libeap/tests/hwsim/test_ap_mixed.py

   1 # Mixed AP module parameters enabled
   2 # Copyright (c) 2014, Qualcomm Atheros, Inc.
   3 #
   4 # This software may be distributed under the terms of the BSD license.
   5 # See README for more details.
   6
   7 import logging
   8 logger = logging.getLogger()
   9
  10 import hostapd
  11 import hwsim_utils
  12 from utils import skip_with_fips
  13
  14 def test_ap_mixed_security(dev, apdev):
  15     """WPA/WPA2 with PSK, EAP, SAE, FT in a single BSS"""
  16     skip_with_fips(dev[0])
  17     dev[0].flush_scan_cache()
  18     sae = "SAE" in dev[0].get_capability("auth_alg")
  19     ssid = "test-mixed"
  20     passphrase = 'qwertyuiop'
  21     params = hostapd.wpa_mixed_params(ssid=ssid, passphrase=passphrase)
  22     params['wpa_key_mgmt'] = "WPA-PSK WPA-PSK-SHA256 WPA-EAP WPA-EAP-SHA256 SAE FT-PSK FT-EAP FT-SAE"
  23     params["ieee8021x"] = "1"
  24     params["eap_server"] = "1"
  25     params["eap_user_file"] = "auth_serv/eap_user.conf"
  26     params['nas_identifier'] = "nas1.w1.fi"
  27     hapd = hostapd.add_ap(apdev[0]['ifname'], params)
  28
  29     dev[0].connect(ssid, key_mgmt="WPA-PSK", proto="WPA", pairwise="TKIP",
  30                    psk=passphrase, scan_freq="2412")
  31     dev[1].connect(ssid, key_mgmt="WPA-EAP-SHA256", proto="WPA2", eap="GPSK",
  32                    identity="gpsk user",
  33                    password="abcdefghijklmnop0123456789abcdef",
  34                    scan_freq="2412")
  35     if sae:
  36         dev[2].connect(ssid, psk=passphrase, key_mgmt="SAE", scan_freq="2412")
  37
  38     logger.debug(dev[0].request("SCAN_RESULTS"))
  39     bss = dev[0].get_bss(apdev[0]['bssid'])
  40     logger.debug(bss)
  41     if "[WPA-EAP+PSK-TKIP]" not in bss['flags']:
  42         raise Exception("Unexpected flags (WPA): " + bss['flags'])
  43     if sae and "[WPA2-EAP+PSK+SAE+FT/EAP+FT/PSK+FT/SAE+EAP-SHA256+PSK-SHA256-CCMP]" not in bss['flags']:
  44         raise Exception("Unexpected flags (WPA2): " + bss['flags'])
  45
  46     if dev[0].get_status_field("key_mgmt") != "WPA-PSK":
  47         raise Exception("Unexpected key_mgmt(1)")
  48     if dev[0].get_status_field("pairwise_cipher") != "TKIP":
  49         raise Exception("Unexpected pairwise(1)")
  50     if dev[1].get_status_field("key_mgmt") != "WPA2-EAP-SHA256":
  51         raise Exception("Unexpected key_mgmt(2)")
  52     if sae and dev[2].get_status_field("key_mgmt") != "SAE":
  53         raise Exception("Unexpected key_mgmt(3)")
  54
  55     hwsim_utils.test_connectivity(dev[0], dev[1])
  56     if sae:
  57         hwsim_utils.test_connectivity(dev[1], dev[2])
  58         hwsim_utils.test_connectivity(dev[0], dev[2])
  59     for i in range(3):
  60         if i < 2 or sae:
  61             hwsim_utils.test_connectivity(dev[i], hapd)
  62         dev[i].request("DISCONNECT")
  63
  64     dev[0].connect(ssid, key_mgmt="WPA-PSK WPA-PSK-SHA256", psk=passphrase,
  65                    scan_freq="2412")
  66     dev[1].connect(ssid, key_mgmt="WPA-EAP", proto="WPA", eap="GPSK",
  67                    identity="gpsk user",
  68                    password="abcdefghijklmnop0123456789abcdef",
  69                    scan_freq="2412")
  70     if sae:
  71         dev[2].connect(ssid, key_mgmt="WPA-PSK WPA-PSK-SHA256 SAE",
  72                        psk=passphrase, scan_freq="2412")
  73
  74     if dev[0].get_status_field("key_mgmt") != "WPA2-PSK-SHA256":
  75         raise Exception("Unexpected key_mgmt(1b)")
  76     if dev[0].get_status_field("pairwise_cipher") != "CCMP":
  77         raise Exception("Unexpected pairwise(1b)")
  78     if dev[1].get_status_field("key_mgmt") != "WPA/IEEE 802.1X/EAP":
  79         raise Exception("Unexpected key_mgmt(2b)")
  80     if sae and dev[2].get_status_field("key_mgmt") != "SAE":
  81         raise Exception("Unexpected key_mgmt(3b)")
  82
  83     for i in range(3):
  84         dev[i].request("DISCONNECT")
  85
  86     dev[0].connect(ssid, key_mgmt="FT-PSK", psk=passphrase, scan_freq="2412")
  87     dev[1].connect(ssid, key_mgmt="FT-EAP", eap="GPSK", identity="gpsk user",
  88                    password="abcdefghijklmnop0123456789abcdef",
  89                    scan_freq="2412")
  90     if sae:
  91         dev[2].connect(ssid, psk=passphrase, key_mgmt="FT-SAE",
  92                        scan_freq="2412")
  93
  94     if dev[0].get_status_field("key_mgmt") != "FT-PSK":
  95         raise Exception("Unexpected key_mgmt(1c)")
  96     if dev[1].get_status_field("key_mgmt") != "FT-EAP":
  97         raise Exception("Unexpected key_mgmt(2c)")
  98     if sae and dev[2].get_status_field("key_mgmt") != "FT-SAE":
  99         raise Exception("Unexpected key_mgmt(3c)")