]>
git.ipfire.org Git - thirdparty/hostap.git/blob - tests/hwsim/test_ap_ft.py
1 # Fast BSS Transition tests
2 # Copyright (c) 2013-2017, Jouni Malinen <j@w1.fi>
4 # This software may be distributed under the terms of the BSD license.
5 # See README for more details.
7 from remotehost
import remote_compatible
12 logger
= logging
.getLogger()
17 from tshark
import run_tshark
18 from utils
import HwsimSkip
, alloc_fail
, fail_test
, wait_fail_trigger
, skip_with_fips
, parse_ie
19 from wlantest
import Wlantest
20 from test_ap_psk
import check_mib
, find_wpas_process
, read_process_memory
, verify_not_present
, get_key_locations
23 params
= { "wpa": "2",
24 "wpa_key_mgmt": "FT-PSK",
25 "rsn_pairwise": "CCMP" }
29 params
= { "wpa": "3",
30 "wpa_key_mgmt": "WPA-PSK FT-PSK",
31 "wpa_pairwise": "TKIP",
32 "rsn_pairwise": "CCMP" }
35 def ft_params(rsn
=True, ssid
=None, passphrase
=None):
37 params
= ft_base_rsn()
39 params
= ft_base_mixed()
43 params
["wpa_passphrase"] = passphrase
45 params
["mobility_domain"] = "a1b2"
46 params
["r0_key_lifetime"] = "10000"
47 params
["pmk_r1_push"] = "1"
48 params
["reassociation_deadline"] = "1000"
51 def ft_params1a(rsn
=True, ssid
=None, passphrase
=None):
52 params
= ft_params(rsn
, ssid
, passphrase
)
53 params
['nas_identifier'] = "nas1.w1.fi"
54 params
['r1_key_holder'] = "000102030405"
57 def ft_params1(rsn
=True, ssid
=None, passphrase
=None, discovery
=False):
58 params
= ft_params1a(rsn
, ssid
, passphrase
)
60 params
['r0kh'] = "ff:ff:ff:ff:ff:ff * 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f"
61 params
['r1kh'] = "00:00:00:00:00:00 00:00:00:00:00:00 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f"
63 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f",
64 "02:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f300102030405060708090a0b0c0d0e0f" ]
65 params
['r1kh'] = "02:00:00:00:04:00 00:01:02:03:04:06 200102030405060708090a0b0c0d0e0f200102030405060708090a0b0c0d0e0f"
68 def ft_params1_old_key(rsn
=True, ssid
=None, passphrase
=None):
69 params
= ft_params1a(rsn
, ssid
, passphrase
)
70 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f",
71 "02:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f" ]
72 params
['r1kh'] = "02:00:00:00:04:00 00:01:02:03:04:06 200102030405060708090a0b0c0d0e0f"
75 def ft_params2a(rsn
=True, ssid
=None, passphrase
=None):
76 params
= ft_params(rsn
, ssid
, passphrase
)
77 params
['nas_identifier'] = "nas2.w1.fi"
78 params
['r1_key_holder'] = "000102030406"
81 def ft_params2(rsn
=True, ssid
=None, passphrase
=None, discovery
=False):
82 params
= ft_params2a(rsn
, ssid
, passphrase
)
84 params
['r0kh'] = "ff:ff:ff:ff:ff:ff * 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f"
85 params
['r1kh'] = "00:00:00:00:00:00 00:00:00:00:00:00 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f"
87 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f200102030405060708090a0b0c0d0e0f",
88 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f000102030405060708090a0b0c0d0e0f" ]
89 params
['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0e0f300102030405060708090a0b0c0d0e0f"
92 def ft_params2_old_key(rsn
=True, ssid
=None, passphrase
=None):
93 params
= ft_params2a(rsn
, ssid
, passphrase
)
94 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f",
95 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f" ]
96 params
['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0e0f"
99 def ft_params1_r0kh_mismatch(rsn
=True, ssid
=None, passphrase
=None):
100 params
= ft_params(rsn
, ssid
, passphrase
)
101 params
['nas_identifier'] = "nas1.w1.fi"
102 params
['r1_key_holder'] = "000102030405"
103 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f100102030405060708090a0b0c0d0e0f",
104 "12:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f300102030405060708090a0b0c0d0e0f" ]
105 params
['r1kh'] = "12:00:00:00:04:00 10:01:02:03:04:06 200102030405060708090a0b0c0d0e0f200102030405060708090a0b0c0d0e0f"
108 def ft_params2_incorrect_rrb_key(rsn
=True, ssid
=None, passphrase
=None):
109 params
= ft_params(rsn
, ssid
, passphrase
)
110 params
['nas_identifier'] = "nas2.w1.fi"
111 params
['r1_key_holder'] = "000102030406"
112 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0ef1200102030405060708090a0b0c0d0ef1",
113 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0ef2000102030405060708090a0b0c0d0ef2" ]
114 params
['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0ef3300102030405060708090a0b0c0d0ef3"
117 def ft_params2_r0kh_mismatch(rsn
=True, ssid
=None, passphrase
=None):
118 params
= ft_params(rsn
, ssid
, passphrase
)
119 params
['nas_identifier'] = "nas2.w1.fi"
120 params
['r1_key_holder'] = "000102030406"
121 params
['r0kh'] = [ "12:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f200102030405060708090a0b0c0d0e0f",
122 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f000102030405060708090a0b0c0d0e0f" ]
123 params
['r1kh'] = "12:00:00:00:03:00 10:01:02:03:04:05 300102030405060708090a0b0c0d0e0f300102030405060708090a0b0c0d0e0f"
126 def run_roams(dev
, apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=False,
127 sae
=False, eap
=False, fail_test
=False, roams
=1,
128 pairwise_cipher
="CCMP", group_cipher
="TKIP CCMP", ptk_rekey
="0",
129 test_connectivity
=True, eap_identity
="gpsk user", conndev
=False):
130 logger
.info("Connect to first AP")
132 dev
.connect(ssid
, key_mgmt
="FT-EAP", proto
="WPA2", ieee80211w
="1",
133 eap
="GPSK", identity
=eap_identity
,
134 password
="abcdefghijklmnop0123456789abcdef",
136 pairwise
=pairwise_cipher
, group
=group_cipher
,
137 wpa_ptk_rekey
=ptk_rekey
)
143 dev
.connect(ssid
, psk
=passphrase
, key_mgmt
=key_mgmt
, proto
="WPA2",
144 ieee80211w
="1", scan_freq
="2412",
145 pairwise
=pairwise_cipher
, group
=group_cipher
,
146 wpa_ptk_rekey
=ptk_rekey
)
147 if dev
.get_status_field('bssid') == apdev
[0]['bssid']:
157 if test_connectivity
:
159 hwsim_utils
.test_connectivity_iface(dev
, hapd1ap
, conndev
)
161 hwsim_utils
.test_connectivity(dev
, hapd1ap
)
163 dev
.scan_for_bss(ap2
['bssid'], freq
="2412")
165 for i
in range(0, roams
):
166 logger
.info("Roam to the second AP")
168 dev
.roam_over_ds(ap2
['bssid'], fail_test
=fail_test
)
170 dev
.roam(ap2
['bssid'], fail_test
=fail_test
)
173 if dev
.get_status_field('bssid') != ap2
['bssid']:
174 raise Exception("Did not connect to correct AP")
175 if (i
== 0 or i
== roams
- 1) and test_connectivity
:
177 hwsim_utils
.test_connectivity_iface(dev
, hapd2ap
, conndev
)
179 hwsim_utils
.test_connectivity(dev
, hapd2ap
)
181 logger
.info("Roam back to the first AP")
183 dev
.roam_over_ds(ap1
['bssid'])
185 dev
.roam(ap1
['bssid'])
186 if dev
.get_status_field('bssid') != ap1
['bssid']:
187 raise Exception("Did not connect to correct AP")
188 if (i
== 0 or i
== roams
- 1) and test_connectivity
:
190 hwsim_utils
.test_connectivity_iface(dev
, hapd1ap
, conndev
)
192 hwsim_utils
.test_connectivity(dev
, hapd1ap
)
194 def test_ap_ft(dev
, apdev
):
197 passphrase
="12345678"
199 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
200 hapd0
= hostapd
.add_ap(apdev
[0], params
)
201 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
202 hapd1
= hostapd
.add_ap(apdev
[1], params
)
204 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
)
205 if "[WPA2-FT/PSK-CCMP]" not in dev
[0].request("SCAN_RESULTS"):
206 raise Exception("Scan results missing RSN element info")
208 def test_ap_ft_old_key(dev
, apdev
):
209 """WPA2-PSK-FT AP (old key)"""
211 passphrase
="12345678"
213 params
= ft_params1_old_key(ssid
=ssid
, passphrase
=passphrase
)
214 hapd0
= hostapd
.add_ap(apdev
[0], params
)
215 params
= ft_params2_old_key(ssid
=ssid
, passphrase
=passphrase
)
216 hapd1
= hostapd
.add_ap(apdev
[1], params
)
218 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
)
220 def test_ap_ft_multi_akm(dev
, apdev
):
221 """WPA2-PSK-FT AP with non-FT AKMs enabled"""
223 passphrase
="12345678"
225 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
226 params
["wpa_key_mgmt"] = "FT-PSK WPA-PSK WPA-PSK-SHA256"
227 hapd0
= hostapd
.add_ap(apdev
[0], params
)
228 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
229 params
["wpa_key_mgmt"] = "FT-PSK WPA-PSK WPA-PSK-SHA256"
230 hapd1
= hostapd
.add_ap(apdev
[1], params
)
232 Wlantest
.setup(hapd0
)
235 wt
.add_passphrase(passphrase
)
237 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
)
238 if "[WPA2-PSK+FT/PSK+PSK-SHA256-CCMP]" not in dev
[0].request("SCAN_RESULTS"):
239 raise Exception("Scan results missing RSN element info")
240 dev
[1].connect(ssid
, psk
=passphrase
, scan_freq
="2412")
241 dev
[2].connect(ssid
, psk
=passphrase
, key_mgmt
="WPA-PSK-SHA256",
244 def test_ap_ft_local_key_gen(dev
, apdev
):
245 """WPA2-PSK-FT AP with local key generation (without pull/push)"""
247 passphrase
="12345678"
249 params
= ft_params1a(ssid
=ssid
, passphrase
=passphrase
)
250 params
['ft_psk_generate_local'] = "1";
251 del params
['pmk_r1_push']
252 hapd0
= hostapd
.add_ap(apdev
[0], params
)
253 params
= ft_params2a(ssid
=ssid
, passphrase
=passphrase
)
254 params
['ft_psk_generate_local'] = "1";
255 del params
['pmk_r1_push']
256 hapd1
= hostapd
.add_ap(apdev
[1], params
)
258 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
)
259 if "[WPA2-FT/PSK-CCMP]" not in dev
[0].request("SCAN_RESULTS"):
260 raise Exception("Scan results missing RSN element info")
262 def test_ap_ft_many(dev
, apdev
):
263 """WPA2-PSK-FT AP multiple times"""
265 passphrase
="12345678"
267 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
268 hapd0
= hostapd
.add_ap(apdev
[0], params
)
269 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
270 hapd1
= hostapd
.add_ap(apdev
[1], params
)
272 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, roams
=50)
274 def test_ap_ft_mixed(dev
, apdev
):
275 """WPA2-PSK-FT mixed-mode AP"""
276 ssid
= "test-ft-mixed"
277 passphrase
="12345678"
279 params
= ft_params1(rsn
=False, ssid
=ssid
, passphrase
=passphrase
)
280 hapd
= hostapd
.add_ap(apdev
[0], params
)
281 key_mgmt
= hapd
.get_config()['key_mgmt']
282 vals
= key_mgmt
.split(' ')
283 if vals
[0] != "WPA-PSK" or vals
[1] != "FT-PSK":
284 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
285 params
= ft_params2(rsn
=False, ssid
=ssid
, passphrase
=passphrase
)
286 hapd1
= hostapd
.add_ap(apdev
[1], params
)
288 run_roams(dev
[0], apdev
, hapd
, hapd1
, ssid
, passphrase
)
290 def test_ap_ft_pmf(dev
, apdev
):
291 """WPA2-PSK-FT AP with PMF"""
293 passphrase
="12345678"
295 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
296 params
["ieee80211w"] = "2"
297 hapd0
= hostapd
.add_ap(apdev
[0], params
)
298 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
299 params
["ieee80211w"] = "2"
300 hapd1
= hostapd
.add_ap(apdev
[1], params
)
302 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
)
304 def test_ap_ft_over_ds(dev
, apdev
):
305 """WPA2-PSK-FT AP over DS"""
307 passphrase
="12345678"
309 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
310 hapd0
= hostapd
.add_ap(apdev
[0], params
)
311 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
312 hapd1
= hostapd
.add_ap(apdev
[1], params
)
314 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True)
315 check_mib(dev
[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-4"),
316 ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-4") ])
318 def test_ap_ft_over_ds_disabled(dev
, apdev
):
319 """WPA2-PSK-FT AP over DS disabled"""
321 passphrase
="12345678"
323 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
324 params
['ft_over_ds'] = '0'
325 hapd0
= hostapd
.add_ap(apdev
[0], params
)
326 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
327 params
['ft_over_ds'] = '0'
328 hapd1
= hostapd
.add_ap(apdev
[1], params
)
330 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
333 def test_ap_ft_over_ds_many(dev
, apdev
):
334 """WPA2-PSK-FT AP over DS multiple times"""
336 passphrase
="12345678"
338 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
339 hapd0
= hostapd
.add_ap(apdev
[0], params
)
340 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
341 hapd1
= hostapd
.add_ap(apdev
[1], params
)
343 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
347 def test_ap_ft_over_ds_unknown_target(dev
, apdev
):
350 passphrase
="12345678"
352 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
353 hapd0
= hostapd
.add_ap(apdev
[0], params
)
355 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
357 dev
[0].roam_over_ds("02:11:22:33:44:55", fail_test
=True)
360 def test_ap_ft_over_ds_unexpected(dev
, apdev
):
361 """WPA2-PSK-FT AP over DS and unexpected response"""
363 passphrase
="12345678"
365 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
366 hapd0
= hostapd
.add_ap(apdev
[0], params
)
367 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
368 hapd1
= hostapd
.add_ap(apdev
[1], params
)
370 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
372 if dev
[0].get_status_field('bssid') == apdev
[0]['bssid']:
383 addr
= dev
[0].own_addr()
384 hapd1ap
.set("ext_mgmt_frame_handling", "1")
385 logger
.info("Foreign STA address")
389 msg
['sa'] = ap1
['bssid']
390 msg
['bssid'] = ap1
['bssid']
391 msg
['payload'] = binascii
.unhexlify("06021122334455660102030405060000")
394 logger
.info("No over-the-DS in progress")
395 msg
['payload'] = binascii
.unhexlify("0602" + addr
.replace(':', '') + "0102030405060000")
398 logger
.info("Non-zero status code")
399 msg
['payload'] = binascii
.unhexlify("0602" + addr
.replace(':', '') + "0102030405060100")
402 hapd1ap
.dump_monitor()
404 dev
[0].scan_for_bss(ap2
['bssid'], freq
="2412")
405 if "OK" not in dev
[0].request("FT_DS " + ap2
['bssid']):
406 raise Exception("FT_DS failed")
408 req
= hapd1ap
.mgmt_rx()
410 logger
.info("Foreign Target AP")
411 msg
['payload'] = binascii
.unhexlify("0602" + addr
.replace(':', '') + "0102030405060000")
414 addrs
= addr
.replace(':', '') + ap2
['bssid'].replace(':', '')
416 logger
.info("No IEs")
417 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "0000")
420 logger
.info("Invalid IEs (trigger parsing failure)")
421 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "00003700")
424 logger
.info("Too short MDIE")
425 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "000036021122")
428 logger
.info("Mobility domain mismatch")
429 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "00003603112201")
432 logger
.info("No FTIE")
433 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "00003603a1b201")
436 logger
.info("FTIE SNonce mismatch")
437 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + "1000000000000000000000000000000000000000000000000000000000000001" + "030a6e6173322e77312e6669")
440 logger
.info("No R0KH-ID subelem in FTIE")
441 snonce
= binascii
.hexlify(req
['payload'][111:111+32])
442 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "00003603a1b20137520000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce
)
445 logger
.info("No R0KH-ID subelem mismatch in FTIE")
446 snonce
= binascii
.hexlify(req
['payload'][111:111+32])
447 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce
+ "030a11223344556677889900")
450 logger
.info("No R1KH-ID subelem in FTIE")
451 r0khid
= binascii
.hexlify(req
['payload'][145:145+10])
452 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "00003603a1b201375e0000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce
+ "030a" + r0khid
)
455 logger
.info("No RSNE")
456 r0khid
= binascii
.hexlify(req
['payload'][145:145+10])
457 msg
['payload'] = binascii
.unhexlify("0602" + addrs
+ "00003603a1b20137660000" + "00000000000000000000000000000000" + "0000000000000000000000000000000000000000000000000000000000000000" + snonce
+ "030a" + r0khid
+ "0106000102030405")
460 def test_ap_ft_pmf_over_ds(dev
, apdev
):
461 """WPA2-PSK-FT AP over DS with PMF"""
463 passphrase
="12345678"
465 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
466 params
["ieee80211w"] = "2"
467 hapd0
= hostapd
.add_ap(apdev
[0], params
)
468 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
469 params
["ieee80211w"] = "2"
470 hapd1
= hostapd
.add_ap(apdev
[1], params
)
472 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True)
474 def test_ap_ft_over_ds_pull(dev
, apdev
):
475 """WPA2-PSK-FT AP over DS (pull PMK)"""
477 passphrase
="12345678"
479 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
480 params
["pmk_r1_push"] = "0"
481 hapd0
= hostapd
.add_ap(apdev
[0], params
)
482 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
483 params
["pmk_r1_push"] = "0"
484 hapd1
= hostapd
.add_ap(apdev
[1], params
)
486 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True)
488 def test_ap_ft_over_ds_pull_old_key(dev
, apdev
):
489 """WPA2-PSK-FT AP over DS (pull PMK; old key)"""
491 passphrase
="12345678"
493 params
= ft_params1_old_key(ssid
=ssid
, passphrase
=passphrase
)
494 params
["pmk_r1_push"] = "0"
495 hapd0
= hostapd
.add_ap(apdev
[0], params
)
496 params
= ft_params2_old_key(ssid
=ssid
, passphrase
=passphrase
)
497 params
["pmk_r1_push"] = "0"
498 hapd1
= hostapd
.add_ap(apdev
[1], params
)
500 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True)
502 def test_ap_ft_sae(dev
, apdev
):
503 """WPA2-PSK-FT-SAE AP"""
504 if "SAE" not in dev
[0].get_capability("auth_alg"):
505 raise HwsimSkip("SAE not supported")
507 passphrase
="12345678"
509 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
510 params
['wpa_key_mgmt'] = "FT-SAE"
511 hapd0
= hostapd
.add_ap(apdev
[0], params
)
512 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
513 params
['wpa_key_mgmt'] = "FT-SAE"
514 hapd
= hostapd
.add_ap(apdev
[1], params
)
515 key_mgmt
= hapd
.get_config()['key_mgmt']
516 if key_mgmt
.split(' ')[0] != "FT-SAE":
517 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
519 dev
[0].request("SET sae_groups ")
520 run_roams(dev
[0], apdev
, hapd0
, hapd
, ssid
, passphrase
, sae
=True)
522 def test_ap_ft_sae_over_ds(dev
, apdev
):
523 """WPA2-PSK-FT-SAE AP over DS"""
524 if "SAE" not in dev
[0].get_capability("auth_alg"):
525 raise HwsimSkip("SAE not supported")
527 passphrase
="12345678"
529 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
530 params
['wpa_key_mgmt'] = "FT-SAE"
531 hapd0
= hostapd
.add_ap(apdev
[0], params
)
532 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
533 params
['wpa_key_mgmt'] = "FT-SAE"
534 hapd1
= hostapd
.add_ap(apdev
[1], params
)
536 dev
[0].request("SET sae_groups ")
537 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, sae
=True,
540 def generic_ap_ft_eap(dev
, apdev
, vlan
=False, over_ds
=False, discovery
=False,
543 passphrase
="12345678"
545 identity
="gpsk-vlan1"
551 radius
= hostapd
.radius_params()
552 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
, discovery
=discovery
)
553 params
['wpa_key_mgmt'] = "FT-EAP"
554 params
["ieee8021x"] = "1"
556 params
["dynamic_vlan"] = "1"
557 params
= dict(radius
.items() + params
.items())
558 hapd
= hostapd
.add_ap(apdev
[0], params
)
559 key_mgmt
= hapd
.get_config()['key_mgmt']
560 if key_mgmt
.split(' ')[0] != "FT-EAP":
561 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
562 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
, discovery
=discovery
)
563 params
['wpa_key_mgmt'] = "FT-EAP"
564 params
["ieee8021x"] = "1"
566 params
["dynamic_vlan"] = "1"
567 params
= dict(radius
.items() + params
.items())
568 hapd1
= hostapd
.add_ap(apdev
[1], params
)
570 run_roams(dev
[0], apdev
, hapd
, hapd1
, ssid
, passphrase
, eap
=True,
571 over_ds
=over_ds
, roams
=roams
, eap_identity
=identity
,
573 if "[WPA2-FT/EAP-CCMP]" not in dev
[0].request("SCAN_RESULTS"):
574 raise Exception("Scan results missing RSN element info")
575 check_mib(dev
[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-3"),
576 ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-3") ])
578 # Verify EAPOL reauthentication after FT protocol
579 if dev
[0].get_status_field('bssid') == apdev
[0]['bssid']:
583 ap
.request("EAPOL_REAUTH " + dev
[0].own_addr())
584 ev
= dev
[0].wait_event(["CTRL-EVENT-EAP-STARTED"], timeout
=5)
586 raise Exception("EAP authentication did not start")
587 ev
= dev
[0].wait_event(["CTRL-EVENT-EAP-SUCCESS"], timeout
=5)
589 raise Exception("EAP authentication did not succeed")
592 hwsim_utils
.test_connectivity_iface(dev
[0], ap
, conndev
)
594 hwsim_utils
.test_connectivity(dev
[0], ap
)
596 def test_ap_ft_eap(dev
, apdev
):
598 generic_ap_ft_eap(dev
, apdev
)
600 def test_ap_ft_eap_vlan(dev
, apdev
):
601 """WPA2-EAP-FT AP with VLAN"""
602 generic_ap_ft_eap(dev
, apdev
, vlan
=True)
604 def test_ap_ft_eap_vlan_multi(dev
, apdev
):
605 """WPA2-EAP-FT AP with VLAN"""
606 generic_ap_ft_eap(dev
, apdev
, vlan
=True, roams
=50)
608 def test_ap_ft_eap_over_ds(dev
, apdev
):
609 """WPA2-EAP-FT AP using over-the-DS"""
610 generic_ap_ft_eap(dev
, apdev
, over_ds
=True)
612 def test_ap_ft_eap_dis(dev
, apdev
):
613 """WPA2-EAP-FT AP with AP discovery"""
614 generic_ap_ft_eap(dev
, apdev
, discovery
=True)
616 def test_ap_ft_eap_dis_over_ds(dev
, apdev
):
617 """WPA2-EAP-FT AP with AP discovery and over-the-DS"""
618 generic_ap_ft_eap(dev
, apdev
, over_ds
=True, discovery
=True)
620 def test_ap_ft_eap_vlan(dev
, apdev
):
621 """WPA2-EAP-FT AP with VLAN"""
622 generic_ap_ft_eap(dev
, apdev
, vlan
=True)
624 def test_ap_ft_eap_vlan_multi(dev
, apdev
):
625 """WPA2-EAP-FT AP with VLAN"""
626 generic_ap_ft_eap(dev
, apdev
, vlan
=True, roams
=50)
628 def test_ap_ft_eap_vlan_over_ds(dev
, apdev
):
629 """WPA2-EAP-FT AP with VLAN + over_ds"""
630 generic_ap_ft_eap(dev
, apdev
, vlan
=True, over_ds
=True)
632 def test_ap_ft_eap_vlan_over_ds_multi(dev
, apdev
):
633 """WPA2-EAP-FT AP with VLAN + over_ds"""
634 generic_ap_ft_eap(dev
, apdev
, vlan
=True, over_ds
=True, roams
=50)
636 def generic_ap_ft_eap_pull(dev
, apdev
, vlan
=False):
637 """WPA2-EAP-FT AP (pull PMK)"""
639 passphrase
="12345678"
641 identity
="gpsk-vlan1"
647 radius
= hostapd
.radius_params()
648 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
649 params
['wpa_key_mgmt'] = "FT-EAP"
650 params
["ieee8021x"] = "1"
651 params
["pmk_r1_push"] = "0"
653 params
["dynamic_vlan"] = "1"
654 params
= dict(radius
.items() + params
.items())
655 hapd
= hostapd
.add_ap(apdev
[0], params
)
656 key_mgmt
= hapd
.get_config()['key_mgmt']
657 if key_mgmt
.split(' ')[0] != "FT-EAP":
658 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
659 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
660 params
['wpa_key_mgmt'] = "FT-EAP"
661 params
["ieee8021x"] = "1"
662 params
["pmk_r1_push"] = "0"
664 params
["dynamic_vlan"] = "1"
665 params
= dict(radius
.items() + params
.items())
666 hapd1
= hostapd
.add_ap(apdev
[1], params
)
668 run_roams(dev
[0], apdev
, hapd
, hapd1
, ssid
, passphrase
, eap
=True,
669 eap_identity
=identity
, conndev
=conndev
)
671 def test_ap_ft_eap_pull(dev
, apdev
):
672 """WPA2-EAP-FT AP (pull PMK)"""
673 generic_ap_ft_eap_pull(dev
, apdev
)
675 def test_ap_ft_eap_pull_vlan(dev
, apdev
):
676 generic_ap_ft_eap_pull(dev
, apdev
, vlan
=True)
678 def test_ap_ft_eap_pull_wildcard(dev
, apdev
):
679 """WPA2-EAP-FT AP (pull PMK) - wildcard R0KH/R1KH"""
681 passphrase
="12345678"
683 radius
= hostapd
.radius_params()
684 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
, discovery
=True)
685 params
['wpa_key_mgmt'] = "WPA-EAP FT-EAP"
686 params
["ieee8021x"] = "1"
687 params
["pmk_r1_push"] = "0"
688 params
["r0kh"] = "ff:ff:ff:ff:ff:ff * 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
689 params
["r1kh"] = "00:00:00:00:00:00 00:00:00:00:00:00 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
690 params
["ft_psk_generate_local"] = "1"
691 params
["eap_server"] = "0"
692 params
= dict(radius
.items() + params
.items())
693 hapd
= hostapd
.add_ap(apdev
[0], params
)
694 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
, discovery
=True)
695 params
['wpa_key_mgmt'] = "WPA-EAP FT-EAP"
696 params
["ieee8021x"] = "1"
697 params
["pmk_r1_push"] = "0"
698 params
["r0kh"] = "ff:ff:ff:ff:ff:ff * 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
699 params
["r1kh"] = "00:00:00:00:00:00 00:00:00:00:00:00 00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff"
700 params
["ft_psk_generate_local"] = "1"
701 params
["eap_server"] = "0"
702 params
= dict(radius
.items() + params
.items())
703 hapd1
= hostapd
.add_ap(apdev
[1], params
)
705 run_roams(dev
[0], apdev
, hapd
, hapd1
, ssid
, passphrase
, eap
=True)
708 def test_ap_ft_mismatching_rrb_key_push(dev
, apdev
):
709 """WPA2-PSK-FT AP over DS with mismatching RRB key (push)"""
711 passphrase
="12345678"
713 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
714 params
["ieee80211w"] = "2"
715 hapd0
= hostapd
.add_ap(apdev
[0], params
)
716 params
= ft_params2_incorrect_rrb_key(ssid
=ssid
, passphrase
=passphrase
)
717 params
["ieee80211w"] = "2"
718 hapd1
= hostapd
.add_ap(apdev
[1], params
)
720 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
724 def test_ap_ft_mismatching_rrb_key_pull(dev
, apdev
):
725 """WPA2-PSK-FT AP over DS with mismatching RRB key (pull)"""
727 passphrase
="12345678"
729 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
730 params
["pmk_r1_push"] = "0"
731 hapd0
= hostapd
.add_ap(apdev
[0], params
)
732 params
= ft_params2_incorrect_rrb_key(ssid
=ssid
, passphrase
=passphrase
)
733 params
["pmk_r1_push"] = "0"
734 hapd1
= hostapd
.add_ap(apdev
[1], params
)
736 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
740 def test_ap_ft_mismatching_r0kh_id_pull(dev
, apdev
):
741 """WPA2-PSK-FT AP over DS with mismatching R0KH-ID (pull)"""
743 passphrase
="12345678"
745 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
746 params
["pmk_r1_push"] = "0"
747 params
["nas_identifier"] = "nas0.w1.fi"
748 hostapd
.add_ap(apdev
[0], params
)
749 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
752 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
753 params
["pmk_r1_push"] = "0"
754 hostapd
.add_ap(apdev
[1], params
)
756 dev
[0].scan_for_bss(apdev
[1]['bssid'], freq
="2412")
757 dev
[0].roam_over_ds(apdev
[1]['bssid'], fail_test
=True)
760 def test_ap_ft_mismatching_rrb_r0kh_push(dev
, apdev
):
761 """WPA2-PSK-FT AP over DS with mismatching R0KH key (push)"""
763 passphrase
="12345678"
765 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
766 params
["ieee80211w"] = "2"
767 hapd0
= hostapd
.add_ap(apdev
[0], params
)
768 params
= ft_params2_r0kh_mismatch(ssid
=ssid
, passphrase
=passphrase
)
769 params
["ieee80211w"] = "2"
770 hapd1
= hostapd
.add_ap(apdev
[1], params
)
772 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
776 def test_ap_ft_mismatching_rrb_r0kh_pull(dev
, apdev
):
777 """WPA2-PSK-FT AP over DS with mismatching R0KH key (pull)"""
779 passphrase
="12345678"
781 params
= ft_params1_r0kh_mismatch(ssid
=ssid
, passphrase
=passphrase
)
782 params
["pmk_r1_push"] = "0"
783 hapd0
= hostapd
.add_ap(apdev
[0], params
)
784 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
785 params
["pmk_r1_push"] = "0"
786 hapd1
= hostapd
.add_ap(apdev
[1], params
)
788 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
791 def test_ap_ft_mismatching_rrb_key_push_eap(dev
, apdev
):
792 """WPA2-EAP-FT AP over DS with mismatching RRB key (push)"""
794 passphrase
="12345678"
796 radius
= hostapd
.radius_params()
797 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
798 params
["ieee80211w"] = "2";
799 params
['wpa_key_mgmt'] = "FT-EAP"
800 params
["ieee8021x"] = "1"
801 params
= dict(radius
.items() + params
.items())
802 hapd0
= hostapd
.add_ap(apdev
[0], params
)
803 params
= ft_params2_incorrect_rrb_key(ssid
=ssid
, passphrase
=passphrase
)
804 params
["ieee80211w"] = "2";
805 params
['wpa_key_mgmt'] = "FT-EAP"
806 params
["ieee8021x"] = "1"
807 params
= dict(radius
.items() + params
.items())
808 hapd1
= hostapd
.add_ap(apdev
[1], params
)
810 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
811 fail_test
=True, eap
=True)
813 def test_ap_ft_mismatching_rrb_key_pull_eap(dev
, apdev
):
814 """WPA2-EAP-FT AP over DS with mismatching RRB key (pull)"""
816 passphrase
="12345678"
818 radius
= hostapd
.radius_params()
819 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
820 params
["pmk_r1_push"] = "0"
821 params
['wpa_key_mgmt'] = "FT-EAP"
822 params
["ieee8021x"] = "1"
823 params
= dict(radius
.items() + params
.items())
824 hapd0
= hostapd
.add_ap(apdev
[0], params
)
825 params
= ft_params2_incorrect_rrb_key(ssid
=ssid
, passphrase
=passphrase
)
826 params
["pmk_r1_push"] = "0"
827 params
['wpa_key_mgmt'] = "FT-EAP"
828 params
["ieee8021x"] = "1"
829 params
= dict(radius
.items() + params
.items())
830 hapd1
= hostapd
.add_ap(apdev
[1], params
)
832 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
833 fail_test
=True, eap
=True)
835 def test_ap_ft_mismatching_r0kh_id_pull_eap(dev
, apdev
):
836 """WPA2-EAP-FT AP over DS with mismatching R0KH-ID (pull)"""
838 passphrase
="12345678"
840 radius
= hostapd
.radius_params()
841 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
842 params
["pmk_r1_push"] = "0"
843 params
["nas_identifier"] = "nas0.w1.fi"
844 params
['wpa_key_mgmt'] = "FT-EAP"
845 params
["ieee8021x"] = "1"
846 params
= dict(radius
.items() + params
.items())
847 hostapd
.add_ap(apdev
[0], params
)
848 dev
[0].connect(ssid
, key_mgmt
="FT-EAP", proto
="WPA2", ieee80211w
="1",
849 eap
="GPSK", identity
="gpsk user",
850 password
="abcdefghijklmnop0123456789abcdef",
853 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
854 params
["pmk_r1_push"] = "0"
855 params
['wpa_key_mgmt'] = "FT-EAP"
856 params
["ieee8021x"] = "1"
857 params
= dict(radius
.items() + params
.items())
858 hostapd
.add_ap(apdev
[1], params
)
860 dev
[0].scan_for_bss(apdev
[1]['bssid'], freq
="2412")
861 dev
[0].roam_over_ds(apdev
[1]['bssid'], fail_test
=True)
863 def test_ap_ft_mismatching_rrb_r0kh_push_eap(dev
, apdev
):
864 """WPA2-EAP-FT AP over DS with mismatching R0KH key (push)"""
866 passphrase
="12345678"
868 radius
= hostapd
.radius_params()
869 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
870 params
["ieee80211w"] = "2";
871 params
['wpa_key_mgmt'] = "FT-EAP"
872 params
["ieee8021x"] = "1"
873 params
= dict(radius
.items() + params
.items())
874 hapd0
= hostapd
.add_ap(apdev
[0], params
)
875 params
= ft_params2_r0kh_mismatch(ssid
=ssid
, passphrase
=passphrase
)
876 params
["ieee80211w"] = "2";
877 params
['wpa_key_mgmt'] = "FT-EAP"
878 params
["ieee8021x"] = "1"
879 params
= dict(radius
.items() + params
.items())
880 hapd1
= hostapd
.add_ap(apdev
[1], params
)
882 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
883 fail_test
=True, eap
=True)
885 def test_ap_ft_mismatching_rrb_r0kh_pull_eap(dev
, apdev
):
886 """WPA2-EAP-FT AP over DS with mismatching R0KH key (pull)"""
888 passphrase
="12345678"
890 radius
= hostapd
.radius_params()
891 params
= ft_params1_r0kh_mismatch(ssid
=ssid
, passphrase
=passphrase
)
892 params
["pmk_r1_push"] = "0"
893 params
['wpa_key_mgmt'] = "FT-EAP"
894 params
["ieee8021x"] = "1"
895 params
= dict(radius
.items() + params
.items())
896 hapd0
= hostapd
.add_ap(apdev
[0], params
)
897 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
898 params
["pmk_r1_push"] = "0"
899 params
['wpa_key_mgmt'] = "FT-EAP"
900 params
["ieee8021x"] = "1"
901 params
= dict(radius
.items() + params
.items())
902 hapd1
= hostapd
.add_ap(apdev
[1], params
)
904 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, over_ds
=True,
905 fail_test
=True, eap
=True)
907 def test_ap_ft_gtk_rekey(dev
, apdev
):
908 """WPA2-PSK-FT AP and GTK rekey"""
910 passphrase
="12345678"
912 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
913 params
['wpa_group_rekey'] = '1'
914 hapd
= hostapd
.add_ap(apdev
[0], params
)
916 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
917 ieee80211w
="1", scan_freq
="2412")
919 ev
= dev
[0].wait_event(["WPA: Group rekeying completed"], timeout
=2)
921 raise Exception("GTK rekey timed out after initial association")
922 hwsim_utils
.test_connectivity(dev
[0], hapd
)
924 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
925 params
['wpa_group_rekey'] = '1'
926 hapd1
= hostapd
.add_ap(apdev
[1], params
)
928 dev
[0].scan_for_bss(apdev
[1]['bssid'], freq
="2412")
929 dev
[0].roam(apdev
[1]['bssid'])
930 if dev
[0].get_status_field('bssid') != apdev
[1]['bssid']:
931 raise Exception("Did not connect to correct AP")
932 hwsim_utils
.test_connectivity(dev
[0], hapd1
)
934 ev
= dev
[0].wait_event(["WPA: Group rekeying completed"], timeout
=2)
936 raise Exception("GTK rekey timed out after FT protocol")
937 hwsim_utils
.test_connectivity(dev
[0], hapd1
)
939 def test_ft_psk_key_lifetime_in_memory(dev
, apdev
, params
):
940 """WPA2-PSK-FT and key lifetime in memory"""
942 passphrase
="04c2726b4b8d5f1b4db9c07aa4d9e9d8f765cb5d25ec817e6cc4fcdd5255db0"
943 psk
= '93c90846ff67af9037ed83fb72b63dbeddaa81d47f926c20909b5886f1d9358d'
944 pmk
= binascii
.unhexlify(psk
)
945 p
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
946 hapd0
= hostapd
.add_ap(apdev
[0], p
)
947 p
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
948 hapd1
= hostapd
.add_ap(apdev
[1], p
)
950 pid
= find_wpas_process(dev
[0])
952 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
954 # The decrypted copy of GTK is freed only after the CTRL-EVENT-CONNECTED
955 # event has been delivered, so verify that wpa_supplicant has returned to
956 # eloop before reading process memory.
960 buf
= read_process_memory(pid
, pmk
)
962 dev
[0].request("DISCONNECT")
963 dev
[0].wait_disconnected()
970 with
open(os
.path
.join(params
['logdir'], 'log0'), 'r') as f
:
971 for l
in f
.readlines():
972 if "FT: PMK-R0 - hexdump" in l
:
973 val
= l
.strip().split(':')[3].replace(' ', '')
974 pmkr0
= binascii
.unhexlify(val
)
975 if "FT: PMK-R1 - hexdump" in l
:
976 val
= l
.strip().split(':')[3].replace(' ', '')
977 pmkr1
= binascii
.unhexlify(val
)
978 if "FT: KCK - hexdump" in l
:
979 val
= l
.strip().split(':')[3].replace(' ', '')
980 kck
= binascii
.unhexlify(val
)
981 if "FT: KEK - hexdump" in l
:
982 val
= l
.strip().split(':')[3].replace(' ', '')
983 kek
= binascii
.unhexlify(val
)
984 if "FT: TK - hexdump" in l
:
985 val
= l
.strip().split(':')[3].replace(' ', '')
986 tk
= binascii
.unhexlify(val
)
987 if "WPA: Group Key - hexdump" in l
:
988 val
= l
.strip().split(':')[3].replace(' ', '')
989 gtk
= binascii
.unhexlify(val
)
990 if not pmkr0
or not pmkr1
or not kck
or not kek
or not tk
or not gtk
:
991 raise Exception("Could not find keys from debug log")
993 raise Exception("Unexpected GTK length")
995 logger
.info("Checking keys in memory while associated")
996 get_key_locations(buf
, pmk
, "PMK")
997 get_key_locations(buf
, pmkr0
, "PMK-R0")
998 get_key_locations(buf
, pmkr1
, "PMK-R1")
1000 raise HwsimSkip("PMK not found while associated")
1001 if pmkr0
not in buf
:
1002 raise HwsimSkip("PMK-R0 not found while associated")
1003 if pmkr1
not in buf
:
1004 raise HwsimSkip("PMK-R1 not found while associated")
1006 raise Exception("KCK not found while associated")
1008 raise Exception("KEK not found while associated")
1010 # raise Exception("TK found from memory")
1012 logger
.info("Checking keys in memory after disassociation")
1013 buf
= read_process_memory(pid
, pmk
)
1014 get_key_locations(buf
, pmk
, "PMK")
1015 get_key_locations(buf
, pmkr0
, "PMK-R0")
1016 get_key_locations(buf
, pmkr1
, "PMK-R1")
1018 # Note: PMK/PSK is still present in network configuration
1020 fname
= os
.path
.join(params
['logdir'],
1021 'ft_psk_key_lifetime_in_memory.memctx-')
1022 verify_not_present(buf
, pmkr0
, fname
, "PMK-R0")
1023 verify_not_present(buf
, pmkr1
, fname
, "PMK-R1")
1024 verify_not_present(buf
, kck
, fname
, "KCK")
1025 verify_not_present(buf
, kek
, fname
, "KEK")
1026 verify_not_present(buf
, tk
, fname
, "TK")
1028 get_key_locations(buf
, gtk
, "GTK")
1029 verify_not_present(buf
, gtk
, fname
, "GTK")
1031 dev
[0].request("REMOVE_NETWORK all")
1033 logger
.info("Checking keys in memory after network profile removal")
1034 buf
= read_process_memory(pid
, pmk
)
1035 get_key_locations(buf
, pmk
, "PMK")
1036 get_key_locations(buf
, pmkr0
, "PMK-R0")
1037 get_key_locations(buf
, pmkr1
, "PMK-R1")
1039 verify_not_present(buf
, pmk
, fname
, "PMK")
1040 verify_not_present(buf
, pmkr0
, fname
, "PMK-R0")
1041 verify_not_present(buf
, pmkr1
, fname
, "PMK-R1")
1042 verify_not_present(buf
, kck
, fname
, "KCK")
1043 verify_not_present(buf
, kek
, fname
, "KEK")
1044 verify_not_present(buf
, tk
, fname
, "TK")
1045 verify_not_present(buf
, gtk
, fname
, "GTK")
1048 def test_ap_ft_invalid_resp(dev
, apdev
):
1049 """WPA2-PSK-FT AP and invalid response IEs"""
1051 passphrase
="12345678"
1053 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1054 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1055 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1058 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1059 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1062 # Various IEs for test coverage. The last one is FTIE with invalid
1063 # R1KH-ID subelement.
1064 "020002000000" + "3800" + "38051122334455" + "3754000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010100",
1065 # FTIE with invalid R0KH-ID subelement (len=0).
1066 "020002000000" + "3754000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010300",
1067 # FTIE with invalid R0KH-ID subelement (len=49).
1068 "020002000000" + "378500010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001033101020304050607080910111213141516171819202122232425262728293031323334353637383940414243444546474849",
1070 "020002000000" + "3000",
1071 # Required IEs missing from protected IE count.
1072 "020002000000" + "3603a1b201" + "375200010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900",
1073 # RIC missing from protected IE count.
1074 "020002000000" + "3603a1b201" + "375200020203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900",
1075 # Protected IE missing.
1076 "020002000000" + "3603a1b201" + "375200ff0203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001020304050607080900010203040506070809000102030405060708090001" + "3900" + "0000" ]
1078 dev
[0].scan_for_bss(apdev
[1]['bssid'], freq
="2412")
1079 hapd1
.set("ext_mgmt_frame_handling", "1")
1080 hapd1
.dump_monitor()
1081 if "OK" not in dev
[0].request("ROAM " + apdev
[1]['bssid']):
1082 raise Exception("ROAM failed")
1085 msg
= hapd1
.mgmt_rx()
1086 if msg
['subtype'] == 11:
1090 raise Exception("Authentication frame not seen")
1093 resp
['fc'] = auth
['fc']
1094 resp
['da'] = auth
['sa']
1095 resp
['sa'] = auth
['da']
1096 resp
['bssid'] = auth
['bssid']
1097 resp
['payload'] = binascii
.unhexlify(t
)
1099 hapd1
.set("ext_mgmt_frame_handling", "0")
1100 dev
[0].wait_disconnected()
1102 dev
[0].request("RECONNECT")
1103 dev
[0].wait_connected()
1105 def test_ap_ft_gcmp_256(dev
, apdev
):
1106 """WPA2-PSK-FT AP with GCMP-256 cipher"""
1107 if "GCMP-256" not in dev
[0].get_capability("pairwise"):
1108 raise HwsimSkip("Cipher GCMP-256 not supported")
1110 passphrase
="12345678"
1112 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1113 params
['rsn_pairwise'] = "GCMP-256"
1114 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1115 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1116 params
['rsn_pairwise'] = "GCMP-256"
1117 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1119 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
,
1120 pairwise_cipher
="GCMP-256", group_cipher
="GCMP-256")
1122 def test_ap_ft_oom(dev
, apdev
):
1123 """WPA2-PSK-FT and OOM"""
1124 skip_with_fips(dev
[0])
1126 passphrase
="12345678"
1128 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1129 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1130 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1131 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1133 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1135 if dev
[0].get_status_field('bssid') == apdev
[0]['bssid']:
1136 dst
= apdev
[1]['bssid']
1138 dst
= apdev
[0]['bssid']
1140 dev
[0].scan_for_bss(dst
, freq
="2412")
1141 with
alloc_fail(dev
[0], 1, "wpa_ft_gen_req_ies"):
1143 with
fail_test(dev
[0], 1, "wpa_ft_mic"):
1144 dev
[0].roam(dst
, fail_test
=True)
1145 with
fail_test(dev
[0], 1, "os_get_random;wpa_ft_prepare_auth_request"):
1146 dev
[0].roam(dst
, fail_test
=True)
1148 dev
[0].request("REMOVE_NETWORK all")
1149 with
alloc_fail(dev
[0], 1, "=sme_update_ft_ies"):
1150 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1153 def test_ap_ft_ap_oom(dev
, apdev
):
1154 """WPA2-PSK-FT and AP OOM"""
1156 passphrase
="12345678"
1158 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1159 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1160 bssid0
= hapd0
.own_addr()
1162 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1163 with
alloc_fail(hapd0
, 1, "wpa_ft_store_pmk_r0"):
1164 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1167 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1168 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1169 bssid1
= hapd1
.own_addr()
1170 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1171 # This roam will fail due to missing PMK-R0 (OOM prevented storing it)
1174 def test_ap_ft_ap_oom2(dev
, apdev
):
1175 """WPA2-PSK-FT and AP OOM 2"""
1177 passphrase
="12345678"
1179 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1180 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1181 bssid0
= hapd0
.own_addr()
1183 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1184 with
alloc_fail(hapd0
, 1, "wpa_ft_store_pmk_r1"):
1185 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1188 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1189 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1190 bssid1
= hapd1
.own_addr()
1191 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1193 if dev
[0].get_status_field('bssid') != bssid1
:
1194 raise Exception("Did not roam to AP1")
1195 # This roam will fail due to missing PMK-R1 (OOM prevented storing it)
1198 def test_ap_ft_ap_oom3(dev
, apdev
):
1199 """WPA2-PSK-FT and AP OOM 3"""
1201 passphrase
="12345678"
1203 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1204 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1205 bssid0
= hapd0
.own_addr()
1207 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1208 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1211 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1212 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1213 bssid1
= hapd1
.own_addr()
1214 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1215 with
alloc_fail(hapd1
, 1, "wpa_ft_pull_pmk_r1"):
1216 # This will fail due to not being able to send out PMK-R1 pull request
1219 with
fail_test(hapd1
, 2, "os_get_random;wpa_ft_pull_pmk_r1"):
1220 # This will fail due to not being able to send out PMK-R1 pull request
1223 with
fail_test(hapd1
, 2, "aes_siv_encrypt;wpa_ft_pull_pmk_r1"):
1224 # This will fail due to not being able to send out PMK-R1 pull request
1227 def test_ap_ft_ap_oom3b(dev
, apdev
):
1228 """WPA2-PSK-FT and AP OOM 3b"""
1230 passphrase
="12345678"
1232 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1233 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1234 bssid0
= hapd0
.own_addr()
1236 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1237 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1240 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1241 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1242 bssid1
= hapd1
.own_addr()
1243 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1244 with
fail_test(hapd1
, 1, "os_get_random;wpa_ft_pull_pmk_r1"):
1245 # This will fail due to not being able to send out PMK-R1 pull request
1248 def test_ap_ft_ap_oom4(dev
, apdev
):
1249 """WPA2-PSK-FT and AP OOM 4"""
1251 passphrase
="12345678"
1253 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1254 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1255 bssid0
= hapd0
.own_addr()
1257 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1258 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1261 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1262 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1263 bssid1
= hapd1
.own_addr()
1264 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1265 with
alloc_fail(hapd1
, 1, "wpa_ft_gtk_subelem"):
1267 if dev
[0].get_status_field('bssid') != bssid1
:
1268 raise Exception("Did not roam to AP1")
1270 with
fail_test(hapd0
, 1, "wpa_auth_get_seqnum;wpa_ft_gtk_subelem"):
1272 if dev
[0].get_status_field('bssid') != bssid0
:
1273 raise Exception("Did not roam to AP0")
1275 with
fail_test(hapd0
, 1, "aes_wrap;wpa_ft_gtk_subelem"):
1277 if dev
[0].get_status_field('bssid') != bssid1
:
1278 raise Exception("Did not roam to AP1")
1280 def test_ap_ft_ap_oom5(dev
, apdev
):
1281 """WPA2-PSK-FT and AP OOM 5"""
1283 passphrase
="12345678"
1285 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1286 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1287 bssid0
= hapd0
.own_addr()
1289 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1290 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1293 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1294 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1295 bssid1
= hapd1
.own_addr()
1296 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1297 with
alloc_fail(hapd1
, 1, "=wpa_ft_process_auth_req"):
1298 # This will fail to roam
1301 with
fail_test(hapd1
, 1, "os_get_random;wpa_ft_process_auth_req"):
1302 # This will fail to roam
1305 with
fail_test(hapd1
, 1, "sha256_prf_bits;wpa_pmk_r1_to_ptk;wpa_ft_process_auth_req"):
1306 # This will fail to roam
1309 with
fail_test(hapd1
, 3, "wpa_pmk_r1_to_ptk;wpa_ft_process_auth_req"):
1310 # This will fail to roam
1313 with
fail_test(hapd1
, 1, "wpa_derive_pmk_r1_name;wpa_ft_process_auth_req"):
1314 # This will fail to roam
1317 def test_ap_ft_ap_oom6(dev
, apdev
):
1318 """WPA2-PSK-FT and AP OOM 6"""
1320 passphrase
="12345678"
1322 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1323 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1324 bssid0
= hapd0
.own_addr()
1326 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1327 with
fail_test(hapd0
, 1, "wpa_derive_pmk_r0;wpa_auth_derive_ptk_ft"):
1328 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1330 dev
[0].request("REMOVE_NETWORK all")
1331 dev
[0].wait_disconnected()
1332 with
fail_test(hapd0
, 1, "wpa_derive_pmk_r1;wpa_auth_derive_ptk_ft"):
1333 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1335 dev
[0].request("REMOVE_NETWORK all")
1336 dev
[0].wait_disconnected()
1337 with
fail_test(hapd0
, 1, "wpa_pmk_r1_to_ptk;wpa_auth_derive_ptk_ft"):
1338 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1341 def test_ap_ft_ap_oom7(dev
, apdev
):
1342 """WPA2-PSK-FT and AP OOM 7"""
1344 passphrase
="12345678"
1346 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1347 params
["ieee80211w"] = "2"
1348 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1349 bssid0
= hapd0
.own_addr()
1351 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1352 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1353 ieee80211w
="2", scan_freq
="2412")
1355 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1356 params
["ieee80211w"] = "2"
1357 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1358 bssid1
= hapd1
.own_addr()
1359 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1360 with
alloc_fail(hapd1
, 1, "wpa_ft_igtk_subelem"):
1361 # This will fail to roam
1363 with
fail_test(hapd1
, 1, "aes_wrap;wpa_ft_igtk_subelem"):
1364 # This will fail to roam
1366 with
alloc_fail(hapd1
, 1, "=wpa_sm_write_assoc_resp_ies"):
1367 # This will fail to roam
1369 with
fail_test(hapd1
, 1, "wpa_ft_mic;wpa_sm_write_assoc_resp_ies"):
1370 # This will fail to roam
1373 def test_ap_ft_ap_oom8(dev
, apdev
):
1374 """WPA2-PSK-FT and AP OOM 8"""
1376 passphrase
="12345678"
1378 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1379 params
['ft_psk_generate_local'] = "1";
1380 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1381 bssid0
= hapd0
.own_addr()
1383 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1384 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1387 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1388 params
['ft_psk_generate_local'] = "1";
1389 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1390 bssid1
= hapd1
.own_addr()
1391 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1392 with
fail_test(hapd1
, 1, "wpa_derive_pmk_r0;wpa_ft_psk_pmk_r1"):
1393 # This will fail to roam
1395 with
fail_test(hapd1
, 1, "wpa_derive_pmk_r1;wpa_ft_psk_pmk_r1"):
1396 # This will fail to roam
1399 def test_ap_ft_ap_oom9(dev
, apdev
):
1400 """WPA2-PSK-FT and AP OOM 9"""
1402 passphrase
="12345678"
1404 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1405 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1406 bssid0
= hapd0
.own_addr()
1408 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1409 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1412 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1413 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1414 bssid1
= hapd1
.own_addr()
1415 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1417 with
alloc_fail(hapd0
, 1, "wpa_ft_action_rx"):
1418 # This will fail to roam
1419 if "OK" not in dev
[0].request("FT_DS " + bssid1
):
1420 raise Exception("FT_DS failed")
1421 wait_fail_trigger(hapd0
, "GET_ALLOC_FAIL")
1423 with
alloc_fail(hapd1
, 1, "wpa_ft_rrb_rx_request"):
1424 # This will fail to roam
1425 if "OK" not in dev
[0].request("FT_DS " + bssid1
):
1426 raise Exception("FT_DS failed")
1427 wait_fail_trigger(hapd1
, "GET_ALLOC_FAIL")
1429 with
alloc_fail(hapd1
, 1, "wpa_ft_send_rrb_auth_resp"):
1430 # This will fail to roam
1431 if "OK" not in dev
[0].request("FT_DS " + bssid1
):
1432 raise Exception("FT_DS failed")
1433 wait_fail_trigger(hapd1
, "GET_ALLOC_FAIL")
1435 def test_ap_ft_ap_oom10(dev
, apdev
):
1436 """WPA2-PSK-FT and AP OOM 10"""
1438 passphrase
="12345678"
1440 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1441 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1442 bssid0
= hapd0
.own_addr()
1444 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1445 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1448 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1449 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1450 bssid1
= hapd1
.own_addr()
1451 dev
[0].scan_for_bss(bssid1
, freq
="2412")
1453 with
fail_test(hapd0
, 1, "aes_siv_decrypt;wpa_ft_rrb_rx_pull"):
1454 # This will fail to roam
1455 if "OK" not in dev
[0].request("FT_DS " + bssid1
):
1456 raise Exception("FT_DS failed")
1457 wait_fail_trigger(hapd0
, "GET_FAIL")
1459 with
fail_test(hapd0
, 1, "wpa_derive_pmk_r1;wpa_ft_rrb_rx_pull"):
1460 # This will fail to roam
1461 if "OK" not in dev
[0].request("FT_DS " + bssid1
):
1462 raise Exception("FT_DS failed")
1463 wait_fail_trigger(hapd0
, "GET_FAIL")
1465 with
fail_test(hapd0
, 1, "aes_siv_encrypt;wpa_ft_rrb_rx_pull"):
1466 # This will fail to roam
1467 if "OK" not in dev
[0].request("FT_DS " + bssid1
):
1468 raise Exception("FT_DS failed")
1469 wait_fail_trigger(hapd0
, "GET_FAIL")
1471 with
fail_test(hapd1
, 1, "aes_siv_decrypt;wpa_ft_rrb_rx_resp"):
1472 # This will fail to roam
1473 if "OK" not in dev
[0].request("FT_DS " + bssid1
):
1474 raise Exception("FT_DS failed")
1475 wait_fail_trigger(hapd1
, "GET_FAIL")
1477 def test_ap_ft_ap_oom11(dev
, apdev
):
1478 """WPA2-PSK-FT and AP OOM 11"""
1480 passphrase
="12345678"
1482 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1483 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1484 bssid0
= hapd0
.own_addr()
1486 dev
[0].scan_for_bss(bssid0
, freq
="2412")
1487 with
fail_test(hapd0
, 1, "wpa_derive_pmk_r1;wpa_ft_generate_pmk_r1"):
1488 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1490 wait_fail_trigger(hapd0
, "GET_FAIL")
1492 dev
[1].scan_for_bss(bssid0
, freq
="2412")
1493 with
fail_test(hapd0
, 1, "aes_siv_encrypt;wpa_ft_generate_pmk_r1"):
1494 dev
[1].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1496 wait_fail_trigger(hapd0
, "GET_FAIL")
1498 def test_ap_ft_over_ds_proto_ap(dev
, apdev
):
1499 """WPA2-PSK-FT AP over DS protocol testing for AP processing"""
1501 passphrase
="12345678"
1503 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1504 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1505 bssid0
= hapd0
.own_addr()
1506 _bssid0
= bssid0
.replace(':', '')
1507 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1509 addr
= dev
[0].own_addr()
1510 _addr
= addr
.replace(':', '')
1512 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1513 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1514 bssid1
= hapd1
.own_addr()
1515 _bssid1
= bssid1
.replace(':', '')
1517 hapd0
.set("ext_mgmt_frame_handling", "1")
1518 hdr
= "d0003a01" + _bssid0
+ _addr
+ _bssid0
+ "1000"
1519 valid
= "0601" + _addr
+ _bssid1
1522 "0601" + _addr
+ _bssid0
,
1523 "0601" + _addr
+ "ffffffffffff",
1524 "0601" + _bssid0
+ _bssid0
,
1529 valid
+ "3603ffffff",
1530 valid
+ "3603a1b2ff",
1531 valid
+ "3603a1b2ff" + "3700",
1532 valid
+ "3603a1b2ff" + "37520000" + 16*"00" + 32*"00" + 32*"00",
1533 valid
+ "3603a1b2ff" + "37520001" + 16*"00" + 32*"00" + 32*"00",
1534 valid
+ "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa",
1535 valid
+ "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa" + "3000",
1536 valid
+ "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa" + "30260100000fac040100000fac040100000facff00000100a225368fe0983b5828a37a0acb37f253",
1537 valid
+ "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa" + "30260100000fac040100000fac030100000fac0400000100a225368fe0983b5828a37a0acb37f253",
1538 valid
+ "3603a1b2ff" + "37550000" + 16*"00" + 32*"00" + 32*"00" + "0301aa" + "30260100000fac040100000fac040100000fac0400000100a225368fe0983b5828a37a0acb37f253",
1541 hapd0
.dump_monitor()
1542 if "OK" not in hapd0
.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + hdr
+ t
):
1543 raise Exception("MGMT_RX_PROCESS failed")
1545 hapd0
.set("ext_mgmt_frame_handling", "0")
1547 def test_ap_ft_over_ds_proto(dev
, apdev
):
1548 """WPA2-PSK-FT AP over DS protocol testing"""
1550 passphrase
="12345678"
1552 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1553 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1554 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1557 # FT Action Response while no FT-over-DS in progress
1560 msg
['da'] = dev
[0].own_addr()
1561 msg
['sa'] = apdev
[0]['bssid']
1562 msg
['bssid'] = apdev
[0]['bssid']
1563 msg
['payload'] = binascii
.unhexlify("06020200000000000200000004000000")
1566 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1567 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1568 dev
[0].scan_for_bss(apdev
[1]['bssid'], freq
="2412")
1569 hapd0
.set("ext_mgmt_frame_handling", "1")
1570 hapd0
.dump_monitor()
1571 dev
[0].request("FT_DS " + apdev
[1]['bssid'])
1572 for i
in range(0, 10):
1573 req
= hapd0
.mgmt_rx()
1575 raise Exception("MGMT RX wait timed out")
1576 if req
['subtype'] == 13:
1580 raise Exception("FT Action frame not received")
1582 # FT Action Response for unexpected Target AP
1583 msg
['payload'] = binascii
.unhexlify("0602020000000000" + "f20000000400" + "0000")
1586 # FT Action Response without MDIE
1587 msg
['payload'] = binascii
.unhexlify("0602020000000000" + "020000000400" + "0000")
1590 # FT Action Response without FTIE
1591 msg
['payload'] = binascii
.unhexlify("0602020000000000" + "020000000400" + "0000" + "3603a1b201")
1594 # FT Action Response with FTIE SNonce mismatch
1595 msg
['payload'] = binascii
.unhexlify("0602020000000000" + "020000000400" + "0000" + "3603a1b201" + "3766000000000000000000000000000000000000c4e67ac1999bebd00ff4ae4d5dcaf87896bb060b469f7c78d49623fb395c3455ffffff6b693fe6f8d8c5dfac0a22344750775bd09437f98b238c9f87b97f790c0106000102030406030a6e6173312e77312e6669")
1599 def test_ap_ft_rrb(dev
, apdev
):
1600 """WPA2-PSK-FT RRB protocol testing"""
1602 passphrase
="12345678"
1604 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1605 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1607 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1610 _dst_ll
= binascii
.unhexlify(apdev
[0]['bssid'].replace(':',''))
1611 _src_ll
= binascii
.unhexlify(dev
[0].own_addr().replace(':',''))
1613 ehdr
= _dst_ll
+ _src_ll
+ proto
1615 # Too short RRB frame
1617 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
)):
1618 raise Exception("DATA_TEST_FRAME failed")
1620 # RRB discarded frame wikth unrecognized type
1621 pkt
= ehdr
+ '\x02' + '\x02' + '\x01\x00' + _src_ll
1622 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
)):
1623 raise Exception("DATA_TEST_FRAME failed")
1625 # RRB frame too short for action frame
1626 pkt
= ehdr
+ '\x01' + '\x02' + '\x01\x00' + _src_ll
1627 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
)):
1628 raise Exception("DATA_TEST_FRAME failed")
1630 # Too short RRB frame (not enough room for Action Frame body)
1631 pkt
= ehdr
+ '\x01' + '\x02' + '\x00\x00' + _src_ll
1632 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
)):
1633 raise Exception("DATA_TEST_FRAME failed")
1635 # Unexpected Action frame category
1636 pkt
= ehdr
+ '\x01' + '\x02' + '\x0e\x00' + _src_ll
+ '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
1637 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
)):
1638 raise Exception("DATA_TEST_FRAME failed")
1640 # Unexpected Action in RRB Request
1641 pkt
= ehdr
+ '\x01' + '\x00' + '\x0e\x00' + _src_ll
+ '\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
1642 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
)):
1643 raise Exception("DATA_TEST_FRAME failed")
1645 # Target AP address in RRB Request does not match with own address
1646 pkt
= ehdr
+ '\x01' + '\x00' + '\x0e\x00' + _src_ll
+ '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
1647 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
)):
1648 raise Exception("DATA_TEST_FRAME failed")
1650 # Not enough room for status code in RRB Response
1651 pkt
= ehdr
+ '\x01' + '\x01' + '\x0e\x00' + _src_ll
+ '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
1652 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
)):
1653 raise Exception("DATA_TEST_FRAME failed")
1655 # RRB discarded frame with unknown packet_type
1656 pkt
= ehdr
+ '\x01' + '\x02' + '\x0e\x00' + _src_ll
+ '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
1657 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
)):
1658 raise Exception("DATA_TEST_FRAME failed")
1660 # RRB Response with non-zero status code; no STA match
1661 pkt
= ehdr
+ '\x01' + '\x01' + '\x10\x00' + _src_ll
+ '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00' + '\xff\xff'
1662 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
)):
1663 raise Exception("DATA_TEST_FRAME failed")
1665 # RRB Response with zero status code and extra data; STA match
1666 pkt
= ehdr
+ '\x01' + '\x01' + '\x11\x00' + _src_ll
+ '\x06\x01' + _src_ll
+ '\x00\x00\x00\x00\x00\x00' + '\x00\x00' + '\x00'
1667 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
)):
1668 raise Exception("DATA_TEST_FRAME failed")
1670 # Too short PMK-R1 pull
1671 pkt
= ehdr
+ '\x01' + '\xc8' + '\x0e\x00' + _src_ll
+ '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
1672 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
)):
1673 raise Exception("DATA_TEST_FRAME failed")
1675 # Too short PMK-R1 resp
1676 pkt
= ehdr
+ '\x01' + '\xc9' + '\x0e\x00' + _src_ll
+ '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
1677 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
)):
1678 raise Exception("DATA_TEST_FRAME failed")
1680 # Too short PMK-R1 push
1681 pkt
= ehdr
+ '\x01' + '\xca' + '\x0e\x00' + _src_ll
+ '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'
1682 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
)):
1683 raise Exception("DATA_TEST_FRAME failed")
1685 # No matching R0KH address found for PMK-R0 pull response
1686 pkt
= ehdr
+ '\x01' + '\xc9' + '\x5a\x00' + _src_ll
+ '\x06\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00' + 76*'\00'
1687 if "OK" not in dev
[0].request("DATA_TEST_FRAME " + binascii
.hexlify(pkt
)):
1688 raise Exception("DATA_TEST_FRAME failed")
1691 def test_rsn_ie_proto_ft_psk_sta(dev
, apdev
):
1692 """RSN element protocol testing for FT-PSK + PMF cases on STA side"""
1693 bssid
= apdev
[0]['bssid']
1695 passphrase
="12345678"
1697 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1698 params
["ieee80211w"] = "1"
1699 # This is the RSN element used normally by hostapd
1700 params
['own_ie_override'] = '30140100000fac040100000fac040100000fac048c00' + '3603a1b201'
1701 hapd
= hostapd
.add_ap(apdev
[0], params
)
1702 id = dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1703 ieee80211w
="1", scan_freq
="2412",
1704 pairwise
="CCMP", group
="CCMP")
1706 tests
= [ ('PMKIDCount field included',
1707 '30160100000fac040100000fac040100000fac048c000000' + '3603a1b201'),
1708 ('Extra IE before RSNE',
1709 'dd0400000000' + '30140100000fac040100000fac040100000fac048c00' + '3603a1b201'),
1710 ('PMKIDCount and Group Management Cipher suite fields included',
1711 '301a0100000fac040100000fac040100000fac048c000000000fac06' + '3603a1b201'),
1712 ('Extra octet after defined fields (future extensibility)',
1713 '301b0100000fac040100000fac040100000fac048c000000000fac0600' + '3603a1b201'),
1714 ('No RSN Capabilities field (PMF disabled in practice)',
1715 '30120100000fac040100000fac040100000fac04' + '3603a1b201') ]
1716 for txt
,ie
in tests
:
1717 dev
[0].request("DISCONNECT")
1718 dev
[0].wait_disconnected()
1721 hapd
.set('own_ie_override', ie
)
1723 dev
[0].request("BSS_FLUSH 0")
1724 dev
[0].scan_for_bss(bssid
, 2412, force_scan
=True, only_new
=True)
1725 dev
[0].select_network(id, freq
=2412)
1726 dev
[0].wait_connected()
1728 dev
[0].request("DISCONNECT")
1729 dev
[0].wait_disconnected()
1731 logger
.info('Invalid RSNE causing internal hostapd error')
1733 hapd
.set('own_ie_override', '30130100000fac040100000fac040100000fac048c' + '3603a1b201')
1735 dev
[0].request("BSS_FLUSH 0")
1736 dev
[0].scan_for_bss(bssid
, 2412, force_scan
=True, only_new
=True)
1737 dev
[0].select_network(id, freq
=2412)
1738 # hostapd fails to generate EAPOL-Key msg 3/4, so this connection cannot
1740 ev
= dev
[0].wait_event(["CTRL-EVENT-CONNECTED"], timeout
=1)
1742 raise Exception("Unexpected connection")
1743 dev
[0].request("DISCONNECT")
1745 logger
.info('Unexpected PMKID causing internal hostapd error')
1747 hapd
.set('own_ie_override', '30260100000fac040100000fac040100000fac048c000100ffffffffffffffffffffffffffffffff' + '3603a1b201')
1749 dev
[0].request("BSS_FLUSH 0")
1750 dev
[0].scan_for_bss(bssid
, 2412, force_scan
=True, only_new
=True)
1751 dev
[0].select_network(id, freq
=2412)
1752 # hostapd fails to generate EAPOL-Key msg 3/4, so this connection cannot
1754 ev
= dev
[0].wait_event(["CTRL-EVENT-CONNECTED"], timeout
=1)
1756 raise Exception("Unexpected connection")
1757 dev
[0].request("DISCONNECT")
1759 def test_ap_ft_ptk_rekey(dev
, apdev
):
1760 """WPA2-PSK-FT PTK rekeying triggered by station after roam"""
1762 passphrase
="12345678"
1764 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1765 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1766 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1767 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1769 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
, ptk_rekey
="1")
1771 ev
= dev
[0].wait_event(["CTRL-EVENT-DISCONNECTED",
1772 "WPA: Key negotiation completed"], timeout
=5)
1774 raise Exception("No event received after roam")
1775 if "CTRL-EVENT-DISCONNECTED" in ev
:
1776 raise Exception("Unexpected disconnection after roam")
1778 if dev
[0].get_status_field('bssid') == apdev
[0]['bssid']:
1782 hwsim_utils
.test_connectivity(dev
[0], hapd
)
1784 def test_ap_ft_ptk_rekey_ap(dev
, apdev
):
1785 """WPA2-PSK-FT PTK rekeying triggered by AP after roam"""
1787 passphrase
="12345678"
1789 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1790 params
['wpa_ptk_rekey'] = '2'
1791 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1792 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1793 params
['wpa_ptk_rekey'] = '2'
1794 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1796 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
)
1798 ev
= dev
[0].wait_event(["CTRL-EVENT-DISCONNECTED",
1799 "WPA: Key negotiation completed"], timeout
=5)
1801 raise Exception("No event received after roam")
1802 if "CTRL-EVENT-DISCONNECTED" in ev
:
1803 raise Exception("Unexpected disconnection after roam")
1805 if dev
[0].get_status_field('bssid') == apdev
[0]['bssid']:
1809 hwsim_utils
.test_connectivity(dev
[0], hapd
)
1811 def test_ap_ft_internal_rrb_check(dev
, apdev
):
1812 """RRB internal delivery only to WPA enabled BSS"""
1814 passphrase
="12345678"
1816 radius
= hostapd
.radius_params()
1817 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1818 params
['wpa_key_mgmt'] = "FT-EAP"
1819 params
["ieee8021x"] = "1"
1820 params
= dict(radius
.items() + params
.items())
1821 hapd
= hostapd
.add_ap(apdev
[0], params
)
1822 key_mgmt
= hapd
.get_config()['key_mgmt']
1823 if key_mgmt
.split(' ')[0] != "FT-EAP":
1824 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
1826 hapd1
= hostapd
.add_ap(apdev
[1], { "ssid" : ssid
})
1828 # Connect to WPA enabled AP
1829 dev
[0].connect(ssid
, key_mgmt
="FT-EAP", proto
="WPA2", ieee80211w
="1",
1830 eap
="GPSK", identity
="gpsk user",
1831 password
="abcdefghijklmnop0123456789abcdef",
1834 # Try over_ds roaming to non-WPA-enabled AP.
1835 # If hostapd does not check hapd->wpa_auth internally, it will crash now.
1836 dev
[0].roam_over_ds(apdev
[1]['bssid'], fail_test
=True)
1838 def test_ap_ft_extra_ie(dev
, apdev
):
1839 """WPA2-PSK-FT AP with WPA2-PSK enabled and unexpected MDE"""
1841 passphrase
="12345678"
1843 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1844 params
["wpa_key_mgmt"] = "WPA-PSK FT-PSK"
1845 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1846 dev
[1].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1848 dev
[2].connect(ssid
, psk
=passphrase
, key_mgmt
="WPA-PSK", proto
="WPA2",
1851 # Add Mobility Domain element to test AP validation code.
1852 dev
[0].request("VENDOR_ELEM_ADD 13 3603a1b201")
1853 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="WPA-PSK", proto
="WPA2",
1854 scan_freq
="2412", wait_connect
=False)
1855 ev
= dev
[0].wait_event(["CTRL-EVENT-CONNECTED",
1856 "CTRL-EVENT-ASSOC-REJECT"], timeout
=10)
1858 raise Exception("No connection result")
1859 if "CTRL-EVENT-CONNECTED" in ev
:
1860 raise Exception("Non-FT association accepted with MDE")
1861 if "status_code=43" not in ev
:
1862 raise Exception("Unexpected status code: " + ev
)
1863 dev
[0].request("DISCONNECT")
1865 dev
[0].request("VENDOR_ELEM_REMOVE 13 *")
1867 def test_ap_ft_ric(dev
, apdev
):
1868 """WPA2-PSK-FT AP and RIC"""
1870 passphrase
="12345678"
1872 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1873 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1874 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1875 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1877 dev
[0].set("ric_ies", "")
1878 dev
[0].set("ric_ies", '""')
1879 if "FAIL" not in dev
[0].request("SET ric_ies q"):
1880 raise Exception("Invalid ric_ies value accepted")
1885 "390400000000" + "390400000000",
1886 "390400000000" + "dd050050f20202",
1887 "390400000000" + "dd3d0050f2020201" + 55*"00",
1888 "390400000000" + "dd3d0050f2020201aa300010270000000000000000000000000000000000000000000000000000ffffff7f00000000000000000000000040420f00ffff0000",
1889 "390401010000" + "dd3d0050f2020201aa3000dc050000000000000000000000000000000000000000000000000000dc050000000000000000000000000000808d5b0028230000" ]
1891 dev
[0].set("ric_ies", t
)
1892 run_roams(dev
[0], apdev
, hapd0
, hapd1
, ssid
, passphrase
,
1893 test_connectivity
=False)
1894 dev
[0].request("REMOVE_NETWORK all")
1895 dev
[0].wait_disconnected()
1896 dev
[0].dump_monitor()
1898 def ie_hex(ies
, id):
1899 return binascii
.hexlify(struct
.pack('BB', id, len(ies
[id])) + ies
[id])
1901 def test_ap_ft_reassoc_proto(dev
, apdev
):
1902 """WPA2-PSK-FT AP Reassociation Request frame parsing"""
1904 passphrase
="12345678"
1906 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1907 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1908 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1909 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1911 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1912 ieee80211w
="1", scan_freq
="2412")
1913 if dev
[0].get_status_field('bssid') == hapd0
.own_addr():
1920 dev
[0].scan_for_bss(hapd2ap
.own_addr(), freq
="2412")
1921 hapd2ap
.set("ext_mgmt_frame_handling", "1")
1922 dev
[0].request("ROAM " + hapd2ap
.own_addr())
1925 req
= hapd2ap
.mgmt_rx()
1926 hapd2ap
.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + binascii
.hexlify(req
['frame']))
1927 if req
['subtype'] == 11:
1931 req
= hapd2ap
.mgmt_rx()
1932 if req
['subtype'] == 2:
1934 hapd2ap
.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + binascii
.hexlify(req
['frame']))
1936 # IEEE 802.11 header + fixed fields before IEs
1937 hdr
= binascii
.hexlify(req
['frame'][0:34])
1938 ies
= parse_ie(binascii
.hexlify(req
['frame'][34:]))
1939 # First elements: SSID, Supported Rates, Extended Supported Rates
1940 ies1
= ie_hex(ies
, 0) + ie_hex(ies
, 1) + ie_hex(ies
, 50)
1942 rsne
= ie_hex(ies
, 48)
1943 mde
= ie_hex(ies
, 54)
1944 fte
= ie_hex(ies
, 55)
1946 # RSN: Trying to use FT, but MDIE not included
1948 # RSN: Attempted to use unknown MDIE
1949 tests
+= [ rsne
+ "3603000000" ]
1950 # Invalid RSN pairwise cipher
1951 tests
+= [ "30260100000fac040100000fac030100000fac040000010029208a42cd25c85aa571567dce10dae3" ]
1952 # FT: No PMKID in RSNIE
1953 tests
+= [ "30160100000fac040100000fac040100000fac0400000000" + ie_hex(ies
, 54) ]
1955 tests
+= [ rsne
+ mde
]
1956 # FT: RIC IE(s) in the frame, but not included in protected IE count
1957 # FT: Failed to parse FT IEs
1958 tests
+= [ rsne
+ mde
+ fte
+ "3900" ]
1959 # FT: SNonce mismatch in FTIE
1960 tests
+= [ rsne
+ mde
+ "37520000" + 16*"00" + 32*"00" + 32*"00" ]
1961 # FT: ANonce mismatch in FTIE
1962 tests
+= [ rsne
+ mde
+ fte
[0:40] + 32*"00" + fte
[104:] ]
1963 # FT: No R0KH-ID subelem in FTIE
1964 tests
+= [ rsne
+ mde
+ "3752" + fte
[4:168] ]
1965 # FT: R0KH-ID in FTIE did not match with the current R0KH-ID
1966 tests
+= [ rsne
+ mde
+ "3755" + fte
[4:168] + "0301ff" ]
1967 # FT: No R1KH-ID subelem in FTIE
1968 tests
+= [ rsne
+ mde
+ "375e" + fte
[4:168] + "030a" + "nas1.w1.fi".encode("hex") ]
1969 # FT: Unknown R1KH-ID used in ReassocReq
1970 tests
+= [ rsne
+ mde
+ "3766" + fte
[4:168] + "030a" + "nas1.w1.fi".encode("hex") + "0106000000000000" ]
1971 # FT: PMKID in Reassoc Req did not match with the PMKR1Name derived from auth request
1972 tests
+= [ rsne
[:-32] + 16*"00" + mde
+ fte
]
1973 # Invalid MIC in FTIE
1974 tests
+= [ rsne
+ mde
+ fte
[0:8] + 16*"00" + fte
[40:] ]
1976 hapd2ap
.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + hdr
+ ies1
+ t
)
1978 def test_ap_ft_reassoc_local_fail(dev
, apdev
):
1979 """WPA2-PSK-FT AP Reassociation Request frame and local failure"""
1981 passphrase
="12345678"
1983 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
1984 hapd0
= hostapd
.add_ap(apdev
[0], params
)
1985 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
1986 hapd1
= hostapd
.add_ap(apdev
[1], params
)
1988 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
1989 ieee80211w
="1", scan_freq
="2412")
1990 if dev
[0].get_status_field('bssid') == hapd0
.own_addr():
1997 dev
[0].scan_for_bss(hapd2ap
.own_addr(), freq
="2412")
1998 # FT: Failed to calculate MIC
1999 with
fail_test(hapd2ap
, 1, "wpa_ft_validate_reassoc"):
2000 dev
[0].request("ROAM " + hapd2ap
.own_addr())
2001 ev
= dev
[0].wait_event(["CTRL-EVENT-ASSOC-REJECT"], timeout
=10)
2002 dev
[0].request("DISCONNECT")
2004 raise Exception("Association reject not seen")
2006 def test_ap_ft_reassoc_replay(dev
, apdev
, params
):
2007 """WPA2-PSK-FT AP and replayed Reassociation Request frame"""
2008 capfile
= os
.path
.join(params
['logdir'], "hwsim0.pcapng")
2010 passphrase
="12345678"
2012 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
2013 hapd0
= hostapd
.add_ap(apdev
[0], params
)
2014 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
2015 hapd1
= hostapd
.add_ap(apdev
[1], params
)
2017 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
2019 if dev
[0].get_status_field('bssid') == hapd0
.own_addr():
2026 dev
[0].scan_for_bss(hapd2ap
.own_addr(), freq
="2412")
2027 hapd2ap
.set("ext_mgmt_frame_handling", "1")
2028 dev
[0].dump_monitor()
2029 if "OK" not in dev
[0].request("ROAM " + hapd2ap
.own_addr()):
2030 raise Exception("ROAM failed")
2035 req
= hapd2ap
.mgmt_rx()
2037 hapd2ap
.dump_monitor()
2038 hapd2ap
.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + binascii
.hexlify(req
['frame']))
2039 if req
['subtype'] == 2:
2041 ev
= hapd2ap
.wait_event(["MGMT-TX-STATUS"], timeout
=5)
2043 raise Exception("No TX status seen")
2044 cmd
= "MGMT_TX_STATUS_PROCESS %s" % (" ".join(ev
.split(' ')[1:4]))
2045 if "OK" not in hapd2ap
.request(cmd
):
2046 raise Exception("MGMT_TX_STATUS_PROCESS failed")
2048 hapd2ap
.set("ext_mgmt_frame_handling", "0")
2049 if reassocreq
is None:
2050 raise Exception("No Reassociation Request frame seen")
2051 dev
[0].wait_connected()
2052 dev
[0].dump_monitor()
2053 hapd2ap
.dump_monitor()
2055 hwsim_utils
.test_connectivity(dev
[0], hapd2ap
)
2057 logger
.info("Replay the last Reassociation Request frame")
2058 hapd2ap
.dump_monitor()
2059 hapd2ap
.set("ext_mgmt_frame_handling", "1")
2060 hapd2ap
.request("MGMT_RX_PROCESS freq=2412 datarate=0 ssi_signal=-30 frame=" + binascii
.hexlify(req
['frame']))
2061 ev
= hapd2ap
.wait_event(["MGMT-TX-STATUS"], timeout
=5)
2063 raise Exception("No TX status seen")
2064 cmd
= "MGMT_TX_STATUS_PROCESS %s" % (" ".join(ev
.split(' ')[1:4]))
2065 if "OK" not in hapd2ap
.request(cmd
):
2066 raise Exception("MGMT_TX_STATUS_PROCESS failed")
2067 hapd2ap
.set("ext_mgmt_frame_handling", "0")
2070 hwsim_utils
.test_connectivity(dev
[0], hapd2ap
)
2075 ap
= hapd2ap
.own_addr()
2076 sta
= dev
[0].own_addr()
2077 filt
= "wlan.fc.type == 2 && " + \
2078 "wlan.da == " + sta
+ " && " + \
2080 fields
= [ "wlan.ccmp.extiv" ]
2081 res
= run_tshark(capfile
, filt
, fields
)
2082 vals
= res
.splitlines()
2083 logger
.info("CCMP PN: " + str(vals
))
2085 raise Exception("Could not find all CCMP protected frames from capture")
2086 if len(set(vals
)) < len(vals
):
2087 raise Exception("Duplicate CCMP PN used")
2090 raise Exception("The second hwsim connectivity test failed")
2092 def test_ap_ft_psk_file(dev
, apdev
):
2093 """WPA2-PSK-FT AP with PSK from a file"""
2095 passphrase
="12345678"
2097 params
= ft_params1a(ssid
=ssid
, passphrase
=passphrase
)
2098 params
['wpa_psk_file'] = 'hostapd.wpa_psk'
2099 hapd
= hostapd
.add_ap(apdev
[0], params
)
2101 dev
[1].connect(ssid
, psk
="very secret",
2102 key_mgmt
="FT-PSK", proto
="WPA2", ieee80211w
="1",
2103 scan_freq
="2412", wait_connect
=False)
2104 dev
[0].connect(ssid
, psk
=passphrase
, key_mgmt
="FT-PSK", proto
="WPA2",
2105 ieee80211w
="1", scan_freq
="2412")
2106 dev
[0].request("REMOVE_NETWORK all")
2107 dev
[0].wait_disconnected()
2108 dev
[0].connect(ssid
, psk
="very secret", key_mgmt
="FT-PSK", proto
="WPA2",
2109 ieee80211w
="1", scan_freq
="2412")
2110 dev
[0].request("REMOVE_NETWORK all")
2111 dev
[0].wait_disconnected()
2112 dev
[0].connect(ssid
, psk
="secret passphrase",
2113 key_mgmt
="FT-PSK", proto
="WPA2", ieee80211w
="1",
2115 dev
[2].connect(ssid
, psk
="another passphrase for all STAs",
2116 key_mgmt
="FT-PSK", proto
="WPA2", ieee80211w
="1",
2118 ev
= dev
[1].wait_event(["WPA: 4-Way Handshake failed"], timeout
=10)
2120 raise Exception("Timed out while waiting for failure report")
2121 dev
[1].request("REMOVE_NETWORK all")