277 lines
10 KiB
Python
277 lines
10 KiB
Python
# Test cases for Device Provisioning Protocol (DPP) version 3
|
|
# Copyright (c) 2021-2022, Qualcomm Innovation Center, Inc.
|
|
#
|
|
# This software may be distributed under the terms of the BSD license.
|
|
# See README for more details.
|
|
|
|
import binascii
|
|
import os
|
|
import time
|
|
|
|
import hostapd
|
|
from wlantest import WlantestCapture
|
|
from test_dpp import check_dpp_capab, run_dpp_auto_connect, wait_auth_success, update_hapd_config
|
|
from utils import *
|
|
|
|
def test_dpp_network_intro_version(dev, apdev):
|
|
"""DPP Network Introduction and protocol version"""
|
|
check_dpp_capab(dev[0], min_ver=3)
|
|
|
|
try:
|
|
id, hapd = run_dpp_auto_connect(dev, apdev, 1, stop_after_prov=True)
|
|
dev[0].select_network(id, freq=2412)
|
|
dev[0].wait_connected()
|
|
finally:
|
|
dev[0].set("dpp_config_processing", "0", allow_fail=True)
|
|
|
|
def test_dpp_network_intro_version_change(dev, apdev):
|
|
"""DPP Network Introduction and protocol version change"""
|
|
check_dpp_capab(dev[0], min_ver=3)
|
|
|
|
try:
|
|
dev[0].set("dpp_version_override", "2")
|
|
id, hapd = run_dpp_auto_connect(dev, apdev, 1, stop_after_prov=True)
|
|
dev[0].set("dpp_version_override", "3")
|
|
dev[0].select_network(id, freq=2412)
|
|
dev[0].wait_connected()
|
|
finally:
|
|
dev[0].set("dpp_config_processing", "0", allow_fail=True)
|
|
|
|
def test_dpp_network_intro_version_missing_req(dev, apdev):
|
|
"""DPP Network Introduction and protocol version missing from request"""
|
|
check_dpp_capab(dev[0], min_ver=3)
|
|
|
|
try:
|
|
dev[0].set("dpp_version_override", "2")
|
|
id, hapd = run_dpp_auto_connect(dev, apdev, 1, stop_after_prov=True)
|
|
dev[0].set("dpp_version_override", "3")
|
|
dev[0].set("dpp_test", "92")
|
|
dev[0].select_network(id, freq=2412)
|
|
ev = dev[0].wait_event(["DPP-INTRO"], timeout=10)
|
|
if ev is None:
|
|
raise Exception("DPP network introduction result not seen on STA")
|
|
if "status=8" not in ev:
|
|
raise Exception("Unexpected network introduction result on STA: " + ev)
|
|
finally:
|
|
dev[0].set("dpp_config_processing", "0", allow_fail=True)
|
|
|
|
def run_dpp_tcp_pkex(dev0, dev1, cap_lo, sae=False, status=False):
|
|
check_dpp_capab(dev0, min_ver=3)
|
|
check_dpp_capab(dev1, min_ver=3)
|
|
|
|
wt = WlantestCapture('lo', cap_lo)
|
|
time.sleep(1)
|
|
|
|
# Controller
|
|
if sae:
|
|
ssid = binascii.hexlify("sae".encode()).decode()
|
|
password = binascii.hexlify("sae-password".encode()).decode()
|
|
val = "conf=sta-sae ssid=%s pass=%s" % (ssid, password)
|
|
if status:
|
|
val += " conn_status=1"
|
|
dev1.set("dpp_configurator_params", val)
|
|
else:
|
|
conf_id = dev1.dpp_configurator_add()
|
|
dev1.set("dpp_configurator_params",
|
|
"conf=sta-dpp configurator=%d" % conf_id)
|
|
|
|
req = "DPP_CONTROLLER_START"
|
|
own = None
|
|
if "OK" not in dev1.request(req):
|
|
raise Exception("Failed to start Controller")
|
|
|
|
code = "secret"
|
|
|
|
id1 = dev1.dpp_bootstrap_gen(type="pkex")
|
|
cmd = "own=%d" % id1
|
|
cmd += " code=%s" % code
|
|
res = dev1.request("DPP_PKEX_ADD " + cmd)
|
|
if "FAIL" in res:
|
|
raise Exception("Failed to set PKEX data (responder)")
|
|
|
|
dev0.dpp_pkex_init(identifier=None, code=code, role="enrollee",
|
|
tcp_addr="127.0.0.1")
|
|
|
|
res = wait_auth_success(dev1, dev0, configurator=dev1, enrollee=dev0,
|
|
allow_enrollee_failure=True,
|
|
allow_configurator_failure=True)
|
|
if status:
|
|
if 'wait_conn_status' not in res or not res['wait_conn_status']:
|
|
raise Exception("wait_conn_status not reported")
|
|
|
|
time.sleep(0.5)
|
|
wt.close()
|
|
|
|
def test_dpp_tcp_pkex(dev, apdev, params):
|
|
"""DPP/PKEXv2 over TCP"""
|
|
prefix = "dpp_tcp_pkex"
|
|
cap_lo = os.path.join(params['logdir'], prefix + ".lo.pcap")
|
|
try:
|
|
run_dpp_tcp_pkex(dev[0], dev[1], cap_lo)
|
|
finally:
|
|
dev[1].request("DPP_CONTROLLER_STOP")
|
|
|
|
def run_dpp_tcp_pkex_auto_connect_2(dev, apdev, params, status, start_ap=True):
|
|
check_sae_capab(dev[0])
|
|
dev[0].set("sae_groups", "")
|
|
|
|
cap_lo = params['prefix'] + ".lo.pcap"
|
|
|
|
params = {"ssid": "sae",
|
|
"wpa": "2",
|
|
"wpa_key_mgmt": "SAE",
|
|
"ieee80211w": "2",
|
|
"rsn_pairwise": "CCMP",
|
|
"sae_password": "sae-password"}
|
|
if start_ap:
|
|
hapd = hostapd.add_ap(apdev[0], params)
|
|
try:
|
|
dev[0].set("dpp_config_processing", "2")
|
|
run_dpp_tcp_pkex(dev[0], dev[1], cap_lo, sae=True, status=status)
|
|
if start_ap:
|
|
dev[0].wait_connected()
|
|
if status:
|
|
ev = dev[1].wait_event(["DPP-CONN-STATUS-RESULT"], timeout=16)
|
|
if ev is None:
|
|
raise Exception("Connection status resutl not reported")
|
|
if start_ap and "result=0" not in ev:
|
|
raise Exception("Unexpected result in success case: " + ev)
|
|
if (not start_ap) and "result=10" not in ev:
|
|
raise Exception("Unexpected result in failure case: " + ev)
|
|
if "ssid=sae " not in ev:
|
|
raise Exception("Missing SSID: " + ssid)
|
|
finally:
|
|
dev[0].set("dpp_config_processing", "0", allow_fail=True)
|
|
dev[1].request("DPP_CONTROLLER_STOP")
|
|
|
|
def test_dpp_tcp_pkex_auto_connect_2(dev, apdev, params):
|
|
"""DPP/PKEXv2 over TCP and automatic connection"""
|
|
run_dpp_tcp_pkex_auto_connect_2(dev, apdev, params, False)
|
|
|
|
def test_dpp_tcp_pkex_auto_connect_2_status(dev, apdev, params):
|
|
"""DPP/PKEXv2 over TCP and automatic connection status"""
|
|
run_dpp_tcp_pkex_auto_connect_2(dev, apdev, params, True)
|
|
|
|
def test_dpp_tcp_pkex_auto_connect_2_status_fail(dev, apdev, params):
|
|
"""DPP/PKEXv2 over TCP and automatic connection status for failure"""
|
|
run_dpp_tcp_pkex_auto_connect_2(dev, apdev, params, True, start_ap=False)
|
|
|
|
def test_dpp_tcp_pkex_while_associated(dev, apdev, params):
|
|
"""DPP/PKEXv2 over TCP while associated"""
|
|
try:
|
|
run_dpp_tcp_pkex_while_associated(dev, apdev, params, False)
|
|
finally:
|
|
dev[1].request("DPP_CONTROLLER_STOP")
|
|
dev[0].set("dpp_config_processing", "0", allow_fail=True)
|
|
|
|
def test_dpp_tcp_pkex_while_associated_conn_status(dev, apdev, params):
|
|
"""DPP/PKEXv2 over TCP while associated (conn status)"""
|
|
try:
|
|
run_dpp_tcp_pkex_while_associated(dev, apdev, params, True)
|
|
finally:
|
|
dev[1].request("DPP_CONTROLLER_STOP")
|
|
dev[0].set("dpp_config_processing", "0", allow_fail=True)
|
|
|
|
def run_dpp_tcp_pkex_while_associated(dev, apdev, params, status):
|
|
check_sae_capab(dev[0])
|
|
cap_lo = params['prefix'] + ".lo.pcap"
|
|
|
|
params = {"ssid": "current",
|
|
"wpa": "2",
|
|
"wpa_key_mgmt": "SAE",
|
|
"ieee80211w": "2",
|
|
"rsn_pairwise": "CCMP",
|
|
"sae_password": "password"}
|
|
hapd = hostapd.add_ap(apdev[0], params)
|
|
|
|
params = {"ssid": "sae",
|
|
"wpa": "2",
|
|
"wpa_key_mgmt": "SAE",
|
|
"ieee80211w": "2",
|
|
"rsn_pairwise": "CCMP",
|
|
"sae_password": "sae-password"}
|
|
hapd2 = hostapd.add_ap(apdev[1], params)
|
|
|
|
dev[0].set("dpp_config_processing", "2")
|
|
dev[0].set("sae_groups", "")
|
|
dev[0].connect("current", psk="password", key_mgmt="SAE", ieee80211w="2",
|
|
scan_freq="2412")
|
|
run_dpp_tcp_pkex(dev[0], dev[1], cap_lo, sae=True, status=status)
|
|
if status:
|
|
ev = dev[1].wait_event(["DPP-CONN-STATUS-RESULT"], timeout=16)
|
|
if ev is None:
|
|
raise Exception("Connection status result not reported")
|
|
if "result=0" not in ev:
|
|
raise Exception("Unexpected result in success case: " + ev)
|
|
dev[0].wait_connected(timeout=30)
|
|
|
|
def test_dpp_controller_relay_pkex(dev, apdev, params):
|
|
"""DPP Controller/Relay with PKEX"""
|
|
try:
|
|
run_dpp_controller_relay_pkex(dev, apdev, params)
|
|
finally:
|
|
dev[0].set("dpp_config_processing", "0", allow_fail=True)
|
|
dev[1].request("DPP_CONTROLLER_STOP")
|
|
|
|
def run_dpp_controller_relay_pkex(dev, apdev, params):
|
|
check_dpp_capab(dev[0], min_ver=3)
|
|
check_dpp_capab(dev[1], min_ver=3)
|
|
prefix = "dpp_controller_relay_pkex"
|
|
cap_lo = os.path.join(params['logdir'], prefix + ".lo.pcap")
|
|
|
|
wt = WlantestCapture('lo', cap_lo)
|
|
|
|
# Controller
|
|
conf_id = dev[1].dpp_configurator_add()
|
|
dev[1].set("dpp_configurator_params",
|
|
"conf=sta-dpp configurator=%d" % conf_id)
|
|
id_c = dev[1].dpp_bootstrap_gen()
|
|
res = dev[1].request("DPP_BOOTSTRAP_INFO %d" % id_c)
|
|
pkhash = None
|
|
for line in res.splitlines():
|
|
name, value = line.split('=')
|
|
if name == "pkhash":
|
|
pkhash = value
|
|
break
|
|
if not pkhash:
|
|
raise Exception("Could not fetch public key hash from Controller")
|
|
if "OK" not in dev[1].request("DPP_CONTROLLER_START"):
|
|
raise Exception("Failed to start Controller")
|
|
|
|
# Relay
|
|
params = {"ssid": "unconfigured",
|
|
"channel": "6",
|
|
"dpp_controller": "ipaddr=127.0.0.1 pkhash=" + pkhash}
|
|
relay = hostapd.add_ap(apdev[1], params)
|
|
check_dpp_capab(relay)
|
|
|
|
# Enroll Relay to the network
|
|
id_h = relay.dpp_bootstrap_gen(chan="81/6", mac=True)
|
|
uri_r = relay.request("DPP_BOOTSTRAP_GET_URI %d" % id_h)
|
|
dev[1].dpp_auth_init(uri=uri_r, conf="ap-dpp", configurator=conf_id)
|
|
wait_auth_success(relay, dev[1], configurator=dev[1], enrollee=relay)
|
|
update_hapd_config(relay)
|
|
|
|
code = "secret"
|
|
id1 = dev[1].dpp_bootstrap_gen(type="pkex")
|
|
cmd = "own=%d" % id1
|
|
cmd += " code=%s" % code
|
|
res = dev[1].request("DPP_PKEX_ADD " + cmd)
|
|
if "FAIL" in res:
|
|
raise Exception("Failed to set PKEX data (Controller)")
|
|
|
|
# Initiate PKEX from Enrollee
|
|
dev[0].set("dpp_config_processing", "2")
|
|
dev[0].dpp_pkex_init(identifier=None, code=code, role="enrollee")
|
|
wait_auth_success(dev[1], dev[0], configurator=dev[1], enrollee=dev[0],
|
|
allow_enrollee_failure=True,
|
|
allow_configurator_failure=True)
|
|
ev = dev[0].wait_event(["DPP-NETWORK-ID"], timeout=1)
|
|
if ev is None:
|
|
raise Exception("DPP network id not reported")
|
|
network = int(ev.split(' ')[1])
|
|
dev[0].wait_connected()
|
|
dev[0].dump_monitor()
|
|
|
|
time.sleep(0.5)
|
|
wt.close()
|