1 # Fast BSS Transition tests
2 # Copyright (c) 2013, Jouni Malinen <j@w1.fi>
4 # This software may be distributed under the terms of the BSD license.
5 # See README for more details.
10 logger = logging.getLogger()
14 from wlantest import Wlantest
15 from test_ap_psk import check_mib
18 params = { "wpa": "2",
19 "wpa_key_mgmt": "FT-PSK",
20 "rsn_pairwise": "CCMP" }
24 params = { "wpa": "3",
25 "wpa_key_mgmt": "WPA-PSK FT-PSK",
26 "wpa_pairwise": "TKIP",
27 "rsn_pairwise": "CCMP" }
30 def ft_params(rsn=True, ssid=None, passphrase=None):
32 params = ft_base_rsn()
34 params = ft_base_mixed()
38 params["wpa_passphrase"] = passphrase
40 params["mobility_domain"] = "a1b2"
41 params["r0_key_lifetime"] = "10000"
42 params["pmk_r1_push"] = "1"
43 params["reassociation_deadline"] = "1000"
46 def ft_params1(rsn=True, ssid=None, passphrase=None):
47 params = ft_params(rsn, ssid, passphrase)
48 params['nas_identifier'] = "nas1.w1.fi"
49 params['r1_key_holder'] = "000102030405"
50 params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f",
51 "02:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f" ]
52 params['r1kh'] = "02:00:00:00:04:00 00:01:02:03:04:06 200102030405060708090a0b0c0d0e0f"
55 def ft_params2(rsn=True, ssid=None, passphrase=None):
56 params = ft_params(rsn, ssid, passphrase)
57 params['nas_identifier'] = "nas2.w1.fi"
58 params['r1_key_holder'] = "000102030406"
59 params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f",
60 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f" ]
61 params['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0e0f"
64 def ft_params1_r0kh_mismatch(rsn=True, ssid=None, passphrase=None):
65 params = ft_params(rsn, ssid, passphrase)
66 params['nas_identifier'] = "nas1.w1.fi"
67 params['r1_key_holder'] = "000102030405"
68 params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 100102030405060708090a0b0c0d0e0f",
69 "12:00:00:00:04:00 nas2.w1.fi 300102030405060708090a0b0c0d0e0f" ]
70 params['r1kh'] = "12:00:00:00:04:00 10:01:02:03:04:06 200102030405060708090a0b0c0d0e0f"
73 def ft_params2_incorrect_rrb_key(rsn=True, ssid=None, passphrase=None):
74 params = ft_params(rsn, ssid, passphrase)
75 params['nas_identifier'] = "nas2.w1.fi"
76 params['r1_key_holder'] = "000102030406"
77 params['r0kh'] = [ "02:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0ef1",
78 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0ef2" ]
79 params['r1kh'] = "02:00:00:00:03:00 00:01:02:03:04:05 300102030405060708090a0b0c0d0ef3"
82 def ft_params2_r0kh_mismatch(rsn=True, ssid=None, passphrase=None):
83 params = ft_params(rsn, ssid, passphrase)
84 params['nas_identifier'] = "nas2.w1.fi"
85 params['r1_key_holder'] = "000102030406"
86 params['r0kh'] = [ "12:00:00:00:03:00 nas1.w1.fi 200102030405060708090a0b0c0d0e0f",
87 "02:00:00:00:04:00 nas2.w1.fi 000102030405060708090a0b0c0d0e0f" ]
88 params['r1kh'] = "12:00:00:00:03:00 10:01:02:03:04:05 300102030405060708090a0b0c0d0e0f"
91 def run_roams(dev, apdev, ssid, passphrase, over_ds=False, sae=False, eap=False, fail_test=False):
92 logger.info("Connect to first AP")
94 dev.connect(ssid, key_mgmt="FT-EAP", proto="WPA2", ieee80211w="1",
95 eap="EKE", identity="eke user", password="hello")
101 dev.connect(ssid, psk=passphrase, key_mgmt=key_mgmt, proto="WPA2",
103 if dev.get_status_field('bssid') == apdev[0]['bssid']:
109 hwsim_utils.test_connectivity(dev.ifname, ap1['ifname'])
111 logger.info("Roam to the second AP")
113 dev.roam_over_ds(ap2['bssid'], fail_test=fail_test)
115 dev.roam(ap2['bssid'], fail_test=fail_test)
118 if dev.get_status_field('bssid') != ap2['bssid']:
119 raise Exception("Did not connect to correct AP")
120 hwsim_utils.test_connectivity(dev.ifname, ap2['ifname'])
122 logger.info("Roam back to the first AP")
124 dev.roam_over_ds(ap1['bssid'])
126 dev.roam(ap1['bssid'])
127 if dev.get_status_field('bssid') != ap1['bssid']:
128 raise Exception("Did not connect to correct AP")
129 hwsim_utils.test_connectivity(dev.ifname, ap1['ifname'])
131 def test_ap_ft(dev, apdev):
134 passphrase="12345678"
136 params = ft_params1(ssid=ssid, passphrase=passphrase)
137 hostapd.add_ap(apdev[0]['ifname'], params)
138 params = ft_params2(ssid=ssid, passphrase=passphrase)
139 hostapd.add_ap(apdev[1]['ifname'], params)
141 run_roams(dev[0], apdev, ssid, passphrase)
142 if "[WPA2-FT/PSK-CCMP]" not in dev[0].request("SCAN_RESULTS"):
143 raise Exception("Scan results missing RSN element info")
145 def test_ap_ft_mixed(dev, apdev):
146 """WPA2-PSK-FT mixed-mode AP"""
147 ssid = "test-ft-mixed"
148 passphrase="12345678"
150 params = ft_params1(rsn=False, ssid=ssid, passphrase=passphrase)
151 hapd = hostapd.add_ap(apdev[0]['ifname'], params)
152 key_mgmt = hapd.get_config()['key_mgmt']
153 vals = key_mgmt.split(' ')
154 if vals[0] != "WPA-PSK" or vals[1] != "FT-PSK":
155 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
156 params = ft_params2(rsn=False, ssid=ssid, passphrase=passphrase)
157 hostapd.add_ap(apdev[1]['ifname'], params)
159 run_roams(dev[0], apdev, ssid, passphrase)
161 def test_ap_ft_pmf(dev, apdev):
162 """WPA2-PSK-FT AP with PMF"""
164 passphrase="12345678"
166 params = ft_params1(ssid=ssid, passphrase=passphrase)
167 params["ieee80211w"] = "2";
168 hostapd.add_ap(apdev[0]['ifname'], params)
169 params = ft_params2(ssid=ssid, passphrase=passphrase)
170 params["ieee80211w"] = "2";
171 hostapd.add_ap(apdev[1]['ifname'], params)
173 run_roams(dev[0], apdev, ssid, passphrase)
175 def test_ap_ft_over_ds(dev, apdev):
176 """WPA2-PSK-FT AP over DS"""
178 passphrase="12345678"
180 params = ft_params1(ssid=ssid, passphrase=passphrase)
181 hostapd.add_ap(apdev[0]['ifname'], params)
182 params = ft_params2(ssid=ssid, passphrase=passphrase)
183 hostapd.add_ap(apdev[1]['ifname'], params)
185 run_roams(dev[0], apdev, ssid, passphrase, over_ds=True)
186 check_mib(dev[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-4"),
187 ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-4") ])
189 def test_ap_ft_pmf_over_ds(dev, apdev):
190 """WPA2-PSK-FT AP over DS with PMF"""
192 passphrase="12345678"
194 params = ft_params1(ssid=ssid, passphrase=passphrase)
195 params["ieee80211w"] = "2";
196 hostapd.add_ap(apdev[0]['ifname'], params)
197 params = ft_params2(ssid=ssid, passphrase=passphrase)
198 params["ieee80211w"] = "2";
199 hostapd.add_ap(apdev[1]['ifname'], params)
201 run_roams(dev[0], apdev, ssid, passphrase, over_ds=True)
203 def test_ap_ft_over_ds_pull(dev, apdev):
204 """WPA2-PSK-FT AP over DS (pull PMK)"""
206 passphrase="12345678"
208 params = ft_params1(ssid=ssid, passphrase=passphrase)
209 params["pmk_r1_push"] = "0"
210 hostapd.add_ap(apdev[0]['ifname'], params)
211 params = ft_params2(ssid=ssid, passphrase=passphrase)
212 params["pmk_r1_push"] = "0"
213 hostapd.add_ap(apdev[1]['ifname'], params)
215 run_roams(dev[0], apdev, ssid, passphrase, over_ds=True)
217 def test_ap_ft_sae(dev, apdev):
218 """WPA2-PSK-FT-SAE AP"""
220 passphrase="12345678"
222 params = ft_params1(ssid=ssid, passphrase=passphrase)
223 params['wpa_key_mgmt'] = "FT-SAE"
224 hostapd.add_ap(apdev[0]['ifname'], params)
225 params = ft_params2(ssid=ssid, passphrase=passphrase)
226 params['wpa_key_mgmt'] = "FT-SAE"
227 hapd = hostapd.add_ap(apdev[1]['ifname'], params)
228 key_mgmt = hapd.get_config()['key_mgmt']
229 if key_mgmt.split(' ')[0] != "FT-SAE":
230 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
232 run_roams(dev[0], apdev, ssid, passphrase, sae=True)
234 def test_ap_ft_sae_over_ds(dev, apdev):
235 """WPA2-PSK-FT-SAE AP over DS"""
237 passphrase="12345678"
239 params = ft_params1(ssid=ssid, passphrase=passphrase)
240 params['wpa_key_mgmt'] = "FT-SAE"
241 hostapd.add_ap(apdev[0]['ifname'], params)
242 params = ft_params2(ssid=ssid, passphrase=passphrase)
243 params['wpa_key_mgmt'] = "FT-SAE"
244 hostapd.add_ap(apdev[1]['ifname'], params)
246 run_roams(dev[0], apdev, ssid, passphrase, sae=True, over_ds=True)
248 def test_ap_ft_eap(dev, apdev):
251 passphrase="12345678"
253 radius = hostapd.radius_params()
254 params = ft_params1(ssid=ssid, passphrase=passphrase)
255 params['wpa_key_mgmt'] = "FT-EAP"
256 params["ieee8021x"] = "1"
257 params = dict(radius.items() + params.items())
258 hapd = hostapd.add_ap(apdev[0]['ifname'], params)
259 key_mgmt = hapd.get_config()['key_mgmt']
260 if key_mgmt.split(' ')[0] != "FT-EAP":
261 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
262 params = ft_params2(ssid=ssid, passphrase=passphrase)
263 params['wpa_key_mgmt'] = "FT-EAP"
264 params["ieee8021x"] = "1"
265 params = dict(radius.items() + params.items())
266 hostapd.add_ap(apdev[1]['ifname'], params)
268 run_roams(dev[0], apdev, ssid, passphrase, eap=True)
269 if "[WPA2-FT/EAP-CCMP]" not in dev[0].request("SCAN_RESULTS"):
270 raise Exception("Scan results missing RSN element info")
271 check_mib(dev[0], [ ("dot11RSNAAuthenticationSuiteRequested", "00-0f-ac-3"),
272 ("dot11RSNAAuthenticationSuiteSelected", "00-0f-ac-3") ])
274 def test_ap_ft_eap_pull(dev, apdev):
275 """WPA2-EAP-FT AP (pull PMK)"""
277 passphrase="12345678"
279 radius = hostapd.radius_params()
280 params = ft_params1(ssid=ssid, passphrase=passphrase)
281 params['wpa_key_mgmt'] = "FT-EAP"
282 params["ieee8021x"] = "1"
283 params["pmk_r1_push"] = "0"
284 params = dict(radius.items() + params.items())
285 hapd = hostapd.add_ap(apdev[0]['ifname'], params)
286 key_mgmt = hapd.get_config()['key_mgmt']
287 if key_mgmt.split(' ')[0] != "FT-EAP":
288 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
289 params = ft_params2(ssid=ssid, passphrase=passphrase)
290 params['wpa_key_mgmt'] = "FT-EAP"
291 params["ieee8021x"] = "1"
292 params["pmk_r1_push"] = "0"
293 params = dict(radius.items() + params.items())
294 hostapd.add_ap(apdev[1]['ifname'], params)
296 run_roams(dev[0], apdev, ssid, passphrase, eap=True)
298 def test_ap_ft_mismatching_rrb_key_push(dev, apdev):
299 """WPA2-PSK-FT AP over DS with mismatching RRB key (push)"""
301 passphrase="12345678"
303 params = ft_params1(ssid=ssid, passphrase=passphrase)
304 params["ieee80211w"] = "2";
305 hostapd.add_ap(apdev[0]['ifname'], params)
306 params = ft_params2_incorrect_rrb_key(ssid=ssid, passphrase=passphrase)
307 params["ieee80211w"] = "2";
308 hostapd.add_ap(apdev[1]['ifname'], params)
310 run_roams(dev[0], apdev, ssid, passphrase, over_ds=True, fail_test=True)
312 def test_ap_ft_mismatching_rrb_key_pull(dev, apdev):
313 """WPA2-PSK-FT AP over DS with mismatching RRB key (pull)"""
315 passphrase="12345678"
317 params = ft_params1(ssid=ssid, passphrase=passphrase)
318 params["pmk_r1_push"] = "0"
319 hostapd.add_ap(apdev[0]['ifname'], params)
320 params = ft_params2_incorrect_rrb_key(ssid=ssid, passphrase=passphrase)
321 params["pmk_r1_push"] = "0"
322 hostapd.add_ap(apdev[1]['ifname'], params)
324 run_roams(dev[0], apdev, ssid, passphrase, over_ds=True, fail_test=True)
326 def test_ap_ft_mismatching_rrb_r0kh_push(dev, apdev):
327 """WPA2-PSK-FT AP over DS with mismatching R0KH key (push)"""
329 passphrase="12345678"
331 params = ft_params1(ssid=ssid, passphrase=passphrase)
332 params["ieee80211w"] = "2";
333 hostapd.add_ap(apdev[0]['ifname'], params)
334 params = ft_params2_r0kh_mismatch(ssid=ssid, passphrase=passphrase)
335 params["ieee80211w"] = "2";
336 hostapd.add_ap(apdev[1]['ifname'], params)
338 run_roams(dev[0], apdev, ssid, passphrase, over_ds=True, fail_test=True)
340 def test_ap_ft_mismatching_rrb_r0kh_pull(dev, apdev):
341 """WPA2-PSK-FT AP over DS with mismatching R0KH key (pull)"""
343 passphrase="12345678"
345 params = ft_params1_r0kh_mismatch(ssid=ssid, passphrase=passphrase)
346 params["pmk_r1_push"] = "0"
347 hostapd.add_ap(apdev[0]['ifname'], params)
348 params = ft_params2(ssid=ssid, passphrase=passphrase)
349 params["pmk_r1_push"] = "0"
350 hostapd.add_ap(apdev[1]['ifname'], params)
352 run_roams(dev[0], apdev, ssid, passphrase, over_ds=True, fail_test=True)