1 # Protected management frames tests
2 # Copyright (c) 2013, Jouni Malinen <j@w1.fi>
4 # This software may be distributed under the terms of the BSD license.
5 # See README for more details.
10 logger = logging.getLogger()
14 from wlantest import Wlantest
15 from wpasupplicant import WpaSupplicant
16 from test_ap_eap import eap_connect
18 def test_ap_pmf_required(dev, apdev):
19 """WPA2-PSK AP with PMF required"""
20 ssid = "test-pmf-required"
23 wt.add_passphrase("12345678")
24 params = hostapd.wpa2_params(ssid=ssid, passphrase="12345678")
25 params["wpa_key_mgmt"] = "WPA-PSK-SHA256";
26 params["ieee80211w"] = "2";
27 hapd = hostapd.add_ap(apdev[0]['ifname'], params)
28 key_mgmt = hapd.get_config()['key_mgmt']
29 if key_mgmt.split(' ')[0] != "WPA-PSK-SHA256":
30 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
31 dev[0].connect(ssid, psk="12345678", ieee80211w="1",
32 key_mgmt="WPA-PSK WPA-PSK-SHA256", proto="WPA2",
34 if "[WPA2-PSK-SHA256-CCMP]" not in dev[0].request("SCAN_RESULTS"):
35 raise Exception("Scan results missing RSN element info")
36 hwsim_utils.test_connectivity(dev[0].ifname, apdev[0]['ifname'])
37 dev[1].connect(ssid, psk="12345678", ieee80211w="2",
38 key_mgmt="WPA-PSK WPA-PSK-SHA256", proto="WPA2",
40 hwsim_utils.test_connectivity(dev[1].ifname, apdev[0]['ifname'])
41 hapd = hostapd.Hostapd(apdev[0]['ifname'])
42 hapd.request("SA_QUERY " + dev[0].p2p_interface_addr())
43 hapd.request("SA_QUERY " + dev[1].p2p_interface_addr())
44 wt.require_ap_pmf_mandatory(apdev[0]['bssid'])
45 wt.require_sta_pmf(apdev[0]['bssid'], dev[0].p2p_interface_addr())
46 wt.require_sta_pmf_mandatory(apdev[0]['bssid'], dev[1].p2p_interface_addr())
48 if wt.get_sta_counter("valid_saqueryresp_tx", apdev[0]['bssid'],
49 dev[0].p2p_interface_addr()) < 1:
50 raise Exception("STA did not reply to SA Query")
51 if wt.get_sta_counter("valid_saqueryresp_tx", apdev[0]['bssid'],
52 dev[1].p2p_interface_addr()) < 1:
53 raise Exception("STA did not reply to SA Query")
55 def test_ap_pmf_optional(dev, apdev):
56 """WPA2-PSK AP with PMF optional"""
57 ssid = "test-pmf-optional"
60 wt.add_passphrase("12345678")
61 params = hostapd.wpa2_params(ssid=ssid, passphrase="12345678")
62 params["wpa_key_mgmt"] = "WPA-PSK";
63 params["ieee80211w"] = "1";
64 hostapd.add_ap(apdev[0]['ifname'], params)
65 dev[0].connect(ssid, psk="12345678", ieee80211w="1",
66 key_mgmt="WPA-PSK WPA-PSK-SHA256", proto="WPA2",
68 hwsim_utils.test_connectivity(dev[0].ifname, apdev[0]['ifname'])
69 dev[1].connect(ssid, psk="12345678", ieee80211w="2",
70 key_mgmt="WPA-PSK WPA-PSK-SHA256", proto="WPA2",
72 hwsim_utils.test_connectivity(dev[1].ifname, apdev[0]['ifname'])
73 wt.require_ap_pmf_optional(apdev[0]['bssid'])
74 wt.require_sta_pmf(apdev[0]['bssid'], dev[0].p2p_interface_addr())
75 wt.require_sta_pmf_mandatory(apdev[0]['bssid'], dev[1].p2p_interface_addr())
77 def test_ap_pmf_optional_2akm(dev, apdev):
78 """WPA2-PSK AP with PMF optional (2 AKMs)"""
79 ssid = "test-pmf-optional-2akm"
82 wt.add_passphrase("12345678")
83 params = hostapd.wpa2_params(ssid=ssid, passphrase="12345678")
84 params["wpa_key_mgmt"] = "WPA-PSK WPA-PSK-SHA256";
85 params["ieee80211w"] = "1";
86 hostapd.add_ap(apdev[0]['ifname'], params)
87 dev[0].connect(ssid, psk="12345678", ieee80211w="1",
88 key_mgmt="WPA-PSK WPA-PSK-SHA256", proto="WPA2",
90 hwsim_utils.test_connectivity(dev[0].ifname, apdev[0]['ifname'])
91 dev[1].connect(ssid, psk="12345678", ieee80211w="2",
92 key_mgmt="WPA-PSK WPA-PSK-SHA256", proto="WPA2",
94 hwsim_utils.test_connectivity(dev[1].ifname, apdev[0]['ifname'])
95 wt.require_ap_pmf_optional(apdev[0]['bssid'])
96 wt.require_sta_pmf(apdev[0]['bssid'], dev[0].p2p_interface_addr())
97 wt.require_sta_key_mgmt(apdev[0]['bssid'], dev[0].p2p_interface_addr(),
99 wt.require_sta_pmf_mandatory(apdev[0]['bssid'], dev[1].p2p_interface_addr())
100 wt.require_sta_key_mgmt(apdev[0]['bssid'], dev[1].p2p_interface_addr(),
103 def test_ap_pmf_negative(dev, apdev):
104 """WPA2-PSK AP without PMF (negative test)"""
105 ssid = "test-pmf-negative"
108 wt.add_passphrase("12345678")
109 params = hostapd.wpa2_params(ssid=ssid, passphrase="12345678")
110 hostapd.add_ap(apdev[0]['ifname'], params)
111 dev[0].connect(ssid, psk="12345678", ieee80211w="1",
112 key_mgmt="WPA-PSK WPA-PSK-SHA256", proto="WPA2",
114 hwsim_utils.test_connectivity(dev[0].ifname, apdev[0]['ifname'])
116 dev[1].connect(ssid, psk="12345678", ieee80211w="2",
117 key_mgmt="WPA-PSK WPA-PSK-SHA256", proto="WPA2",
119 hwsim_utils.test_connectivity(dev[1].ifname, apdev[0]['ifname'])
120 raise Exception("PMF required STA connected to no PMF AP")
122 logger.debug("Ignore expected exception: " + str(e))
123 wt.require_ap_no_pmf(apdev[0]['bssid'])
125 def test_ap_pmf_assoc_comeback(dev, apdev):
126 """WPA2-PSK AP with PMF association comeback"""
127 ssid = "assoc-comeback"
130 wt.add_passphrase("12345678")
131 params = hostapd.wpa2_params(ssid=ssid, passphrase="12345678")
132 params["wpa_key_mgmt"] = "WPA-PSK-SHA256";
133 params["ieee80211w"] = "2";
134 hapd = hostapd.add_ap(apdev[0]['ifname'], params)
135 dev[0].connect(ssid, psk="12345678", ieee80211w="1",
136 key_mgmt="WPA-PSK WPA-PSK-SHA256", proto="WPA2",
138 hapd.set("ext_mgmt_frame_handling", "1")
139 dev[0].request("DISCONNECT")
140 ev = dev[0].wait_event(["CTRL-EVENT-DISCONNECTED"])
142 raise Exception("Timeout on disconnection")
143 hapd.set("ext_mgmt_frame_handling", "0")
144 dev[0].request("REASSOCIATE")
145 ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED"])
147 raise Exception("Timeout on re-connection")
148 if wt.get_sta_counter("assocresp_comeback", apdev[0]['bssid'],
149 dev[0].p2p_interface_addr()) < 1:
150 raise Exception("AP did not use association comeback request")
152 def test_ap_pmf_assoc_comeback2(dev, apdev):
153 """WPA2-PSK AP with PMF association comeback (using DROP_SA)"""
154 ssid = "assoc-comeback"
157 wt.add_passphrase("12345678")
158 params = hostapd.wpa2_params(ssid=ssid, passphrase="12345678")
159 params["wpa_key_mgmt"] = "WPA-PSK";
160 params["ieee80211w"] = "1";
161 hapd = hostapd.add_ap(apdev[0]['ifname'], params)
162 dev[0].connect(ssid, psk="12345678", ieee80211w="2",
163 key_mgmt="WPA-PSK", proto="WPA2", scan_freq="2412")
164 if "OK" not in dev[0].request("DROP_SA"):
165 raise Exception("DROP_SA failed")
166 dev[0].request("REASSOCIATE")
167 ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED"])
169 raise Exception("Timeout on re-connection")
170 if wt.get_sta_counter("reassocresp_comeback", apdev[0]['bssid'],
171 dev[0].p2p_interface_addr()) < 1:
172 raise Exception("AP did not use reassociation comeback request")
174 def test_ap_pmf_sta_sa_query(dev, apdev):
175 """WPA2-PSK AP with station using SA Query"""
176 ssid = "assoc-comeback"
177 addr = dev[0].p2p_dev_addr()
180 wt.add_passphrase("12345678")
182 wpas = WpaSupplicant(global_iface='/tmp/wpas-wlan5')
183 wpas.interface_add("wlan5", drv_params="use_monitor=1")
184 id = wpas.add_network()
185 wpas.set_network(id, "mode", "2")
186 wpas.set_network_quoted(id, "ssid", ssid)
187 wpas.set_network(id, "proto", "WPA2")
188 wpas.set_network(id, "key_mgmt", "WPA-PSK-SHA256")
189 wpas.set_network(id, "ieee80211w", "2")
190 wpas.set_network_quoted(id, "psk", "12345678")
191 wpas.set_network(id, "pairwise", "CCMP")
192 wpas.set_network(id, "group", "CCMP")
193 wpas.set_network(id, "frequency", "2412")
194 wpas.connect_network(id)
195 bssid = wpas.p2p_dev_addr()
197 dev[0].connect(ssid, psk="12345678", ieee80211w="1",
198 key_mgmt="WPA-PSK WPA-PSK-SHA256", proto="WPA2",
200 wpas.request("DEAUTHENTICATE " + addr + " test=0")
201 wpas.request("DISASSOCIATE " + addr + " test=0")
202 ev = dev[0].wait_event(["CTRL-EVENT-DISCONNECTED"], timeout=1)
204 raise Exception("Unexpected disconnection")
206 wpas.request("DEAUTHENTICATE " + addr + " reason=6 test=0")
207 wpas.request("DISASSOCIATE " + addr + " reason=7 test=0")
208 ev = dev[0].wait_event(["CTRL-EVENT-DISCONNECTED"], timeout=1)
210 raise Exception("Unexpected disconnection")
211 if wt.get_sta_counter("valid_saqueryreq_tx", bssid, addr) < 1:
212 raise Exception("STA did not send SA Query")
213 if wt.get_sta_counter("valid_saqueryresp_rx", bssid, addr) < 1:
214 raise Exception("AP did not reply to SA Query")
216 def test_ap_pmf_required_eap(dev, apdev):
217 """WPA2-EAP AP with PMF required"""
218 ssid = "test-pmf-required-eap"
219 params = hostapd.wpa2_eap_params(ssid=ssid)
220 params["wpa_key_mgmt"] = "WPA-EAP-SHA256";
221 params["ieee80211w"] = "2";
222 hapd = hostapd.add_ap(apdev[0]['ifname'], params)
223 key_mgmt = hapd.get_config()['key_mgmt']
224 if key_mgmt.split(' ')[0] != "WPA-EAP-SHA256":
225 raise Exception("Unexpected GET_CONFIG(key_mgmt): " + key_mgmt)
226 dev[0].connect("test-pmf-required-eap", key_mgmt="WPA-EAP-SHA256",
227 ieee80211w="2", eap="PSK", identity="psk.user@example.com",
228 password_hex="0123456789abcdef0123456789abcdef")