]>
git.ipfire.org Git - thirdparty/hostap.git/blob - tests/hwsim/test_ap_ft.py
1 # Fast BSS Transition tests
2 # Copyright (c) 2013, Jouni Malinen <j@w1.fi>
4 # This software may be distributed under the terms of the BSD license.
5 # See README for more details.
10 logger
= logging
.getLogger()
14 from wlantest
import Wlantest
15 from test_ap_psk
import check_mib
18 params
= { "wpa": "2",
19 "wpa_key_mgmt": "FT-PSK",
20 "rsn_pairwise": "CCMP" }
24 params
= { "wpa": "3",
25 "wpa_key_mgmt": "WPA-PSK FT-PSK",
26 "wpa_pairwise": "TKIP",
27 "rsn_pairwise": "CCMP" }
30 def ft_params(rsn
=True, ssid
=None, passphrase
=None):
32 params
= ft_base_rsn()
34 params
= ft_base_mixed()
38 params
["wpa_passphrase"] = passphrase
40 params
["mobility_domain"] = "a1b2"
41 params
["r0_key_lifetime"] = "10000"
42 params
["pmk_r1_push"] = "1"
43 params
["reassociation_deadline"] = "1000"
46 def ft_params1(rsn
=True, ssid
=None, passphrase
=None):
47 params
= ft_params(rsn
, ssid
, passphrase
)
48 params
['nas_identifier'] = "nas1.w1.fi"
49 params
['r1_key_holder'] = "000102030405"
50 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f",
51 "02:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f" ]
52 params
['r1kh'] = "02:00:00:00:04:00 00:01:02:03:04:06 200102030405060708090a0b0c0d0e0f"
55 def ft_params2(rsn
=True, ssid
=None, passphrase
=None):
56 params
= ft_params(rsn
, ssid
, passphrase
)
57 params
['nas_identifier'] = "nas2.w1.fi"
58 params
['r1_key_holder'] = "000102030406"
59 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f",
60 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f" ]
61 params
['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0e0f"
64 def ft_params1_r0kh_mismatch(rsn
=True, ssid
=None, passphrase
=None):
65 params
= ft_params(rsn
, ssid
, passphrase
)
66 params
['nas_identifier'] = "nas1.w1.fi"
67 params
['r1_key_holder'] = "000102030405"
68 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f",
69 "12:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f" ]
70 params
['r1kh'] = "12:00:00:00:04:00 10:01:02:03:04:06 200102030405060708090a0b0c0d0e0f"
73 def ft_params2_incorrect_rrb_key(rsn
=True, ssid
=None, passphrase
=None):
74 params
= ft_params(rsn
, ssid
, passphrase
)
75 params
['nas_identifier'] = "nas2.w1.fi"
76 params
['r1_key_holder'] = "000102030406"
77 params
['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0ef1",
78 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0ef2" ]
79 params
['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0ef3"
82 def ft_params2_r0kh_mismatch(rsn
=True, ssid
=None, passphrase
=None):
83 params
= ft_params(rsn
, ssid
, passphrase
)
84 params
['nas_identifier'] = "nas2.w1.fi"
85 params
['r1_key_holder'] = "000102030406"
86 params
['r0kh'] = [ "12:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f",
87 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f" ]
88 params
['r1kh'] = "12:00:00:00:03:00 10:01:02:03:04:05 300102030405060708090a0b0c0d0e0f"
91 def run_roams(dev
, apdev
, ssid
, passphrase
, over_ds
=False, sae
=False, eap
=False, fail_test
=False):
92 logger
.info("Connect to first AP")
94 dev
.connect(ssid
, key_mgmt
="FT-EAP", proto
="WPA2", ieee80211w
="1",
95 eap
="EKE", identity
="eke user", password
="hello")
101 dev
.connect(ssid
, psk
=passphrase
, key_mgmt
=key_mgmt
, proto
="WPA2",
103 if dev
.get_status_field('bssid') == apdev
[0]['bssid']:
109 hwsim_utils
.test_connectivity(dev
.ifname
, ap1
['ifname'])
111 logger
.info("Roam to the second AP")
113 dev
.roam_over_ds(ap2
['bssid'], fail_test
=fail_test
)
115 dev
.roam(ap2
['bssid'], fail_test
=fail_test
)
118 if dev
.get_status_field('bssid') != ap2
['bssid']:
119 raise Exception("Did not connect to correct AP")
120 hwsim_utils
.test_connectivity(dev
.ifname
, ap2
['ifname'])
122 logger
.info("Roam back to the first AP")
124 dev
.roam_over_ds(ap1
['bssid'])
126 dev
.roam(ap1
['bssid'])
127 if dev
.get_status_field('bssid') != ap1
['bssid']:
128 raise Exception("Did not connect to correct AP")
129 hwsim_utils
.test_connectivity(dev
.ifname
, ap1
['ifname'])
131 def test_ap_ft(dev
, apdev
):
134 passphrase
="12345678"
136 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
137 hostapd
.add_ap(apdev
[0]['ifname'], params
)
138 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
139 hostapd
.add_ap(apdev
[1]['ifname'], params
)
141 run_roams(dev
[0], apdev
, ssid
, passphrase
)
143 def test_ap_ft_mixed(dev
, apdev
):
144 """WPA2-PSK-FT mixed-mode AP"""
145 ssid
= "test-ft-mixed"
146 passphrase
="12345678"
148 params
= ft_params1(rsn
=False, ssid
=ssid
, passphrase
=passphrase
)
149 hapd
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
150 key_mgmt
= hapd
.get_config()['key_mgmt']
151 vals
= key_mgmt
.split(' ')
152 if vals
[0] != "WPA-PSK" or vals
[1] != "FT-PSK":
153 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
154 params
= ft_params2(rsn
=False, ssid
=ssid
, passphrase
=passphrase
)
155 hostapd
.add_ap(apdev
[1]['ifname'], params
)
157 run_roams(dev
[0], apdev
, ssid
, passphrase
)
159 def test_ap_ft_pmf(dev
, apdev
):
160 """WPA2-PSK-FT AP with PMF"""
162 passphrase
="12345678"
164 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
165 params
["ieee80211w"] = "2";
166 hostapd
.add_ap(apdev
[0]['ifname'], params
)
167 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
168 params
["ieee80211w"] = "2";
169 hostapd
.add_ap(apdev
[1]['ifname'], params
)
171 run_roams(dev
[0], apdev
, ssid
, passphrase
)
173 def test_ap_ft_over_ds(dev
, apdev
):
174 """WPA2-PSK-FT AP over DS"""
176 passphrase
="12345678"
178 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
179 hostapd
.add_ap(apdev
[0]['ifname'], params
)
180 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
181 hostapd
.add_ap(apdev
[1]['ifname'], params
)
183 run_roams(dev
[0], apdev
, ssid
, passphrase
, over_ds
=True)
184 check_mib(dev
[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-4"),
185 ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-4") ])
187 def test_ap_ft_pmf_over_ds(dev
, apdev
):
188 """WPA2-PSK-FT AP over DS with PMF"""
190 passphrase
="12345678"
192 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
193 params
["ieee80211w"] = "2";
194 hostapd
.add_ap(apdev
[0]['ifname'], params
)
195 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
196 params
["ieee80211w"] = "2";
197 hostapd
.add_ap(apdev
[1]['ifname'], params
)
199 run_roams(dev
[0], apdev
, ssid
, passphrase
, over_ds
=True)
201 def test_ap_ft_over_ds_pull(dev
, apdev
):
202 """WPA2-PSK-FT AP over DS (pull PMK)"""
204 passphrase
="12345678"
206 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
207 params
["pmk_r1_push"] = "0"
208 hostapd
.add_ap(apdev
[0]['ifname'], params
)
209 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
210 params
["pmk_r1_push"] = "0"
211 hostapd
.add_ap(apdev
[1]['ifname'], params
)
213 run_roams(dev
[0], apdev
, ssid
, passphrase
, over_ds
=True)
215 def test_ap_ft_sae(dev
, apdev
):
216 """WPA2-PSK-FT-SAE AP"""
218 passphrase
="12345678"
220 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
221 params
['wpa_key_mgmt'] = "FT-SAE"
222 hostapd
.add_ap(apdev
[0]['ifname'], params
)
223 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
224 params
['wpa_key_mgmt'] = "FT-SAE"
225 hapd
= hostapd
.add_ap(apdev
[1]['ifname'], params
)
226 key_mgmt
= hapd
.get_config()['key_mgmt']
227 if key_mgmt
.split(' ')[0] != "FT-SAE":
228 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
230 run_roams(dev
[0], apdev
, ssid
, passphrase
, sae
=True)
232 def test_ap_ft_sae_over_ds(dev
, apdev
):
233 """WPA2-PSK-FT-SAE AP over DS"""
235 passphrase
="12345678"
237 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
238 params
['wpa_key_mgmt'] = "FT-SAE"
239 hostapd
.add_ap(apdev
[0]['ifname'], params
)
240 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
241 params
['wpa_key_mgmt'] = "FT-SAE"
242 hostapd
.add_ap(apdev
[1]['ifname'], params
)
244 run_roams(dev
[0], apdev
, ssid
, passphrase
, sae
=True, over_ds
=True)
246 def test_ap_ft_eap(dev
, apdev
):
249 passphrase
="12345678"
251 radius
= hostapd
.radius_params()
252 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
253 params
['wpa_key_mgmt'] = "FT-EAP"
254 params
["ieee8021x"] = "1"
255 params
= dict(radius
.items() + params
.items())
256 hapd
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
257 key_mgmt
= hapd
.get_config()['key_mgmt']
258 if key_mgmt
.split(' ')[0] != "FT-EAP":
259 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
260 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
261 params
['wpa_key_mgmt'] = "FT-EAP"
262 params
["ieee8021x"] = "1"
263 params
= dict(radius
.items() + params
.items())
264 hostapd
.add_ap(apdev
[1]['ifname'], params
)
266 run_roams(dev
[0], apdev
, ssid
, passphrase
, eap
=True)
267 check_mib(dev
[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-3"),
268 ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-3") ])
270 def test_ap_ft_eap_pull(dev
, apdev
):
271 """WPA2-EAP-FT AP (pull PMK)"""
273 passphrase
="12345678"
275 radius
= hostapd
.radius_params()
276 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
277 params
['wpa_key_mgmt'] = "FT-EAP"
278 params
["ieee8021x"] = "1"
279 params
["pmk_r1_push"] = "0"
280 params
= dict(radius
.items() + params
.items())
281 hapd
= hostapd
.add_ap(apdev
[0]['ifname'], params
)
282 key_mgmt
= hapd
.get_config()['key_mgmt']
283 if key_mgmt
.split(' ')[0] != "FT-EAP":
284 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt
)
285 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
286 params
['wpa_key_mgmt'] = "FT-EAP"
287 params
["ieee8021x"] = "1"
288 params
["pmk_r1_push"] = "0"
289 params
= dict(radius
.items() + params
.items())
290 hostapd
.add_ap(apdev
[1]['ifname'], params
)
292 run_roams(dev
[0], apdev
, ssid
, passphrase
, eap
=True)
294 def test_ap_ft_mismatching_rrb_key_push(dev
, apdev
):
295 """WPA2-PSK-FT AP over DS with mismatching RRB key (push)"""
297 passphrase
="12345678"
299 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
300 params
["ieee80211w"] = "2";
301 hostapd
.add_ap(apdev
[0]['ifname'], params
)
302 params
= ft_params2_incorrect_rrb_key(ssid
=ssid
, passphrase
=passphrase
)
303 params
["ieee80211w"] = "2";
304 hostapd
.add_ap(apdev
[1]['ifname'], params
)
306 run_roams(dev
[0], apdev
, ssid
, passphrase
, over_ds
=True, fail_test
=True)
308 def test_ap_ft_mismatching_rrb_key_pull(dev
, apdev
):
309 """WPA2-PSK-FT AP over DS with mismatching RRB key (pull)"""
311 passphrase
="12345678"
313 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
314 params
["pmk_r1_push"] = "0"
315 hostapd
.add_ap(apdev
[0]['ifname'], params
)
316 params
= ft_params2_incorrect_rrb_key(ssid
=ssid
, passphrase
=passphrase
)
317 params
["pmk_r1_push"] = "0"
318 hostapd
.add_ap(apdev
[1]['ifname'], params
)
320 run_roams(dev
[0], apdev
, ssid
, passphrase
, over_ds
=True, fail_test
=True)
322 def test_ap_ft_mismatching_rrb_r0kh_push(dev
, apdev
):
323 """WPA2-PSK-FT AP over DS with mismatching R0KH key (push)"""
325 passphrase
="12345678"
327 params
= ft_params1(ssid
=ssid
, passphrase
=passphrase
)
328 params
["ieee80211w"] = "2";
329 hostapd
.add_ap(apdev
[0]['ifname'], params
)
330 params
= ft_params2_r0kh_mismatch(ssid
=ssid
, passphrase
=passphrase
)
331 params
["ieee80211w"] = "2";
332 hostapd
.add_ap(apdev
[1]['ifname'], params
)
334 run_roams(dev
[0], apdev
, ssid
, passphrase
, over_ds
=True, fail_test
=True)
336 def test_ap_ft_mismatching_rrb_r0kh_pull(dev
, apdev
):
337 """WPA2-PSK-FT AP over DS with mismatching R0KH key (pull)"""
339 passphrase
="12345678"
341 params
= ft_params1_r0kh_mismatch(ssid
=ssid
, passphrase
=passphrase
)
342 params
["pmk_r1_push"] = "0"
343 hostapd
.add_ap(apdev
[0]['ifname'], params
)
344 params
= ft_params2(ssid
=ssid
, passphrase
=passphrase
)
345 params
["pmk_r1_push"] = "0"
346 hostapd
.add_ap(apdev
[1]['ifname'], params
)
348 run_roams(dev
[0], apdev
, ssid
, passphrase
, over_ds
=True, fail_test
=True)