tests: EAP-TLS and unknown OCSP signer
Signed-off-by: Jouni Malinen <j@w1.fi>
This commit is contained in:
parent
d2a1047e67
commit
df7ad0fa11
1 changed files with 25 additions and 0 deletions
|
@ -2460,6 +2460,31 @@ def test_ap_wpa2_eap_tls_ocsp_invalid(dev, apdev):
|
||||||
if ev is None:
|
if ev is None:
|
||||||
raise Exception("Timeout on EAP failure report")
|
raise Exception("Timeout on EAP failure report")
|
||||||
|
|
||||||
|
def test_ap_wpa2_eap_tls_ocsp_unknown_sign(dev, apdev):
|
||||||
|
"""WPA2-Enterprise connection using EAP-TLS and unknown OCSP signer"""
|
||||||
|
params = int_eap_server_params()
|
||||||
|
params["ocsp_stapling_response"] = "auth_serv/ocsp-server-cache.der-unknown-sign"
|
||||||
|
hostapd.add_ap(apdev[0]['ifname'], params)
|
||||||
|
dev[0].connect("test-wpa2-eap", key_mgmt="WPA-EAP", eap="TLS",
|
||||||
|
identity="tls user", ca_cert="auth_serv/ca.pem",
|
||||||
|
private_key="auth_serv/user.pkcs12",
|
||||||
|
private_key_passwd="whatever", ocsp=2,
|
||||||
|
wait_connect=False, scan_freq="2412")
|
||||||
|
count = 0
|
||||||
|
while True:
|
||||||
|
ev = dev[0].wait_event(["CTRL-EVENT-EAP-STATUS"])
|
||||||
|
if ev is None:
|
||||||
|
raise Exception("Timeout on EAP status")
|
||||||
|
if 'bad certificate status response' in ev:
|
||||||
|
break
|
||||||
|
count = count + 1
|
||||||
|
if count > 10:
|
||||||
|
raise Exception("Unexpected number of EAP status messages")
|
||||||
|
|
||||||
|
ev = dev[0].wait_event(["CTRL-EVENT-EAP-FAILURE"])
|
||||||
|
if ev is None:
|
||||||
|
raise Exception("Timeout on EAP failure report")
|
||||||
|
|
||||||
def test_ap_wpa2_eap_ttls_ocsp_revoked(dev, apdev, params):
|
def test_ap_wpa2_eap_ttls_ocsp_revoked(dev, apdev, params):
|
||||||
"""WPA2-Enterprise connection using EAP-TTLS and OCSP status revoked"""
|
"""WPA2-Enterprise connection using EAP-TTLS and OCSP status revoked"""
|
||||||
ocsp = os.path.join(params['logdir'], "ocsp-server-cache-revoked.der")
|
ocsp = os.path.join(params['logdir'], "ocsp-server-cache-revoked.der")
|
||||||
|
|
Loading…
Reference in a new issue