tests/hwsim/test_ap_ft.py

   1 # Fast BSS Transition tests
   2 # Copyright (c) 2013-2015, Jouni Malinen <j@w1.fi>
   3 #
   4 # This software may be distributed under the terms of the BSD license.
   5 # See README for more details.
   6
   7 import binascii
   8 import os
   9 import time
  10 import subprocess
  11 import logging
  12 logger = logging.getLogger()
  13
  14 import hwsim_utils
  15 import hostapd
  16 from utils import HwsimSkip, alloc_fail, fail_test, skip_with_fips
  17 from wlantest import Wlantest
  18 from test_ap_psk import check_mib, find_wpas_process, read_process_memory, verify_not_present, get_key_locations
  19
  20 def ft_base_rsn():
  21     params = { "wpa": "2",
  22                "wpa_key_mgmt": "FT-PSK",
  23                "rsn_pairwise": "CCMP" }
  24     return params
  25
  26 def ft_base_mixed():
  27     params = { "wpa": "3",
  28                "wpa_key_mgmt": "WPA-PSK FT-PSK",
  29                "wpa_pairwise": "TKIP",
  30                "rsn_pairwise": "CCMP" }
  31     return params
  32
  33 def ft_params(rsn=True, ssid=None, passphrase=None):
  34     if rsn:
  35         params = ft_base_rsn()
  36     else:
  37         params = ft_base_mixed()
  38     if ssid:
  39         params["ssid"] = ssid
  40     if passphrase:
  41         params["wpa_passphrase"] = passphrase
  42
  43     params["mobility_domain"] = "a1b2"
  44     params["r0_key_lifetime"] = "10000"
  45     params["pmk_r1_push"] = "1"
  46     params["reassociation_deadline"] = "1000"
  47     return params
  48
  49 def ft_params1(rsn=True, ssid=None, passphrase=None):
  50     params = ft_params(rsn, ssid, passphrase)
  51     params['nas_identifier'] = "nas1.w1.fi"
  52     params['r1_key_holder'] = "000102030405"
  53     params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f",
  54                        "02:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f" ]
  55     params['r1kh'] = "02:00:00:00:04:00 00:01:02:03:04:06 200102030405060708090a0b0c0d0e0f"
  56     return params
  57
  58 def ft_params2(rsn=True, ssid=None, passphrase=None):
  59     params = ft_params(rsn, ssid, passphrase)
  60     params['nas_identifier'] = "nas2.w1.fi"
  61     params['r1_key_holder'] = "000102030406"
  62     params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f",
  63                        "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f" ]
  64     params['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0e0f"
  65     return params
  66
  67 def ft_params1_r0kh_mismatch(rsn=True, ssid=None, passphrase=None):
  68     params = ft_params(rsn, ssid, passphrase)
  69     params['nas_identifier'] = "nas1.w1.fi"
  70     params['r1_key_holder'] = "000102030405"
  71     params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f",
  72                        "12:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f" ]
  73     params['r1kh'] = "12:00:00:00:04:00 10:01:02:03:04:06 200102030405060708090a0b0c0d0e0f"
  74     return params
  75
  76 def ft_params2_incorrect_rrb_key(rsn=True, ssid=None, passphrase=None):
  77     params = ft_params(rsn, ssid, passphrase)
  78     params['nas_identifier'] = "nas2.w1.fi"
  79     params['r1_key_holder'] = "000102030406"
  80     params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0ef1",
  81                        "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0ef2" ]
  82     params['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0ef3"
  83     return params
  84
  85 def ft_params2_r0kh_mismatch(rsn=True, ssid=None, passphrase=None):
  86     params = ft_params(rsn, ssid, passphrase)
  87     params['nas_identifier'] = "nas2.w1.fi"
  88     params['r1_key_holder'] = "000102030406"
  89     params['r0kh'] = [ "12:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f",
  90                        "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f" ]
  91     params['r1kh'] = "12:00:00:00:03:00 10:01:02:03:04:05 300102030405060708090a0b0c0d0e0f"
  92     return params
  93
  94 def run_roams(dev, apdev, hapd0, hapd1, ssid, passphrase, over_ds=False,
  95               sae=False, eap=False, fail_test=False, roams=1,
  96               pairwise_cipher="CCMP", group_cipher="TKIP CCMP"):
  97     logger.info("Connect to first AP")
  98     if eap:
  99         dev.connect(ssid, key_mgmt="FT-EAP", proto="WPA2", ieee80211w="1",
 100                     eap="GPSK", identity="gpsk user",
 101                     password="abcdefghijklmnop0123456789abcdef",
 102                     scan_freq="2412",
 103                     pairwise=pairwise_cipher, group=group_cipher)
 104     else:
 105         if sae:
 106             key_mgmt="FT-SAE"
 107         else:
 108             key_mgmt="FT-PSK"
 109         dev.connect(ssid, psk=passphrase, key_mgmt=key_mgmt, proto="WPA2",
 110                     ieee80211w="1", scan_freq="2412",
 111                     pairwise=pairwise_cipher, group=group_cipher)
 112     if dev.get_status_field('bssid') == apdev[0]['bssid']:
 113         ap1 = apdev[0]
 114         ap2 = apdev[1]
 115         hapd1ap = hapd0
 116         hapd2ap = hapd1
 117     else:
 118         ap1 = apdev[1]
 119         ap2 = apdev[0]
 120         hapd1ap = hapd1
 121         hapd2ap = hapd0
 122     hwsim_utils.test_connectivity(dev, hapd1ap)
 123
 124     dev.scan_for_bss(ap2['bssid'], freq="2412")
 125
 126     for i in range(0, roams):
 127         logger.info("Roam to the second AP")
 128         if over_ds:
 129             dev.roam_over_ds(ap2['bssid'], fail_test=fail_test)
 130         else:
 131             dev.roam(ap2['bssid'], fail_test=fail_test)
 132         if fail_test:
 133             return
 134         if dev.get_status_field('bssid') != ap2['bssid']:
 135             raise Exception("Did not connect to correct AP")
 136         if i == 0 or i == roams - 1:
 137             hwsim_utils.test_connectivity(dev, hapd2ap)
 138
 139         logger.info("Roam back to the first AP")
 140         if over_ds:
 141             dev.roam_over_ds(ap1['bssid'])
 142         else:
 143             dev.roam(ap1['bssid'])
 144         if dev.get_status_field('bssid') != ap1['bssid']:
 145             raise Exception("Did not connect to correct AP")
 146         if i == 0 or i == roams - 1:
 147             hwsim_utils.test_connectivity(dev, hapd1ap)
 148
 149 def test_ap_ft(dev, apdev):
 150     """WPA2-PSK-FT AP"""
 151     ssid = "test-ft"
 152     passphrase="12345678"
 153
 154     params = ft_params1(ssid=ssid, passphrase=passphrase)
 155     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 156     params = ft_params2(ssid=ssid, passphrase=passphrase)
 157     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 158
 159     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
 160     if "[WPA2-FT/PSK-CCMP]" not in dev[0].request("SCAN_RESULTS"):
 161         raise Exception("Scan results missing RSN element info")
 162
 163 def test_ap_ft_many(dev, apdev):
 164     """WPA2-PSK-FT AP multiple times"""
 165     ssid = "test-ft"
 166     passphrase="12345678"
 167
 168     params = ft_params1(ssid=ssid, passphrase=passphrase)
 169     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 170     params = ft_params2(ssid=ssid, passphrase=passphrase)
 171     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 172
 173     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, roams=50)
 174
 175 def test_ap_ft_mixed(dev, apdev):
 176     """WPA2-PSK-FT mixed-mode AP"""
 177     ssid = "test-ft-mixed"
 178     passphrase="12345678"
 179
 180     params = ft_params1(rsn=False, ssid=ssid, passphrase=passphrase)
 181     hapd = hostapd.add_ap(apdev[0]['ifname'], params)
 182     key_mgmt = hapd.get_config()['key_mgmt']
 183     vals = key_mgmt.split(' ')
 184     if vals[0] != "WPA-PSK" or vals[1] != "FT-PSK":
 185         raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
 186     params = ft_params2(rsn=False, ssid=ssid, passphrase=passphrase)
 187     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 188
 189     run_roams(dev[0], apdev, hapd, hapd1, ssid, passphrase)
 190
 191 def test_ap_ft_pmf(dev, apdev):
 192     """WPA2-PSK-FT AP with PMF"""
 193     ssid = "test-ft"
 194     passphrase="12345678"
 195
 196     params = ft_params1(ssid=ssid, passphrase=passphrase)
 197     params["ieee80211w"] = "2";
 198     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 199     params = ft_params2(ssid=ssid, passphrase=passphrase)
 200     params["ieee80211w"] = "2";
 201     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 202
 203     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase)
 204
 205 def test_ap_ft_over_ds(dev, apdev):
 206     """WPA2-PSK-FT AP over DS"""
 207     ssid = "test-ft"
 208     passphrase="12345678"
 209
 210     params = ft_params1(ssid=ssid, passphrase=passphrase)
 211     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 212     params = ft_params2(ssid=ssid, passphrase=passphrase)
 213     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 214
 215     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True)
 216     check_mib(dev[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-4"),
 217                         ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-4") ])
 218
 219 def test_ap_ft_over_ds_many(dev, apdev):
 220     """WPA2-PSK-FT AP over DS multiple times"""
 221     ssid = "test-ft"
 222     passphrase="12345678"
 223
 224     params = ft_params1(ssid=ssid, passphrase=passphrase)
 225     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 226     params = ft_params2(ssid=ssid, passphrase=passphrase)
 227     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 228
 229     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
 230               roams=50)
 231
 232 def test_ap_ft_over_ds_unknown_target(dev, apdev):
 233     """WPA2-PSK-FT AP"""
 234     ssid = "test-ft"
 235     passphrase="12345678"
 236
 237     params = ft_params1(ssid=ssid, passphrase=passphrase)
 238     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 239
 240     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
 241                    scan_freq="2412")
 242     dev[0].roam_over_ds("02:11:22:33:44:55", fail_test=True)
 243
 244 def test_ap_ft_over_ds_unexpected(dev, apdev):
 245     """WPA2-PSK-FT AP over DS and unexpected response"""
 246     ssid = "test-ft"
 247     passphrase="12345678"
 248
 249     params = ft_params1(ssid=ssid, passphrase=passphrase)
 250     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 251     params = ft_params2(ssid=ssid, passphrase=passphrase)
 252     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 253
 254     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
 255                    scan_freq="2412")
 256     if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
 257         ap1 = apdev[0]
 258         ap2 = apdev[1]
 259         hapd1ap = hapd0
 260         hapd2ap = hapd1
 261     else:
 262         ap1 = apdev[1]
 263         ap2 = apdev[0]
 264         hapd1ap = hapd1
 265         hapd2ap = hapd0
 266
 267     addr = dev[0].own_addr()
 268     hapd1ap.set("ext_mgmt_frame_handling", "1")
 269     logger.info("Foreign STA address")
 270     msg = {}
 271     msg['fc'] = 13 << 4
 272     msg['da'] = addr
 273     msg['sa'] = ap1['bssid']
 274     msg['bssid'] = ap1['bssid']
 275     msg['payload'] = binascii.unhexlify("06021122334455660102030405060000")
 276     hapd1ap.mgmt_tx(msg)
 277
 278     logger.info("No over-the-DS in progress")
 279     msg['payload'] = binascii.unhexlify("0602" + addr.replace(':', '') + "0102030405060000")
 280     hapd1ap.mgmt_tx(msg)
 281
 282     logger.info("Non-zero status code")
 283     msg['payload'] = binascii.unhexlify("0602" + addr.replace(':', '') + "0102030405060100")
 284     hapd1ap.mgmt_tx(msg)
 285
 286     hapd1ap.dump_monitor()
 287
 288     dev[0].scan_for_bss(ap2['bssid'], freq="2412")
 289     if "OK" not in dev[0].request("FT_DS " + ap2['bssid']):
 290             raise Exception("FT_DS failed")
 291
 292     req = hapd1ap.mgmt_rx()
 293
 294     logger.info("Foreign Target AP")
 295     msg['payload'] = binascii.unhexlify("0602" + addr.replace(':', '') + "0102030405060000")
 296     hapd1ap.mgmt_tx(msg)
 297
 298     addrs = addr.replace(':', '') + ap2['bssid'].replace(':', '')
 299
 300     logger.info("No IEs")
 301     msg['payload'] = binascii.unhexlify("0602" + addrs + "0000")
 302     hapd1ap.mgmt_tx(msg)
 303
 304     logger.info("Invalid IEs (trigger parsing failure)")
 305     msg['payload'] = binascii.unhexlify("0602" + addrs + "00003700")
 306     hapd1ap.mgmt_tx(msg)
 307
 308     logger.info("Too short MDIE")
 309     msg['payload'] = binascii.unhexlify("0602" + addrs + "000036021122")
 310     hapd1ap.mgmt_tx(msg)
 311
 312     logger.info("Mobility domain mismatch")
 313     msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603112201")
 314     hapd1ap.mgmt_tx(msg)
 315
 316     logger.info("No FTIE")
 317     msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201")
 318     hapd1ap.mgmt_tx(msg)
 319
 320     logger.info("FTIE SNonce mismatch")
 321     msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + "1000000000000000000000000000000000000000000000000000000000000001" + "030a6e6173322e77312e6669")
 322     hapd1ap.mgmt_tx(msg)
 323
 324     logger.info("No R0KH-ID subelem in FTIE")
 325     snonce = binascii.hexlify(req['payload'][111:111+32])
 326     msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b20137520000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce)
 327     hapd1ap.mgmt_tx(msg)
 328
 329     logger.info("No R0KH-ID subelem mismatch in FTIE")
 330     snonce = binascii.hexlify(req['payload'][111:111+32])
 331     msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce + "030a11223344556677889900")
 332     hapd1ap.mgmt_tx(msg)
 333
 334     logger.info("No R1KH-ID subelem in FTIE")
 335     r0khid = binascii.hexlify(req['payload'][145:145+10])
 336     msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce + "030a" + r0khid)
 337     hapd1ap.mgmt_tx(msg)
 338
 339     logger.info("No RSNE")
 340     r0khid = binascii.hexlify(req['payload'][145:145+10])
 341     msg['payload'] = binascii.unhexlify("0602" + addrs + "00003603a1b20137660000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce + "030a" + r0khid + "0106000102030405")
 342     hapd1ap.mgmt_tx(msg)
 343
 344 def test_ap_ft_pmf_over_ds(dev, apdev):
 345     """WPA2-PSK-FT AP over DS with PMF"""
 346     ssid = "test-ft"
 347     passphrase="12345678"
 348
 349     params = ft_params1(ssid=ssid, passphrase=passphrase)
 350     params["ieee80211w"] = "2";
 351     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 352     params = ft_params2(ssid=ssid, passphrase=passphrase)
 353     params["ieee80211w"] = "2";
 354     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 355
 356     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True)
 357
 358 def test_ap_ft_over_ds_pull(dev, apdev):
 359     """WPA2-PSK-FT AP over DS (pull PMK)"""
 360     ssid = "test-ft"
 361     passphrase="12345678"
 362
 363     params = ft_params1(ssid=ssid, passphrase=passphrase)
 364     params["pmk_r1_push"] = "0"
 365     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 366     params = ft_params2(ssid=ssid, passphrase=passphrase)
 367     params["pmk_r1_push"] = "0"
 368     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 369
 370     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True)
 371
 372 def test_ap_ft_sae(dev, apdev):
 373     """WPA2-PSK-FT-SAE AP"""
 374     if "SAE" not in dev[0].get_capability("auth_alg"):
 375         raise HwsimSkip("SAE not supported")
 376     ssid = "test-ft"
 377     passphrase="12345678"
 378
 379     params = ft_params1(ssid=ssid, passphrase=passphrase)
 380     params['wpa_key_mgmt'] = "FT-SAE"
 381     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 382     params = ft_params2(ssid=ssid, passphrase=passphrase)
 383     params['wpa_key_mgmt'] = "FT-SAE"
 384     hapd = hostapd.add_ap(apdev[1]['ifname'], params)
 385     key_mgmt = hapd.get_config()['key_mgmt']
 386     if key_mgmt.split(' ')[0] != "FT-SAE":
 387         raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
 388
 389     dev[0].request("SET sae_groups ")
 390     run_roams(dev[0], apdev, hapd0, hapd, ssid, passphrase, sae=True)
 391
 392 def test_ap_ft_sae_over_ds(dev, apdev):
 393     """WPA2-PSK-FT-SAE AP over DS"""
 394     if "SAE" not in dev[0].get_capability("auth_alg"):
 395         raise HwsimSkip("SAE not supported")
 396     ssid = "test-ft"
 397     passphrase="12345678"
 398
 399     params = ft_params1(ssid=ssid, passphrase=passphrase)
 400     params['wpa_key_mgmt'] = "FT-SAE"
 401     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 402     params = ft_params2(ssid=ssid, passphrase=passphrase)
 403     params['wpa_key_mgmt'] = "FT-SAE"
 404     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 405
 406     dev[0].request("SET sae_groups ")
 407     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, sae=True,
 408               over_ds=True)
 409
 410 def test_ap_ft_eap(dev, apdev):
 411     """WPA2-EAP-FT AP"""
 412     ssid = "test-ft"
 413     passphrase="12345678"
 414
 415     radius = hostapd.radius_params()
 416     params = ft_params1(ssid=ssid, passphrase=passphrase)
 417     params['wpa_key_mgmt'] = "FT-EAP"
 418     params["ieee8021x"] = "1"
 419     params = dict(radius.items() + params.items())
 420     hapd = hostapd.add_ap(apdev[0]['ifname'], params)
 421     key_mgmt = hapd.get_config()['key_mgmt']
 422     if key_mgmt.split(' ')[0] != "FT-EAP":
 423         raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
 424     params = ft_params2(ssid=ssid, passphrase=passphrase)
 425     params['wpa_key_mgmt'] = "FT-EAP"
 426     params["ieee8021x"] = "1"
 427     params = dict(radius.items() + params.items())
 428     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 429
 430     run_roams(dev[0], apdev, hapd, hapd1, ssid, passphrase, eap=True)
 431     if "[WPA2-FT/EAP-CCMP]" not in dev[0].request("SCAN_RESULTS"):
 432         raise Exception("Scan results missing RSN element info")
 433     check_mib(dev[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-3"),
 434                         ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-3") ])
 435
 436     # Verify EAPOL reauthentication after FT protocol
 437     if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
 438         ap = hapd
 439     else:
 440         ap = hapd1
 441     ap.request("EAPOL_REAUTH " + dev[0].own_addr())
 442     ev = dev[0].wait_event(["CTRL-EVENT-EAP-STARTED"], timeout=5)
 443     if ev is None:
 444         raise Exception("EAP authentication did not start")
 445     ev = dev[0].wait_event(["CTRL-EVENT-EAP-SUCCESS"], timeout=5)
 446     if ev is None:
 447         raise Exception("EAP authentication did not succeed")
 448     time.sleep(0.1)
 449     hwsim_utils.test_connectivity(dev[0], ap)
 450
 451 def test_ap_ft_eap_pull(dev, apdev):
 452     """WPA2-EAP-FT AP (pull PMK)"""
 453     ssid = "test-ft"
 454     passphrase="12345678"
 455
 456     radius = hostapd.radius_params()
 457     params = ft_params1(ssid=ssid, passphrase=passphrase)
 458     params['wpa_key_mgmt'] = "FT-EAP"
 459     params["ieee8021x"] = "1"
 460     params["pmk_r1_push"] = "0"
 461     params = dict(radius.items() + params.items())
 462     hapd = hostapd.add_ap(apdev[0]['ifname'], params)
 463     key_mgmt = hapd.get_config()['key_mgmt']
 464     if key_mgmt.split(' ')[0] != "FT-EAP":
 465         raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
 466     params = ft_params2(ssid=ssid, passphrase=passphrase)
 467     params['wpa_key_mgmt'] = "FT-EAP"
 468     params["ieee8021x"] = "1"
 469     params["pmk_r1_push"] = "0"
 470     params = dict(radius.items() + params.items())
 471     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 472
 473     run_roams(dev[0], apdev, hapd, hapd1, ssid, passphrase, eap=True)
 474
 475 def test_ap_ft_mismatching_rrb_key_push(dev, apdev):
 476     """WPA2-PSK-FT AP over DS with mismatching RRB key (push)"""
 477     ssid = "test-ft"
 478     passphrase="12345678"
 479
 480     params = ft_params1(ssid=ssid, passphrase=passphrase)
 481     params["ieee80211w"] = "2";
 482     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 483     params = ft_params2_incorrect_rrb_key(ssid=ssid, passphrase=passphrase)
 484     params["ieee80211w"] = "2";
 485     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 486
 487     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
 488               fail_test=True)
 489
 490 def test_ap_ft_mismatching_rrb_key_pull(dev, apdev):
 491     """WPA2-PSK-FT AP over DS with mismatching RRB key (pull)"""
 492     ssid = "test-ft"
 493     passphrase="12345678"
 494
 495     params = ft_params1(ssid=ssid, passphrase=passphrase)
 496     params["pmk_r1_push"] = "0"
 497     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 498     params = ft_params2_incorrect_rrb_key(ssid=ssid, passphrase=passphrase)
 499     params["pmk_r1_push"] = "0"
 500     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 501
 502     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
 503               fail_test=True)
 504
 505 def test_ap_ft_mismatching_r0kh_id_pull(dev, apdev):
 506     """WPA2-PSK-FT AP over DS with mismatching R0KH-ID (pull)"""
 507     ssid = "test-ft"
 508     passphrase="12345678"
 509
 510     params = ft_params1(ssid=ssid, passphrase=passphrase)
 511     params["pmk_r1_push"] = "0"
 512     params["nas_identifier"] = "nas0.w1.fi"
 513     hostapd.add_ap(apdev[0]['ifname'], params)
 514     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
 515                    scan_freq="2412")
 516
 517     params = ft_params2(ssid=ssid, passphrase=passphrase)
 518     params["pmk_r1_push"] = "0"
 519     hostapd.add_ap(apdev[1]['ifname'], params)
 520
 521     dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
 522     dev[0].roam_over_ds(apdev[1]['bssid'], fail_test=True)
 523
 524 def test_ap_ft_mismatching_rrb_r0kh_push(dev, apdev):
 525     """WPA2-PSK-FT AP over DS with mismatching R0KH key (push)"""
 526     ssid = "test-ft"
 527     passphrase="12345678"
 528
 529     params = ft_params1(ssid=ssid, passphrase=passphrase)
 530     params["ieee80211w"] = "2";
 531     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 532     params = ft_params2_r0kh_mismatch(ssid=ssid, passphrase=passphrase)
 533     params["ieee80211w"] = "2";
 534     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 535
 536     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
 537               fail_test=True)
 538
 539 def test_ap_ft_mismatching_rrb_r0kh_pull(dev, apdev):
 540     """WPA2-PSK-FT AP over DS with mismatching R0KH key (pull)"""
 541     ssid = "test-ft"
 542     passphrase="12345678"
 543
 544     params = ft_params1_r0kh_mismatch(ssid=ssid, passphrase=passphrase)
 545     params["pmk_r1_push"] = "0"
 546     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 547     params = ft_params2(ssid=ssid, passphrase=passphrase)
 548     params["pmk_r1_push"] = "0"
 549     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 550
 551     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase, over_ds=True,
 552               fail_test=True)
 553
 554 def test_ap_ft_gtk_rekey(dev, apdev):
 555     """WPA2-PSK-FT AP and GTK rekey"""
 556     ssid = "test-ft"
 557     passphrase="12345678"
 558
 559     params = ft_params1(ssid=ssid, passphrase=passphrase)
 560     params['wpa_group_rekey'] = '1'
 561     hapd = hostapd.add_ap(apdev[0]['ifname'], params)
 562
 563     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
 564                    ieee80211w="1", scan_freq="2412")
 565
 566     ev = dev[0].wait_event(["WPA: Group rekeying completed"], timeout=2)
 567     if ev is None:
 568         raise Exception("GTK rekey timed out after initial association")
 569     hwsim_utils.test_connectivity(dev[0], hapd)
 570
 571     params = ft_params2(ssid=ssid, passphrase=passphrase)
 572     params['wpa_group_rekey'] = '1'
 573     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 574
 575     dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
 576     dev[0].roam(apdev[1]['bssid'])
 577     if dev[0].get_status_field('bssid') != apdev[1]['bssid']:
 578         raise Exception("Did not connect to correct AP")
 579     hwsim_utils.test_connectivity(dev[0], hapd1)
 580
 581     ev = dev[0].wait_event(["WPA: Group rekeying completed"], timeout=2)
 582     if ev is None:
 583         raise Exception("GTK rekey timed out after FT protocol")
 584     hwsim_utils.test_connectivity(dev[0], hapd1)
 585
 586 def test_ft_psk_key_lifetime_in_memory(dev, apdev, params):
 587     """WPA2-PSK-FT and key lifetime in memory"""
 588     ssid = "test-ft"
 589     passphrase="04c2726b4b8d5f1b4db9c07aa4d9e9d8f765cb5d25ec817e6cc4fcdd5255db0"
 590     psk = '93c90846ff67af9037ed83fb72b63dbeddaa81d47f926c20909b5886f1d9358d'
 591     pmk = binascii.unhexlify(psk)
 592     p = ft_params1(ssid=ssid, passphrase=passphrase)
 593     hapd0 = hostapd.add_ap(apdev[0]['ifname'], p)
 594     p = ft_params2(ssid=ssid, passphrase=passphrase)
 595     hapd1 = hostapd.add_ap(apdev[1]['ifname'], p)
 596
 597     pid = find_wpas_process(dev[0])
 598
 599     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
 600                    scan_freq="2412")
 601     time.sleep(1)
 602
 603     buf = read_process_memory(pid, pmk)
 604
 605     dev[0].request("DISCONNECT")
 606     dev[0].wait_disconnected()
 607
 608     dev[0].relog()
 609     pmkr0 = None
 610     pmkr1 = None
 611     ptk = None
 612     gtk = None
 613     with open(os.path.join(params['logdir'], 'log0'), 'r') as f:
 614         for l in f.readlines():
 615             if "FT: PMK-R0 - hexdump" in l:
 616                 val = l.strip().split(':')[3].replace(' ', '')
 617                 pmkr0 = binascii.unhexlify(val)
 618             if "FT: PMK-R1 - hexdump" in l:
 619                 val = l.strip().split(':')[3].replace(' ', '')
 620                 pmkr1 = binascii.unhexlify(val)
 621             if "FT: KCK - hexdump" in l:
 622                 val = l.strip().split(':')[3].replace(' ', '')
 623                 kck = binascii.unhexlify(val)
 624             if "FT: KEK - hexdump" in l:
 625                 val = l.strip().split(':')[3].replace(' ', '')
 626                 kek = binascii.unhexlify(val)
 627             if "FT: TK - hexdump" in l:
 628                 val = l.strip().split(':')[3].replace(' ', '')
 629                 tk = binascii.unhexlify(val)
 630             if "WPA: Group Key - hexdump" in l:
 631                 val = l.strip().split(':')[3].replace(' ', '')
 632                 gtk = binascii.unhexlify(val)
 633     if not pmkr0 or not pmkr1 or not kck or not kek or not tk or not gtk:
 634         raise Exception("Could not find keys from debug log")
 635     if len(gtk) != 16:
 636         raise Exception("Unexpected GTK length")
 637
 638     logger.info("Checking keys in memory while associated")
 639     get_key_locations(buf, pmk, "PMK")
 640     get_key_locations(buf, pmkr0, "PMK-R0")
 641     get_key_locations(buf, pmkr1, "PMK-R1")
 642     if pmk not in buf:
 643         raise HwsimSkip("PMK not found while associated")
 644     if pmkr0 not in buf:
 645         raise HwsimSkip("PMK-R0 not found while associated")
 646     if pmkr1 not in buf:
 647         raise HwsimSkip("PMK-R1 not found while associated")
 648     if kck not in buf:
 649         raise Exception("KCK not found while associated")
 650     if kek not in buf:
 651         raise Exception("KEK not found while associated")
 652     if tk in buf:
 653         raise Exception("TK found from memory")
 654     if gtk in buf:
 655         get_key_locations(buf, gtk, "GTK")
 656         raise Exception("GTK found from memory")
 657
 658     logger.info("Checking keys in memory after disassociation")
 659     buf = read_process_memory(pid, pmk)
 660     get_key_locations(buf, pmk, "PMK")
 661     get_key_locations(buf, pmkr0, "PMK-R0")
 662     get_key_locations(buf, pmkr1, "PMK-R1")
 663
 664     # Note: PMK/PSK is still present in network configuration
 665
 666     fname = os.path.join(params['logdir'],
 667                          'ft_psk_key_lifetime_in_memory.memctx-')
 668     verify_not_present(buf, pmkr0, fname, "PMK-R0")
 669     verify_not_present(buf, pmkr1, fname, "PMK-R1")
 670     verify_not_present(buf, kck, fname, "KCK")
 671     verify_not_present(buf, kek, fname, "KEK")
 672     verify_not_present(buf, tk, fname, "TK")
 673     verify_not_present(buf, gtk, fname, "GTK")
 674
 675     dev[0].request("REMOVE_NETWORK all")
 676
 677     logger.info("Checking keys in memory after network profile removal")
 678     buf = read_process_memory(pid, pmk)
 679     get_key_locations(buf, pmk, "PMK")
 680     get_key_locations(buf, pmkr0, "PMK-R0")
 681     get_key_locations(buf, pmkr1, "PMK-R1")
 682
 683     verify_not_present(buf, pmk, fname, "PMK")
 684     verify_not_present(buf, pmkr0, fname, "PMK-R0")
 685     verify_not_present(buf, pmkr1, fname, "PMK-R1")
 686     verify_not_present(buf, kck, fname, "KCK")
 687     verify_not_present(buf, kek, fname, "KEK")
 688     verify_not_present(buf, tk, fname, "TK")
 689     verify_not_present(buf, gtk, fname, "GTK")
 690
 691 def test_ap_ft_invalid_resp(dev, apdev):
 692     """WPA2-PSK-FT AP and invalid response IEs"""
 693     ssid = "test-ft"
 694     passphrase="12345678"
 695
 696     params = ft_params1(ssid=ssid, passphrase=passphrase)
 697     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 698     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
 699                    scan_freq="2412")
 700
 701     params = ft_params2(ssid=ssid, passphrase=passphrase)
 702     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 703
 704     tests = [
 705         # Various IEs for test coverage. The last one is FTIE with invalid
 706         # R1KH-ID subelement.
 707         "020002000000" + "3800" + "38051122334455" + "3754000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010100",
 708         # FTIE with invalid R0KH-ID subelement (len=0).
 709         "020002000000" + "3754000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010300",
 710         # FTIE with invalid R0KH-ID subelement (len=49).
 711         "020002000000" + "378500010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001033101020304050607080910111213141516171819202122232425262728293031323334353637383940414243444546474849",
 712         # Invalid RSNE.
 713         "020002000000" + "3000",
 714         # Required IEs missing from protected IE count.
 715         "020002000000" + "3603a1b201" + "375200010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900",
 716         # RIC missing from protected IE count.
 717         "020002000000" + "3603a1b201" + "375200020203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900",
 718         # Protected IE missing.
 719         "020002000000" + "3603a1b201" + "375200ff0203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900" + "0000" ]
 720     for t in tests:
 721         dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
 722         hapd1.set("ext_mgmt_frame_handling", "1")
 723         hapd1.dump_monitor()
 724         if "OK" not in dev[0].request("ROAM " + apdev[1]['bssid']):
 725             raise Exception("ROAM failed")
 726         auth = None
 727         for i in range(20):
 728             msg = hapd1.mgmt_rx()
 729             if msg['subtype'] == 11:
 730                 auth = msg
 731                 break
 732         if not auth:
 733             raise Exception("Authentication frame not seen")
 734
 735         resp = {}
 736         resp['fc'] = auth['fc']
 737         resp['da'] = auth['sa']
 738         resp['sa'] = auth['da']
 739         resp['bssid'] = auth['bssid']
 740         resp['payload'] = binascii.unhexlify(t)
 741         hapd1.mgmt_tx(resp)
 742         hapd1.set("ext_mgmt_frame_handling", "0")
 743         dev[0].wait_disconnected()
 744
 745         dev[0].request("RECONNECT")
 746         dev[0].wait_connected()
 747
 748 def test_ap_ft_gcmp_256(dev, apdev):
 749     """WPA2-PSK-FT AP with GCMP-256 cipher"""
 750     if "GCMP-256" not in dev[0].get_capability("pairwise"):
 751         raise HwsimSkip("Cipher GCMP-256 not supported")
 752     ssid = "test-ft"
 753     passphrase="12345678"
 754
 755     params = ft_params1(ssid=ssid, passphrase=passphrase)
 756     params['rsn_pairwise'] = "GCMP-256"
 757     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 758     params = ft_params2(ssid=ssid, passphrase=passphrase)
 759     params['rsn_pairwise'] = "GCMP-256"
 760     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 761
 762     run_roams(dev[0], apdev, hapd0, hapd1, ssid, passphrase,
 763               pairwise_cipher="GCMP-256", group_cipher="GCMP-256")
 764
 765 def test_ap_ft_oom(dev, apdev):
 766     """WPA2-PSK-FT and OOM"""
 767     skip_with_fips(dev[0])
 768     ssid = "test-ft"
 769     passphrase="12345678"
 770
 771     params = ft_params1(ssid=ssid, passphrase=passphrase)
 772     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 773     params = ft_params2(ssid=ssid, passphrase=passphrase)
 774     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 775
 776     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
 777                    scan_freq="2412")
 778     if dev[0].get_status_field('bssid') == apdev[0]['bssid']:
 779         dst = apdev[1]['bssid']
 780     else:
 781         dst = apdev[0]['bssid']
 782
 783     dev[0].scan_for_bss(dst, freq="2412")
 784     with alloc_fail(dev[0], 1, "wpa_ft_gen_req_ies"):
 785         dev[0].roam(dst)
 786     with alloc_fail(dev[0], 1, "wpa_ft_mic"):
 787         dev[0].roam(dst, fail_test=True)
 788     with fail_test(dev[0], 1, "os_get_random;wpa_ft_prepare_auth_request"):
 789         dev[0].roam(dst, fail_test=True)
 790
 791 def test_ap_ft_over_ds_proto(dev, apdev):
 792     """WPA2-PSK-FT AP over DS protocol testing"""
 793     ssid = "test-ft"
 794     passphrase="12345678"
 795
 796     params = ft_params1(ssid=ssid, passphrase=passphrase)
 797     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 798     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
 799                    scan_freq="2412")
 800
 801     # FT Action Response while no FT-over-DS in progress
 802     msg = {}
 803     msg['fc'] = 13 << 4
 804     msg['da'] = dev[0].own_addr()
 805     msg['sa'] = apdev[0]['bssid']
 806     msg['bssid'] = apdev[0]['bssid']
 807     msg['payload'] = binascii.unhexlify("06020200000000000200000004000000")
 808     hapd0.mgmt_tx(msg)
 809
 810     params = ft_params2(ssid=ssid, passphrase=passphrase)
 811     hapd1 = hostapd.add_ap(apdev[1]['ifname'], params)
 812     dev[0].scan_for_bss(apdev[1]['bssid'], freq="2412")
 813     hapd0.set("ext_mgmt_frame_handling", "1")
 814     hapd0.dump_monitor()
 815     dev[0].request("FT_DS " + apdev[1]['bssid'])
 816     for i in range(0, 10):
 817         req = hapd0.mgmt_rx()
 818         if req is None:
 819             raise Exception("MGMT RX wait timed out")
 820         if req['subtype'] == 13:
 821             break
 822         req = None
 823     if not req:
 824         raise Exception("FT Action frame not received")
 825
 826     # FT Action Response for unexpected Target AP
 827     msg['payload'] = binascii.unhexlify("0602020000000000" + "f20000000400" + "0000")
 828     hapd0.mgmt_tx(msg)
 829
 830     # FT Action Response without MDIE
 831     msg['payload'] = binascii.unhexlify("0602020000000000" + "020000000400" + "0000")
 832     hapd0.mgmt_tx(msg)
 833
 834     # FT Action Response without FTIE
 835     msg['payload'] = binascii.unhexlify("0602020000000000" + "020000000400" + "0000" + "3603a1b201")
 836     hapd0.mgmt_tx(msg)
 837
 838     # FT Action Response with FTIE SNonce mismatch
 839     msg['payload'] = binascii.unhexlify("0602020000000000" + "020000000400" + "0000" + "3603a1b201" + "3766000000000000000000000000000000000000c4e67ac1999bebd00ff4ae4d5dcaf87896bb060b469f7c78d49623fb395c3455ffffff6b693fe6f8d8c5dfac0a22344750775bd09437f98b238c9f87b97f790c0106000102030406030a6e6173312e77312e6669")
 840     hapd0.mgmt_tx(msg)
 841
 842 def test_ap_ft_rrb(dev, apdev):
 843     """WPA2-PSK-FT RRB protocol testing"""
 844     ssid = "test-ft"
 845     passphrase="12345678"
 846
 847     params = ft_params1(ssid=ssid, passphrase=passphrase)
 848     hapd0 = hostapd.add_ap(apdev[0]['ifname'], params)
 849
 850     dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
 851                    scan_freq="2412")
 852
 853     _dst_ll = binascii.unhexlify(apdev[0]['bssid'].replace(':',''))
 854     _src_ll = binascii.unhexlify(dev[0].own_addr().replace(':',''))
 855     proto = '\x89\x0d'
 856     ehdr = _dst_ll + _src_ll + proto
 857
 858     # Too short RRB frame
 859     pkt = ehdr + '\x01'
 860     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
 861         raise Exception("DATA_TEST_FRAME failed")
 862
 863     # RRB discarded frame wikth unrecognized type
 864     pkt = ehdr + '\x02' + '\x02' + '\x01\x00' + _src_ll
 865     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
 866         raise Exception("DATA_TEST_FRAME failed")
 867
 868     # RRB frame too short for action frame
 869     pkt = ehdr + '\x01' + '\x02' + '\x01\x00' + _src_ll
 870     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
 871         raise Exception("DATA_TEST_FRAME failed")
 872
 873     # Too short RRB frame (not enough room for Action Frame body)
 874     pkt = ehdr + '\x01' + '\x02' + '\x00\x00' + _src_ll
 875     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
 876         raise Exception("DATA_TEST_FRAME failed")
 877
 878     # Unexpected Action frame category
 879     pkt = ehdr + '\x01' + '\x02' + '\x0e\x00' + _src_ll + '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
 880     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
 881         raise Exception("DATA_TEST_FRAME failed")
 882
 883     # Unexpected Action in RRB Request
 884     pkt = ehdr + '\x01' + '\x00' + '\x0e\x00' + _src_ll + '\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
 885     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
 886         raise Exception("DATA_TEST_FRAME failed")
 887
 888     # Target AP address in RRB Request does not match with own address
 889     pkt = ehdr + '\x01' + '\x00' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
 890     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
 891         raise Exception("DATA_TEST_FRAME failed")
 892
 893     # Not enough room for status code in RRB Response
 894     pkt = ehdr + '\x01' + '\x01' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
 895     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
 896         raise Exception("DATA_TEST_FRAME failed")
 897
 898     # RRB discarded frame with unknown packet_type
 899     pkt = ehdr + '\x01' + '\x02' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
 900     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
 901         raise Exception("DATA_TEST_FRAME failed")
 902
 903     # RRB Response with non-zero status code; no STA match
 904     pkt = ehdr + '\x01' + '\x01' + '\x10\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00' + '\xff\xff'
 905     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
 906         raise Exception("DATA_TEST_FRAME failed")
 907
 908     # RRB Response with zero status code and extra data; STA match
 909     pkt = ehdr + '\x01' + '\x01' + '\x11\x00' + _src_ll + '\x06\x01' + _src_ll + '\x00\x00\x00\x00\x00\x00' + '\x00\x00' + '\x00'
 910     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
 911         raise Exception("DATA_TEST_FRAME failed")
 912
 913     # Too short PMK-R1 pull
 914     pkt = ehdr + '\x01' + '\xc8' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
 915     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
 916         raise Exception("DATA_TEST_FRAME failed")
 917
 918     # Too short PMK-R1 resp
 919     pkt = ehdr + '\x01' + '\xc9' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
 920     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
 921         raise Exception("DATA_TEST_FRAME failed")
 922
 923     # Too short PMK-R1 push
 924     pkt = ehdr + '\x01' + '\xca' + '\x0e\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
 925     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
 926         raise Exception("DATA_TEST_FRAME failed")
 927
 928     # No matching R0KH address found for PMK-R0 pull response
 929     pkt = ehdr + '\x01' + '\xc9' + '\x5a\x00' + _src_ll + '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00' + 76*'\00'
 930     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
 931         raise Exception("DATA_TEST_FRAME failed")
 932
 933 def test_rsn_ie_proto_ft_psk_sta(dev, apdev):
 934     """RSN element protocol testing for FT-PSK + PMF cases on STA side"""
 935     bssid = apdev[0]['bssid']
 936     ssid = "test-ft"
 937     passphrase="12345678"
 938
 939     params = ft_params1(ssid=ssid, passphrase=passphrase)
 940     params["ieee80211w"] = "1";
 941     # This is the RSN element used normally by hostapd
 942     params['own_ie_override'] = '30140100000fac040100000fac040100000fac048c00' + '3603a1b201'
 943     hapd = hostapd.add_ap(apdev[0]['ifname'], params)
 944     id = dev[0].connect(ssid, psk=passphrase, key_mgmt="FT-PSK", proto="WPA2",
 945                         ieee80211w="1", scan_freq="2412",
 946                         pairwise="CCMP", group="CCMP")
 947
 948     tests = [ ('PMKIDCount field included',
 949                '30160100000fac040100000fac040100000fac048c000000' + '3603a1b201'),
 950               ('Extra IE before RSNE',
 951                'dd0400000000' + '30140100000fac040100000fac040100000fac048c00' + '3603a1b201'),
 952               ('PMKIDCount and Group Management Cipher suite fields included',
 953                '301a0100000fac040100000fac040100000fac048c000000000fac06' + '3603a1b201'),
 954               ('Extra octet after defined fields (future extensibility)',
 955                '301b0100000fac040100000fac040100000fac048c000000000fac0600' + '3603a1b201'),
 956               ('No RSN Capabilities field (PMF disabled in practice)',
 957                '30120100000fac040100000fac040100000fac04' + '3603a1b201') ]
 958     for txt,ie in tests:
 959         dev[0].request("DISCONNECT")
 960         dev[0].wait_disconnected()
 961         logger.info(txt)
 962         hapd.disable()
 963         hapd.set('own_ie_override', ie)
 964         hapd.enable()
 965         dev[0].request("BSS_FLUSH 0")
 966         dev[0].scan_for_bss(bssid, 2412, force_scan=True, only_new=True)
 967         dev[0].select_network(id, freq=2412)
 968         dev[0].wait_connected()
 969
 970     dev[0].request("DISCONNECT")
 971     dev[0].wait_disconnected()
 972
 973     logger.info('Invalid RSNE causing internal hostapd error')
 974     hapd.disable()
 975     hapd.set('own_ie_override', '30130100000fac040100000fac040100000fac048c' + '3603a1b201')
 976     hapd.enable()
 977     dev[0].request("BSS_FLUSH 0")
 978     dev[0].scan_for_bss(bssid, 2412, force_scan=True, only_new=True)
 979     dev[0].select_network(id, freq=2412)
 980     # hostapd fails to generate EAPOL-Key msg 3/4, so this connection cannot
 981     # complete.
 982     ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED"], timeout=1)
 983     if ev is not None:
 984         raise Exception("Unexpected connection")
 985     dev[0].request("DISCONNECT")
 986
 987     logger.info('Unexpected PMKID causing internal hostapd error')
 988     hapd.disable()
 989     hapd.set('own_ie_override', '30260100000fac040100000fac040100000fac048c000100ffffffffffffffffffffffffffffffff' + '3603a1b201')
 990     hapd.enable()
 991     dev[0].request("BSS_FLUSH 0")
 992     dev[0].scan_for_bss(bssid, 2412, force_scan=True, only_new=True)
 993     dev[0].select_network(id, freq=2412)
 994     # hostapd fails to generate EAPOL-Key msg 3/4, so this connection cannot
 995     # complete.
 996     ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED"], timeout=1)
 997     if ev is not None:
 998         raise Exception("Unexpected connection")
 999     dev[0].request("DISCONNECT")