1172 lines
43 KiB
Python
1172 lines
43 KiB
Python
# wpa_supplicant AP mode tests
|
|
# Copyright (c) 2014, Qualcomm Atheros, Inc.
|
|
#
|
|
# This software may be distributed under the terms of the BSD license.
|
|
# See README for more details.
|
|
|
|
import hostapd
|
|
from remotehost import remote_compatible
|
|
import time
|
|
import logging
|
|
logger = logging.getLogger()
|
|
|
|
import hwsim_utils
|
|
from utils import *
|
|
from wpasupplicant import WpaSupplicant
|
|
from test_p2p_channel import set_country
|
|
from test_ap_psk import find_wpas_process, read_process_memory, verify_not_present, get_key_locations
|
|
|
|
def wait_ap_ready(dev):
|
|
ev = dev.wait_event(["CTRL-EVENT-CONNECTED"])
|
|
if ev is None:
|
|
raise Exception("AP failed to start")
|
|
|
|
def log_channel_info(dev):
|
|
gen = dev.get_status_field('wifi_generation')
|
|
if gen:
|
|
logger.info("Wi-Fi Generation: " + gen)
|
|
sig = dev.request("SIGNAL_POLL").splitlines()
|
|
logger.info(sig)
|
|
|
|
def test_wpas_ap_open(dev):
|
|
"""wpa_supplicant AP mode - open network"""
|
|
if "FAIL" not in dev[0].request("DEAUTHENTICATE 00:11:22:33:44:55"):
|
|
raise Exception("Unexpected DEAUTHENTICATE accepted")
|
|
if "FAIL" not in dev[0].request("DISASSOCIATE 00:11:22:33:44:55"):
|
|
raise Exception("Unexpected DISASSOCIATE accepted")
|
|
if "FAIL" not in dev[0].request("CHAN_SWITCH 0 2432"):
|
|
raise Exception("Unexpected CHAN_SWITCH accepted")
|
|
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
|
|
if "FAIL" not in dev[0].request("DEAUTHENTICATE foo"):
|
|
raise Exception("Invalid DEAUTHENTICATE accepted")
|
|
if "FAIL" not in dev[0].request("DISASSOCIATE foo"):
|
|
raise Exception("Invalid DISASSOCIATE accepted")
|
|
|
|
dev[1].connect("wpas-ap-open", key_mgmt="NONE", scan_freq="2412")
|
|
dev[2].connect("wpas-ap-open", key_mgmt="NONE", scan_freq="2412")
|
|
hwsim_utils.test_connectivity(dev[0], dev[1])
|
|
hwsim_utils.test_connectivity(dev[1], dev[2])
|
|
|
|
addr1 = dev[1].p2p_interface_addr()
|
|
addr2 = dev[2].p2p_interface_addr()
|
|
addrs = [addr1, addr2]
|
|
sta = dev[0].get_sta(None)
|
|
if sta['addr'] not in addrs:
|
|
raise Exception("Unexpected STA address")
|
|
sta1 = dev[0].get_sta(sta['addr'])
|
|
if sta1['addr'] not in addrs:
|
|
raise Exception("Unexpected STA address")
|
|
sta2 = dev[0].get_sta(sta['addr'], next=True)
|
|
if sta2['addr'] not in addrs:
|
|
raise Exception("Unexpected STA2 address")
|
|
sta3 = dev[0].get_sta(sta2['addr'], next=True)
|
|
if len(sta3) != 0:
|
|
raise Exception("Unexpected STA iteration result (did not stop)")
|
|
|
|
status = dev[0].get_status()
|
|
if status['mode'] != "AP":
|
|
raise Exception("Unexpected status mode")
|
|
|
|
dev[1].dump_monitor()
|
|
dev[2].dump_monitor()
|
|
dev[0].request("DEAUTHENTICATE " + addr1)
|
|
dev[0].request("DISASSOCIATE " + addr2)
|
|
dev[1].wait_disconnected(timeout=10)
|
|
dev[2].wait_disconnected(timeout=10)
|
|
dev[1].wait_connected(timeout=10, error="Reconnection timed out")
|
|
dev[2].wait_connected(timeout=10, error="Reconnection timed out")
|
|
dev[1].request("DISCONNECT")
|
|
dev[2].request("DISCONNECT")
|
|
|
|
def test_wpas_ap_open_isolate(dev):
|
|
"""wpa_supplicant AP mode - open network with client isolation"""
|
|
try:
|
|
dev[0].set("ap_isolate", "1")
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
|
|
dev[1].connect("wpas-ap-open", key_mgmt="NONE", scan_freq="2412")
|
|
dev[2].connect("wpas-ap-open", key_mgmt="NONE", scan_freq="2412")
|
|
hwsim_utils.test_connectivity(dev[0], dev[1])
|
|
hwsim_utils.test_connectivity(dev[0], dev[2])
|
|
hwsim_utils.test_connectivity(dev[1], dev[2], success_expected=False,
|
|
timeout=1)
|
|
finally:
|
|
dev[0].set("ap_isolate", "0")
|
|
|
|
@remote_compatible
|
|
def test_wpas_ap_wep(dev):
|
|
"""wpa_supplicant AP mode - WEP"""
|
|
check_wep_capa(dev[0])
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-wep")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].set_network_quoted(id, "wep_key0", "hello")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
|
|
dev[1].connect("wpas-ap-wep", key_mgmt="NONE", wep_key0='"hello"',
|
|
scan_freq="2412")
|
|
hwsim_utils.test_connectivity(dev[0], dev[1])
|
|
dev[1].request("DISCONNECT")
|
|
|
|
@remote_compatible
|
|
def test_wpas_ap_no_ssid(dev):
|
|
"""wpa_supplicant AP mode - invalid network configuration"""
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].select_network(id)
|
|
ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED"], timeout=1)
|
|
if ev is not None:
|
|
raise Exception("Unexpected AP start")
|
|
|
|
@remote_compatible
|
|
def test_wpas_ap_default_frequency(dev):
|
|
"""wpa_supplicant AP mode - default frequency"""
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
dev[1].connect("wpas-ap-open", key_mgmt="NONE", scan_freq="2462")
|
|
dev[1].request("DISCONNECT")
|
|
|
|
@remote_compatible
|
|
def test_wpas_ap_invalid_frequency(dev):
|
|
"""wpa_supplicant AP mode - invalid frequency configuration"""
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "2413")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].select_network(id)
|
|
ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED"], timeout=1)
|
|
if ev is not None:
|
|
raise Exception("Unexpected AP start")
|
|
|
|
def test_wpas_ap_wps(dev):
|
|
"""wpa_supplicant AP mode - WPS operations"""
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-wps")
|
|
dev[0].set_network_quoted(id, "psk", "1234567890")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
bssid = dev[0].p2p_interface_addr()
|
|
|
|
logger.info("Test PBC mode start/stop")
|
|
if "FAIL" not in dev[0].request("WPS_CANCEL"):
|
|
raise Exception("Unexpected WPS_CANCEL success")
|
|
dev[0].request("WPS_PBC")
|
|
ev = dev[0].wait_event(["WPS-PBC-ACTIVE"])
|
|
if ev is None:
|
|
raise Exception("PBC mode start timeout")
|
|
if "OK" not in dev[0].request("WPS_CANCEL"):
|
|
raise Exception("Unexpected WPS_CANCEL failure")
|
|
ev = dev[0].wait_event(["WPS-TIMEOUT"])
|
|
if ev is None:
|
|
raise Exception("PBC mode disabling timeout")
|
|
|
|
logger.info("Test PBC protocol run")
|
|
dev[0].request("WPS_PBC")
|
|
ev = dev[0].wait_event(["WPS-PBC-ACTIVE"])
|
|
if ev is None:
|
|
raise Exception("PBC mode start timeout")
|
|
dev[1].request("WPS_PBC")
|
|
dev[1].wait_connected(timeout=30, error="WPS PBC operation timed out")
|
|
hwsim_utils.test_connectivity(dev[0], dev[1])
|
|
|
|
logger.info("Test AP PIN to learn configuration")
|
|
pin = dev[0].request("WPS_AP_PIN random")
|
|
if "FAIL" in pin:
|
|
raise Exception("Could not generate random AP PIN")
|
|
if pin not in dev[0].request("WPS_AP_PIN get"):
|
|
raise Exception("Could not fetch current AP PIN")
|
|
dev[2].wps_reg(bssid, pin)
|
|
hwsim_utils.test_connectivity(dev[1], dev[2])
|
|
|
|
dev[1].request("REMOVE_NETWORK all")
|
|
dev[2].request("REMOVE_NETWORK all")
|
|
|
|
logger.info("Test AP PIN operations")
|
|
dev[0].request("WPS_AP_PIN disable")
|
|
dev[0].request("WPS_AP_PIN set " + pin + " 1")
|
|
time.sleep(1.1)
|
|
if "FAIL" not in dev[0].request("WPS_AP_PIN get"):
|
|
raise Exception("AP PIN unexpectedly still enabled")
|
|
|
|
pin = dev[1].wps_read_pin()
|
|
dev[0].request("WPS_PIN any " + pin)
|
|
dev[1].request("WPS_PIN any " + pin)
|
|
dev[1].wait_connected(timeout=30)
|
|
dev[1].request("REMOVE_NETWORK all")
|
|
dev[1].dump_monitor()
|
|
|
|
dev[0].request("WPS_PIN any " + pin + " 100")
|
|
dev[1].request("WPS_PIN any " + pin)
|
|
dev[1].wait_connected(timeout=30)
|
|
dev[1].request("REMOVE_NETWORK all")
|
|
dev[1].dump_monitor()
|
|
|
|
dev[0].request("WPS_AP_PIN set 12345670")
|
|
dev[0].dump_monitor()
|
|
|
|
runs = ("88887777", "12340000", "00000000", "12345670")
|
|
for pin in runs:
|
|
logger.info("Try AP PIN " + pin)
|
|
dev[2].dump_monitor()
|
|
dev[2].request("WPS_REG " + bssid + " " + pin)
|
|
ev = dev[2].wait_event(["WPS-SUCCESS", "WPS-FAIL msg"], timeout=15)
|
|
if ev is None:
|
|
raise Exception("WPS operation timed out")
|
|
if "WPS-SUCCESS" in ev:
|
|
raise Exception("WPS operation succeeded unexpectedly")
|
|
dev[2].wait_disconnected(timeout=10)
|
|
dev[2].request("WPS_CANCEL")
|
|
dev[2].request("REMOVE_NETWORK all")
|
|
ev = dev[0].wait_event(["WPS-AP-SETUP-LOCKED"])
|
|
if ev is None:
|
|
raise Exception("WPS AP PIN not locked")
|
|
|
|
dev[0].dump_monitor()
|
|
logger.info("Test random AP PIN timeout")
|
|
pin = dev[0].request("WPS_AP_PIN random 1")
|
|
if "FAIL" in pin:
|
|
raise Exception("Could not generate random AP PIN")
|
|
res = dev[0].request("WPS_AP_PIN get")
|
|
if pin not in res:
|
|
raise Exception("Could not fetch current AP PIN")
|
|
for i in range(10):
|
|
time.sleep(0.2)
|
|
res = dev[0].request("WPS_AP_PIN get")
|
|
if "FAIL" in res:
|
|
break
|
|
if "FAIL" not in res:
|
|
raise Exception("WPS_AP_PIN random timeout did not work")
|
|
|
|
if "FAIL" not in dev[0].request("WPS_AP_PIN foo"):
|
|
raise Exception("Invalid WPS_AP_PIN command not rejected")
|
|
if "FAIL" not in dev[0].request("WPS_AP_PIN set"):
|
|
raise Exception("Invalid WPS_AP_PIN command not rejected")
|
|
|
|
def test_wpas_ap_wps_frag(dev):
|
|
"""wpa_supplicant AP mode - WPS operations with fragmentation"""
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-wps")
|
|
dev[0].set_network_quoted(id, "psk", "1234567890")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].set_network(id, "fragment_size", "300")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
bssid = dev[0].own_addr()
|
|
|
|
pin = dev[1].wps_read_pin()
|
|
dev[0].request("WPS_PIN any " + pin)
|
|
dev[1].scan_for_bss(bssid, freq="2412")
|
|
dev[1].request("WPS_PIN " + bssid + " " + pin)
|
|
dev[1].wait_connected(timeout=30)
|
|
|
|
def test_wpas_ap_wps_pbc_overlap(dev):
|
|
"""wpa_supplicant AP mode - WPS operations with PBC overlap"""
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-wps")
|
|
dev[0].set_network_quoted(id, "psk", "1234567890")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
bssid = dev[0].p2p_interface_addr()
|
|
|
|
dev[1].scan_for_bss(bssid, freq="2412")
|
|
dev[1].dump_monitor()
|
|
dev[2].scan_for_bss(bssid, freq="2412")
|
|
dev[2].dump_monitor()
|
|
dev[0].request("WPS_PBC")
|
|
dev[1].request("WPS_PBC " + bssid)
|
|
dev[2].request("WPS_PBC " + bssid)
|
|
|
|
ev = dev[1].wait_event(["WPS-M2D"], timeout=15)
|
|
if ev is None:
|
|
raise Exception("PBC session overlap not detected (dev1)")
|
|
if "config_error=12" not in ev:
|
|
raise Exception("PBC session overlap not correctly reported (dev1)")
|
|
|
|
ev = dev[2].wait_event(["WPS-M2D"], timeout=15)
|
|
if ev is None:
|
|
raise Exception("PBC session overlap not detected (dev2)")
|
|
if "config_error=12" not in ev:
|
|
raise Exception("PBC session overlap not correctly reported (dev2)")
|
|
|
|
if "FAIL-PBC-OVERLAP" not in dev[0].request("WPS_PBC"):
|
|
raise Exception("WPS_PBC(AP) accepted during overlap")
|
|
if "FAIL-PBC-OVERLAP" not in dev[0].request("WPS_PBC any"):
|
|
raise Exception("WPS_PBC(AP) accepted during overlap")
|
|
dev[0].request("WPS_CANCEL")
|
|
dev[1].request("WPS_CANCEL")
|
|
dev[2].request("WPS_CANCEL")
|
|
|
|
@remote_compatible
|
|
def test_wpas_ap_wps_disabled(dev):
|
|
"""wpa_supplicant AP mode - WPS disabled"""
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-no-wps")
|
|
dev[0].set_network_quoted(id, "psk", "12345678")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].set_network(id, "wps_disabled", "1")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
|
|
dev[1].connect("wpas-ap-no-wps", psk="12345678", scan_freq="2412")
|
|
dev[1].request("DISCONNECT")
|
|
dev[1].wait_disconnected()
|
|
|
|
def test_wpas_ap_dfs(dev):
|
|
"""wpa_supplicant AP mode - DFS"""
|
|
if dev[0].get_mcc() > 1:
|
|
raise HwsimSkip("DFS is not supported with multi channel contexts")
|
|
|
|
try:
|
|
_test_wpas_ap_dfs(dev)
|
|
finally:
|
|
set_country("00")
|
|
dev[0].request("SET country 00")
|
|
dev[1].flush_scan_cache()
|
|
|
|
def _test_wpas_ap_dfs(dev):
|
|
set_country("US")
|
|
dev[0].request("SET country US")
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-dfs")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "5260")
|
|
dev[0].set_network(id, "scan_freq", "5260")
|
|
dev[0].select_network(id)
|
|
|
|
ev = dev[0].wait_event(["DFS-CAC-START"])
|
|
if ev is None:
|
|
# For now, assume DFS is not supported by all kernel builds.
|
|
raise HwsimSkip("CAC did not start - assume not supported")
|
|
|
|
ev = dev[0].wait_event(["DFS-CAC-COMPLETED"], timeout=70)
|
|
if ev is None:
|
|
raise Exception("CAC did not complete")
|
|
if "success=1" not in ev:
|
|
raise Exception("CAC failed")
|
|
if "freq=5260" not in ev:
|
|
raise Exception("Unexpected DFS freq result")
|
|
|
|
ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED"])
|
|
if ev is None:
|
|
raise Exception("AP failed to start")
|
|
|
|
dev[1].connect("wpas-ap-dfs", key_mgmt="NONE")
|
|
dev[1].wait_regdom(country_ie=True)
|
|
dev[0].request("DISCONNECT")
|
|
dev[1].disconnect_and_stop_scan()
|
|
|
|
@remote_compatible
|
|
def test_wpas_ap_disable(dev):
|
|
"""wpa_supplicant AP mode - DISABLE_NETWORK"""
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].select_network(id)
|
|
|
|
ev = dev[0].wait_event(["AP-ENABLED"])
|
|
if ev is None:
|
|
raise Exception("AP-ENABLED event not seen")
|
|
wait_ap_ready(dev[0])
|
|
dev[0].request("DISABLE_NETWORK %d" % id)
|
|
ev = dev[0].wait_event(["AP-DISABLED"])
|
|
if ev is None:
|
|
raise Exception("AP-DISABLED event not seen")
|
|
dev[0].wait_disconnected()
|
|
|
|
def test_wpas_ap_acs(dev):
|
|
"""wpa_supplicant AP mode - ACS"""
|
|
res = dev[0].get_capability("acs")
|
|
if res is None or "ACS" not in res:
|
|
raise HwsimSkip("ACS not supported")
|
|
|
|
# For now, make sure the last operating channel was on 2.4 GHz band to get
|
|
# sufficient survey data from mac80211_hwsim.
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
dev[0].request("REMOVE_NETWORK all")
|
|
dev[0].wait_disconnected()
|
|
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "2417")
|
|
dev[0].set_network(id, "scan_freq", "2417")
|
|
dev[0].set_network(id, "acs", "1")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
|
|
# ACS prefers channels 1, 6, 11
|
|
freq = dev[0].get_status_field('freq')
|
|
if freq == "2417":
|
|
raise Exception("Unexpected operating channel selected")
|
|
|
|
dev[1].connect("wpas-ap-open", key_mgmt="NONE", scan_freq=freq)
|
|
|
|
@remote_compatible
|
|
def test_wpas_ap_and_assoc_req_p2p_ie(dev):
|
|
"""wpa_supplicant AP mode - unexpected P2P IE in Association Request"""
|
|
try:
|
|
_test_wpas_ap_and_assoc_req_p2p_ie(dev)
|
|
finally:
|
|
dev[1].request("VENDOR_ELEM_REMOVE 13 *")
|
|
dev[0].request("P2P_SET disabled 0")
|
|
|
|
def _test_wpas_ap_and_assoc_req_p2p_ie(dev):
|
|
dev[0].request("P2P_SET disabled 1")
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
|
|
dev[1].request("VENDOR_ELEM_ADD 13 dd04506f9a09")
|
|
dev[1].connect("wpas-ap-open", key_mgmt="NONE", scan_freq="2412")
|
|
dev[1].request("DISCONNECT")
|
|
dev[1].wait_disconnected()
|
|
|
|
dev[0].request("DISCONNECT")
|
|
dev[0].wait_disconnected()
|
|
|
|
@remote_compatible
|
|
def test_wpas_ap_open_ht_disabled(dev):
|
|
"""wpa_supplicant AP mode - open network and HT disabled"""
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].set_network(id, "disable_ht", "1")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
|
|
dev[1].connect("wpas-ap-open", key_mgmt="NONE", scan_freq="2412")
|
|
hwsim_utils.test_connectivity(dev[0], dev[1])
|
|
|
|
def test_wpas_ap_failures(dev):
|
|
"""wpa_supplicant AP mode - failures"""
|
|
# No SSID configured for AP mode
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].select_network(id)
|
|
ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED"], timeout=0.1)
|
|
if ev is not None:
|
|
raise Exception("Unexpected connection event")
|
|
dev[0].request("REMOVE_NETWORK all")
|
|
|
|
# Invalid pbss value(2) for AP mode
|
|
dev[0].dump_monitor()
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].set_network(id, "pbss", "2")
|
|
dev[0].select_network(id)
|
|
ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED",
|
|
"CTRL-EVENT-DISCONNECTED"], timeout=0.1)
|
|
if ev is not None and "CTRL-EVENT-CONNECTED" in ev:
|
|
raise Exception("Unexpected connection event(2)")
|
|
dev[0].request("REMOVE_NETWORK all")
|
|
|
|
def test_wpas_ap_oom(dev):
|
|
"""wpa_supplicant AP mode - OOM"""
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap")
|
|
dev[0].set_network_quoted(id, "psk", "1234567890")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
with alloc_fail(dev[0], 1, "=wpa_supplicant_conf_ap"):
|
|
dev[0].select_network(id)
|
|
dev[0].wait_disconnected()
|
|
dev[0].request("REMOVE_NETWORK all")
|
|
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap")
|
|
dev[0].set_network(id, "psk", "1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
with alloc_fail(dev[0], 1, "=wpa_supplicant_conf_ap"):
|
|
dev[0].select_network(id)
|
|
dev[0].wait_disconnected()
|
|
dev[0].request("REMOVE_NETWORK all")
|
|
|
|
if "WEP40" in dev[0].get_capability("group"):
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network_quoted(id, "wep_key0", "hello")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
with alloc_fail(dev[0], 1, "=wpa_supplicant_conf_ap"):
|
|
dev[0].select_network(id)
|
|
dev[0].wait_disconnected()
|
|
dev[0].request("REMOVE_NETWORK all")
|
|
|
|
wpas = WpaSupplicant(global_iface='/tmp/wpas-wlan5')
|
|
wpas.interface_add("wlan5")
|
|
wpas.request("SET manufacturer test")
|
|
wpas.request("SET model_name test")
|
|
wpas.request("SET model_number test")
|
|
wpas.request("SET serial_number test")
|
|
wpas.request("SET serial_number test")
|
|
wpas.request("SET serial_number test")
|
|
wpas.request("SET ap_vendor_elements dd0411223301")
|
|
id = wpas.add_network()
|
|
wpas.set_network(id, "mode", "2")
|
|
wpas.set_network_quoted(id, "ssid", "wpas-ap")
|
|
wpas.set_network(id, "key_mgmt", "NONE")
|
|
wpas.set_network(id, "frequency", "2412")
|
|
wpas.set_network(id, "scan_freq", "2412")
|
|
|
|
for i in range(5):
|
|
with alloc_fail(wpas, i, "=wpa_supplicant_conf_ap"):
|
|
wpas.select_network(id)
|
|
ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED",
|
|
"CTRL-EVENT-DISCONNECTED"], timeout=1)
|
|
wpas.request("DISCONNECT")
|
|
wpas.wait_disconnected()
|
|
|
|
def test_wpas_ap_params(dev):
|
|
"""wpa_supplicant AP mode - parameters"""
|
|
wpas = WpaSupplicant(global_iface='/tmp/wpas-wlan5')
|
|
wpas.interface_add("wlan5")
|
|
wpas.request("SET manufacturer test")
|
|
wpas.request("SET model_name test")
|
|
wpas.request("SET model_number test")
|
|
wpas.request("SET serial_number test")
|
|
wpas.request("SET serial_number test")
|
|
wpas.request("SET serial_number test")
|
|
wpas.request("SET ap_vendor_elements dd0411223301")
|
|
id = wpas.add_network()
|
|
wpas.set_network(id, "mode", "2")
|
|
wpas.set_network_quoted(id, "ssid", "wpas-ap")
|
|
wpas.set_network(id, "key_mgmt", "NONE")
|
|
wpas.set_network(id, "frequency", "2412")
|
|
wpas.set_network(id, "scan_freq", "2412")
|
|
wpas.select_network(id)
|
|
wpas.wait_connected()
|
|
wpas.request("DISCONNECT")
|
|
wpas.wait_disconnected()
|
|
|
|
wpas.request("SET beacon_int 200 3")
|
|
wpas.request("SET dtim_period 3")
|
|
wpas.select_network(id)
|
|
wpas.wait_connected()
|
|
wpas.request("DISCONNECT")
|
|
wpas.wait_disconnected()
|
|
|
|
wpas.set_network(id, "beacon_int", "300")
|
|
wpas.set_network(id, "dtim_period", "2")
|
|
wpas.select_network(id)
|
|
wpas.wait_connected()
|
|
if "---- AP ----" not in wpas.request("PMKSA"):
|
|
raise Exception("AP section missing from PMKSA output")
|
|
if "OK" not in wpas.request("PMKSA_FLUSH"):
|
|
raise Exception("PMKSA_FLUSH failed")
|
|
wpas.request("DISCONNECT")
|
|
wpas.wait_disconnected()
|
|
|
|
def test_wpas_ap_global_sta(dev):
|
|
"""wpa_supplicant AP mode - STA commands on global control interface"""
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
|
|
dev[1].connect("wpas-ap-open", key_mgmt="NONE", scan_freq="2412")
|
|
|
|
addr1 = dev[1].own_addr()
|
|
res = dev[0].global_request("STA " + addr1)
|
|
if "UNKNOWN COMMAND" in res:
|
|
raise Exception("STA command not known on global control interface")
|
|
res = dev[0].global_request("STA-FIRST")
|
|
if "UNKNOWN COMMAND" in res:
|
|
raise Exception("STA-FIRST command not known on global control interface")
|
|
res = dev[0].global_request("STA-NEXT " + addr1)
|
|
if "UNKNOWN COMMAND" in res:
|
|
raise Exception("STA-NEXT command not known on global control interface")
|
|
dev[1].request("DISCONNECT")
|
|
dev[1].wait_disconnected()
|
|
dev[0].request("DISCONNECT")
|
|
dev[0].wait_disconnected()
|
|
|
|
def test_wpas_ap_5ghz(dev):
|
|
"""wpa_supplicant AP mode - 5 GHz"""
|
|
try:
|
|
_test_wpas_ap_5ghz(dev)
|
|
finally:
|
|
set_country("00")
|
|
dev[0].request("SET country 00")
|
|
dev[1].flush_scan_cache()
|
|
|
|
def _test_wpas_ap_5ghz(dev):
|
|
set_country("US")
|
|
dev[0].request("SET country US")
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-5ghz")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "5180")
|
|
dev[0].set_network(id, "scan_freq", "5180")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
|
|
dev[1].connect("wpas-ap-5ghz", key_mgmt="NONE", scan_freq="5180")
|
|
log_channel_info(dev[1])
|
|
dev[1].request("DISCONNECT")
|
|
dev[1].wait_disconnected()
|
|
|
|
def test_wpas_ap_open_ht40(dev):
|
|
"""wpa_supplicant AP mode - HT 40 MHz"""
|
|
id = dev[0].add_network()
|
|
dev[0].set("country", "FI")
|
|
try:
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "5180")
|
|
dev[0].set_network(id, "scan_freq", "5180")
|
|
dev[0].set_network(id, "ht40", "1")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
|
|
dev[1].connect("wpas-ap-open", key_mgmt="NONE", scan_freq="5180")
|
|
log_channel_info(dev[1])
|
|
sig = dev[1].request("SIGNAL_POLL").splitlines()
|
|
hwsim_utils.test_connectivity(dev[0], dev[1])
|
|
dev[1].request("DISCONNECT")
|
|
dev[1].wait_disconnected()
|
|
if "FREQUENCY=5180" not in sig:
|
|
raise Exception("Unexpected SIGNAL_POLL value(1): " + str(sig))
|
|
if "WIDTH=40 MHz" not in sig:
|
|
raise Exception("Unexpected SIGNAL_POLL value(2): " + str(sig))
|
|
finally:
|
|
set_country("00")
|
|
dev[0].set("country", "00")
|
|
dev[1].flush_scan_cache()
|
|
|
|
def test_wpas_ap_open_vht80(dev):
|
|
"""wpa_supplicant AP mode - VHT 80 MHz"""
|
|
id = dev[0].add_network()
|
|
dev[0].set("country", "FI")
|
|
try:
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "5180")
|
|
dev[0].set_network(id, "scan_freq", "5180")
|
|
dev[0].set_network(id, "vht", "1")
|
|
dev[0].set_network(id, "vht_center_freq1", "5210")
|
|
dev[0].set_network(id, "max_oper_chwidth", "1")
|
|
dev[0].set_network(id, "ht40", "1")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
|
|
dev[1].connect("wpas-ap-open", key_mgmt="NONE", scan_freq="5180")
|
|
log_channel_info(dev[1])
|
|
sig = dev[1].request("SIGNAL_POLL").splitlines()
|
|
hwsim_utils.test_connectivity(dev[0], dev[1])
|
|
dev[1].request("DISCONNECT")
|
|
dev[1].wait_disconnected()
|
|
if "FREQUENCY=5180" not in sig:
|
|
raise Exception("Unexpected SIGNAL_POLL value(1): " + str(sig))
|
|
if "WIDTH=80 MHz" not in sig:
|
|
raise Exception("Unexpected SIGNAL_POLL value(2): " + str(sig))
|
|
finally:
|
|
set_country("00")
|
|
dev[0].set("country", "00")
|
|
dev[1].flush_scan_cache()
|
|
|
|
def test_wpas_ap_open_vht80_us(dev):
|
|
"""wpa_supplicant AP mode - VHT 80 MHz (US)"""
|
|
id = dev[0].add_network()
|
|
dev[0].set("country", "US")
|
|
try:
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "5745")
|
|
dev[0].set_network(id, "scan_freq", "5745")
|
|
dev[0].set_network(id, "vht", "1")
|
|
dev[0].set_network(id, "vht_center_freq1", "5775")
|
|
dev[0].set_network(id, "max_oper_chwidth", "1")
|
|
dev[0].set_network(id, "ht40", "1")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
|
|
dev[1].connect("wpas-ap-open", key_mgmt="NONE", scan_freq="5745")
|
|
log_channel_info(dev[1])
|
|
sig = dev[1].request("SIGNAL_POLL").splitlines()
|
|
hwsim_utils.test_connectivity(dev[0], dev[1])
|
|
dev[1].request("DISCONNECT")
|
|
dev[1].wait_disconnected()
|
|
if "FREQUENCY=5745" not in sig:
|
|
raise Exception("Unexpected SIGNAL_POLL value(1): " + str(sig))
|
|
if "WIDTH=80 MHz" not in sig:
|
|
raise Exception("Unexpected SIGNAL_POLL value(2): " + str(sig))
|
|
finally:
|
|
set_country("00")
|
|
dev[0].set("country", "00")
|
|
dev[1].flush_scan_cache()
|
|
|
|
def test_wpas_ap_no_ht(dev):
|
|
"""wpa_supplicant AP mode - HT disabled"""
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].set_network(id, "ht", "0")
|
|
dev[0].set_network(id, "wps_disabled", "1")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
dev[1].connect("wpas-ap-open", key_mgmt="NONE", scan_freq="2412")
|
|
sig = dev[1].request("SIGNAL_POLL").splitlines()
|
|
dev[1].request("DISCONNECT")
|
|
dev[1].wait_disconnected()
|
|
dev[0].request("REMOVE_NETWORK all")
|
|
dev[0].wait_disconnected()
|
|
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].set_network(id, "wps_disabled", "1")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
dev[1].flush_scan_cache()
|
|
dev[1].connect("wpas-ap-open", key_mgmt="NONE", scan_freq="2412")
|
|
sig2 = dev[1].request("SIGNAL_POLL").splitlines()
|
|
dev[1].request("DISCONNECT")
|
|
dev[1].wait_disconnected()
|
|
dev[0].request("REMOVE_NETWORK all")
|
|
dev[0].wait_disconnected()
|
|
|
|
if "WIDTH=20 MHz (no HT)" not in sig:
|
|
raise Exception("HT was not disabled: " + str(sig))
|
|
if "WIDTH=20 MHz" not in sig2:
|
|
raise Exception("HT was not enabled: " + str(sig2))
|
|
|
|
def test_wpas_ap_async_fail(dev):
|
|
"""wpa_supplicant AP mode - Async failure"""
|
|
id = dev[0].add_network()
|
|
dev[0].set("country", "FI")
|
|
try:
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "5180")
|
|
dev[0].set_network(id, "scan_freq", "5180")
|
|
dev[0].set_network(id, "vht", "1")
|
|
dev[0].set_network(id, "vht_center_freq1", "5210")
|
|
dev[0].set_network(id, "max_oper_chwidth", "1")
|
|
dev[0].set_network(id, "ht40", "1")
|
|
|
|
with alloc_fail(dev[0], 1,
|
|
"nl80211_get_scan_results;ieee80211n_check_scan"):
|
|
dev[0].select_network(id)
|
|
dev[0].wait_disconnected()
|
|
finally:
|
|
dev[0].set("country", "00")
|
|
clear_regdom_dev(dev)
|
|
|
|
def test_wpas_ap_sae(dev):
|
|
"""wpa_supplicant AP mode - SAE using psk"""
|
|
run_wpas_ap_sae(dev, False)
|
|
|
|
def test_wpas_ap_sae_pmf1(dev):
|
|
"""wpa_supplicant AP mode - SAE using psk and pmf=1"""
|
|
try:
|
|
dev[0].set("pmf", "1")
|
|
run_wpas_ap_sae(dev, False, pmf=2)
|
|
finally:
|
|
dev[0].set("pmf", "0")
|
|
|
|
def test_wpas_ap_sae_pmf2(dev):
|
|
"""wpa_supplicant AP mode - SAE using psk and pmf=2"""
|
|
try:
|
|
dev[0].set("pmf", "2")
|
|
run_wpas_ap_sae(dev, False, pmf=1)
|
|
finally:
|
|
dev[0].set("pmf", "0")
|
|
|
|
def test_wpas_ap_sae_password(dev):
|
|
"""wpa_supplicant AP mode - SAE using sae_password"""
|
|
run_wpas_ap_sae(dev, True)
|
|
|
|
def test_wpas_ap_sae_pwe_1(dev):
|
|
"""wpa_supplicant AP mode - SAE using sae_password and sae_pwe=1"""
|
|
try:
|
|
dev[0].set("sae_pwe", "1")
|
|
dev[1].set("sae_pwe", "1")
|
|
run_wpas_ap_sae(dev, True, sae_password_id=True)
|
|
finally:
|
|
dev[0].set("sae_pwe", "0")
|
|
dev[1].set("sae_pwe", "0")
|
|
|
|
def run_wpas_ap_sae(dev, sae_password, sae_password_id=False, pmf=0):
|
|
check_sae_capab(dev[0])
|
|
check_sae_capab(dev[1])
|
|
dev[0].request("SET sae_groups ")
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-sae")
|
|
dev[0].set_network(id, "proto", "WPA2")
|
|
dev[0].set_network(id, "key_mgmt", "SAE")
|
|
dev[0].set_network(id, "pairwise", "CCMP")
|
|
dev[0].set_network(id, "group", "CCMP")
|
|
if sae_password:
|
|
dev[0].set_network_quoted(id, "sae_password", "12345678")
|
|
else:
|
|
dev[0].set_network_quoted(id, "psk", "12345678")
|
|
if sae_password_id:
|
|
pw_id = "pw id"
|
|
dev[0].set_network_quoted(id, "sae_password_id", pw_id)
|
|
else:
|
|
pw_id = None
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].set_network(id, "wps_disabled", "1")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
|
|
dev[1].request("SET sae_groups ")
|
|
dev[1].connect("wpas-ap-sae", key_mgmt="SAE", sae_password="12345678",
|
|
sae_password_id=pw_id, scan_freq="2412", ieee80211w=str(pmf))
|
|
|
|
def test_wpas_ap_scan(dev, apdev):
|
|
"""wpa_supplicant AP mode and scanning"""
|
|
dev[0].flush_scan_cache()
|
|
|
|
hapd = hostapd.add_ap(apdev[0], {"ssid": "open"})
|
|
bssid = hapd.own_addr()
|
|
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
dev[0].dump_monitor()
|
|
|
|
if "OK" not in dev[0].request("SCAN freq=2412"):
|
|
raise Exception("SCAN command not accepted")
|
|
ev = dev[0].wait_event(["CTRL-EVENT-SCAN-RESULTS",
|
|
"CTRL-EVENT-SCAN-FAILED"], 15)
|
|
if ev is None:
|
|
raise Exception("Scan result timed out")
|
|
if "CTRL-EVENT-SCAN-FAILED ret=-95" in ev:
|
|
# Scanning in AP mode not supported
|
|
return
|
|
if "CTRL-EVENT-SCAN-FAILED" in ev:
|
|
raise Exception("Unexpected scan failure reason: " + ev)
|
|
if "CTRL-EVENT-SCAN-RESULTS" in ev:
|
|
bss = dev[0].get_bss(bssid)
|
|
if not bss:
|
|
raise Exception("AP not found in scan")
|
|
|
|
def test_wpas_ap_sae(dev):
|
|
"""wpa_supplicant AP mode - SAE using psk"""
|
|
run_wpas_ap_sae(dev, False)
|
|
|
|
def test_wpas_ap_sae_and_psk_transition_disable(dev):
|
|
"""wpa_supplicant AP mode - SAE+PSK transition disable indication"""
|
|
check_sae_capab(dev[0])
|
|
check_sae_capab(dev[1])
|
|
dev[0].set("sae_groups", "")
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-sae")
|
|
dev[0].set_network(id, "proto", "WPA2")
|
|
dev[0].set_network(id, "key_mgmt", "SAE")
|
|
dev[0].set_network(id, "transition_disable", "1")
|
|
dev[0].set_network(id, "ieee80211w", "1")
|
|
dev[0].set_network(id, "pairwise", "CCMP")
|
|
dev[0].set_network(id, "group", "CCMP")
|
|
dev[0].set_network_quoted(id, "psk", "12345678")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].set_network(id, "wps_disabled", "1")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
|
|
dev[1].set("sae_groups", "")
|
|
dev[1].connect("wpas-ap-sae", key_mgmt="SAE WPA-PSK",
|
|
psk="12345678", ieee80211w="1",
|
|
scan_freq="2412")
|
|
ev = dev[1].wait_event(["TRANSITION-DISABLE"], timeout=1)
|
|
if ev is None:
|
|
raise Exception("Transition disable not indicated")
|
|
if ev.split(' ')[1] != "01":
|
|
raise Exception("Unexpected transition disable bitmap: " + ev)
|
|
|
|
val = dev[1].get_network(id, "ieee80211w")
|
|
if val != "2":
|
|
raise Exception("Unexpected ieee80211w value: " + val)
|
|
val = dev[1].get_network(id, "key_mgmt")
|
|
if val != "SAE":
|
|
raise Exception("Unexpected key_mgmt value: " + val)
|
|
val = dev[1].get_network(id, "group")
|
|
if val != "CCMP":
|
|
raise Exception("Unexpected group value: " + val)
|
|
val = dev[1].get_network(id, "proto")
|
|
if val != "RSN":
|
|
raise Exception("Unexpected proto value: " + val)
|
|
|
|
dev[1].request("DISCONNECT")
|
|
dev[1].wait_disconnected()
|
|
dev[1].request("RECONNECT")
|
|
dev[1].wait_connected()
|
|
|
|
def test_wpas_ap_vendor_elems(dev):
|
|
"""wpa_supplicant AP mode - vendor elements"""
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
|
|
try:
|
|
beacon_elems = "dd0411223301"
|
|
dev[0].set("ap_vendor_elements", beacon_elems)
|
|
dev[0].set("ap_assocresp_elements", "dd0411223302")
|
|
if "OK" not in dev[0].request("UPDATE_BEACON"):
|
|
raise Exception("UPDATE_BEACON failed")
|
|
|
|
dev[1].connect("wpas-ap-open", key_mgmt="NONE", scan_freq="2412")
|
|
bss = dev[1].get_bss(dev[0].own_addr())
|
|
if beacon_elems not in bss['ie']:
|
|
raise Exception("Vendor element not visible in scan results")
|
|
finally:
|
|
dev[0].set("ap_vendor_elements", "")
|
|
dev[0].set("ap_assocresp_elements", "")
|
|
|
|
def test_wpas_ap_lifetime_in_memory(dev, apdev, params):
|
|
"""wpa_supplicant AP mode and PSK/PTK lifetime in memory"""
|
|
run_wpas_ap_lifetime_in_memory(dev, apdev, params, False)
|
|
|
|
def test_wpas_ap_lifetime_in_memory2(dev, apdev, params):
|
|
"""wpa_supplicant AP mode and PSK/PTK lifetime in memory (raw PSK)"""
|
|
run_wpas_ap_lifetime_in_memory(dev, apdev, params, True)
|
|
|
|
def run_wpas_ap_lifetime_in_memory(dev, apdev, params, raw):
|
|
ssid = "test-wpa2-psk"
|
|
passphrase = 'qwertyuiop'
|
|
psk = '602e323e077bc63bd80307ef4745b754b0ae0a925c2638ecd13a794b9527b9e6'
|
|
pmk = binascii.unhexlify(psk)
|
|
|
|
pid = find_wpas_process(dev[0])
|
|
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", ssid)
|
|
dev[0].set_network(id, "proto", "WPA2")
|
|
dev[0].set_network(id, "pairwise", "CCMP")
|
|
dev[0].set_network(id, "group", "CCMP")
|
|
if raw:
|
|
dev[0].set_network(id, "psk", psk)
|
|
else:
|
|
dev[0].set_network_quoted(id, "psk", passphrase)
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
|
|
logger.info("Checking keys in memory after network profile configuration")
|
|
buf = read_process_memory(pid, pmk)
|
|
get_key_locations(buf, pmk, "PMK")
|
|
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
|
|
logger.info("Checking keys in memory after AP start")
|
|
buf = read_process_memory(pid, pmk)
|
|
get_key_locations(buf, pmk, "PMK")
|
|
|
|
dev[1].connect(ssid, psk=passphrase, scan_freq="2412")
|
|
|
|
buf = read_process_memory(pid, pmk)
|
|
|
|
dev[1].request("DISCONNECT")
|
|
dev[1].wait_disconnected()
|
|
|
|
buf2 = read_process_memory(pid, pmk)
|
|
|
|
dev[0].request("REMOVE_NETWORK all")
|
|
dev[0].wait_disconnected()
|
|
|
|
buf3 = read_process_memory(pid, pmk)
|
|
|
|
dev[1].relog()
|
|
ptk = None
|
|
gtk = None
|
|
with open(os.path.join(params['logdir'], 'log1'), 'r') as f:
|
|
for l in f.readlines():
|
|
if "WPA: PTK - hexdump" in l:
|
|
val = l.strip().split(':')[3].replace(' ', '')
|
|
ptk = binascii.unhexlify(val)
|
|
if "WPA: Group Key - hexdump" in l:
|
|
val = l.strip().split(':')[3].replace(' ', '')
|
|
gtk = binascii.unhexlify(val)
|
|
if not pmk or not ptk or not gtk:
|
|
raise Exception("Could not find keys from debug log")
|
|
if len(gtk) != 16:
|
|
raise Exception("Unexpected GTK length")
|
|
|
|
kck = ptk[0:16]
|
|
kek = ptk[16:32]
|
|
tk = ptk[32:48]
|
|
|
|
logger.info("Checking keys in memory while associated")
|
|
get_key_locations(buf, pmk, "PMK")
|
|
if pmk not in buf:
|
|
raise HwsimSkip("PMK not found while associated")
|
|
if kck not in buf:
|
|
raise Exception("KCK not found while associated")
|
|
if kek not in buf:
|
|
raise Exception("KEK not found while associated")
|
|
#if tk in buf:
|
|
# raise Exception("TK found from memory")
|
|
|
|
logger.info("Checking keys in memory after disassociation")
|
|
get_key_locations(buf2, pmk, "PMK")
|
|
|
|
# Note: PMK/PSK is still present in network configuration and GTK is still
|
|
# in use.
|
|
|
|
fname = params['prefix'] + '.memctx-'
|
|
verify_not_present(buf2, kck, fname, "KCK")
|
|
verify_not_present(buf2, kek, fname, "KEK")
|
|
verify_not_present(buf2, tk, fname, "TK")
|
|
get_key_locations(buf2, gtk, "GTK")
|
|
|
|
logger.info("Checking keys in memory after network profile removal")
|
|
get_key_locations(buf3, pmk, "PMK")
|
|
|
|
verify_not_present(buf3, pmk, fname, "PMK")
|
|
verify_not_present(buf3, kck, fname, "KCK")
|
|
verify_not_present(buf3, kek, fname, "KEK")
|
|
verify_not_present(buf3, tk, fname, "TK")
|
|
get_key_locations(buf3, gtk, "GTK")
|
|
verify_not_present(buf3, gtk, fname, "GTK")
|
|
|
|
def check_acl(dev, num_accept, num_deny):
|
|
accept = dev.request("ACCEPT_ACL SHOW").splitlines()
|
|
logger.info("accept entries: " + str(accept))
|
|
if len(accept) != num_accept:
|
|
raise Exception("Unexpected number of accept entries")
|
|
deny = dev.request("DENY_ACL SHOW").splitlines()
|
|
logger.info("deny entries: " + str(deny))
|
|
if len(deny) != num_deny:
|
|
raise Exception("Unexpected number of deny entries")
|
|
|
|
def test_wpas_ap_acl_mgmt(dev):
|
|
"""wpa_supplicant AP mode - ACL management"""
|
|
id = dev[0].add_network()
|
|
dev[0].set_network(id, "mode", "2")
|
|
dev[0].set_network_quoted(id, "ssid", "wpas-ap-open")
|
|
dev[0].set_network(id, "key_mgmt", "NONE")
|
|
dev[0].set_network(id, "frequency", "2412")
|
|
dev[0].set_network(id, "scan_freq", "2412")
|
|
dev[0].select_network(id)
|
|
wait_ap_ready(dev[0])
|
|
|
|
addr1 = dev[1].own_addr()
|
|
addr2 = dev[2].own_addr()
|
|
|
|
check_acl(dev[0], 0, 0)
|
|
if "OK" not in dev[0].request("ACCEPT_ACL ADD_MAC " + addr1):
|
|
raise Exception("ACCEPT_ACL ADD_MAC failed")
|
|
check_acl(dev[0], 1, 0)
|
|
|
|
dev[2].connect("wpas-ap-open", key_mgmt="NONE", scan_freq="2412",
|
|
wait_connect=False)
|
|
dev[1].connect("wpas-ap-open", key_mgmt="NONE", scan_freq="2412")
|
|
ev = dev[2].wait_event(["CTRL-EVENT-CONNECTED"], timeout=2)
|
|
if ev:
|
|
raise Exception("Unexpected connection")
|
|
dev[2].request("DISCONNECT")
|
|
|
|
if "OK" not in dev[0].request("DENY_ACL ADD_MAC " + addr1):
|
|
raise Exception("DENY_ACL ADD_MAC failed")
|
|
dev[1].wait_disconnected()
|
|
dev[1].request("DISCONNECT")
|
|
|
|
check_acl(dev[0], 1, 1)
|
|
if "OK" not in dev[0].request("ACCEPT_ACL CLEAR"):
|
|
raise Exception("Failed to clear accept ACL")
|
|
check_acl(dev[0], 0, 1)
|
|
if "OK" not in dev[0].request("DENY_ACL CLEAR"):
|
|
raise Exception("Failed to clear deny ACL")
|
|
check_acl(dev[0], 0, 0)
|