1 # Fast BSS Transition tests
2 # Copyright (c) 2013-2019, Jouni Malinen <j@w1.fi>
4 # This software may be distributed under the terms of the BSD license.
5 # See README for more details.
7 from remotehost
import remote_compatible
12 logger
= logging
.getLogger()
18 from hwsim
import HWSimRadio
20 from tshark
import run_tshark
21 from utils
import HwsimSkip
, alloc_fail
, fail_test
, wait_fail_trigger
, skip_with_fips
, parse_ie
22 from wlantest
import Wlantest
23 from test_ap_psk
import check_mib
, find_wpas_process
, read_process_memory
, verify_not_present
, get_key_locations
24 from test_rrm
import check_beacon_req
27 params
= { "wpa": "2",
28 "wpa_key_mgmt": "FT-PSK",
29 "rsn_pairwise": "CCMP" }
33 params
= { "wpa": "3",
34 "wpa_key_mgmt": "WPA-PSK FT-PSK",
35 "wpa_pairwise": "TKIP",
36 "rsn_pairwise": "CCMP" }
39 def ft_params(rsn
=True, ssid
=None, passphrase
=None):
41 params
= ft_base_rsn()
43 params
= ft_base_mixed()
47 params
["wpa_passphrase"] = passphrase
49 params
["mobility_domain"] = "a1b2"
50 params
["r0_key_lifetime"] = "10000"
51 params
["pmk_r1_push"] = "1"
52 params
["reassociation_deadline"] = "1000"
55 def ft_params1a(rsn
=True, ssid
=None, passphrase
=None):
56 params
= ft_params(rsn
, ssid
, passphrase
)
57 params
['nas_identifier'] = "nas1.w1.fi"
58 params
['r1_key_holder'] = "000102030405"
61 def ft_params1(rsn
=True, ssid
=None, passphrase
=None, discovery
=False):
62 params
= ft_params1a(rsn
, ssid
, passphrase
)
64 params
['r0kh'] = "ff:ff:ff:ff:ff:ff * 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f"
65 params
['r1kh'] = "00:00:00:00:00:00 00:00:00:00:00:00 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f"
67 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f",
68 "02:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f300102030405060708090a0b0c0d0e0f" ]
69 params
['r1kh'] = "02:00:00:00:04:00 00:01:02:03:04:06 200102030405060708090a0b0c0d0e0f200102030405060708090a0b0c0d0e0f"
72 def ft_params1_old_key(rsn
=True, ssid
=None, passphrase
=None):
73 params
= ft_params1a(rsn
, ssid
, passphrase
)
74 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f",
75 "02:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f" ]
76 params
['r1kh'] = "02:00:00:00:04:00 00:01:02:03:04:06 200102030405060708090a0b0c0d0e0f"
79 def ft_params2a(rsn
=True, ssid
=None, passphrase
=None):
80 params
= ft_params(rsn
, ssid
, passphrase
)
81 params
['nas_identifier'] = "nas2.w1.fi"
82 params
['r1_key_holder'] = "000102030406"
85 def ft_params2(rsn
=True, ssid
=None, passphrase
=None, discovery
=False):
86 params
= ft_params2a(rsn
, ssid
, passphrase
)
88 params
['r0kh'] = "ff:ff:ff:ff:ff:ff * 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f"
89 params
['r1kh'] = "00:00:00:00:00:00 00:00:00:00:00:00 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f"
91 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f200102030405060708090a0b0c0d0e0f",
92 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f000102030405060708090a0b0c0d0e0f" ]
93 params
['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0e0f300102030405060708090a0b0c0d0e0f"
96 def ft_params2_old_key(rsn
=True, ssid
=None, passphrase
=None):
97 params
= ft_params2a(rsn
, ssid
, passphrase
)
98 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f",
99 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f" ]
100 params
['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0e0f"
103 def ft_params1_r0kh_mismatch(rsn
=True, ssid
=None, passphrase
=None):
104 params
= ft_params(rsn
, ssid
, passphrase
)
105 params
['nas_identifier'] = "nas1.w1.fi"
106 params
['r1_key_holder'] = "000102030405"
107 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f",
108 "12:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f300102030405060708090a0b0c0d0e0f" ]
109 params
['r1kh'] = "12:00:00:00:04:00 10:01:02:03:04:06 200102030405060708090a0b0c0d0e0f200102030405060708090a0b0c0d0e0f"
112 def ft_params2_incorrect_rrb_key(rsn
=True, ssid
=None, passphrase
=None):
113 params
= ft_params(rsn
, ssid
, passphrase
)
114 params
['nas_identifier'] = "nas2.w1.fi"
115 params
['r1_key_holder'] = "000102030406"
116 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0ef1200102030405060708090a0b0c0d0ef1",
117 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0ef2000102030405060708090a0b0c0d0ef2" ]
118 params
['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0ef3300102030405060708090a0b0c0d0ef3"
121 def ft_params2_r0kh_mismatch(rsn
=True, ssid
=None, passphrase
=None):
122 params
= ft_params(rsn
, ssid
, passphrase
)
123 params
['nas_identifier'] = "nas2.w1.fi"
124 params
['r1_key_holder'] = "000102030406"
125 params
['r0kh'] = [ "12:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f200102030405060708090a0b0c0d0e0f",
126 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f000102030405060708090a0b0c0d0e0f" ]
127 params
['r1kh'] = "12:00:00:00:03:00 10:01:02:03:04:05 300102030405060708090a0b0c0d0e0f300102030405060708090a0b0c0d0e0f"
130 def run_roams(dev
, apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=False,
131 sae
=False, eap
=False, fail_test
=False, roams
=1,
132 pairwise_cipher
="CCMP", group_cipher
="TKIP CCMP", ptk_rekey
="0",
133 test_connectivity
=True, eap_identity
="gpsk user", conndev
=False,
134 force_initial_conn_to_first_ap
=False, sha384
=False,
135 group_mgmt
=None, ocv
=None):
136 logger
.info("Connect to first AP")
139 copts
["proto"] = "WPA2"
140 copts
["ieee80211w"] = "1"
141 copts
["scan_freq"] = "2412"
142 copts
["pairwise"] = pairwise_cipher
143 copts
["group"] = group_cipher
144 copts
["wpa_ptk_rekey"] = ptk_rekey
146 copts
["group_mgmt"] = group_mgmt
150 copts
["key_mgmt"] = "FT-EAP-SHA384" if sha384
else "FT-EAP"
151 copts
["eap"] = "GPSK"
152 copts
["identity"] = eap_identity
153 copts
["password"] = "abcdefghijklmnop0123456789abcdef"
156 copts
["key_mgmt"] = "FT-SAE"
158 copts
["key_mgmt"] = "FT-PSK"
159 copts
["psk"] = passphrase
160 if force_initial_conn_to_first_ap
:
161 copts
["bssid"] = apdev
[0]['bssid']
162 dev
.connect(ssid
, **copts
)
164 if dev
.get_status_field('bssid') == apdev
[0]['bssid']:
174 if test_connectivity
:
176 hwsim_utils
.test_connectivity_iface(dev
, hapd1ap
, conndev
)
178 hwsim_utils
.test_connectivity(dev
, hapd1ap
)
180 dev
.scan_for_bss(ap2
['bssid'], freq
="2412")
182 for i
in range(0, roams
):
183 # Roaming artificially fast can make data test fail because the key is
186 logger
.info("Roam to the second AP")
188 dev
.roam_over_ds(ap2
['bssid'], fail_test
=fail_test
)
190 dev
.roam(ap2
['bssid'], fail_test
=fail_test
)
193 if dev
.get_status_field('bssid') != ap2
['bssid']:
194 raise Exception("Did not connect to correct AP")
195 if (i
== 0 or i
== roams
- 1) and test_connectivity
:
197 hwsim_utils
.test_connectivity_iface(dev
, hapd2ap
, conndev
)
199 hwsim_utils
.test_connectivity(dev
, hapd2ap
)
201 # Roaming artificially fast can make data test fail because the key is
204 logger
.info("Roam back to the first AP")
206 dev
.roam_over_ds(ap1
['bssid'])
208 dev
.roam(ap1
['bssid'])
209 if dev
.get_status_field('bssid') != ap1
['bssid']:
210 raise Exception("Did not connect to correct AP")
211 if (i
== 0 or i
== roams
- 1) and test_connectivity
:
213 hwsim_utils
.test_connectivity_iface(dev
, hapd1ap
, conndev
)
215 hwsim_utils
.test_connectivity(dev
, hapd1ap
)
217 def test_ap_ft(dev
, apdev
):
220 passphrase
="12345678"
222 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
223 hapd0
= hostapd
.add_ap(apdev
[0], params
)
224 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
225 hapd1
= hostapd
.add_ap(apdev
[1], params
)
227 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
)
228 if "[WPA2-FT/PSK-CCMP]" not in dev
[0].request("SCAN_RESULTS"):
229 raise Exception("Scan results missing RSN element info")
231 def test_ap_ft_old_key(dev
, apdev
):
232 """WPA2-PSK-FT AP (old key)"""
234 passphrase
="12345678"
236 params
= ft_params1_old_key(ssid
=ssid
, passphrase
=passphrase
)
237 hapd0
= hostapd
.add_ap(apdev
[0], params
)
238 params
= ft_params2_old_key(ssid
=ssid
, passphrase
=passphrase
)
239 hapd1
= hostapd
.add_ap(apdev
[1], params
)
241 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
)
243 def test_ap_ft_multi_akm(dev
, apdev
):
244 """WPA2-PSK-FT AP with non-FT AKMs enabled"""
246 passphrase
="12345678"
248 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
249 params
["wpa_key_mgmt"] = "FT-PSK WPA-PSK WPA-PSK-SHA256"
250 hapd0
= hostapd
.add_ap(apdev
[0], params
)
251 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
252 params
["wpa_key_mgmt"] = "FT-PSK WPA-PSK WPA-PSK-SHA256"
253 hapd1
= hostapd
.add_ap(apdev
[1], params
)
255 Wlantest
.setup(hapd0
)
258 wt
.add_passphrase(passphrase
)
260 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
)
261 if "[WPA2-PSK+FT/PSK+PSK-SHA256-CCMP]" not in dev
[0].request("SCAN_RESULTS"):
262 raise Exception("Scan results missing RSN element info")
263 dev
[1].connect(ssid
, psk
=passphrase
, scan_freq
="2412")
264 dev
[2].connect(ssid
, psk
=passphrase
, key_mgmt
="WPA-PSK-SHA256",
267 def test_ap_ft_local_key_gen(dev
, apdev
):
268 """WPA2-PSK-FT AP with local key generation (without pull/push)"""
270 passphrase
="12345678"
272 params
= ft_params1a(ssid
=ssid
, passphrase
=passphrase
)
273 params
['ft_psk_generate_local'] = "1"
274 del params
['pmk_r1_push']
275 hapd0
= hostapd
.add_ap(apdev
[0], params
)
276 params
= ft_params2a(ssid
=ssid
, passphrase
=passphrase
)
277 params
['ft_psk_generate_local'] = "1"
278 del params
['pmk_r1_push']
279 hapd1
= hostapd
.add_ap(apdev
[1], params
)
281 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
)
282 if "[WPA2-FT/PSK-CCMP]" not in dev
[0].request("SCAN_RESULTS"):
283 raise Exception("Scan results missing RSN element info")
285 def test_ap_ft_vlan(dev
, apdev
):
286 """WPA2-PSK-FT AP with VLAN"""
288 passphrase
="12345678"
290 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
291 params
['dynamic_vlan'] = "1"
292 params
['accept_mac_file'] = "hostapd.accept"
293 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
295 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
296 params
['dynamic_vlan'] = "1"
297 params
['accept_mac_file'] = "hostapd.accept"
298 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
300 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, conndev
="brvlan1")
301 if "[WPA2-FT/PSK-CCMP]" not in dev
[0].request("SCAN_RESULTS"):
302 raise Exception("Scan results missing RSN element info")
304 def test_ap_ft_vlan_disconnected(dev
, apdev
):
305 """WPA2-PSK-FT AP with VLAN and local key generation"""
307 passphrase
="12345678"
309 params
= ft_params1a(ssid
=ssid
, passphrase
=passphrase
)
310 params
['dynamic_vlan'] = "1"
311 params
['accept_mac_file'] = "hostapd.accept"
312 params
['ft_psk_generate_local'] = "1"
313 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
315 params
= ft_params2a(ssid
=ssid
, passphrase
=passphrase
)
316 params
['dynamic_vlan'] = "1"
317 params
['accept_mac_file'] = "hostapd.accept"
318 params
['ft_psk_generate_local'] = "1"
319 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
321 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, conndev
="brvlan1")
322 if "[WPA2-FT/PSK-CCMP]" not in dev
[0].request("SCAN_RESULTS"):
323 raise Exception("Scan results missing RSN element info")
325 def test_ap_ft_vlan_2(dev
, apdev
):
326 """WPA2-PSK-FT AP with VLAN and dest-AP does not have VLAN info locally"""
328 passphrase
="12345678"
330 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
331 params
['dynamic_vlan'] = "1"
332 params
['accept_mac_file'] = "hostapd.accept"
333 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
335 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
336 params
['dynamic_vlan'] = "1"
337 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
339 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, conndev
="brvlan1",
340 force_initial_conn_to_first_ap
=True)
341 if "[WPA2-FT/PSK-CCMP]" not in dev
[0].request("SCAN_RESULTS"):
342 raise Exception("Scan results missing RSN element info")
344 def test_ap_ft_many(dev
, apdev
):
345 """WPA2-PSK-FT AP multiple times"""
347 passphrase
="12345678"
349 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
350 hapd0
= hostapd
.add_ap(apdev
[0], params
)
351 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
352 hapd1
= hostapd
.add_ap(apdev
[1], params
)
354 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, roams
=50)
356 def test_ap_ft_many_vlan(dev
, apdev
):
357 """WPA2-PSK-FT AP with VLAN multiple times"""
359 passphrase
="12345678"
361 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
362 params
['dynamic_vlan'] = "1"
363 params
['accept_mac_file'] = "hostapd.accept"
364 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
366 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
367 params
['dynamic_vlan'] = "1"
368 params
['accept_mac_file'] = "hostapd.accept"
369 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
371 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, roams
=50,
374 def test_ap_ft_mixed(dev
, apdev
):
375 """WPA2-PSK-FT mixed-mode AP"""
376 ssid
= "test-ft-mixed"
377 passphrase
="12345678"
379 params
= ft_params1(rsn
=False, ssid
=ssid
, passphrase
=passphrase
)
380 hapd
= hostapd
.add_ap(apdev
[0], params
)
381 key_mgmt
= hapd
.get_config()['key_mgmt']
382 vals
= key_mgmt
.split(' ')
383 if vals
[0] != "WPA-PSK" or vals
[1] != "FT-PSK":
384 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
385 params
= ft_params2(rsn
=False, ssid
=ssid
, passphrase
=passphrase
)
386 hapd1
= hostapd
.add_ap(apdev
[1], params
)
388 run_roams(dev
[0], apdev
, hapd
, hapd1
, ssid
, passphrase
)
390 def test_ap_ft_pmf(dev
, apdev
):
391 """WPA2-PSK-FT AP with PMF"""
393 passphrase
="12345678"
395 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
396 params
["ieee80211w"] = "2"
397 hapd0
= hostapd
.add_ap(apdev
[0], params
)
398 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
399 params
["ieee80211w"] = "2"
400 hapd1
= hostapd
.add_ap(apdev
[1], params
)
402 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
)
404 def test_ap_ft_pmf_bip_cmac_128(dev
, apdev
):
405 """WPA2-PSK-FT AP with PMF/BIP-CMAC-128"""
406 run_ap_ft_pmf_bip(dev
, apdev
, "AES-128-CMAC")
408 def test_ap_ft_pmf_bip_gmac_128(dev
, apdev
):
409 """WPA2-PSK-FT AP with PMF/BIP-GMAC-128"""
410 run_ap_ft_pmf_bip(dev
, apdev
, "BIP-GMAC-128")
412 def test_ap_ft_pmf_bip_gmac_256(dev
, apdev
):
413 """WPA2-PSK-FT AP with PMF/BIP-GMAC-256"""
414 run_ap_ft_pmf_bip(dev
, apdev
, "BIP-GMAC-256")
416 def test_ap_ft_pmf_bip_cmac_256(dev
, apdev
):
417 """WPA2-PSK-FT AP with PMF/BIP-CMAC-256"""
418 run_ap_ft_pmf_bip(dev
, apdev
, "BIP-CMAC-256")
420 def run_ap_ft_pmf_bip(dev
, apdev
, cipher
):
421 if cipher
not in dev
[0].get_capability("group_mgmt"):
422 raise HwsimSkip("Cipher %s not supported" % cipher
)
425 passphrase
="12345678"
427 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
428 params
["ieee80211w"] = "2"
429 params
["group_mgmt_cipher"] = cipher
430 hapd0
= hostapd
.add_ap(apdev
[0], params
)
431 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
432 params
["ieee80211w"] = "2"
433 params
["group_mgmt_cipher"] = cipher
434 hapd1
= hostapd
.add_ap(apdev
[1], params
)
436 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
,
439 def test_ap_ft_ocv(dev
, apdev
):
440 """WPA2-PSK-FT AP with OCV"""
442 passphrase
="12345678"
444 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
445 params
["ieee80211w"] = "2"
448 hapd0
= hostapd
.add_ap(apdev
[0], params
)
449 except Exception as e
:
450 if "Failed to set hostapd parameter ocv" in str(e
):
451 raise HwsimSkip("OCV not supported")
453 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
454 params
["ieee80211w"] = "2"
456 hapd1
= hostapd
.add_ap(apdev
[1], params
)
458 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, ocv
="1")
460 def test_ap_ft_over_ds(dev
, apdev
):
461 """WPA2-PSK-FT AP over DS"""
463 passphrase
="12345678"
465 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
466 hapd0
= hostapd
.add_ap(apdev
[0], params
)
467 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
468 hapd1
= hostapd
.add_ap(apdev
[1], params
)
470 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True)
471 check_mib(dev
[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-4"),
472 ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-4") ])
474 def cleanup_ap_ft_separate_hostapd():
475 subprocess
.call(["brctl", "delif", "br0ft", "veth0"],
476 stderr
=open('/dev/null', 'w'))
477 subprocess
.call(["brctl", "delif", "br1ft", "veth1"],
478 stderr
=open('/dev/null', 'w'))
479 subprocess
.call(["ip", "link", "del", "veth0"],
480 stderr
=open('/dev/null', 'w'))
481 subprocess
.call(["ip", "link", "del", "veth1"],
482 stderr
=open('/dev/null', 'w'))
483 for ifname
in [ 'br0ft', 'br1ft', 'br-ft' ]:
484 subprocess
.call(['ip', 'link', 'set', 'dev', ifname
, 'down'],
485 stderr
=open('/dev/null', 'w'))
486 subprocess
.call(['brctl', 'delbr', ifname
],
487 stderr
=open('/dev/null', 'w'))
489 def test_ap_ft_separate_hostapd(dev
, apdev
, params
):
490 """WPA2-PSK-FT AP and separate hostapd process"""
492 run_ap_ft_separate_hostapd(dev
, apdev
, params
, False)
494 cleanup_ap_ft_separate_hostapd()
496 def test_ap_ft_over_ds_separate_hostapd(dev
, apdev
, params
):
497 """WPA2-PSK-FT AP over DS and separate hostapd process"""
499 run_ap_ft_separate_hostapd(dev
, apdev
, params
, True)
501 cleanup_ap_ft_separate_hostapd()
503 def run_ap_ft_separate_hostapd(dev
, apdev
, params
, over_ds
):
505 passphrase
="12345678"
506 logdir
= params
['logdir']
507 pidfile
= os
.path
.join(logdir
, 'ap_ft_over_ds_separate_hostapd.pid')
508 logfile
= os
.path
.join(logdir
, 'ap_ft_over_ds_separate_hostapd.hapd')
509 global_ctrl
= '/var/run/hostapd-ft'
513 subprocess
.check_call(['brctl', 'addbr', br_ifname
])
514 subprocess
.check_call(['brctl', 'setfd', br_ifname
, '0'])
515 subprocess
.check_call(['ip', 'link', 'set', 'dev', br_ifname
, 'up'])
517 subprocess
.check_call([ "ip", "link", "add", "veth0", "type", "veth",
518 "peer", "name", "veth0br" ])
519 subprocess
.check_call([ "ip", "link", "add", "veth1", "type", "veth",
520 "peer", "name", "veth1br" ])
521 subprocess
.check_call(['ip', 'link', 'set', 'dev', 'veth0br', 'up'])
522 subprocess
.check_call(['ip', 'link', 'set', 'dev', 'veth1br', 'up'])
523 subprocess
.check_call(['brctl', 'addif', br_ifname
, 'veth0br'])
524 subprocess
.check_call(['brctl', 'addif', br_ifname
, 'veth1br'])
526 subprocess
.check_call(['brctl', 'addbr', 'br0ft'])
527 subprocess
.check_call(['brctl', 'setfd', 'br0ft', '0'])
528 subprocess
.check_call(['ip', 'link', 'set', 'dev', 'br0ft', 'up'])
529 subprocess
.check_call(['ip', 'link', 'set', 'dev', 'veth0', 'up'])
530 subprocess
.check_call(['brctl', 'addif', 'br0ft', 'veth0'])
531 subprocess
.check_call(['brctl', 'addbr', 'br1ft'])
532 subprocess
.check_call(['brctl', 'setfd', 'br1ft', '0'])
533 subprocess
.check_call(['ip', 'link', 'set', 'dev', 'br1ft', 'up'])
534 subprocess
.check_call(['ip', 'link', 'set', 'dev', 'veth1', 'up'])
535 subprocess
.check_call(['brctl', 'addif', 'br1ft', 'veth1'])
536 except subprocess
.CalledProcessError
:
537 raise HwsimSkip("Bridge or veth not supported (kernel CONFIG_VETH)")
539 with
HWSimRadio() as (radio
, iface
):
540 prg
= os
.path
.join(logdir
, 'alt-hostapd/hostapd/hostapd')
541 if not os
.path
.exists(prg
):
542 prg
= '../../hostapd/hostapd'
543 cmd
= [ prg
, '-B', '-ddKt',
544 '-P', pidfile
, '-f', logfile
, '-g', global_ctrl
]
545 subprocess
.check_call(cmd
)
547 hglobal
= hostapd
.HostapdGlobal(global_ctrl_override
=global_ctrl
)
548 apdev_ft
= { 'ifname': iface
}
549 apdev2
= [ apdev_ft
, apdev
[1] ]
551 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
552 params
["r0kh"] = "ff:ff:ff:ff:ff:ff * 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
553 params
["r1kh"] = "00:00:00:00:00:00 00:00:00:00:00:00 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
554 params
['bridge'] = 'br0ft'
555 hapd0
= hostapd
.add_ap(apdev2
[0], params
,
556 global_ctrl_override
=global_ctrl
)
557 apdev2
[0]['bssid'] = hapd0
.own_addr()
558 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
559 params
["r0kh"] = "ff:ff:ff:ff:ff:ff * 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
560 params
["r1kh"] = "00:00:00:00:00:00 00:00:00:00:00:00 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
561 params
['bridge'] = 'br1ft'
562 hapd1
= hostapd
.add_ap(apdev2
[1], params
)
564 run_roams(dev
[0], apdev2
, hapd0
, hapd1
, ssid
, passphrase
,
565 over_ds
=over_ds
, test_connectivity
=False)
569 if os
.path
.exists(pidfile
):
570 with
open(pidfile
, 'r') as f
:
573 os
.kill(pid
, signal
.SIGTERM
)
575 def test_ap_ft_over_ds_ocv(dev
, apdev
):
576 """WPA2-PSK-FT AP over DS"""
578 passphrase
="12345678"
580 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
581 params
["ieee80211w"] = "2"
584 hapd0
= hostapd
.add_ap(apdev
[0], params
)
585 except Exception as e
:
586 if "Failed to set hostapd parameter ocv" in str(e
):
587 raise HwsimSkip("OCV not supported")
589 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
590 params
["ieee80211w"] = "2"
592 hapd1
= hostapd
.add_ap(apdev
[1], params
)
594 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
597 def test_ap_ft_over_ds_disabled(dev
, apdev
):
598 """WPA2-PSK-FT AP over DS disabled"""
600 passphrase
="12345678"
602 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
603 params
['ft_over_ds'] = '0'
604 hapd0
= hostapd
.add_ap(apdev
[0], params
)
605 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
606 params
['ft_over_ds'] = '0'
607 hapd1
= hostapd
.add_ap(apdev
[1], params
)
609 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
612 def test_ap_ft_vlan_over_ds(dev
, apdev
):
613 """WPA2-PSK-FT AP over DS with VLAN"""
615 passphrase
="12345678"
617 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
618 params
['dynamic_vlan'] = "1"
619 params
['accept_mac_file'] = "hostapd.accept"
620 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
621 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
622 params
['dynamic_vlan'] = "1"
623 params
['accept_mac_file'] = "hostapd.accept"
624 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
626 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
628 check_mib(dev
[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-4"),
629 ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-4") ])
631 def test_ap_ft_over_ds_many(dev
, apdev
):
632 """WPA2-PSK-FT AP over DS multiple times"""
634 passphrase
="12345678"
636 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
637 hapd0
= hostapd
.add_ap(apdev
[0], params
)
638 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
639 hapd1
= hostapd
.add_ap(apdev
[1], params
)
641 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
644 def test_ap_ft_vlan_over_ds_many(dev
, apdev
):
645 """WPA2-PSK-FT AP over DS with VLAN multiple times"""
647 passphrase
="12345678"
649 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
650 params
['dynamic_vlan'] = "1"
651 params
['accept_mac_file'] = "hostapd.accept"
652 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
653 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
654 params
['dynamic_vlan'] = "1"
655 params
['accept_mac_file'] = "hostapd.accept"
656 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
658 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
659 roams
=50, conndev
="brvlan1")
662 def test_ap_ft_over_ds_unknown_target(dev
, apdev
):
665 passphrase
="12345678"
667 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
668 hapd0
= hostapd
.add_ap(apdev
[0], params
)
670 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
672 dev
[0].roam_over_ds("02:11:22:33:44:55", fail_test
=True)
675 def test_ap_ft_over_ds_unexpected(dev
, apdev
):
676 """WPA2-PSK-FT AP over DS and unexpected response"""
678 passphrase
="12345678"
680 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
681 hapd0
= hostapd
.add_ap(apdev
[0], params
)
682 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
683 hapd1
= hostapd
.add_ap(apdev
[1], params
)
685 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
687 if dev
[0].get_status_field('bssid') == apdev
[0]['bssid']:
698 addr
= dev
[0].own_addr()
699 hapd1ap
.set("ext_mgmt_frame_handling", "1")
700 logger
.info("Foreign STA address")
704 msg
['sa'] = ap1
['bssid']
705 msg
['bssid'] = ap1
['bssid']
706 msg
['payload'] = binascii
.unhexlify("06021122334455660102030405060000")
709 logger
.info("No over-the-DS in progress")
710 msg
['payload'] = binascii
.unhexlify("0602" + addr
.replace(':', '') + "0102030405060000")
713 logger
.info("Non-zero status code")
714 msg
['payload'] = binascii
.unhexlify("0602" + addr
.replace(':', '') + "0102030405060100")
717 hapd1ap
.dump_monitor()
719 dev
[0].scan_for_bss(ap2
['bssid'], freq
="2412")
720 if "OK" not in dev
[0].request("FT_DS " + ap2
['bssid']):
721 raise Exception("FT_DS failed")
723 req
= hapd1ap
.mgmt_rx()
725 logger
.info("Foreign Target AP")
726 msg
['payload'] = binascii
.unhexlify("0602" + addr
.replace(':', '') + "0102030405060000")
729 addrs
= addr
.replace(':', '') + ap2
['bssid'].replace(':', '')
731 logger
.info("No IEs")
732 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "0000")
735 logger
.info("Invalid IEs (trigger parsing failure)")
736 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "00003700")
739 logger
.info("Too short MDIE")
740 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "000036021122")
743 logger
.info("Mobility domain mismatch")
744 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "00003603112201")
747 logger
.info("No FTIE")
748 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "00003603a1b201")
751 logger
.info("FTIE SNonce mismatch")
752 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + "1000000000000000000000000000000000000000000000000000000000000001" + "030a6e6173322e77312e6669")
755 logger
.info("No R0KH-ID subelem in FTIE")
756 snonce
= binascii
.hexlify(req
['payload'][111:111+32]).decode()
757 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "00003603a1b20137520000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce
)
760 logger
.info("No R0KH-ID subelem mismatch in FTIE")
761 snonce
= binascii
.hexlify(req
['payload'][111:111+32]).decode()
762 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce
+ "030a11223344556677889900")
765 logger
.info("No R1KH-ID subelem in FTIE")
766 r0khid
= binascii
.hexlify(req
['payload'][145:145+10]).decode()
767 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce
+ "030a" + r0khid
)
770 logger
.info("No RSNE")
771 r0khid
= binascii
.hexlify(req
['payload'][145:145+10]).decode()
772 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "00003603a1b20137660000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce
+ "030a" + r0khid
+ "0106000102030405")
775 def test_ap_ft_pmf_over_ds(dev
, apdev
):
776 """WPA2-PSK-FT AP over DS with PMF"""
778 passphrase
="12345678"
780 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
781 params
["ieee80211w"] = "2"
782 hapd0
= hostapd
.add_ap(apdev
[0], params
)
783 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
784 params
["ieee80211w"] = "2"
785 hapd1
= hostapd
.add_ap(apdev
[1], params
)
787 def test_ap_ft_pmf_bip_cmac_128_over_ds(dev
, apdev
):
788 """WPA2-PSK-FT AP over DS with PMF/BIP-CMAC-128"""
789 run_ap_ft_pmf_bip_over_ds(dev
, apdev
, "AES-128-CMAC")
791 def test_ap_ft_pmf_bip_gmac_128_over_ds(dev
, apdev
):
792 """WPA2-PSK-FT AP over DS with PMF/BIP-GMAC-128"""
793 run_ap_ft_pmf_bip_over_ds(dev
, apdev
, "BIP-GMAC-128")
795 def test_ap_ft_pmf_bip_gmac_256_over_ds(dev
, apdev
):
796 """WPA2-PSK-FT AP over DS with PMF/BIP-GMAC-256"""
797 run_ap_ft_pmf_bip_over_ds(dev
, apdev
, "BIP-GMAC-256")
799 def test_ap_ft_pmf_bip_cmac_256_over_ds(dev
, apdev
):
800 """WPA2-PSK-FT AP over DS with PMF/BIP-CMAC-256"""
801 run_ap_ft_pmf_bip_over_ds(dev
, apdev
, "BIP-CMAC-256")
803 def run_ap_ft_pmf_bip_over_ds(dev
, apdev
, cipher
):
804 if cipher
not in dev
[0].get_capability("group_mgmt"):
805 raise HwsimSkip("Cipher %s not supported" % cipher
)
808 passphrase
="12345678"
810 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
811 params
["ieee80211w"] = "2"
812 params
["group_mgmt_cipher"] = cipher
813 hapd0
= hostapd
.add_ap(apdev
[0], params
)
814 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
815 params
["ieee80211w"] = "2"
816 params
["group_mgmt_cipher"] = cipher
817 hapd1
= hostapd
.add_ap(apdev
[1], params
)
819 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
822 def test_ap_ft_over_ds_pull(dev
, apdev
):
823 """WPA2-PSK-FT AP over DS (pull PMK)"""
825 passphrase
="12345678"
827 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
828 params
["pmk_r1_push"] = "0"
829 hapd0
= hostapd
.add_ap(apdev
[0], params
)
830 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
831 params
["pmk_r1_push"] = "0"
832 hapd1
= hostapd
.add_ap(apdev
[1], params
)
834 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True)
836 def test_ap_ft_over_ds_pull_old_key(dev
, apdev
):
837 """WPA2-PSK-FT AP over DS (pull PMK; old key)"""
839 passphrase
="12345678"
841 params
= ft_params1_old_key(ssid
=ssid
, passphrase
=passphrase
)
842 params
["pmk_r1_push"] = "0"
843 hapd0
= hostapd
.add_ap(apdev
[0], params
)
844 params
= ft_params2_old_key(ssid
=ssid
, passphrase
=passphrase
)
845 params
["pmk_r1_push"] = "0"
846 hapd1
= hostapd
.add_ap(apdev
[1], params
)
848 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True)
850 def test_ap_ft_over_ds_pull_vlan(dev
, apdev
):
851 """WPA2-PSK-FT AP over DS (pull PMK) with VLAN"""
853 passphrase
="12345678"
855 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
856 params
["pmk_r1_push"] = "0"
857 params
['dynamic_vlan'] = "1"
858 params
['accept_mac_file'] = "hostapd.accept"
859 hapd0
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
860 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
861 params
["pmk_r1_push"] = "0"
862 params
['dynamic_vlan'] = "1"
863 params
['accept_mac_file'] = "hostapd.accept"
864 hapd1
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
866 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
869 def test_ap_ft_sae(dev
, apdev
):
870 """WPA2-PSK-FT-SAE AP"""
871 if "SAE" not in dev
[0].get_capability("auth_alg"):
872 raise HwsimSkip("SAE not supported")
874 passphrase
="12345678"
876 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
877 params
['wpa_key_mgmt'] = "FT-SAE"
878 hapd0
= hostapd
.add_ap(apdev
[0], params
)
879 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
880 params
['wpa_key_mgmt'] = "FT-SAE"
881 hapd
= hostapd
.add_ap(apdev
[1], params
)
882 key_mgmt
= hapd
.get_config()['key_mgmt']
883 if key_mgmt
.split(' ')[0] != "FT-SAE":
884 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
886 dev
[0].request("SET sae_groups ")
887 run_roams(dev
[0], apdev
, hapd0
, hapd
, ssid
, passphrase
, sae
=True)
889 def test_ap_ft_sae_over_ds(dev
, apdev
):
890 """WPA2-PSK-FT-SAE AP over DS"""
891 if "SAE" not in dev
[0].get_capability("auth_alg"):
892 raise HwsimSkip("SAE not supported")
894 passphrase
="12345678"
896 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
897 params
['wpa_key_mgmt'] = "FT-SAE"
898 hapd0
= hostapd
.add_ap(apdev
[0], params
)
899 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
900 params
['wpa_key_mgmt'] = "FT-SAE"
901 hapd1
= hostapd
.add_ap(apdev
[1], params
)
903 dev
[0].request("SET sae_groups ")
904 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, sae
=True,
907 def generic_ap_ft_eap(dev
, apdev
, vlan
=False, cui
=False, over_ds
=False,
908 discovery
=False, roams
=1):
910 passphrase
="12345678"
912 identity
="gpsk-vlan1"
921 radius
= hostapd
.radius_params()
922 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
, discovery
=discovery
)
923 params
['wpa_key_mgmt'] = "FT-EAP"
924 params
["ieee8021x"] = "1"
926 params
["dynamic_vlan"] = "1"
927 params
= dict(list(radius
.items()) + list(params
.items()))
928 hapd
= hostapd
.add_ap(apdev
[0], params
)
929 key_mgmt
= hapd
.get_config()['key_mgmt']
930 if key_mgmt
.split(' ')[0] != "FT-EAP":
931 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
932 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
, discovery
=discovery
)
933 params
['wpa_key_mgmt'] = "FT-EAP"
934 params
["ieee8021x"] = "1"
936 params
["dynamic_vlan"] = "1"
937 params
= dict(list(radius
.items()) + list(params
.items()))
938 hapd1
= hostapd
.add_ap(apdev
[1], params
)
940 run_roams(dev
[0], apdev
, hapd
, hapd1
, ssid
, passphrase
, eap
=True,
941 over_ds
=over_ds
, roams
=roams
, eap_identity
=identity
,
943 if "[WPA2-FT/EAP-CCMP]" not in dev
[0].request("SCAN_RESULTS"):
944 raise Exception("Scan results missing RSN element info")
945 check_mib(dev
[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-3"),
946 ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-3") ])
948 # Verify EAPOL reauthentication after FT protocol
949 if dev
[0].get_status_field('bssid') == apdev
[0]['bssid']:
953 ap
.request("EAPOL_REAUTH " + dev
[0].own_addr())
954 ev
= dev
[0].wait_event(["CTRL-EVENT-EAP-STARTED"], timeout
=5)
956 raise Exception("EAP authentication did not start")
957 ev
= dev
[0].wait_event(["CTRL-EVENT-EAP-SUCCESS"], timeout
=5)
959 raise Exception("EAP authentication did not succeed")
962 hwsim_utils
.test_connectivity_iface(dev
[0], ap
, conndev
)
964 hwsim_utils
.test_connectivity(dev
[0], ap
)
966 def test_ap_ft_eap(dev
, apdev
):
968 generic_ap_ft_eap(dev
, apdev
)
970 def test_ap_ft_eap_cui(dev
, apdev
):
971 """WPA2-EAP-FT AP with CUI"""
972 generic_ap_ft_eap(dev
, apdev
, vlan
=False, cui
=True)
974 def test_ap_ft_eap_vlan(dev
, apdev
):
975 """WPA2-EAP-FT AP with VLAN"""
976 generic_ap_ft_eap(dev
, apdev
, vlan
=True)
978 def test_ap_ft_eap_vlan_multi(dev
, apdev
):
979 """WPA2-EAP-FT AP with VLAN"""
980 generic_ap_ft_eap(dev
, apdev
, vlan
=True, roams
=50)
982 def test_ap_ft_eap_over_ds(dev
, apdev
):
983 """WPA2-EAP-FT AP using over-the-DS"""
984 generic_ap_ft_eap(dev
, apdev
, over_ds
=True)
986 def test_ap_ft_eap_dis(dev
, apdev
):
987 """WPA2-EAP-FT AP with AP discovery"""
988 generic_ap_ft_eap(dev
, apdev
, discovery
=True)
990 def test_ap_ft_eap_dis_over_ds(dev
, apdev
):
991 """WPA2-EAP-FT AP with AP discovery and over-the-DS"""
992 generic_ap_ft_eap(dev
, apdev
, over_ds
=True, discovery
=True)
994 def test_ap_ft_eap_vlan(dev
, apdev
):
995 """WPA2-EAP-FT AP with VLAN"""
996 generic_ap_ft_eap(dev
, apdev
, vlan
=True)
998 def test_ap_ft_eap_vlan_multi(dev
, apdev
):
999 """WPA2-EAP-FT AP with VLAN"""
1000 generic_ap_ft_eap(dev
, apdev
, vlan
=True, roams
=50)
1002 def test_ap_ft_eap_vlan_over_ds(dev
, apdev
):
1003 """WPA2-EAP-FT AP with VLAN + over_ds"""
1004 generic_ap_ft_eap(dev
, apdev
, vlan
=True, over_ds
=True)
1006 def test_ap_ft_eap_vlan_over_ds_multi(dev
, apdev
):
1007 """WPA2-EAP-FT AP with VLAN + over_ds"""
1008 generic_ap_ft_eap(dev
, apdev
, vlan
=True, over_ds
=True, roams
=50)
1010 def generic_ap_ft_eap_pull(dev
, apdev
, vlan
=False):
1011 """WPA2-EAP-FT AP (pull PMK)"""
1013 passphrase
="12345678"
1015 identity
="gpsk-vlan1"
1018 identity
="gpsk user"
1021 radius
= hostapd
.radius_params()
1022 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1023 params
['wpa_key_mgmt'] = "FT-EAP"
1024 params
["ieee8021x"] = "1"
1025 params
["pmk_r1_push"] = "0"
1027 params
["dynamic_vlan"] = "1"
1028 params
= dict(list(radius
.items()) + list(params
.items()))
1029 hapd
= hostapd
.add_ap(apdev
[0], params
)
1030 key_mgmt
= hapd
.get_config()['key_mgmt']
1031 if key_mgmt
.split(' ')[0] != "FT-EAP":
1032 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
1033 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1034 params
['wpa_key_mgmt'] = "FT-EAP"
1035 params
["ieee8021x"] = "1"
1036 params
["pmk_r1_push"] = "0"
1038 params
["dynamic_vlan"] = "1"
1039 params
= dict(list(radius
.items()) + list(params
.items()))
1040 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1042 run_roams(dev
[0], apdev
, hapd
, hapd1
, ssid
, passphrase
, eap
=True,
1043 eap_identity
=identity
, conndev
=conndev
)
1045 def test_ap_ft_eap_pull(dev
, apdev
):
1046 """WPA2-EAP-FT AP (pull PMK)"""
1047 generic_ap_ft_eap_pull(dev
, apdev
)
1049 def test_ap_ft_eap_pull_vlan(dev
, apdev
):
1050 generic_ap_ft_eap_pull(dev
, apdev
, vlan
=True)
1052 def test_ap_ft_eap_pull_wildcard(dev
, apdev
):
1053 """WPA2-EAP-FT AP (pull PMK) - wildcard R0KH/R1KH"""
1055 passphrase
="12345678"
1057 radius
= hostapd
.radius_params()
1058 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
, discovery
=True)
1059 params
['wpa_key_mgmt'] = "WPA-EAP FT-EAP"
1060 params
["ieee8021x"] = "1"
1061 params
["pmk_r1_push"] = "0"
1062 params
["r0kh"] = "ff:ff:ff:ff:ff:ff * 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
1063 params
["r1kh"] = "00:00:00:00:00:00 00:00:00:00:00:00 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
1064 params
["ft_psk_generate_local"] = "1"
1065 params
["eap_server"] = "0"
1066 params
= dict(list(radius
.items()) + list(params
.items()))
1067 hapd
= hostapd
.add_ap(apdev
[0], params
)
1068 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
, discovery
=True)
1069 params
['wpa_key_mgmt'] = "WPA-EAP FT-EAP"
1070 params
["ieee8021x"] = "1"
1071 params
["pmk_r1_push"] = "0"
1072 params
["r0kh"] = "ff:ff:ff:ff:ff:ff * 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
1073 params
["r1kh"] = "00:00:00:00:00:00 00:00:00:00:00:00 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
1074 params
["ft_psk_generate_local"] = "1"
1075 params
["eap_server"] = "0"
1076 params
= dict(list(radius
.items()) + list(params
.items()))
1077 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1079 run_roams(dev
[0], apdev
, hapd
, hapd1
, ssid
, passphrase
, eap
=True)
1082 def test_ap_ft_mismatching_rrb_key_push(dev
, apdev
):
1083 """WPA2-PSK-FT AP over DS with mismatching RRB key (push)"""
1085 passphrase
="12345678"
1087 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1088 params
["ieee80211w"] = "2"
1089 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1090 params
= ft_params2_incorrect_rrb_key(ssid
=ssid
, passphrase
=passphrase
)
1091 params
["ieee80211w"] = "2"
1092 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1094 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
1098 def test_ap_ft_mismatching_rrb_key_pull(dev
, apdev
):
1099 """WPA2-PSK-FT AP over DS with mismatching RRB key (pull)"""
1101 passphrase
="12345678"
1103 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1104 params
["pmk_r1_push"] = "0"
1105 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1106 params
= ft_params2_incorrect_rrb_key(ssid
=ssid
, passphrase
=passphrase
)
1107 params
["pmk_r1_push"] = "0"
1108 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1110 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
1114 def test_ap_ft_mismatching_r0kh_id_pull(dev
, apdev
):
1115 """WPA2-PSK-FT AP over DS with mismatching R0KH-ID (pull)"""
1117 passphrase
="12345678"
1119 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1120 params
["pmk_r1_push"] = "0"
1121 params
["nas_identifier"] = "nas0.w1.fi"
1122 hostapd
.add_ap(apdev
[0], params
)
1123 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1126 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1127 params
["pmk_r1_push"] = "0"
1128 hostapd
.add_ap(apdev
[1], params
)
1130 dev
[0].scan_for_bss(apdev
[1]['bssid'], freq
="2412")
1131 dev
[0].roam_over_ds(apdev
[1]['bssid'], fail_test
=True)
1134 def test_ap_ft_mismatching_rrb_r0kh_push(dev
, apdev
):
1135 """WPA2-PSK-FT AP over DS with mismatching R0KH key (push)"""
1137 passphrase
="12345678"
1139 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1140 params
["ieee80211w"] = "2"
1141 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1142 params
= ft_params2_r0kh_mismatch(ssid
=ssid
, passphrase
=passphrase
)
1143 params
["ieee80211w"] = "2"
1144 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1146 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
1150 def test_ap_ft_mismatching_rrb_r0kh_pull(dev
, apdev
):
1151 """WPA2-PSK-FT AP over DS with mismatching R0KH key (pull)"""
1153 passphrase
="12345678"
1155 params
= ft_params1_r0kh_mismatch(ssid
=ssid
, passphrase
=passphrase
)
1156 params
["pmk_r1_push"] = "0"
1157 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1158 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1159 params
["pmk_r1_push"] = "0"
1160 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1162 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
1165 def test_ap_ft_mismatching_rrb_key_push_eap(dev
, apdev
):
1166 """WPA2-EAP-FT AP over DS with mismatching RRB key (push)"""
1168 passphrase
="12345678"
1170 radius
= hostapd
.radius_params()
1171 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1172 params
["ieee80211w"] = "2"
1173 params
['wpa_key_mgmt'] = "FT-EAP"
1174 params
["ieee8021x"] = "1"
1175 params
= dict(list(radius
.items()) + list(params
.items()))
1176 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1177 params
= ft_params2_incorrect_rrb_key(ssid
=ssid
, passphrase
=passphrase
)
1178 params
["ieee80211w"] = "2"
1179 params
['wpa_key_mgmt'] = "FT-EAP"
1180 params
["ieee8021x"] = "1"
1181 params
= dict(list(radius
.items()) + list(params
.items()))
1182 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1184 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
1185 fail_test
=True, eap
=True)
1187 def test_ap_ft_mismatching_rrb_key_pull_eap(dev
, apdev
):
1188 """WPA2-EAP-FT AP over DS with mismatching RRB key (pull)"""
1190 passphrase
="12345678"
1192 radius
= hostapd
.radius_params()
1193 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1194 params
["pmk_r1_push"] = "0"
1195 params
['wpa_key_mgmt'] = "FT-EAP"
1196 params
["ieee8021x"] = "1"
1197 params
= dict(list(radius
.items()) + list(params
.items()))
1198 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1199 params
= ft_params2_incorrect_rrb_key(ssid
=ssid
, passphrase
=passphrase
)
1200 params
["pmk_r1_push"] = "0"
1201 params
['wpa_key_mgmt'] = "FT-EAP"
1202 params
["ieee8021x"] = "1"
1203 params
= dict(list(radius
.items()) + list(params
.items()))
1204 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1206 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
1207 fail_test
=True, eap
=True)
1209 def test_ap_ft_mismatching_r0kh_id_pull_eap(dev
, apdev
):
1210 """WPA2-EAP-FT AP over DS with mismatching R0KH-ID (pull)"""
1212 passphrase
="12345678"
1214 radius
= hostapd
.radius_params()
1215 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1216 params
["pmk_r1_push"] = "0"
1217 params
["nas_identifier"] = "nas0.w1.fi"
1218 params
['wpa_key_mgmt'] = "FT-EAP"
1219 params
["ieee8021x"] = "1"
1220 params
= dict(list(radius
.items()) + list(params
.items()))
1221 hostapd
.add_ap(apdev
[0], params
)
1222 dev
[0].connect(ssid
, key_mgmt
="FT-EAP", proto
="WPA2", ieee80211w
="1",
1223 eap
="GPSK", identity
="gpsk user",
1224 password
="abcdefghijklmnop0123456789abcdef",
1227 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1228 params
["pmk_r1_push"] = "0"
1229 params
['wpa_key_mgmt'] = "FT-EAP"
1230 params
["ieee8021x"] = "1"
1231 params
= dict(list(radius
.items()) + list(params
.items()))
1232 hostapd
.add_ap(apdev
[1], params
)
1234 dev
[0].scan_for_bss(apdev
[1]['bssid'], freq
="2412")
1235 dev
[0].roam_over_ds(apdev
[1]['bssid'], fail_test
=True)
1237 def test_ap_ft_mismatching_rrb_r0kh_push_eap(dev
, apdev
):
1238 """WPA2-EAP-FT AP over DS with mismatching R0KH key (push)"""
1240 passphrase
="12345678"
1242 radius
= hostapd
.radius_params()
1243 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1244 params
["ieee80211w"] = "2"
1245 params
['wpa_key_mgmt'] = "FT-EAP"
1246 params
["ieee8021x"] = "1"
1247 params
= dict(list(radius
.items()) + list(params
.items()))
1248 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1249 params
= ft_params2_r0kh_mismatch(ssid
=ssid
, passphrase
=passphrase
)
1250 params
["ieee80211w"] = "2"
1251 params
['wpa_key_mgmt'] = "FT-EAP"
1252 params
["ieee8021x"] = "1"
1253 params
= dict(list(radius
.items()) + list(params
.items()))
1254 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1256 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
1257 fail_test
=True, eap
=True)
1259 def test_ap_ft_mismatching_rrb_r0kh_pull_eap(dev
, apdev
):
1260 """WPA2-EAP-FT AP over DS with mismatching R0KH key (pull)"""
1262 passphrase
="12345678"
1264 radius
= hostapd
.radius_params()
1265 params
= ft_params1_r0kh_mismatch(ssid
=ssid
, passphrase
=passphrase
)
1266 params
["pmk_r1_push"] = "0"
1267 params
['wpa_key_mgmt'] = "FT-EAP"
1268 params
["ieee8021x"] = "1"
1269 params
= dict(list(radius
.items()) + list(params
.items()))
1270 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1271 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1272 params
["pmk_r1_push"] = "0"
1273 params
['wpa_key_mgmt'] = "FT-EAP"
1274 params
["ieee8021x"] = "1"
1275 params
= dict(list(radius
.items()) + list(params
.items()))
1276 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1278 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
1279 fail_test
=True, eap
=True)
1281 def test_ap_ft_gtk_rekey(dev
, apdev
):
1282 """WPA2-PSK-FT AP and GTK rekey"""
1284 passphrase
="12345678"
1286 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1287 params
['wpa_group_rekey'] = '1'
1288 hapd
= hostapd
.add_ap(apdev
[0], params
)
1290 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1291 ieee80211w
="1", scan_freq
="2412")
1293 ev
= dev
[0].wait_event(["WPA: Group rekeying completed"], timeout
=2)
1295 raise Exception("GTK rekey timed out after initial association")
1296 hwsim_utils
.test_connectivity(dev
[0], hapd
)
1298 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1299 params
['wpa_group_rekey'] = '1'
1300 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1302 dev
[0].scan_for_bss(apdev
[1]['bssid'], freq
="2412")
1303 dev
[0].roam(apdev
[1]['bssid'])
1304 if dev
[0].get_status_field('bssid') != apdev
[1]['bssid']:
1305 raise Exception("Did not connect to correct AP")
1306 hwsim_utils
.test_connectivity(dev
[0], hapd1
)
1308 ev
= dev
[0].wait_event(["WPA: Group rekeying completed"], timeout
=2)
1310 raise Exception("GTK rekey timed out after FT protocol")
1311 hwsim_utils
.test_connectivity(dev
[0], hapd1
)
1313 def test_ft_psk_key_lifetime_in_memory(dev
, apdev
, params
):
1314 """WPA2-PSK-FT and key lifetime in memory"""
1316 passphrase
="04c2726b4b8d5f1b4db9c07aa4d9e9d8f765cb5d25ec817e6cc4fcdd5255db0"
1317 psk
= '93c90846ff67af9037ed83fb72b63dbeddaa81d47f926c20909b5886f1d9358d'
1318 pmk
= binascii
.unhexlify(psk
)
1319 p
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1320 hapd0
= hostapd
.add_ap(apdev
[0], p
)
1321 p
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1322 hapd1
= hostapd
.add_ap(apdev
[1], p
)
1324 pid
= find_wpas_process(dev
[0])
1326 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1328 # The decrypted copy of GTK is freed only after the CTRL-EVENT-CONNECTED
1329 # event has been delivered, so verify that wpa_supplicant has returned to
1330 # eloop before reading process memory.
1334 buf
= read_process_memory(pid
, pmk
)
1336 dev
[0].request("DISCONNECT")
1337 dev
[0].wait_disconnected()
1344 with
open(os
.path
.join(params
['logdir'], 'log0'), 'r') as f
:
1345 for l
in f
.readlines():
1346 if "FT: PMK-R0 - hexdump" in l
:
1347 val
= l
.strip().split(':')[3].replace(' ', '')
1348 pmkr0
= binascii
.unhexlify(val
)
1349 if "FT: PMK-R1 - hexdump" in l
:
1350 val
= l
.strip().split(':')[3].replace(' ', '')
1351 pmkr1
= binascii
.unhexlify(val
)
1352 if "FT: KCK - hexdump" in l
:
1353 val
= l
.strip().split(':')[3].replace(' ', '')
1354 kck
= binascii
.unhexlify(val
)
1355 if "FT: KEK - hexdump" in l
:
1356 val
= l
.strip().split(':')[3].replace(' ', '')
1357 kek
= binascii
.unhexlify(val
)
1358 if "FT: TK - hexdump" in l
:
1359 val
= l
.strip().split(':')[3].replace(' ', '')
1360 tk
= binascii
.unhexlify(val
)
1361 if "WPA: Group Key - hexdump" in l
:
1362 val
= l
.strip().split(':')[3].replace(' ', '')
1363 gtk
= binascii
.unhexlify(val
)
1364 if not pmkr0
or not pmkr1
or not kck
or not kek
or not tk
or not gtk
:
1365 raise Exception("Could not find keys from debug log")
1367 raise Exception("Unexpected GTK length")
1369 logger
.info("Checking keys in memory while associated")
1370 get_key_locations(buf
, pmk
, "PMK")
1371 get_key_locations(buf
, pmkr0
, "PMK-R0")
1372 get_key_locations(buf
, pmkr1
, "PMK-R1")
1374 raise HwsimSkip("PMK not found while associated")
1375 if pmkr0
not in buf
:
1376 raise HwsimSkip("PMK-R0 not found while associated")
1377 if pmkr1
not in buf
:
1378 raise HwsimSkip("PMK-R1 not found while associated")
1380 raise Exception("KCK not found while associated")
1382 raise Exception("KEK not found while associated")
1384 # raise Exception("TK found from memory")
1386 logger
.info("Checking keys in memory after disassociation")
1387 buf
= read_process_memory(pid
, pmk
)
1388 get_key_locations(buf
, pmk
, "PMK")
1389 get_key_locations(buf
, pmkr0
, "PMK-R0")
1390 get_key_locations(buf
, pmkr1
, "PMK-R1")
1392 # Note: PMK/PSK is still present in network configuration
1394 fname
= os
.path
.join(params
['logdir'],
1395 'ft_psk_key_lifetime_in_memory.memctx-')
1396 verify_not_present(buf
, pmkr0
, fname
, "PMK-R0")
1397 verify_not_present(buf
, pmkr1
, fname
, "PMK-R1")
1398 verify_not_present(buf
, kck
, fname
, "KCK")
1399 verify_not_present(buf
, kek
, fname
, "KEK")
1400 verify_not_present(buf
, tk
, fname
, "TK")
1402 get_key_locations(buf
, gtk
, "GTK")
1403 verify_not_present(buf
, gtk
, fname
, "GTK")
1405 dev
[0].request("REMOVE_NETWORK all")
1407 logger
.info("Checking keys in memory after network profile removal")
1408 buf
= read_process_memory(pid
, pmk
)
1409 get_key_locations(buf
, pmk
, "PMK")
1410 get_key_locations(buf
, pmkr0
, "PMK-R0")
1411 get_key_locations(buf
, pmkr1
, "PMK-R1")
1413 verify_not_present(buf
, pmk
, fname
, "PMK")
1414 verify_not_present(buf
, pmkr0
, fname
, "PMK-R0")
1415 verify_not_present(buf
, pmkr1
, fname
, "PMK-R1")
1416 verify_not_present(buf
, kck
, fname
, "KCK")
1417 verify_not_present(buf
, kek
, fname
, "KEK")
1418 verify_not_present(buf
, tk
, fname
, "TK")
1419 verify_not_present(buf
, gtk
, fname
, "GTK")
1422 def test_ap_ft_invalid_resp(dev
, apdev
):
1423 """WPA2-PSK-FT AP and invalid response IEs"""
1425 passphrase
="12345678"
1427 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1428 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1429 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1432 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1433 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1436 # Various IEs for test coverage. The last one is FTIE with invalid
1437 # R1KH-ID subelement.
1438 "020002000000" + "3800" + "38051122334455" + "3754000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010100",
1439 # FTIE with invalid R0KH-ID subelement (len=0).
1440 "020002000000" + "3754000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010300",
1441 # FTIE with invalid R0KH-ID subelement (len=49).
1442 "020002000000" + "378500010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001033101020304050607080910111213141516171819202122232425262728293031323334353637383940414243444546474849",
1444 "020002000000" + "3000",
1445 # Required IEs missing from protected IE count.
1446 "020002000000" + "3603a1b201" + "375200010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900",
1447 # RIC missing from protected IE count.
1448 "020002000000" + "3603a1b201" + "375200020203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900",
1449 # Protected IE missing.
1450 "020002000000" + "3603a1b201" + "375200ff0203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900" + "0000" ]
1452 dev
[0].scan_for_bss(apdev
[1]['bssid'], freq
="2412")
1453 hapd1
.set("ext_mgmt_frame_handling", "1")
1454 hapd1
.dump_monitor()
1455 if "OK" not in dev
[0].request("ROAM " + apdev
[1]['bssid']):
1456 raise Exception("ROAM failed")
1459 msg
= hapd1
.mgmt_rx()
1460 if msg
['subtype'] == 11:
1464 raise Exception("Authentication frame not seen")
1467 resp
['fc'] = auth
['fc']
1468 resp
['da'] = auth
['sa']
1469 resp
['sa'] = auth
['da']
1470 resp
['bssid'] = auth
['bssid']
1471 resp
['payload'] = binascii
.unhexlify(t
)
1473 hapd1
.set("ext_mgmt_frame_handling", "0")
1474 dev
[0].wait_disconnected()
1476 dev
[0].request("RECONNECT")
1477 dev
[0].wait_connected()
1479 def test_ap_ft_gcmp_256(dev
, apdev
):
1480 """WPA2-PSK-FT AP with GCMP-256 cipher"""
1481 if "GCMP-256" not in dev
[0].get_capability("pairwise"):
1482 raise HwsimSkip("Cipher GCMP-256 not supported")
1484 passphrase
="12345678"
1486 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1487 params
['rsn_pairwise'] = "GCMP-256"
1488 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1489 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1490 params
['rsn_pairwise'] = "GCMP-256"
1491 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1493 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
,
1494 pairwise_cipher
="GCMP-256", group_cipher
="GCMP-256")
1496 def setup_ap_ft_oom(dev
, apdev
):
1497 skip_with_fips(dev
[0])
1499 passphrase
="12345678"
1501 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1502 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1503 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1504 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1506 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1508 if dev
[0].get_status_field('bssid') == apdev
[0]['bssid']:
1509 dst
= apdev
[1]['bssid']
1511 dst
= apdev
[0]['bssid']
1513 dev
[0].scan_for_bss(dst
, freq
="2412")
1517 def test_ap_ft_oom(dev
, apdev
):
1518 """WPA2-PSK-FT and OOM"""
1519 dst
= setup_ap_ft_oom(dev
, apdev
)
1520 with
alloc_fail(dev
[0], 1, "wpa_ft_gen_req_ies"):
1523 def test_ap_ft_oom2(dev
, apdev
):
1524 """WPA2-PSK-FT and OOM (2)"""
1525 dst
= setup_ap_ft_oom(dev
, apdev
)
1526 with
fail_test(dev
[0], 1, "wpa_ft_mic"):
1527 dev
[0].roam(dst
, fail_test
=True, assoc_reject_ok
=True)
1529 def test_ap_ft_oom3(dev
, apdev
):
1530 """WPA2-PSK-FT and OOM (3)"""
1531 dst
= setup_ap_ft_oom(dev
, apdev
)
1532 with
fail_test(dev
[0], 1, "os_get_random;wpa_ft_prepare_auth_request"):
1535 def test_ap_ft_oom4(dev
, apdev
):
1536 """WPA2-PSK-FT and OOM (4)"""
1538 passphrase
="12345678"
1539 dst
= setup_ap_ft_oom(dev
, apdev
)
1540 dev
[0].request("REMOVE_NETWORK all")
1541 with
alloc_fail(dev
[0], 1, "=sme_update_ft_ies"):
1542 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1545 def test_ap_ft_ap_oom(dev
, apdev
):
1546 """WPA2-PSK-FT and AP OOM"""
1548 passphrase
="12345678"
1550 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1551 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1552 bssid0
= hapd0
.own_addr()
1554 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1555 with
alloc_fail(hapd0
, 1, "wpa_ft_store_pmk_r0"):
1556 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1559 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1560 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1561 bssid1
= hapd1
.own_addr()
1562 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1563 # This roam will fail due to missing PMK-R0 (OOM prevented storing it)
1566 def test_ap_ft_ap_oom2(dev
, apdev
):
1567 """WPA2-PSK-FT and AP OOM 2"""
1569 passphrase
="12345678"
1571 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1572 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1573 bssid0
= hapd0
.own_addr()
1575 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1576 with
alloc_fail(hapd0
, 1, "wpa_ft_store_pmk_r1"):
1577 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1580 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1581 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1582 bssid1
= hapd1
.own_addr()
1583 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1585 if dev
[0].get_status_field('bssid') != bssid1
:
1586 raise Exception("Did not roam to AP1")
1587 # This roam will fail due to missing PMK-R1 (OOM prevented storing it)
1590 def test_ap_ft_ap_oom3(dev
, apdev
):
1591 """WPA2-PSK-FT and AP OOM 3"""
1593 passphrase
="12345678"
1595 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1596 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1597 bssid0
= hapd0
.own_addr()
1599 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1600 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1603 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1604 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1605 bssid1
= hapd1
.own_addr()
1606 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1607 with
alloc_fail(hapd1
, 1, "wpa_ft_pull_pmk_r1"):
1608 # This will fail due to not being able to send out PMK-R1 pull request
1611 with
fail_test(hapd1
, 2, "os_get_random;wpa_ft_pull_pmk_r1"):
1612 # This will fail due to not being able to send out PMK-R1 pull request
1615 with
fail_test(hapd1
, 2, "aes_siv_encrypt;wpa_ft_pull_pmk_r1"):
1616 # This will fail due to not being able to send out PMK-R1 pull request
1619 def test_ap_ft_ap_oom3b(dev
, apdev
):
1620 """WPA2-PSK-FT and AP OOM 3b"""
1622 passphrase
="12345678"
1624 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1625 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1626 bssid0
= hapd0
.own_addr()
1628 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1629 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1632 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1633 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1634 bssid1
= hapd1
.own_addr()
1635 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1636 with
fail_test(hapd1
, 1, "os_get_random;wpa_ft_pull_pmk_r1"):
1637 # This will fail due to not being able to send out PMK-R1 pull request
1640 def test_ap_ft_ap_oom4(dev
, apdev
):
1641 """WPA2-PSK-FT and AP OOM 4"""
1643 passphrase
="12345678"
1645 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1646 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1647 bssid0
= hapd0
.own_addr()
1649 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1650 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1653 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1654 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1655 bssid1
= hapd1
.own_addr()
1656 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1657 with
alloc_fail(hapd1
, 1, "wpa_ft_gtk_subelem"):
1659 if dev
[0].get_status_field('bssid') != bssid1
:
1660 raise Exception("Did not roam to AP1")
1662 with
fail_test(hapd0
, 1, "wpa_auth_get_seqnum;wpa_ft_gtk_subelem"):
1664 if dev
[0].get_status_field('bssid') != bssid0
:
1665 raise Exception("Did not roam to AP0")
1667 with
fail_test(hapd0
, 1, "aes_wrap;wpa_ft_gtk_subelem"):
1669 if dev
[0].get_status_field('bssid') != bssid1
:
1670 raise Exception("Did not roam to AP1")
1672 def test_ap_ft_ap_oom5(dev
, apdev
):
1673 """WPA2-PSK-FT and AP OOM 5"""
1675 passphrase
="12345678"
1677 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1678 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1679 bssid0
= hapd0
.own_addr()
1681 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1682 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1685 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1686 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1687 bssid1
= hapd1
.own_addr()
1688 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1689 with
alloc_fail(hapd1
, 1, "=wpa_ft_process_auth_req"):
1690 # This will fail to roam
1693 with
fail_test(hapd1
, 1, "os_get_random;wpa_ft_process_auth_req"):
1694 # This will fail to roam
1697 with
fail_test(hapd1
, 1, "sha256_prf_bits;wpa_pmk_r1_to_ptk;wpa_ft_process_auth_req"):
1698 # This will fail to roam
1701 with
fail_test(hapd1
, 3, "wpa_pmk_r1_to_ptk;wpa_ft_process_auth_req"):
1702 # This will fail to roam
1705 with
fail_test(hapd1
, 1, "wpa_derive_pmk_r1_name;wpa_ft_process_auth_req"):
1706 # This will fail to roam
1709 def test_ap_ft_ap_oom6(dev
, apdev
):
1710 """WPA2-PSK-FT and AP OOM 6"""
1712 passphrase
="12345678"
1714 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1715 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1716 bssid0
= hapd0
.own_addr()
1718 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1719 with
fail_test(hapd0
, 1, "wpa_derive_pmk_r0;wpa_auth_derive_ptk_ft"):
1720 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1722 dev
[0].request("REMOVE_NETWORK all")
1723 dev
[0].wait_disconnected()
1724 with
fail_test(hapd0
, 1, "wpa_derive_pmk_r1;wpa_auth_derive_ptk_ft"):
1725 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1727 dev
[0].request("REMOVE_NETWORK all")
1728 dev
[0].wait_disconnected()
1729 with
fail_test(hapd0
, 1, "wpa_pmk_r1_to_ptk;wpa_auth_derive_ptk_ft"):
1730 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1733 def test_ap_ft_ap_oom7a(dev
, apdev
):
1734 """WPA2-PSK-FT and AP OOM 7a"""
1736 passphrase
="12345678"
1738 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1739 params
["ieee80211w"] = "2"
1740 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1741 bssid0
= hapd0
.own_addr()
1743 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1744 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1745 ieee80211w
="2", scan_freq
="2412")
1747 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1748 params
["ieee80211w"] = "2"
1749 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1750 bssid1
= hapd1
.own_addr()
1751 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1752 with
alloc_fail(hapd1
, 1, "wpa_ft_igtk_subelem"):
1753 # This will fail to roam
1756 def test_ap_ft_ap_oom7b(dev
, apdev
):
1757 """WPA2-PSK-FT and AP OOM 7b"""
1759 passphrase
="12345678"
1761 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1762 params
["ieee80211w"] = "2"
1763 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1764 bssid0
= hapd0
.own_addr()
1766 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1767 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1768 ieee80211w
="2", scan_freq
="2412")
1770 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1771 params
["ieee80211w"] = "2"
1772 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1773 bssid1
= hapd1
.own_addr()
1774 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1775 with
fail_test(hapd1
, 1, "aes_wrap;wpa_ft_igtk_subelem"):
1776 # This will fail to roam
1779 def test_ap_ft_ap_oom7c(dev
, apdev
):
1780 """WPA2-PSK-FT and AP OOM 7c"""
1782 passphrase
="12345678"
1784 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1785 params
["ieee80211w"] = "2"
1786 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1787 bssid0
= hapd0
.own_addr()
1789 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1790 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1791 ieee80211w
="2", scan_freq
="2412")
1793 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1794 params
["ieee80211w"] = "2"
1795 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1796 bssid1
= hapd1
.own_addr()
1797 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1798 with
alloc_fail(hapd1
, 1, "=wpa_sm_write_assoc_resp_ies"):
1799 # This will fail to roam
1802 def test_ap_ft_ap_oom7d(dev
, apdev
):
1803 """WPA2-PSK-FT and AP OOM 7d"""
1805 passphrase
="12345678"
1807 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1808 params
["ieee80211w"] = "2"
1809 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1810 bssid0
= hapd0
.own_addr()
1812 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1813 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1814 ieee80211w
="2", scan_freq
="2412")
1816 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1817 params
["ieee80211w"] = "2"
1818 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1819 bssid1
= hapd1
.own_addr()
1820 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1821 with
fail_test(hapd1
, 1, "wpa_ft_mic;wpa_sm_write_assoc_resp_ies"):
1822 # This will fail to roam
1825 def test_ap_ft_ap_oom8(dev
, apdev
):
1826 """WPA2-PSK-FT and AP OOM 8"""
1828 passphrase
="12345678"
1830 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1831 params
['ft_psk_generate_local'] = "1"
1832 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1833 bssid0
= hapd0
.own_addr()
1835 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1836 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1839 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1840 params
['ft_psk_generate_local'] = "1"
1841 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1842 bssid1
= hapd1
.own_addr()
1843 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1844 with
fail_test(hapd1
, 1, "wpa_derive_pmk_r0;wpa_ft_psk_pmk_r1"):
1845 # This will fail to roam
1847 with
fail_test(hapd1
, 1, "wpa_derive_pmk_r1;wpa_ft_psk_pmk_r1"):
1848 # This will fail to roam
1851 def test_ap_ft_ap_oom9(dev
, apdev
):
1852 """WPA2-PSK-FT and AP OOM 9"""
1854 passphrase
="12345678"
1856 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1857 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1858 bssid0
= hapd0
.own_addr()
1860 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1861 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1864 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1865 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1866 bssid1
= hapd1
.own_addr()
1867 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1869 with
alloc_fail(hapd0
, 1, "wpa_ft_action_rx"):
1870 # This will fail to roam
1871 if "OK" not in dev
[0].request("FT_DS " + bssid1
):
1872 raise Exception("FT_DS failed")
1873 wait_fail_trigger(hapd0
, "GET_ALLOC_FAIL")
1875 with
alloc_fail(hapd1
, 1, "wpa_ft_rrb_rx_request"):
1876 # This will fail to roam
1877 if "OK" not in dev
[0].request("FT_DS " + bssid1
):
1878 raise Exception("FT_DS failed")
1879 wait_fail_trigger(hapd1
, "GET_ALLOC_FAIL")
1881 with
alloc_fail(hapd1
, 1, "wpa_ft_send_rrb_auth_resp"):
1882 # This will fail to roam
1883 if "OK" not in dev
[0].request("FT_DS " + bssid1
):
1884 raise Exception("FT_DS failed")
1885 wait_fail_trigger(hapd1
, "GET_ALLOC_FAIL")
1887 def test_ap_ft_ap_oom10(dev
, apdev
):
1888 """WPA2-PSK-FT and AP OOM 10"""
1890 passphrase
="12345678"
1892 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1893 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1894 bssid0
= hapd0
.own_addr()
1896 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1897 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1900 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1901 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1902 bssid1
= hapd1
.own_addr()
1903 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1905 with
fail_test(hapd0
, 1, "aes_siv_decrypt;wpa_ft_rrb_rx_pull"):
1906 # This will fail to roam
1907 if "OK" not in dev
[0].request("FT_DS " + bssid1
):
1908 raise Exception("FT_DS failed")
1909 wait_fail_trigger(hapd0
, "GET_FAIL")
1911 with
fail_test(hapd0
, 1, "wpa_derive_pmk_r1;wpa_ft_rrb_rx_pull"):
1912 # This will fail to roam
1913 if "OK" not in dev
[0].request("FT_DS " + bssid1
):
1914 raise Exception("FT_DS failed")
1915 wait_fail_trigger(hapd0
, "GET_FAIL")
1917 with
fail_test(hapd0
, 1, "aes_siv_encrypt;wpa_ft_rrb_rx_pull"):
1918 # This will fail to roam
1919 if "OK" not in dev
[0].request("FT_DS " + bssid1
):
1920 raise Exception("FT_DS failed")
1921 wait_fail_trigger(hapd0
, "GET_FAIL")
1923 with
fail_test(hapd1
, 1, "aes_siv_decrypt;wpa_ft_rrb_rx_resp"):
1924 # This will fail to roam
1925 if "OK" not in dev
[0].request("FT_DS " + bssid1
):
1926 raise Exception("FT_DS failed")
1927 wait_fail_trigger(hapd1
, "GET_FAIL")
1929 def test_ap_ft_ap_oom11(dev
, apdev
):
1930 """WPA2-PSK-FT and AP OOM 11"""
1932 passphrase
="12345678"
1934 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1935 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1936 bssid0
= hapd0
.own_addr()
1938 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1939 with
fail_test(hapd0
, 1, "wpa_derive_pmk_r1;wpa_ft_generate_pmk_r1"):
1940 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1942 wait_fail_trigger(hapd0
, "GET_FAIL")
1944 dev
[1].scan_for_bss(bssid0
, freq
="2412")
1945 with
fail_test(hapd0
, 1, "aes_siv_encrypt;wpa_ft_generate_pmk_r1"):
1946 dev
[1].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1948 wait_fail_trigger(hapd0
, "GET_FAIL")
1950 def test_ap_ft_over_ds_proto_ap(dev
, apdev
):
1951 """WPA2-PSK-FT AP over DS protocol testing for AP processing"""
1953 passphrase
="12345678"
1955 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1956 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1957 bssid0
= hapd0
.own_addr()
1958 _bssid0
= bssid0
.replace(':', '')
1959 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1961 addr
= dev
[0].own_addr()
1962 _addr
= addr
.replace(':', '')
1964 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1965 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1966 bssid1
= hapd1
.own_addr()
1967 _bssid1
= bssid1
.replace(':', '')
1969 hapd0
.set("ext_mgmt_frame_handling", "1")
1970 hdr
= "d0003a01" + _bssid0
+ _addr
+ _bssid0
+ "1000"
1971 valid
= "0601" + _addr
+ _bssid1
1974 "0601" + _addr
+ _bssid0
,
1975 "0601" + _addr
+ "ffffffffffff",
1976 "0601" + _bssid0
+ _bssid0
,
1981 valid
+ "3603ffffff",
1982 valid
+ "3603a1b2ff",
1983 valid
+ "3603a1b2ff" + "3700",
1984 valid
+ "3603a1b2ff" + "37520000" + 16*"00" + 32*"00" + 32*"00",
1985 valid
+ "3603a1b2ff" + "37520001" + 16*"00" + 32*"00" + 32*"00",
1986 valid
+ "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa",
1987 valid
+ "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa" + "3000",
1988 valid
+ "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa" + "30260100000fac040100000fac040100000facff00000100a225368fe0983b5828a37a0acb37f253",
1989 valid
+ "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa" + "30260100000fac040100000fac030100000fac0400000100a225368fe0983b5828a37a0acb37f253",
1990 valid
+ "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa" + "30260100000fac040100000fac040100000fac0400000100a225368fe0983b5828a37a0acb37f253",
1993 hapd0
.dump_monitor()
1994 if "OK" not in hapd0
.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + hdr
+ t
):
1995 raise Exception("MGMT_RX_PROCESS failed")
1997 hapd0
.set("ext_mgmt_frame_handling", "0")
1999 def test_ap_ft_over_ds_proto(dev
, apdev
):
2000 """WPA2-PSK-FT AP over DS protocol testing"""
2002 passphrase
="12345678"
2004 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
2005 hapd0
= hostapd
.add_ap(apdev
[0], params
)
2006 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
2009 # FT Action Response while no FT-over-DS in progress
2012 msg
['da'] = dev
[0].own_addr()
2013 msg
['sa'] = apdev
[0]['bssid']
2014 msg
['bssid'] = apdev
[0]['bssid']
2015 msg
['payload'] = binascii
.unhexlify("06020200000000000200000004000000")
2018 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
2019 hapd1
= hostapd
.add_ap(apdev
[1], params
)
2020 dev
[0].scan_for_bss(apdev
[1]['bssid'], freq
="2412")
2021 hapd0
.set("ext_mgmt_frame_handling", "1")
2022 hapd0
.dump_monitor()
2023 dev
[0].request("FT_DS " + apdev
[1]['bssid'])
2024 for i
in range(0, 10):
2025 req
= hapd0
.mgmt_rx()
2027 raise Exception("MGMT RX wait timed out")
2028 if req
['subtype'] == 13:
2032 raise Exception("FT Action frame not received")
2034 # FT Action Response for unexpected Target AP
2035 msg
['payload'] = binascii
.unhexlify("0602020000000000" + "f20000000400" + "0000")
2038 # FT Action Response without MDIE
2039 msg
['payload'] = binascii
.unhexlify("0602020000000000" + "020000000400" + "0000")
2042 # FT Action Response without FTIE
2043 msg
['payload'] = binascii
.unhexlify("0602020000000000" + "020000000400" + "0000" + "3603a1b201")
2046 # FT Action Response with FTIE SNonce mismatch
2047 msg
['payload'] = binascii
.unhexlify("0602020000000000" + "020000000400" + "0000" + "3603a1b201" + "3766000000000000000000000000000000000000c4e67ac1999bebd00ff4ae4d5dcaf87896bb060b469f7c78d49623fb395c3455ffffff6b693fe6f8d8c5dfac0a22344750775bd09437f98b238c9f87b97f790c0106000102030406030a6e6173312e77312e6669")
2051 def test_ap_ft_rrb(dev
, apdev
):
2052 """WPA2-PSK-FT RRB protocol testing"""
2054 passphrase
="12345678"
2056 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
2057 hapd0
= hostapd
.add_ap(apdev
[0], params
)
2059 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
2062 _dst_ll
= binascii
.unhexlify(apdev
[0]['bssid'].replace(':',''))
2063 _src_ll
= binascii
.unhexlify(dev
[0].own_addr().replace(':',''))
2065 ehdr
= _dst_ll
+ _src_ll
+ proto
2067 # Too short RRB frame
2068 pkt
= ehdr
+ b
'\x01'
2069 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
).decode()):
2070 raise Exception("DATA_TEST_FRAME failed")
2072 # RRB discarded frame wikth unrecognized type
2073 pkt
= ehdr
+ b
'\x02' + b
'\x02' + b
'\x01\x00' + _src_ll
2074 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
).decode()):
2075 raise Exception("DATA_TEST_FRAME failed")
2077 # RRB frame too short for action frame
2078 pkt
= ehdr
+ b
'\x01' + b
'\x02' + b
'\x01\x00' + _src_ll
2079 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
).decode()):
2080 raise Exception("DATA_TEST_FRAME failed")
2082 # Too short RRB frame (not enough room for Action Frame body)
2083 pkt
= ehdr
+ b
'\x01' + b
'\x02' + b
'\x00\x00' + _src_ll
2084 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
).decode()):
2085 raise Exception("DATA_TEST_FRAME failed")
2087 # Unexpected Action frame category
2088 pkt
= ehdr
+ b
'\x01' + b
'\x02' + b
'\x0e\x00' + _src_ll
+ b
'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
2089 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
).decode()):
2090 raise Exception("DATA_TEST_FRAME failed")
2092 # Unexpected Action in RRB Request
2093 pkt
= ehdr
+ b
'\x01' + b
'\x00' + b
'\x0e\x00' + _src_ll
+ b
'\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
2094 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
).decode()):
2095 raise Exception("DATA_TEST_FRAME failed")
2097 # Target AP address in RRB Request does not match with own address
2098 pkt
= ehdr
+ b
'\x01' + b
'\x00' + b
'\x0e\x00' + _src_ll
+ b
'\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
2099 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
).decode()):
2100 raise Exception("DATA_TEST_FRAME failed")
2102 # Not enough room for status code in RRB Response
2103 pkt
= ehdr
+ b
'\x01' + b
'\x01' + b
'\x0e\x00' + _src_ll
+ b
'\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
2104 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
).decode()):
2105 raise Exception("DATA_TEST_FRAME failed")
2107 # RRB discarded frame with unknown packet_type
2108 pkt
= ehdr
+ b
'\x01' + b
'\x02' + b
'\x0e\x00' + _src_ll
+ b
'\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
2109 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
).decode()):
2110 raise Exception("DATA_TEST_FRAME failed")
2112 # RRB Response with non-zero status code; no STA match
2113 pkt
= ehdr
+ b
'\x01' + b
'\x01' + b
'\x10\x00' + _src_ll
+ b
'\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00' + b
'\xff\xff'
2114 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
).decode()):
2115 raise Exception("DATA_TEST_FRAME failed")
2117 # RRB Response with zero status code and extra data; STA match
2118 pkt
= ehdr
+ b
'\x01' + b
'\x01' + b
'\x11\x00' + _src_ll
+ b
'\x06\x01' + _src_ll
+ b
'\x00\x00\x00\x00\x00\x00' + b
'\x00\x00' + b
'\x00'
2119 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
).decode()):
2120 raise Exception("DATA_TEST_FRAME failed")
2122 # Too short PMK-R1 pull
2123 pkt
= ehdr
+ b
'\x01' + b
'\xc8' + b
'\x0e\x00' + _src_ll
+ b
'\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
2124 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
).decode()):
2125 raise Exception("DATA_TEST_FRAME failed")
2127 # Too short PMK-R1 resp
2128 pkt
= ehdr
+ b
'\x01' + b
'\xc9' + b
'\x0e\x00' + _src_ll
+ b
'\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
2129 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
).decode()):
2130 raise Exception("DATA_TEST_FRAME failed")
2132 # Too short PMK-R1 push
2133 pkt
= ehdr
+ b
'\x01' + b
'\xca' + b
'\x0e\x00' + _src_ll
+ b
'\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
2134 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
).decode()):
2135 raise Exception("DATA_TEST_FRAME failed")
2137 # No matching R0KH address found for PMK-R0 pull response
2138 pkt
= ehdr
+ b
'\x01' + b
'\xc9' + b
'\x5a\x00' + _src_ll
+ b
'\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00' + 76 * b
'\00'
2139 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
).decode()):
2140 raise Exception("DATA_TEST_FRAME failed")
2143 def test_rsn_ie_proto_ft_psk_sta(dev
, apdev
):
2144 """RSN element protocol testing for FT-PSK + PMF cases on STA side"""
2145 bssid
= apdev
[0]['bssid']
2147 passphrase
="12345678"
2149 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
2150 params
["ieee80211w"] = "1"
2151 # This is the RSN element used normally by hostapd
2152 params
['own_ie_override'] = '30140100000fac040100000fac040100000fac048c00' + '3603a1b201'
2153 hapd
= hostapd
.add_ap(apdev
[0], params
)
2154 id = dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
2155 ieee80211w
="1", scan_freq
="2412",
2156 pairwise
="CCMP", group
="CCMP")
2158 tests
= [ ('PMKIDCount field included',
2159 '30160100000fac040100000fac040100000fac048c000000' + '3603a1b201'),
2160 ('Extra IE before RSNE',
2161 'dd0400000000' + '30140100000fac040100000fac040100000fac048c00' + '3603a1b201'),
2162 ('PMKIDCount and Group Management Cipher suite fields included',
2163 '301a0100000fac040100000fac040100000fac048c000000000fac06' + '3603a1b201'),
2164 ('Extra octet after defined fields (future extensibility)',
2165 '301b0100000fac040100000fac040100000fac048c000000000fac0600' + '3603a1b201'),
2166 ('No RSN Capabilities field (PMF disabled in practice)',
2167 '30120100000fac040100000fac040100000fac04' + '3603a1b201') ]
2168 for txt
,ie
in tests
:
2169 dev
[0].request("DISCONNECT")
2170 dev
[0].wait_disconnected()
2173 hapd
.set('own_ie_override', ie
)
2175 dev
[0].request("BSS_FLUSH 0")
2176 dev
[0].scan_for_bss(bssid
, 2412, force_scan
=True, only_new
=True)
2177 dev
[0].select_network(id, freq
=2412)
2178 dev
[0].wait_connected()
2180 dev
[0].request("DISCONNECT")
2181 dev
[0].wait_disconnected()
2183 logger
.info('Invalid RSNE causing internal hostapd error')
2185 hapd
.set('own_ie_override', '30130100000fac040100000fac040100000fac048c' + '3603a1b201')
2187 dev
[0].request("BSS_FLUSH 0")
2188 dev
[0].scan_for_bss(bssid
, 2412, force_scan
=True, only_new
=True)
2189 dev
[0].select_network(id, freq
=2412)
2190 # hostapd fails to generate EAPOL-Key msg 3/4, so this connection cannot
2192 ev
= dev
[0].wait_event(["CTRL-EVENT-CONNECTED"], timeout
=1)
2194 raise Exception("Unexpected connection")
2195 dev
[0].request("DISCONNECT")
2197 logger
.info('Unexpected PMKID causing internal hostapd error')
2199 hapd
.set('own_ie_override', '30260100000fac040100000fac040100000fac048c000100ffffffffffffffffffffffffffffffff' + '3603a1b201')
2201 dev
[0].request("BSS_FLUSH 0")
2202 dev
[0].scan_for_bss(bssid
, 2412, force_scan
=True, only_new
=True)
2203 dev
[0].select_network(id, freq
=2412)
2204 # hostapd fails to generate EAPOL-Key msg 3/4, so this connection cannot
2206 ev
= dev
[0].wait_event(["CTRL-EVENT-CONNECTED"], timeout
=1)
2208 raise Exception("Unexpected connection")
2209 dev
[0].request("DISCONNECT")
2211 def test_ap_ft_ptk_rekey(dev
, apdev
):
2212 """WPA2-PSK-FT PTK rekeying triggered by station after roam"""
2214 passphrase
="12345678"
2216 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
2217 hapd0
= hostapd
.add_ap(apdev
[0], params
)
2218 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
2219 hapd1
= hostapd
.add_ap(apdev
[1], params
)
2221 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, ptk_rekey
="1")
2223 ev
= dev
[0].wait_event(["CTRL-EVENT-DISCONNECTED",
2224 "WPA: Key negotiation completed"], timeout
=5)
2226 raise Exception("No event received after roam")
2227 if "CTRL-EVENT-DISCONNECTED" in ev
:
2228 raise Exception("Unexpected disconnection after roam")
2230 if dev
[0].get_status_field('bssid') == apdev
[0]['bssid']:
2234 hwsim_utils
.test_connectivity(dev
[0], hapd
)
2236 def test_ap_ft_ptk_rekey_ap(dev
, apdev
):
2237 """WPA2-PSK-FT PTK rekeying triggered by AP after roam"""
2239 passphrase
="12345678"
2241 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
2242 params
['wpa_ptk_rekey'] = '2'
2243 hapd0
= hostapd
.add_ap(apdev
[0], params
)
2244 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
2245 params
['wpa_ptk_rekey'] = '2'
2246 hapd1
= hostapd
.add_ap(apdev
[1], params
)
2248 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
)
2250 ev
= dev
[0].wait_event(["CTRL-EVENT-DISCONNECTED",
2251 "WPA: Key negotiation completed"], timeout
=5)
2253 raise Exception("No event received after roam")
2254 if "CTRL-EVENT-DISCONNECTED" in ev
:
2255 raise Exception("Unexpected disconnection after roam")
2257 if dev
[0].get_status_field('bssid') == apdev
[0]['bssid']:
2261 hwsim_utils
.test_connectivity(dev
[0], hapd
)
2263 def test_ap_ft_internal_rrb_check(dev
, apdev
):
2264 """RRB internal delivery only to WPA enabled BSS"""
2266 passphrase
="12345678"
2268 radius
= hostapd
.radius_params()
2269 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
2270 params
['wpa_key_mgmt'] = "FT-EAP"
2271 params
["ieee8021x"] = "1"
2272 params
= dict(list(radius
.items()) + list(params
.items()))
2273 hapd
= hostapd
.add_ap(apdev
[0], params
)
2274 key_mgmt
= hapd
.get_config()['key_mgmt']
2275 if key_mgmt
.split(' ')[0] != "FT-EAP":
2276 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
2278 hapd1
= hostapd
.add_ap(apdev
[1], { "ssid" : ssid
})
2280 # Connect to WPA enabled AP
2281 dev
[0].connect(ssid
, key_mgmt
="FT-EAP", proto
="WPA2", ieee80211w
="1",
2282 eap
="GPSK", identity
="gpsk user",
2283 password
="abcdefghijklmnop0123456789abcdef",
2286 # Try over_ds roaming to non-WPA-enabled AP.
2287 # If hostapd does not check hapd->wpa_auth internally, it will crash now.
2288 dev
[0].roam_over_ds(apdev
[1]['bssid'], fail_test
=True)
2290 def test_ap_ft_extra_ie(dev
, apdev
):
2291 """WPA2-PSK-FT AP with WPA2-PSK enabled and unexpected MDE"""
2293 passphrase
="12345678"
2295 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
2296 params
["wpa_key_mgmt"] = "WPA-PSK FT-PSK"
2297 hapd0
= hostapd
.add_ap(apdev
[0], params
)
2298 dev
[1].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
2300 dev
[2].connect(ssid
, psk
=passphrase
, key_mgmt
="WPA-PSK", proto
="WPA2",
2303 # Add Mobility Domain element to test AP validation code.
2304 dev
[0].request("VENDOR_ELEM_ADD 13 3603a1b201")
2305 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="WPA-PSK", proto
="WPA2",
2306 scan_freq
="2412", wait_connect
=False)
2307 ev
= dev
[0].wait_event(["CTRL-EVENT-CONNECTED",
2308 "CTRL-EVENT-ASSOC-REJECT"], timeout
=10)
2310 raise Exception("No connection result")
2311 if "CTRL-EVENT-CONNECTED" in ev
:
2312 raise Exception("Non-FT association accepted with MDE")
2313 if "status_code=43" not in ev
:
2314 raise Exception("Unexpected status code: " + ev
)
2315 dev
[0].request("DISCONNECT")
2317 dev
[0].request("VENDOR_ELEM_REMOVE 13 *")
2319 def test_ap_ft_ric(dev
, apdev
):
2320 """WPA2-PSK-FT AP and RIC"""
2322 passphrase
="12345678"
2324 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
2325 hapd0
= hostapd
.add_ap(apdev
[0], params
)
2326 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
2327 hapd1
= hostapd
.add_ap(apdev
[1], params
)
2329 dev
[0].set("ric_ies", "")
2330 dev
[0].set("ric_ies", '""')
2331 if "FAIL" not in dev
[0].request("SET ric_ies q"):
2332 raise Exception("Invalid ric_ies value accepted")
2337 "390400000000" + "390400000000",
2338 "390400000000" + "dd050050f20202",
2339 "390400000000" + "dd3d0050f2020201" + 55*"00",
2340 "390400000000" + "dd3d0050f2020201aa300010270000000000000000000000000000000000000000000000000000ffffff7f00000000000000000000000040420f00ffff0000",
2341 "390401010000" + "dd3d0050f2020201aa3000dc050000000000000000000000000000000000000000000000000000dc050000000000000000000000000000808d5b0028230000" ]
2343 dev
[0].set("ric_ies", t
)
2344 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
,
2345 test_connectivity
=False)
2346 dev
[0].request("REMOVE_NETWORK all")
2347 dev
[0].wait_disconnected()
2348 dev
[0].dump_monitor()
2350 def ie_hex(ies
, id):
2351 return binascii
.hexlify(struct
.pack('BB', id, len(ies
[id])) + ies
[id]).decode()
2353 def test_ap_ft_reassoc_proto(dev
, apdev
):
2354 """WPA2-PSK-FT AP Reassociation Request frame parsing"""
2356 passphrase
="12345678"
2358 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
2359 hapd0
= hostapd
.add_ap(apdev
[0], params
)
2360 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
2361 hapd1
= hostapd
.add_ap(apdev
[1], params
)
2363 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
2364 ieee80211w
="1", scan_freq
="2412")
2365 if dev
[0].get_status_field('bssid') == hapd0
.own_addr():
2372 dev
[0].scan_for_bss(hapd2ap
.own_addr(), freq
="2412")
2373 hapd2ap
.set("ext_mgmt_frame_handling", "1")
2374 dev
[0].request("ROAM " + hapd2ap
.own_addr())
2377 req
= hapd2ap
.mgmt_rx()
2378 hapd2ap
.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + binascii
.hexlify(req
['frame']).decode())
2379 if req
['subtype'] == 11:
2383 req
= hapd2ap
.mgmt_rx()
2384 if req
['subtype'] == 2:
2386 hapd2ap
.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + binascii
.hexlify(req
['frame']).decode())
2388 # IEEE 802.11 header + fixed fields before IEs
2389 hdr
= binascii
.hexlify(req
['frame'][0:34]).decode()
2390 ies
= parse_ie(binascii
.hexlify(req
['frame'][34:]))
2391 # First elements: SSID, Supported Rates, Extended Supported Rates
2392 ies1
= ie_hex(ies
, 0) + ie_hex(ies
, 1) + ie_hex(ies
, 50)
2394 rsne
= ie_hex(ies
, 48)
2395 mde
= ie_hex(ies
, 54)
2396 fte
= ie_hex(ies
, 55)
2398 # RSN: Trying to use FT, but MDIE not included
2400 # RSN: Attempted to use unknown MDIE
2401 tests
+= [ rsne
+ "3603000000" ]
2402 # Invalid RSN pairwise cipher
2403 tests
+= [ "30260100000fac040100000fac030100000fac040000010029208a42cd25c85aa571567dce10dae3" ]
2404 # FT: No PMKID in RSNIE
2405 tests
+= [ "30160100000fac040100000fac040100000fac0400000000" + ie_hex(ies
, 54) ]
2407 tests
+= [ rsne
+ mde
]
2408 # FT: RIC IE(s) in the frame, but not included in protected IE count
2409 # FT: Failed to parse FT IEs
2410 tests
+= [ rsne
+ mde
+ fte
+ "3900" ]
2411 # FT: SNonce mismatch in FTIE
2412 tests
+= [ rsne
+ mde
+ "37520000" + 16*"00" + 32*"00" + 32*"00" ]
2413 # FT: ANonce mismatch in FTIE
2414 tests
+= [ rsne
+ mde
+ fte
[0:40] + 32*"00" + fte
[104:] ]
2415 # FT: No R0KH-ID subelem in FTIE
2416 tests
+= [ rsne
+ mde
+ "3752" + fte
[4:168] ]
2417 # FT: R0KH-ID in FTIE did not match with the current R0KH-ID
2418 tests
+= [ rsne
+ mde
+ "3755" + fte
[4:168] + "0301ff" ]
2419 # FT: No R1KH-ID subelem in FTIE
2420 tests
+= [ rsne
+ mde
+ "375e" + fte
[4:168] + "030a" + binascii
.hexlify(b
"nas1.w1.fi").decode() ]
2421 # FT: Unknown R1KH-ID used in ReassocReq
2422 tests
+= [ rsne
+ mde
+ "3766" + fte
[4:168] + "030a" + binascii
.hexlify(b
"nas1.w1.fi").decode() + "0106000000000000" ]
2423 # FT: PMKID in Reassoc Req did not match with the PMKR1Name derived from auth request
2424 tests
+= [ rsne
[:-32] + 16*"00" + mde
+ fte
]
2425 # Invalid MIC in FTIE
2426 tests
+= [ rsne
+ mde
+ fte
[0:8] + 16*"00" + fte
[40:] ]
2428 hapd2ap
.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + hdr
+ ies1
+ t
)
2430 def test_ap_ft_reassoc_local_fail(dev
, apdev
):
2431 """WPA2-PSK-FT AP Reassociation Request frame and local failure"""
2433 passphrase
="12345678"
2435 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
2436 hapd0
= hostapd
.add_ap(apdev
[0], params
)
2437 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
2438 hapd1
= hostapd
.add_ap(apdev
[1], params
)
2440 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
2441 ieee80211w
="1", scan_freq
="2412")
2442 if dev
[0].get_status_field('bssid') == hapd0
.own_addr():
2449 dev
[0].scan_for_bss(hapd2ap
.own_addr(), freq
="2412")
2450 # FT: Failed to calculate MIC
2451 with
fail_test(hapd2ap
, 1, "wpa_ft_validate_reassoc"):
2452 dev
[0].request("ROAM " + hapd2ap
.own_addr())
2453 ev
= dev
[0].wait_event(["CTRL-EVENT-ASSOC-REJECT"], timeout
=10)
2454 dev
[0].request("DISCONNECT")
2456 raise Exception("Association reject not seen")
2458 def test_ap_ft_reassoc_replay(dev
, apdev
, params
):
2459 """WPA2-PSK-FT AP and replayed Reassociation Request frame"""
2460 capfile
= os
.path
.join(params
['logdir'], "hwsim0.pcapng")
2462 passphrase
="12345678"
2464 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
2465 hapd0
= hostapd
.add_ap(apdev
[0], params
)
2466 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
2467 hapd1
= hostapd
.add_ap(apdev
[1], params
)
2469 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
2471 if dev
[0].get_status_field('bssid') == hapd0
.own_addr():
2478 dev
[0].scan_for_bss(hapd2ap
.own_addr(), freq
="2412")
2479 hapd2ap
.set("ext_mgmt_frame_handling", "1")
2480 dev
[0].dump_monitor()
2481 if "OK" not in dev
[0].request("ROAM " + hapd2ap
.own_addr()):
2482 raise Exception("ROAM failed")
2487 req
= hapd2ap
.mgmt_rx()
2489 hapd2ap
.dump_monitor()
2490 hapd2ap
.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + binascii
.hexlify(req
['frame']).decode())
2491 if req
['subtype'] == 2:
2493 ev
= hapd2ap
.wait_event(["MGMT-TX-STATUS"], timeout
=5)
2495 raise Exception("No TX status seen")
2496 cmd
= "MGMT_TX_STATUS_PROCESS %s" % (" ".join(ev
.split(' ')[1:4]))
2497 if "OK" not in hapd2ap
.request(cmd
):
2498 raise Exception("MGMT_TX_STATUS_PROCESS failed")
2500 hapd2ap
.set("ext_mgmt_frame_handling", "0")
2501 if reassocreq
is None:
2502 raise Exception("No Reassociation Request frame seen")
2503 dev
[0].wait_connected()
2504 dev
[0].dump_monitor()
2505 hapd2ap
.dump_monitor()
2507 hwsim_utils
.test_connectivity(dev
[0], hapd2ap
)
2509 logger
.info("Replay the last Reassociation Request frame")
2510 hapd2ap
.dump_monitor()
2511 hapd2ap
.set("ext_mgmt_frame_handling", "1")
2512 hapd2ap
.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + binascii
.hexlify(req
['frame']).decode())
2513 ev
= hapd2ap
.wait_event(["MGMT-TX-STATUS"], timeout
=5)
2515 raise Exception("No TX status seen")
2516 cmd
= "MGMT_TX_STATUS_PROCESS %s" % (" ".join(ev
.split(' ')[1:4]))
2517 if "OK" not in hapd2ap
.request(cmd
):
2518 raise Exception("MGMT_TX_STATUS_PROCESS failed")
2519 hapd2ap
.set("ext_mgmt_frame_handling", "0")
2522 hwsim_utils
.test_connectivity(dev
[0], hapd2ap
)
2527 ap
= hapd2ap
.own_addr()
2528 sta
= dev
[0].own_addr()
2529 filt
= "wlan.fc.type == 2 && " + \
2530 "wlan.da == " + sta
+ " && " + \
2532 fields
= [ "wlan.ccmp.extiv" ]
2533 res
= run_tshark(capfile
, filt
, fields
)
2534 vals
= res
.splitlines()
2535 logger
.info("CCMP PN: " + str(vals
))
2537 raise Exception("Could not find all CCMP protected frames from capture")
2538 if len(set(vals
)) < len(vals
):
2539 raise Exception("Duplicate CCMP PN used")
2542 raise Exception("The second hwsim connectivity test failed")
2544 def test_ap_ft_psk_file(dev
, apdev
):
2545 """WPA2-PSK-FT AP with PSK from a file"""
2547 passphrase
="12345678"
2549 params
= ft_params1a(ssid
=ssid
, passphrase
=passphrase
)
2550 params
['wpa_psk_file'] = 'hostapd.wpa_psk'
2551 hapd
= hostapd
.add_ap(apdev
[0], params
)
2553 dev
[1].connect(ssid
, psk
="very secret",
2554 key_mgmt
="FT-PSK", proto
="WPA2", ieee80211w
="1",
2555 scan_freq
="2412", wait_connect
=False)
2556 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
2557 ieee80211w
="1", scan_freq
="2412")
2558 dev
[0].request("REMOVE_NETWORK all")
2559 dev
[0].wait_disconnected()
2560 dev
[0].connect(ssid
, psk
="very secret", key_mgmt
="FT-PSK", proto
="WPA2",
2561 ieee80211w
="1", scan_freq
="2412")
2562 dev
[0].request("REMOVE_NETWORK all")
2563 dev
[0].wait_disconnected()
2564 dev
[0].connect(ssid
, psk
="secret passphrase",
2565 key_mgmt
="FT-PSK", proto
="WPA2", ieee80211w
="1",
2567 dev
[2].connect(ssid
, psk
="another passphrase for all STAs",
2568 key_mgmt
="FT-PSK", proto
="WPA2", ieee80211w
="1",
2570 ev
= dev
[1].wait_event(["WPA: 4-Way Handshake failed"], timeout
=10)
2572 raise Exception("Timed out while waiting for failure report")
2573 dev
[1].request("REMOVE_NETWORK all")
2575 def test_ap_ft_eap_ap_config_change(dev
, apdev
):
2576 """WPA2-EAP-FT AP changing from 802.1X-only to FT-only"""
2578 passphrase
="12345678"
2579 bssid
= apdev
[0]['bssid']
2581 radius
= hostapd
.radius_params()
2582 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
, discovery
=True)
2583 params
['wpa_key_mgmt'] = "WPA-EAP"
2584 params
["ieee8021x"] = "1"
2585 params
["pmk_r1_push"] = "0"
2586 params
["r0kh"] = "ff:ff:ff:ff:ff:ff * 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
2587 params
["r1kh"] = "00:00:00:00:00:00 00:00:00:00:00:00 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
2588 params
["eap_server"] = "0"
2589 params
= dict(list(radius
.items()) + list(params
.items()))
2590 hapd
= hostapd
.add_ap(apdev
[0], params
)
2592 dev
[0].connect(ssid
, key_mgmt
="FT-EAP WPA-EAP", proto
="WPA2",
2593 eap
="GPSK", identity
="gpsk user",
2594 password
="abcdefghijklmnop0123456789abcdef",
2596 dev
[0].request("DISCONNECT")
2597 dev
[0].wait_disconnected()
2598 dev
[0].dump_monitor()
2601 hapd
.set('wpa_key_mgmt', "FT-EAP")
2604 dev
[0].request("BSS_FLUSH 0")
2605 dev
[0].scan_for_bss(bssid
, 2412, force_scan
=True, only_new
=True)
2607 dev
[0].request("RECONNECT")
2608 dev
[0].wait_connected()
2610 def test_ap_ft_eap_sha384(dev
, apdev
):
2611 """WPA2-EAP-FT with SHA384"""
2613 passphrase
="12345678"
2615 radius
= hostapd
.radius_params()
2616 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
2617 params
["ieee80211w"] = "2"
2618 params
['wpa_key_mgmt'] = "FT-EAP-SHA384"
2619 params
["ieee8021x"] = "1"
2620 params
= dict(list(radius
.items()) + list(params
.items()))
2621 hapd0
= hostapd
.add_ap(apdev
[0], params
)
2622 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
2623 params
["ieee80211w"] = "2"
2624 params
['wpa_key_mgmt'] = "FT-EAP-SHA384"
2625 params
["ieee8021x"] = "1"
2626 params
= dict(list(radius
.items()) + list(params
.items()))
2627 hapd1
= hostapd
.add_ap(apdev
[1], params
)
2629 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, eap
=True,
2632 def test_ap_ft_eap_sha384_over_ds(dev
, apdev
):
2633 """WPA2-EAP-FT with SHA384 over DS"""
2635 passphrase
="12345678"
2637 radius
= hostapd
.radius_params()
2638 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
2639 params
["ieee80211w"] = "2"
2640 params
['wpa_key_mgmt'] = "FT-EAP-SHA384"
2641 params
["ieee8021x"] = "1"
2642 params
= dict(list(radius
.items()) + list(params
.items()))
2643 hapd0
= hostapd
.add_ap(apdev
[0], params
)
2644 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
2645 params
["ieee80211w"] = "2"
2646 params
['wpa_key_mgmt'] = "FT-EAP-SHA384"
2647 params
["ieee8021x"] = "1"
2648 params
= dict(list(radius
.items()) + list(params
.items()))
2649 hapd1
= hostapd
.add_ap(apdev
[1], params
)
2651 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
2652 eap
=True, sha384
=True)
2654 def test_ap_ft_roam_rrm(dev
, apdev
):
2655 """WPA2-PSK-FT AP and radio measurement request"""
2657 passphrase
="12345678"
2659 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
2660 params
["rrm_beacon_report"] = "1"
2661 hapd0
= hostapd
.add_ap(apdev
[0], params
)
2662 bssid0
= hapd0
.own_addr()
2664 addr
= dev
[0].own_addr()
2665 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
2667 check_beacon_req(hapd0
, addr
, 1)
2669 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
2670 params
["rrm_beacon_report"] = "1"
2671 hapd1
= hostapd
.add_ap(apdev
[1], params
)
2672 bssid1
= hapd1
.own_addr()
2674 dev
[0].scan_for_bss(bssid1
, freq
=2412)
2676 check_beacon_req(hapd1
, addr
, 2)
2678 dev
[0].scan_for_bss(bssid0
, freq
=2412)
2680 check_beacon_req(hapd0
, addr
, 3)