From: Jouni Malinen Date: Wed, 6 Apr 2022 17:22:45 +0000 (+0300) Subject: tests: EAP-TLSv1.3 with OCSP stapling X-Git-Tag: hostap_2_11~2101 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7310995d87e2ac597827a69fae7a4f59ce380bb7;p=thirdparty%2Fhostap.git tests: EAP-TLSv1.3 with OCSP stapling Signed-off-by: Jouni Malinen --- diff --git a/tests/hwsim/test_ap_eap.py b/tests/hwsim/test_ap_eap.py index 6ef91a783..810287830 100644 --- a/tests/hwsim/test_ap_eap.py +++ b/tests/hwsim/test_ap_eap.py @@ -5939,15 +5939,25 @@ def test_ap_wpa2_eap_tls_versions_server(dev, apdev): def test_ap_wpa2_eap_tls_13(dev, apdev): """EAP-TLS and TLS 1.3""" + run_ap_wpa2_eap_tls_13(dev, apdev) + +def test_ap_wpa2_eap_tls_13_ocsp(dev, apdev): + """EAP-TLS and TLS 1.3 with OCSP stapling""" + run_ap_wpa2_eap_tls_13(dev, apdev, ocsp=True) + +def run_ap_wpa2_eap_tls_13(dev, apdev, ocsp=False): params = hostapd.wpa2_eap_params(ssid="test-wpa2-eap") hapd = hostapd.add_ap(apdev[0], params) check_tls13_support(dev[0]) + if ocsp: + check_ocsp_support(dev[0]) id = eap_connect(dev[0], hapd, "TLS", "tls user", ca_cert="auth_serv/ca.pem", client_cert="auth_serv/user.pem", private_key="auth_serv/user.key", - phase1="tls_disable_tlsv1_0=1 tls_disable_tlsv1_1=1 tls_disable_tlsv1_2=1 tls_disable_tlsv1_3=0") + phase1="tls_disable_tlsv1_0=1 tls_disable_tlsv1_1=1 tls_disable_tlsv1_2=1 tls_disable_tlsv1_3=0", + ocsp=2 if ocsp else 0) ver = dev[0].get_status_field("eap_tls_version") if ver != "TLSv1.3": raise Exception("Unexpected TLS version")