def run_dpp_tcp_pkex_while_associated(dev, apdev, params, status):
check_dpp_capab(dev[0], min_ver=3)
check_sae_capab(dev[0])
cap_lo = params['prefix'] + ".lo.pcap"
params = {"ssid": "current",
"wpa": "2",
"wpa_key_mgmt": "SAE",
"ieee80211w": "2",
"rsn_pairwise": "CCMP",
"sae_password": "******"}
hapd = hostapd.add_ap(apdev[0], params)
params = {"ssid": "sae",
"wpa": "2",
"wpa_key_mgmt": "SAE",
"ieee80211w": "2",
"rsn_pairwise": "CCMP",
"sae_password": "******"}
hapd2 = hostapd.add_ap(apdev[1], params)
dev[0].set("dpp_config_processing", "2")
dev[0].set("sae_groups", "")
dev[0].connect("current", psk="password", key_mgmt="SAE", ieee80211w="2",
scan_freq="2412")
run_dpp_tcp_pkex(dev[0], dev[1], cap_lo, sae=True, status=status)
if status:
ev = dev[1].wait_event(["DPP-CONN-STATUS-RESULT"], timeout=16)
if ev is None:
raise Exception("Connection status result not reported")
if "result=0" not in ev:
raise Exception("Unexpected result in success case: " + ev)
dev[0].wait_connected(timeout=30)
def run_dpp_tcp_pkex_auto_connect_2(dev, apdev, params, status, start_ap=True):
check_dpp_capab(dev[0], min_ver=3)
check_sae_capab(dev[0])
dev[0].set("sae_groups", "")
cap_lo = params['prefix'] + ".lo.pcap"
params = {"ssid": "sae",
"wpa": "2",
"wpa_key_mgmt": "SAE",
"ieee80211w": "2",
"rsn_pairwise": "CCMP",
"sae_password": "******"}
if start_ap:
hapd = hostapd.add_ap(apdev[0], params)
try:
dev[0].set("dpp_config_processing", "2")
run_dpp_tcp_pkex(dev[0], dev[1], cap_lo, sae=True, status=status)
if start_ap:
dev[0].wait_connected()
if status:
ev = dev[1].wait_event(["DPP-CONN-STATUS-RESULT"], timeout=16)
if ev is None:
raise Exception("Connection status resutl not reported")
if start_ap and "result=0" not in ev:
raise Exception("Unexpected result in success case: " + ev)
if (not start_ap) and "result=10" not in ev:
raise Exception("Unexpected result in failure case: " + ev)
if "ssid=sae " not in ev:
raise Exception("Missing SSID: " + ssid)
finally:
dev[0].set("dpp_config_processing", "0", allow_fail=True)
dev[1].request("DPP_CONTROLLER_STOP")
def test_dpp_network_intro_version(dev, apdev):
"""DPP Network Introduction and protocol version"""
check_dpp_capab(dev[0], min_ver=3)
try:
id, hapd = run_dpp_auto_connect(dev, apdev, 1, stop_after_prov=True)
dev[0].select_network(id, freq=2412)
dev[0].wait_connected()
finally:
dev[0].set("dpp_config_processing", "0", allow_fail=True)
def run_dpp_tcp_pkex(dev0, dev1, cap_lo, sae=False, status=False):
check_dpp_capab(dev0, min_ver=3)
check_dpp_capab(dev1, min_ver=3)
wt = WlantestCapture('lo', cap_lo)
time.sleep(1)
# Controller
if sae:
ssid = binascii.hexlify("sae".encode()).decode()
password = binascii.hexlify("sae-password".encode()).decode()
val = "conf=sta-sae ssid=%s pass=%s" % (ssid, password)
if status:
val += " conn_status=1"
dev1.set("dpp_configurator_params", val)
else:
conf_id = dev1.dpp_configurator_add()
dev1.set("dpp_configurator_params",
"conf=sta-dpp configurator=%d" % conf_id)
req = "DPP_CONTROLLER_START"
own = None
if "OK" not in dev1.request(req):
raise Exception("Failed to start Controller")
code = "secret"
id1 = dev1.dpp_bootstrap_gen(type="pkex")
cmd = "own=%d" % id1
cmd += " code=%s" % code
res = dev1.request("DPP_PKEX_ADD " + cmd)
if "FAIL" in res:
raise Exception("Failed to set PKEX data (responder)")
dev0.dpp_pkex_init(identifier=None,
code=code,
role="enrollee",
tcp_addr="127.0.0.1")
res = wait_auth_success(dev1,
dev0,
configurator=dev1,
enrollee=dev0,
allow_enrollee_failure=True,
allow_configurator_failure=True)
if status:
if 'wait_conn_status' not in res or not res['wait_conn_status']:
raise Exception("wait_conn_status not reported")
time.sleep(0.5)
wt.close()
def test_dpp_network_intro_version_missing_req(dev, apdev):
"""DPP Network Introduction and protocol version missing from request"""
check_dpp_capab(dev[0], min_ver=3)
try:
dev[0].set("dpp_version_override", "2")
id, hapd = run_dpp_auto_connect(dev, apdev, 1, stop_after_prov=True)
dev[0].set("dpp_version_override", "3")
dev[0].set("dpp_test", "92")
dev[0].select_network(id, freq=2412)
ev = dev[0].wait_event(["DPP-INTRO"], timeout=10)
if ev is None:
raise Exception("DPP network introduction result not seen on STA")
if "status=8" not in ev:
raise Exception("Unexpected network introduction result on STA: " + ev)
finally:
dev[0].set("dpp_config_processing", "0", allow_fail=True)
def test_wpas_config_file_key_mgmt(dev, apdev, params):
"""wpa_supplicant config file writing and key_mgmt values"""
config = os.path.join(params['logdir'], 'wpas_config_file_key_mgmt.conf')
if os.path.exists(config):
os.remove(config)
wpas = WpaSupplicant(global_iface='/tmp/wpas-wlan5')
with open(config, "w") as f:
f.write("update_config=1\n")
wpas.interface_add("wlan5", config=config)
from test_dpp import params1_csign, params1_sta_connector, params1_sta_netaccesskey, check_dpp_capab
check_dpp_capab(wpas)
id = wpas.add_network()
wpas.set_network_quoted(id, "ssid", "foo")
wpas.set_network(id, "key_mgmt", "DPP")
wpas.set_network(id, "ieee80211w", "2")
wpas.set_network_quoted(id, "dpp_csign", params1_csign)
wpas.set_network_quoted(id, "dpp_connector", params1_sta_connector)
wpas.set_network_quoted(id, "dpp_netaccesskey", params1_sta_netaccesskey)
if "OK" not in wpas.request("SAVE_CONFIG"):
raise Exception("Failed to save configuration file")
with open(config, "r") as f:
data = f.read()
logger.info("Configuration file contents: " + data)
if "key_mgmt=DPP" not in data:
raise Exception("Missing key_mgmt")
if 'dpp_connector="' + params1_sta_connector + '"' not in data:
raise Exception("Missing dpp_connector")
if 'dpp_netaccesskey="' + params1_sta_netaccesskey + '"' not in data:
raise Exception("Missing dpp_netaccesskey")
if 'dpp_csign="' + params1_csign + '"' not in data:
raise Exception("Missing dpp_csign")
wpas.set_network(id, "dpp_csign", "NULL")
wpas.set_network(id, "dpp_connector", "NULL")
wpas.set_network(id, "dpp_netaccesskey", "NULL")
wpas.set_network_quoted(id, "psk", "12345678")
wpas.set_network(id, "ieee80211w", "0")
tests = [
"WPA-PSK", "WPA-EAP", "IEEE8021X", "NONE", "WPA-NONE", "FT-PSK",
"FT-EAP", "FT-EAP-SHA384", "WPA-PSK-SHA256", "WPA-EAP-SHA256", "SAE",
"FT-SAE", "OSEN", "WPA-EAP-SUITE-B", "WPA-EAP-SUITE-B-192",
"FILS-SHA256", "FILS-SHA384", "FT-FILS-SHA256", "FT-FILS-SHA384",
"OWE", "DPP"
]
supported_key_mgmts = dev[0].get_capability("key_mgmt")
for key_mgmt in tests:
if key_mgmt == "WPA-EAP-SUITE-B-192" and key_mgmt not in supported_key_mgmts:
logger.info("Skip unsupported " + key_mgmt)
continue
wpas.set_network(id, "key_mgmt", key_mgmt)
if "OK" not in wpas.request("SAVE_CONFIG"):
raise Exception("Failed to save configuration file")
with open(config, "r") as f:
data = f.read()
logger.info("Configuration file contents: " + data)
if "key_mgmt=" + key_mgmt not in data:
raise Exception("Missing key_mgmt " + key_mgmt)
wpas.interface_remove("wlan5")
wpas.interface_add("wlan5", config=config)
def run_dpp_controller_relay_pkex(dev, apdev, params):
check_dpp_capab(dev[0], min_ver=3)
check_dpp_capab(dev[1], min_ver=3)
prefix = "dpp_controller_relay_pkex"
cap_lo = os.path.join(params['logdir'], prefix + ".lo.pcap")
wt = WlantestCapture('lo', cap_lo)
# Controller
conf_id = dev[1].dpp_configurator_add()
dev[1].set("dpp_configurator_params",
"conf=sta-dpp configurator=%d" % conf_id)
id_c = dev[1].dpp_bootstrap_gen()
res = dev[1].request("DPP_BOOTSTRAP_INFO %d" % id_c)
pkhash = None
for line in res.splitlines():
name, value = line.split('=')
if name == "pkhash":
pkhash = value
break
if not pkhash:
raise Exception("Could not fetch public key hash from Controller")
if "OK" not in dev[1].request("DPP_CONTROLLER_START"):
raise Exception("Failed to start Controller")
# Relay
params = {
"ssid": "unconfigured",
"channel": "6",
"dpp_controller": "ipaddr=127.0.0.1 pkhash=" + pkhash
}
relay = hostapd.add_ap(apdev[1], params)
check_dpp_capab(relay)
# Enroll Relay to the network
id_h = relay.dpp_bootstrap_gen(chan="81/6", mac=True)
uri_r = relay.request("DPP_BOOTSTRAP_GET_URI %d" % id_h)
dev[1].dpp_auth_init(uri=uri_r, conf="ap-dpp", configurator=conf_id)
wait_auth_success(relay, dev[1], configurator=dev[1], enrollee=relay)
update_hapd_config(relay)
code = "secret"
id1 = dev[1].dpp_bootstrap_gen(type="pkex")
cmd = "own=%d" % id1
cmd += " code=%s" % code
res = dev[1].request("DPP_PKEX_ADD " + cmd)
if "FAIL" in res:
raise Exception("Failed to set PKEX data (Controller)")
# Initiate PKEX from Enrollee
dev[0].set("dpp_config_processing", "2")
dev[0].dpp_pkex_init(identifier=None, code=code, role="enrollee")
wait_auth_success(dev[1],
dev[0],
configurator=dev[1],
enrollee=dev[0],
allow_enrollee_failure=True,
allow_configurator_failure=True)
ev = dev[0].wait_event(["DPP-NETWORK-ID"], timeout=1)
if ev is None:
raise Exception("DPP network id not reported")
network = int(ev.split(' ')[1])
dev[0].wait_connected()
dev[0].dump_monitor()
time.sleep(0.5)
wt.close()
def test_wpas_config_file_key_mgmt(dev, apdev, params):
"""wpa_supplicant config file writing and key_mgmt values"""
config = os.path.join(params['logdir'],
'wpas_config_file_key_mgmt.conf')
if os.path.exists(config):
os.remove(config)
wpas = WpaSupplicant(global_iface='/tmp/wpas-wlan5')
with open(config, "w") as f:
f.write("update_config=1\n")
wpas.interface_add("wlan5", config=config)
from test_dpp import params1_csign, params1_sta_connector, params1_sta_netaccesskey, check_dpp_capab
check_dpp_capab(wpas)
id = wpas.add_network()
wpas.set_network_quoted(id, "ssid", "foo")
wpas.set_network(id, "key_mgmt", "DPP")
wpas.set_network(id, "ieee80211w", "2")
wpas.set_network_quoted(id, "dpp_csign", params1_csign)
wpas.set_network_quoted(id, "dpp_connector", params1_sta_connector)
wpas.set_network_quoted(id, "dpp_netaccesskey", params1_sta_netaccesskey)
if "OK" not in wpas.request("SAVE_CONFIG"):
raise Exception("Failed to save configuration file")
with open(config, "r") as f:
data = f.read()
logger.info("Configuration file contents: " + data)
if "key_mgmt=DPP" not in data:
raise Exception("Missing key_mgmt")
if 'dpp_connector="' + params1_sta_connector + '"' not in data:
raise Exception("Missing dpp_connector")
if 'dpp_netaccesskey="' + params1_sta_netaccesskey + '"' not in data:
raise Exception("Missing dpp_netaccesskey")
if 'dpp_csign="' + params1_csign + '"' not in data:
raise Exception("Missing dpp_csign")
wpas.set_network(id, "dpp_csign", "NULL")
wpas.set_network(id, "dpp_connector", "NULL")
wpas.set_network(id, "dpp_netaccesskey", "NULL")
wpas.set_network_quoted(id, "psk", "12345678")
wpas.set_network(id, "ieee80211w", "0")
tests = ["WPA-PSK", "WPA-EAP", "IEEE8021X", "NONE", "WPA-NONE", "FT-PSK",
"FT-EAP", "FT-EAP-SHA384", "WPA-PSK-SHA256", "WPA-EAP-SHA256",
"SAE", "FT-SAE", "OSEN", "WPA-EAP-SUITE-B",
"WPA-EAP-SUITE-B-192", "FILS-SHA256", "FILS-SHA384",
"FT-FILS-SHA256", "FT-FILS-SHA384", "OWE", "DPP"]
supported_key_mgmts = dev[0].get_capability("key_mgmt")
for key_mgmt in tests:
if key_mgmt == "WPA-EAP-SUITE-B-192" and key_mgmt not in supported_key_mgmts:
logger.info("Skip unsupported " + key_mgmt)
continue
wpas.set_network(id, "key_mgmt", key_mgmt)
if "OK" not in wpas.request("SAVE_CONFIG"):
raise Exception("Failed to save configuration file")
with open(config, "r") as f:
data = f.read()
logger.info("Configuration file contents: " + data)
if "key_mgmt=" + key_mgmt not in data:
raise Exception("Missing key_mgmt " + key_mgmt)
wpas.interface_remove("wlan5")
wpas.interface_add("wlan5", config=config)
