',
1855                'dd0400000000' + '30140100000fac040100000fac040100000fac048c00' + '3603a1b201'),
1856               ('PMKIDCount and Group Management Cipher suite fields included',
1857                '301a0100000fac040100000fac040100000fac048c000000000fac06' + '3603a1b201'),
1858               ('Extra octet after defined fields (future extensibility)',
1859                '301b0100000fac040100000fac040100000fac048c000000000fac0600' + '3603a1b201'),
1860               ('No RSN Capabilities field (PMF disabled in practice)',
1861                '30120100000fac040100000fac040100000fac04' + '3603a1b201') ]
1862     for txt,ie in tests:
1863         dev[0].request("DISCONNECT")
1864         dev[0].wait_disconnected()
1865         logger.info(txt)
1866         hapd.disable()
1867         hapd.set('own_ie_override', ie)
1868         hapd.enable()
1869         dev[0].request("BSS_FLUSH 0")
1870         dev[0].scan_for_bss(bssid, 2412, force_scan=True, only_new=True)
1871         dev[0].select_network(id, freq=2412)
1872         dev[0].wait_connected()
1873
1874     dev[0].request("DISCONNECT")
1875     dev[0].wait_disconnected()
1876
1877     logger.info('Invalid RSNE causing internal hostapd error')
1878     hapd.disable()
1879     hapd.set('own_ie_override', '30130100000fac040100000fac040100000fac048c' + '3603a1b201')
1880     hapd.enable()
1881     dev[0].request("BSS_FLUSH 0")
1882     dev[0].scan_for_bss(bssid, 2412, force_scan=True, only_new=True)
1883     dev[0].select_network(id, freq=2412)
1884     # hostapd fails to generate EAPOL-Key msg 3/4, so this connection cannot
1885     # complete.
1886     ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED"], timeout=1)
1887     if ev is not None:
1888         raise Exception("Unexpected connection")
1889     dev[0].request("DISCONNECT")
1890
1891     logger.info('Unexpected PMKID causing internal hostapd error')
1892     hapd.disable()
1893     hapd.set('own_ie_override', '30260100000fac040100000fac040100000fac048c000100ffffffffffffffffffffffffffffffff' + '3603a1b201')
1894     hapd.enable()
1895     dev[0].request("BSS_FLUSH 0")
1896     dev[0].scan_for_bss(bssid, 2412, force_scan=True, only_new=True)
1897     dev[0].select_network(id, freq=2412)
1898     # hostapd fails to generate EAPOL-Key msg 3/4, so this connection cannot
1899     # complete.
1900     ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED"], timeout=1)
1901     if ev is not None:
1902         raise Exception("Unexpected connection")
1903     dev[0].request("DISCONNECT")
1904
1905 def test_ap_ft_ptk_rekey(dev, apdev):
1906     """WPA2-PSK-FT PTK rekeying triggered by station after roam"""
1907     ssid = "test-ft"
1908     passphrase="12345678"
1909
1910     params = ft_params1(ssid=ssid, passphrase=passphrase)
1911     hapd0 = hostapd.add_ap(apdev[0], params)
1912     params = ft_params2(ssid=ssid, passphrase=passphrase)
1913     hapd1 = hostapd.add_ap(apdev[1], params)
1914
1915     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, ptk_rekey="1")
1916
1917     ev = dev[0].wait_event(["CTRL-EVENT-DISCONNECTED",
1918                             "WPA: Key negotiation completed"], timeout=5)
1919     if ev is None:
1920         raise Exception("No event received after roam")
1921     if "CTRL-EVENT-DISCONNECTED" in ev:
1922         raise Exception("Unexpected disconnection after roam")
1923
1924     if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
1925         hapd = hapd0
1926     else:
1927         hapd = hapd1
1928     hwsim_utils.test_connectivity(dev[0], hapd)
1929
1930 def test_ap_ft_ptk_rekey_ap(dev, apdev):
1931     """WPA2-PSK-FT PTK rekeying triggered by AP after roam"""
1932     ssid = "test-ft"
1933     passphrase="12345678"
1934
1935     params = ft_params1(ssid=ssid, passphrase=passphrase)
1936     params['wpa_ptk_rekey'] = '2'
1937     hapd0 = hostapd.add_ap(apdev[0], params)
1938     params = ft_params2(ssid=ssid, passphrase=passphrase)
1939     params['wpa_ptk_rekey'] = '2'
1940     hapd1 = hostapd.add_ap(apdev[1], params)
1941
1942     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
1943
1944     ev = dev[0].wait_event(["CTRL-EVENT-DISCONNECTED",
1945                             "WPA: Key negotiation completed"], timeout=5)
1946     if ev is None:
1947         raise Exception("No event received after roam")
1948     if "CTRL-EVENT-DISCONNECTED" in ev:
1949         raise Exception("Unexpected disconnection after roam")
1950
1951     if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
1952         hapd = hapd0
1953     else:
1954         hapd = hapd1
1955     hwsim_utils.test_connectivity(dev[0], hapd)
1956
1957 def test_ap_ft_internal_rrb_check(dev, apdev):
1958     """RRB internal delivery only to WPA enabled BSS"""
1959     ssid = "test-ft"
1960     passphrase="12345678"
1961
1962     radius = hostapd.radius_params()
1963     params = ft_params1(ssid=ssid, passphrase=passphrase)
1964     params['wpa_key_mgmt'] = "FT-EAP"
1965     params["ieee8021x"] = "1"
1966     params = dict(radius.items() + params.items())
1967     hapd = hostapd.add_ap(apdev[0], params)
1968     key_mgmt = hapd.get_config()['key_mgmt']
1969     if key_mgmt.split(' ')[0] != "FT-EAP":
1970         raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
1971
1972     hapd1 = hostapd.add_ap(apdev[1], { "ssid" : ssid })
1973
1974     # Connect to WPA enabled AP
1975     dev[0].connect(ssid, key_mgmt="FT-EAP", proto="WPA2", ieee80211w="1",
1976                    eap="GPSK", identity="gpsk user",
1977                    password="abcdefghijklmnop0123456789abcdef",
1978                    scan_freq="2412")
1979
1980     # Try over_ds roaming to non-WPA-enabled AP.
1981     # If hostapd does not check hapd->wpa_auth internally, it will crash now.
1982     dev[0].roam_over_ds(apdev[1]['bssid'], fail_test=True)
1983
1984 def test_ap_ft_extra_ie(dev, apdev):
1985     """WPA2-PSK-FT AP with WPA2-PSK enabled and unexpected MDE"""
1986     ssid = "test-ft"
1987     passphrase="12345678"
1988
1989     params = ft_params1(ssid=ssid, passphrase=passphrase)
1990     params["wpa_key_mgmt"] = "WPA-PSK FT-PSK"
1991     hapd0 = hostapd.add_ap(apdev[0], params)
1992     dev[1].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
1993                    scan_freq="2412")
1994     dev[2].connect(ssid, psk=passphrase, key_mgmt="WPA-PSK", proto="WPA2",
1995                    scan_freq="2412")
1996     try:
1997         # Add Mobility Domain element to test AP validation code.
1998         dev[0].request("VENDOR_ELEM_ADD 13 3603a1b201")
1999         dev[0].connect(ssid, psk=passphrase, key_mgmt="WPA-PSK", proto="WPA2",
2000                        scan_freq="2412", wait_connect=False)
2001         ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED",
2002                                 "CTRL-EVENT-ASSOC-REJECT"], timeout=10)
2003         if ev is None:
2004             raise Exception("No connection result")
2005         if "CTRL-EVENT-CONNECTED" in ev:
2006             raise Exception("Non-FT association accepted with MDE")
2007         if "status_code=43" not in ev:
2008             raise Exception("Unexpected status code: " + ev)
2009         dev[0].request("DISCONNECT")
2010     finally:
2011         dev[0].request("VENDOR_ELEM_REMOVE 13 *")
2012
2013 def test_ap_ft_ric(dev, apdev):
2014     """WPA2-PSK-FT AP and RIC"""
2015     ssid = "test-ft"
2016     passphrase="12345678"
2017
2018     params = ft_params1(ssid=ssid, passphrase=passphrase)
2019     hapd0 = hostapd.add_ap(apdev[0], params)
2020     params = ft_params2(ssid=ssid, passphrase=passphrase)
2021     hapd1 = hostapd.add_ap(apdev[1], params)
2022
2023     dev[0].set("ric_ies", "")
2024     dev[0].set("ric_ies", '""')
2025     if "FAIL" not in dev[0].request("SET ric_ies q"):
2026         raise Exception("Invalid ric_ies value accepted")
2027
2028     tests = [ "3900",
2029               "3900ff04eeeeeeee",
2030               "390400000000",
2031               "390400000000" + "390400000000",
2032               "390400000000" + "dd050050f20202",
2033               "390400000000" + "dd3d0050f2020201" + 55*"00",
2034               "390400000000" + "dd3d0050f2020201aa300010270000000000000000000000000000000000000000000000000000ffffff7f00000000000000000000000040420f00ffff0000",
2035               "390401010000" + "dd3d0050f2020201aa3000dc050000000000000000000000000000000000000000000000000000dc050000000000000000000000000000808d5b0028230000" ]
2036     for t in tests:
2037         dev[0].set("ric_ies", t)
2038         run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase,
2039                   test_connectivity=False)
2040         dev[0].request("REMOVE_NETWORK all")
2041         dev[0].wait_disconnected()
2042         dev[0].dump_monitor()
2043
2044 def ie_hex(ies, id):
2045     return binascii.hexlify(struct.pack('BB', id, len(ies[id])) + ies[id])
2046
2047 def test_ap_ft_reassoc_proto(dev, apdev):
2048     """WPA2-PSK-FT AP Reassociation Request frame parsing"""
2049     ssid = "test-ft"
2050     passphrase="12345678"
2051
2052     params = ft_params1(ssid=ssid, passphrase=passphrase)
2053     hapd0 = hostapd.add_ap(apdev[0], params)
2054     params = ft_params2(ssid=ssid, passphrase=passphrase)
2055     hapd1 = hostapd.add_ap(apdev[1], params)
2056
2057     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
2058                    ieee80211w="1", scan_freq="2412")
2059     if dev[0].get_status_field('bssid') == hapd0.own_addr():
2060         hapd1ap = hapd0
2061         hapd2ap = hapd1
2062     else:
2063         hapd1ap = hapd1
2064         hapd2ap = hapd0
2065
2066     dev[0].scan_for_bss(hapd2ap.own_addr(), freq="2412")
2067     hapd2ap.set("ext_mgmt_frame_handling", "1")
2068     dev[0].request("ROAM " + hapd2ap.own_addr())
2069
2070     while True:
2071         req = hapd2ap.mgmt_rx()
2072         hapd2ap.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + binascii.hexlify(req['frame']))
2073         if req['subtype'] == 11:
2074             break
2075
2076     while True:
2077         req = hapd2ap.mgmt_rx()
2078         if req['subtype'] == 2:
2079             break
2080         hapd2ap.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + binascii.hexlify(req['frame']))
2081
2082     # IEEE 802.11 header + fixed fields before IEs
2083     hdr = binascii.hexlify(req['frame'][0:34])
2084     ies = parse_ie(binascii.hexlify(req['frame'][34:]))
2085     # First elements: SSID, Supported Rates, Extended Supported Rates
2086     ies1 = ie_hex(ies, 0) + ie_hex(ies, 1) + ie_hex(ies, 50)
2087
2088     rsne = ie_hex(ies, 48)
2089     mde = ie_hex(ies, 54)
2090     fte = ie_hex(ies, 55)
2091     tests = [ ]
2092     # RSN: Trying to use FT, but MDIE not included
2093     tests += [ rsne ]
2094     # RSN: Attempted to use unknown MDIE
2095     tests += [ rsne + "3603000000" ]
2096     # Invalid RSN pairwise cipher
2097     tests += [ "30260100000fac040100000fac030100000fac040000010029208a42cd25c85aa571567dce10dae3" ]
2098     # FT: No PMKID in RSNIE
2099     tests += [ "30160100000fac040100000fac040100000fac0400000000" + ie_hex(ies, 54) ]
2100     # FT: Invalid FTIE
2101     tests += [ rsne + mde ]
2102     # FT: RIC IE(s) in the frame, but not included in protected IE count
2103     # FT: Failed to parse FT IEs
2104     tests += [ rsne + mde + fte + "3900" ]
2105     # FT: SNonce mismatch in FTIE
2106     tests += [ rsne + mde + "37520000" + 16*"00" + 32*"00" + 32*"00" ]
2107     # FT: ANonce mismatch in FTIE
2108     tests += [ rsne + mde + fte[0:40] + 32*"00" + fte[104:] ]
2109     # FT: No R0KH-ID subelem in FTIE
2110     tests += [ rsne + mde + "3752" + fte[4:168] ]
2111     # FT: R0KH-ID in FTIE did not match with the current R0KH-ID
2112     tests += [ rsne + mde + "3755" + fte[4:168] + "0301ff" ]
2113     # FT: No R1KH-ID subelem in FTIE
2114     tests += [ rsne + mde + "375e" + fte[4:168] + "030a" + "nas1.w1.fi".encode("hex") ]
2115     # FT: Unknown R1KH-ID used in ReassocReq
2116     tests += [ rsne + mde + "3766" + fte[4:168] + "030a" + "nas1.w1.fi".encode("hex") + "0106000000000000" ]
2117     # FT: PMKID in Reassoc Req did not match with the PMKR1Name derived from auth request
2118     tests += [ rsne[:-32] + 16*"00" + mde + fte ]
2119     # Invalid MIC in FTIE
2120     tests += [ rsne + mde + fte[0:8] + 16*"00" + fte[40:] ]
2121     for t in tests:
2122         hapd2ap.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + hdr + ies1 + t)
2123
2124 def test_ap_ft_reassoc_local_fail(dev, apdev):
2125     """WPA2-PSK-FT AP Reassociation Request frame and local failure"""
2126     ssid = "test-ft"
2127     passphrase="12345678"
2128
2129     params = ft_params1(ssid=ssid, passphrase=passphrase)
2130     hapd0 = hostapd.add_ap(apdev[0], params)
2131     params = ft_params2(ssid=ssid, passphrase=passphrase)
2132     hapd1 = hostapd.add_ap(apdev[1], params)
2133
2134     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
2135                    ieee80211w="1", scan_freq="2412")
2136     if dev[0].get_status_field('bssid') == hapd0.own_addr():
2137         hapd1ap = hapd0
2138         hapd2ap = hapd1
2139     else:
2140         hapd1ap = hapd1
2141         hapd2ap = hapd0
2142
2143     dev[0].scan_for_bss(hapd2ap.own_addr(), freq="2412")
2144     # FT: Failed to calculate MIC
2145     with fail_test(hapd2ap, 1, "wpa_ft_validate_reassoc"):
2146         dev[0].request("ROAM " + hapd2ap.own_addr())
2147         ev = dev[0].wait_event(["CTRL-EVENT-ASSOC-REJECT"], timeout=10)
2148         dev[0].request("DISCONNECT")
2149         if ev is None:
2150             raise Exception("Association reject not seen")
2151
2152 def test_ap_ft_reassoc_replay(dev, apdev, params):
2153     """WPA2-PSK-FT AP and replayed Reassociation Request frame"""
2154     capfile = os.path.join(params['logdir'], "hwsim0.pcapng")
2155     ssid = "test-ft"
2156     passphrase="12345678"
2157
2158     params = ft_params1(ssid=ssid, passphrase=passphrase)
2159     hapd0 = hostapd.add_ap(apdev[0], params)
2160     params = ft_params2(ssid=ssid, passphrase=passphrase)
2161     hapd1 = hostapd.add_ap(apdev[1], params)
2162
2163     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
2164                    scan_freq="2412")
2165     if dev[0].get_status_field('bssid') == hapd0.own_addr():
2166         hapd1ap = hapd0
2167         hapd2ap = hapd1
2168     else:
2169         hapd1ap = hapd1
2170         hapd2ap = hapd0
2171
2172     dev[0].scan_for_bss(hapd2ap.own_addr(), freq="2412")
2173     hapd2ap.set("ext_mgmt_frame_handling", "1")
2174     dev[0].dump_monitor()
2175     if "OK" not in dev[0].request("ROAM " + hapd2ap.own_addr()):
2176         raise Exception("ROAM failed")
2177
2178     reassocreq = None
2179     count = 0
2180     while count < 100:
2181         req = hapd2ap.mgmt_rx()
2182         count += 1
2183         hapd2ap.dump_monitor()
2184         hapd2ap.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + binascii.hexlify(req['frame']))
2185         if req['subtype'] == 2:
2186             reassocreq = req
2187             ev = hapd2ap.wait_event(["MGMT-TX-STATUS"], timeout=5)
2188             if ev is None:
2189                 raise Exception("No TX status seen")
2190             cmd = "MGMT_TX_STATUS_PROCESS %s" % (" ".join(ev.split(' ')[1:4]))
2191             if "OK" not in hapd2ap.request(cmd):
2192                 raise Exception("MGMT_TX_STATUS_PROCESS failed")
2193             break
2194     hapd2ap.set("ext_mgmt_frame_handling", "0")
2195     if reassocreq is None:
2196         raise Exception("No Reassociation Request frame seen")
2197     dev[0].wait_connected()
2198     dev[0].dump_monitor()
2199     hapd2ap.dump_monitor()
2200
2201     hwsim_utils.test_connectivity(dev[0], hapd2ap)
2202
2203     logger.info("Replay the last Reassociation Request frame")
2204     hapd2ap.dump_monitor()
2205     hapd2ap.set("ext_mgmt_frame_handling", "1")
2206     hapd2ap.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + binascii.hexlify(req['frame']))
2207     ev = hapd2ap.wait_event(["MGMT-TX-STATUS"], timeout=5)
2208     if ev is None:
2209         raise Exception("No TX status seen")
2210     cmd = "MGMT_TX_STATUS_PROCESS %s" % (" ".join(ev.split(' ')[1:4]))
2211     if "OK" not in hapd2ap.request(cmd):
2212         raise Exception("MGMT_TX_STATUS_PROCESS failed")
2213     hapd2ap.set("ext_mgmt_frame_handling", "0")
2214
2215     try:
2216         hwsim_utils.test_connectivity(dev[0], hapd2ap)
2217         ok = True
2218     except:
2219         ok = False
2220
2221     ap = hapd2ap.own_addr()
2222     sta = dev[0].own_addr()
2223     filt = "wlan.fc.type == 2 && " + \
2224            "wlan.da == " + sta + " && " + \
2225            "wlan.sa == " + ap
2226     fields = [ "wlan.ccmp.extiv" ]
2227     res = run_tshark(capfile, filt, fields)
2228     vals = res.splitlines()
2229     logger.info("CCMP PN: " + str(vals))
2230     if len(vals) < 2:
2231         raise Exception("Could not find all CCMP protected frames from capture")
2232     if len(set(vals)) < len(vals):
2233         raise Exception("Duplicate CCMP PN used")
2234
2235     if not ok:
2236         raise Exception("The second hwsim connectivity test failed")
2237
2238 def test_ap_ft_psk_file(dev, apdev):
2239     """WPA2-PSK-FT AP with PSK from a file"""
2240     ssid = "test-ft"
2241     passphrase="12345678"
2242
2243     params = ft_params1a(ssid=ssid, passphrase=passphrase)
2244     params['wpa_psk_file'] = 'hostapd.wpa_psk'
2245     hapd = hostapd.add_ap(apdev[0], params)
2246
2247     dev[1].connect(ssid, psk="very secret",
2248                    key_mgmt="FT-PSK", proto="WPA2", ieee80211w="1",
2249                    scan_freq="2412", wait_connect=False)
2250     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
2251                    ieee80211w="1", scan_freq="2412")
2252     dev[0].request("REMOVE_NETWORK all")
2253     dev[0].wait_disconnected()
2254     dev[0].connect(ssid, psk="very secret", key_mgmt="FT-PSK", proto="WPA2",
2255                    ieee80211w="1", scan_freq="2412")
2256     dev[0].request("REMOVE_NETWORK all")
2257     dev[0].wait_disconnected()
2258     dev[0].connect(ssid, psk="secret passphrase",
2259                    key_mgmt="FT-PSK", proto="WPA2", ieee80211w="1",
2260                    scan_freq="2412")
2261     dev[2].connect(ssid, psk="another passphrase for all STAs",
2262                    key_mgmt="FT-PSK", proto="WPA2", ieee80211w="1",
2263                    scan_freq="2412")
2264     ev = dev[1].wait_event(["WPA: 4-Way Handshake failed"], timeout=10)
2265     if ev is None:
2266         raise Exception("Timed out while waiting for failure report")
2267     dev[1].request("REMOVE_NETWORK all")