]>
git.ipfire.org Git - thirdparty/hostap.git/blob - tests/hwsim/test_ap_ft.py
1 # Fast BSS Transition tests
2 # Copyright (c) 2013, Jouni Malinen <j@w1.fi>
4 # This software may be distributed under the terms of the BSD license.
5 # See README for more details.
10 logger
= logging
.getLogger()
14 from wlantest
import Wlantest
17 params
= { "wpa": "2",
18 "wpa_key_mgmt": "FT-PSK",
19 "rsn_pairwise": "CCMP" }
23 params
= { "wpa": "3",
24 "wpa_key_mgmt": "WPA-PSK FT-PSK",
25 "wpa_pairwise": "TKIP",
26 "rsn_pairwise": "CCMP" }
29 def ft_params(rsn
=True, ssid
=None, passphrase
=None):
31 params
= ft_base_rsn()
33 params
= ft_base_mixed()
37 params
["wpa_passphrase"] = passphrase
39 params
["mobility_domain"] = "a1b2"
40 params
["r0_key_lifetime"] = "10000"
41 params
["pmk_r1_push"] = "1"
42 params
["reassociation_deadline"] = "1000"
45 def ft_params1(rsn
=True, ssid
=None, passphrase
=None):
46 params
= ft_params(rsn
, ssid
, passphrase
)
47 params
['nas_identifier'] = "nas1.w1.fi"
48 params
['r1_key_holder'] = "000102030405"
49 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f",
50 "02:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f" ]
51 params
['r1kh'] = "02:00:00:00:04:00 00:01:02:03:04:06 200102030405060708090a0b0c0d0e0f"
54 def ft_params2(rsn
=True, ssid
=None, passphrase
=None):
55 params
= ft_params(rsn
, ssid
, passphrase
)
56 params
['nas_identifier'] = "nas2.w1.fi"
57 params
['r1_key_holder'] = "000102030406"
58 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f",
59 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f" ]
60 params
['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0e0f"
63 def run_roams(dev
, apdev
, ssid
, passphrase
, over_ds
=False, sae
=False, eap
=False):
64 logger
.info("Connect to first AP")
66 dev
.connect(ssid
, key_mgmt
="FT-EAP", proto
="WPA2", ieee80211w
="1",
67 eap
="EKE", identity
="eke user", password
="hello")
73 dev
.connect(ssid
, psk
=passphrase
, key_mgmt
=key_mgmt
, proto
="WPA2",
75 if dev
.get_status_field('bssid') == apdev
[0]['bssid']:
81 hwsim_utils
.test_connectivity(dev
.ifname
, ap1
['ifname'])
83 logger
.info("Roam to the second AP")
85 dev
.roam_over_ds(ap2
['bssid'])
87 dev
.roam(ap2
['bssid'])
88 if dev
.get_status_field('bssid') != ap2
['bssid']:
89 raise Exception("Did not connect to correct AP")
90 hwsim_utils
.test_connectivity(dev
.ifname
, ap2
['ifname'])
92 logger
.info("Roam back to the first AP")
94 dev
.roam_over_ds(ap1
['bssid'])
96 dev
.roam(ap1
['bssid'])
97 if dev
.get_status_field('bssid') != ap1
['bssid']:
98 raise Exception("Did not connect to correct AP")
99 hwsim_utils
.test_connectivity(dev
.ifname
, ap1
['ifname'])
101 def test_ap_ft(dev
, apdev
):
104 passphrase
="12345678"
106 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
107 hostapd
.add_ap(apdev
[0]['ifname'], params
)
108 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
109 hostapd
.add_ap(apdev
[1]['ifname'], params
)
111 run_roams(dev
[0], apdev
, ssid
, passphrase
)
113 def test_ap_ft_mixed(dev
, apdev
):
114 """WPA2-PSK-FT mixed-mode AP"""
115 ssid
= "test-ft-mixed"
116 passphrase
="12345678"
118 params
= ft_params1(rsn
=False, ssid
=ssid
, passphrase
=passphrase
)
119 hapd
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
120 key_mgmt
= hapd
.get_config()['key_mgmt']
121 vals
= key_mgmt
.split(' ')
122 if vals
[0] != "WPA-PSK" or vals
[1] != "FT-PSK":
123 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
124 params
= ft_params2(rsn
=False, ssid
=ssid
, passphrase
=passphrase
)
125 hostapd
.add_ap(apdev
[1]['ifname'], params
)
127 run_roams(dev
[0], apdev
, ssid
, passphrase
)
129 def test_ap_ft_pmf(dev
, apdev
):
130 """WPA2-PSK-FT AP with PMF"""
132 passphrase
="12345678"
134 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
135 params
["ieee80211w"] = "2";
136 hostapd
.add_ap(apdev
[0]['ifname'], params
)
137 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
138 params
["ieee80211w"] = "2";
139 hostapd
.add_ap(apdev
[1]['ifname'], params
)
141 run_roams(dev
[0], apdev
, ssid
, passphrase
)
143 def test_ap_ft_over_ds(dev
, apdev
):
144 """WPA2-PSK-FT AP over DS"""
146 passphrase
="12345678"
148 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
149 hostapd
.add_ap(apdev
[0]['ifname'], params
)
150 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
151 hostapd
.add_ap(apdev
[1]['ifname'], params
)
153 run_roams(dev
[0], apdev
, ssid
, passphrase
, over_ds
=True)
155 def test_ap_ft_pmf_over_ds(dev
, apdev
):
156 """WPA2-PSK-FT AP over DS with PMF"""
158 passphrase
="12345678"
160 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
161 params
["ieee80211w"] = "2";
162 hostapd
.add_ap(apdev
[0]['ifname'], params
)
163 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
164 params
["ieee80211w"] = "2";
165 hostapd
.add_ap(apdev
[1]['ifname'], params
)
167 run_roams(dev
[0], apdev
, ssid
, passphrase
, over_ds
=True)
169 def test_ap_ft_over_ds_pull(dev
, apdev
):
170 """WPA2-PSK-FT AP over DS (pull PMK)"""
172 passphrase
="12345678"
174 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
175 params
["pmk_r1_push"] = "0"
176 hostapd
.add_ap(apdev
[0]['ifname'], params
)
177 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
178 params
["pmk_r1_push"] = "0"
179 hostapd
.add_ap(apdev
[1]['ifname'], params
)
181 run_roams(dev
[0], apdev
, ssid
, passphrase
, over_ds
=True)
183 def test_ap_ft_sae(dev
, apdev
):
184 """WPA2-PSK-FT-SAE AP"""
186 passphrase
="12345678"
188 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
189 params
['wpa_key_mgmt'] = "FT-SAE"
190 hostapd
.add_ap(apdev
[0]['ifname'], params
)
191 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
192 params
['wpa_key_mgmt'] = "FT-SAE"
193 hapd
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
194 key_mgmt
= hapd
.get_config()['key_mgmt']
195 if key_mgmt
.split(' ')[0] != "FT-SAE":
196 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
198 run_roams(dev
[0], apdev
, ssid
, passphrase
, sae
=True)
200 def test_ap_ft_sae_over_ds(dev
, apdev
):
201 """WPA2-PSK-FT-SAE AP over DS"""
203 passphrase
="12345678"
205 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
206 params
['wpa_key_mgmt'] = "FT-SAE"
207 hostapd
.add_ap(apdev
[0]['ifname'], params
)
208 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
209 params
['wpa_key_mgmt'] = "FT-SAE"
210 hostapd
.add_ap(apdev
[1]['ifname'], params
)
212 run_roams(dev
[0], apdev
, ssid
, passphrase
, sae
=True, over_ds
=True)
214 def test_ap_ft_eap(dev
, apdev
):
217 passphrase
="12345678"
219 radius
= hostapd
.radius_params()
220 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
221 params
['wpa_key_mgmt'] = "FT-EAP"
222 params
["ieee8021x"] = "1"
223 params
= dict(radius
.items() + params
.items())
224 hapd
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
225 key_mgmt
= hapd
.get_config()['key_mgmt']
226 if key_mgmt
.split(' ')[0] != "FT-EAP":
227 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
228 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
229 params
['wpa_key_mgmt'] = "FT-EAP"
230 params
["ieee8021x"] = "1"
231 params
= dict(radius
.items() + params
.items())
232 hostapd
.add_ap(apdev
[1]['ifname'], params
)
234 run_roams(dev
[0], apdev
, ssid
, passphrase
, eap
=True)
236 def test_ap_ft_eap_pull(dev
, apdev
):
237 """WPA2-EAP-FT AP (pull PMK)"""
239 passphrase
="12345678"
241 radius
= hostapd
.radius_params()
242 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
243 params
['wpa_key_mgmt'] = "FT-EAP"
244 params
["ieee8021x"] = "1"
245 params
["pmk_r1_push"] = "0"
246 params
= dict(radius
.items() + params
.items())
247 hapd
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
248 key_mgmt
= hapd
.get_config()['key_mgmt']
249 if key_mgmt
.split(' ')[0] != "FT-EAP":
250 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
251 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
252 params
['wpa_key_mgmt'] = "FT-EAP"
253 params
["ieee8021x"] = "1"
254 params
["pmk_r1_push"] = "0"
255 params
= dict(radius
.items() + params
.items())
256 hostapd
.add_ap(apdev
[1]['ifname'], params
)
258 run_roams(dev
[0], apdev
, ssid
, passphrase
, eap
=True)