tests/hwsim/test_ap_hs20.py

   1 # Hotspot 2.0 tests
   2 # Copyright (c) 2013-2015, Jouni Malinen <j@w1.fi>
   3 #
   4 # This software may be distributed under the terms of the BSD license.
   5 # See README for more details.
   6
   7 from remotehost import remote_compatible
   8 import base64
   9 import binascii
  10 import struct
  11 import time
  12 import logging
  13 logger = logging.getLogger()
  14 import os
  15 import os.path
  16 import socket
  17 import subprocess
  18
  19 import hostapd
  20 from utils import HwsimSkip, skip_with_fips, alloc_fail, wait_fail_trigger
  21 import hwsim_utils
  22 from tshark import run_tshark
  23 from wlantest import Wlantest
  24 from wpasupplicant import WpaSupplicant
  25 from test_ap_eap import check_eap_capa, check_domain_match_full
  26 from test_gas import gas_rx, parse_gas, action_response, send_gas_resp, ACTION_CATEG_PUBLIC, GAS_INITIAL_RESPONSE
  27
  28 def hs20_ap_params(ssid="test-hs20"):
  29     params = hostapd.wpa2_params(ssid=ssid)
  30     params['wpa_key_mgmt'] = "WPA-EAP"
  31     params['ieee80211w'] = "1"
  32     params['ieee8021x'] = "1"
  33     params['auth_server_addr'] = "127.0.0.1"
  34     params['auth_server_port'] = "1812"
  35     params['auth_server_shared_secret'] = "radius"
  36     params['interworking'] = "1"
  37     params['access_network_type'] = "14"
  38     params['internet'] = "1"
  39     params['asra'] = "0"
  40     params['esr'] = "0"
  41     params['uesa'] = "0"
  42     params['venue_group'] = "7"
  43     params['venue_type'] = "1"
  44     params['venue_name'] = [ "eng:Example venue", "fin:Esimerkkipaikka" ]
  45     params['roaming_consortium'] = [ "112233", "1020304050", "010203040506",
  46                                      "fedcba" ]
  47     params['domain_name'] = "example.com,another.example.com"
  48     params['nai_realm'] = [ "0,example.com,13[5:6],21[2:4][5:7]",
  49                             "0,another.example.com" ]
  50     params['hs20'] = "1"
  51     params['hs20_wan_metrics'] = "01:8000:1000:80:240:3000"
  52     params['hs20_conn_capab'] = [ "1:0:2", "6:22:1", "17:5060:0" ]
  53     params['hs20_operating_class'] = "5173"
  54     params['anqp_3gpp_cell_net'] = "244,91"
  55     return params
  56
  57 def check_auto_select(dev, bssid):
  58     dev.scan_for_bss(bssid, freq="2412")
  59     dev.request("INTERWORKING_SELECT auto freq=2412")
  60     ev = dev.wait_connected(timeout=15)
  61     if bssid not in ev:
  62         raise Exception("Connected to incorrect network")
  63     dev.request("REMOVE_NETWORK all")
  64     dev.wait_disconnected()
  65     dev.dump_monitor()
  66
  67 def interworking_select(dev, bssid, type=None, no_match=False, freq=None):
  68     dev.dump_monitor()
  69     if bssid and freq and not no_match:
  70         dev.scan_for_bss(bssid, freq=freq)
  71     freq_extra = " freq=" + str(freq) if freq else ""
  72     dev.request("INTERWORKING_SELECT" + freq_extra)
  73     ev = dev.wait_event(["INTERWORKING-AP", "INTERWORKING-NO-MATCH"],
  74                         timeout=15)
  75     if ev is None:
  76         raise Exception("Network selection timed out")
  77     if no_match:
  78         if "INTERWORKING-NO-MATCH" not in ev:
  79             raise Exception("Unexpected network match")
  80         return
  81     if "INTERWORKING-NO-MATCH" in ev:
  82         logger.info("Matching network not found - try again")
  83         dev.dump_monitor()
  84         dev.request("INTERWORKING_SELECT" + freq_extra)
  85         ev = dev.wait_event(["INTERWORKING-AP", "INTERWORKING-NO-MATCH"],
  86                             timeout=15)
  87         if ev is None:
  88             raise Exception("Network selection timed out")
  89         if "INTERWORKING-NO-MATCH" in ev:
  90             raise Exception("Matching network not found")
  91     if bssid and bssid not in ev:
  92         raise Exception("Unexpected BSSID in match")
  93     if type and "type=" + type not in ev:
  94         raise Exception("Network type not recognized correctly")
  95
  96 def check_sp_type(dev, sp_type):
  97     type = dev.get_status_field("sp_type")
  98     if type is None:
  99         raise Exception("sp_type not available")
 100     if type != sp_type:
 101         raise Exception("sp_type did not indicate home network")
 102
 103 def hlr_auc_gw_available():
 104     if not os.path.exists("/tmp/hlr_auc_gw.sock"):
 105         raise HwsimSkip("No hlr_auc_gw socket available")
 106     if not os.path.exists("../../hostapd/hlr_auc_gw"):
 107         raise HwsimSkip("No hlr_auc_gw available")
 108
 109 def interworking_ext_sim_connect(dev, bssid, method):
 110     dev.request("INTERWORKING_CONNECT " + bssid)
 111     interworking_ext_sim_auth(dev, method)
 112
 113 def interworking_ext_sim_auth(dev, method):
 114     ev = dev.wait_event(["CTRL-EVENT-EAP-METHOD"], timeout=15)
 115     if ev is None:
 116         raise Exception("Network connected timed out")
 117     if "(" + method + ")" not in ev:
 118         raise Exception("Unexpected EAP method selection")
 119
 120     ev = dev.wait_event(["CTRL-REQ-SIM"], timeout=15)
 121     if ev is None:
 122         raise Exception("Wait for external SIM processing request timed out")
 123     p = ev.split(':', 2)
 124     if p[1] != "GSM-AUTH":
 125         raise Exception("Unexpected CTRL-REQ-SIM type")
 126     id = p[0].split('-')[3]
 127     rand = p[2].split(' ')[0]
 128
 129     res = subprocess.check_output(["../../hostapd/hlr_auc_gw",
 130                                    "-m",
 131                                    "auth_serv/hlr_auc_gw.milenage_db",
 132                                    "GSM-AUTH-REQ 232010000000000 " + rand])
 133     if "GSM-AUTH-RESP" not in res:
 134         raise Exception("Unexpected hlr_auc_gw response")
 135     resp = res.split(' ')[2].rstrip()
 136
 137     dev.request("CTRL-RSP-SIM-" + id + ":GSM-AUTH:" + resp)
 138     dev.wait_connected(timeout=15)
 139
 140 def interworking_connect(dev, bssid, method):
 141     dev.request("INTERWORKING_CONNECT " + bssid)
 142     interworking_auth(dev, method)
 143
 144 def interworking_auth(dev, method):
 145     ev = dev.wait_event(["CTRL-EVENT-EAP-METHOD"], timeout=15)
 146     if ev is None:
 147         raise Exception("Network connected timed out")
 148     if "(" + method + ")" not in ev:
 149         raise Exception("Unexpected EAP method selection")
 150
 151     dev.wait_connected(timeout=15)
 152
 153 def check_probe_resp(wt, bssid_unexpected, bssid_expected):
 154     if bssid_unexpected:
 155         count = wt.get_bss_counter("probe_response", bssid_unexpected)
 156         if count > 0:
 157             raise Exception("Unexpected Probe Response frame from AP")
 158
 159     if bssid_expected:
 160         count = wt.get_bss_counter("probe_response", bssid_expected)
 161         if count == 0:
 162             raise Exception("No Probe Response frame from AP")
 163
 164 def test_ap_anqp_sharing(dev, apdev):
 165     """ANQP sharing within ESS and explicit unshare"""
 166     check_eap_capa(dev[0], "MSCHAPV2")
 167     dev[0].flush_scan_cache()
 168
 169     bssid = apdev[0]['bssid']
 170     params = hs20_ap_params()
 171     params['hessid'] = bssid
 172     hostapd.add_ap(apdev[0], params)
 173
 174     bssid2 = apdev[1]['bssid']
 175     params = hs20_ap_params()
 176     params['hessid'] = bssid
 177     params['nai_realm'] = [ "0,example.com,13[5:6],21[2:4][5:7]" ]
 178     hostapd.add_ap(apdev[1], params)
 179
 180     dev[0].hs20_enable()
 181     id = dev[0].add_cred_values({ 'realm': "example.com", 'username': "test",
 182                                   'password': "secret",
 183                                   'domain': "example.com" })
 184     logger.info("Normal network selection with shared ANQP results")
 185     dev[0].scan_for_bss(bssid, freq="2412")
 186     dev[0].scan_for_bss(bssid2, freq="2412")
 187     interworking_select(dev[0], None, "home", freq="2412")
 188     dev[0].dump_monitor()
 189
 190     logger.debug("BSS entries:\n" + dev[0].request("BSS RANGE=ALL"))
 191     res1 = dev[0].get_bss(bssid)
 192     res2 = dev[0].get_bss(bssid2)
 193     if 'anqp_nai_realm' not in res1:
 194         raise Exception("anqp_nai_realm not found for AP1")
 195     if 'anqp_nai_realm' not in res2:
 196         raise Exception("anqp_nai_realm not found for AP2")
 197     if res1['anqp_nai_realm'] != res2['anqp_nai_realm']:
 198         raise Exception("ANQP results were not shared between BSSes")
 199
 200     logger.info("Explicit ANQP request to unshare ANQP results")
 201     dev[0].request("ANQP_GET " + bssid + " 263")
 202     ev = dev[0].wait_event(["RX-ANQP"], timeout=5)
 203     if ev is None:
 204         raise Exception("ANQP operation timed out")
 205
 206     dev[0].request("ANQP_GET " + bssid2 + " 263")
 207     ev = dev[0].wait_event(["RX-ANQP"], timeout=5)
 208     if ev is None:
 209         raise Exception("ANQP operation timed out")
 210
 211     res1 = dev[0].get_bss(bssid)
 212     res2 = dev[0].get_bss(bssid2)
 213     if res1['anqp_nai_realm'] == res2['anqp_nai_realm']:
 214         raise Exception("ANQP results were not unshared")
 215
 216 def test_ap_anqp_no_sharing_diff_ess(dev, apdev):
 217     """ANQP no sharing between ESSs"""
 218     check_eap_capa(dev[0], "MSCHAPV2")
 219     dev[0].flush_scan_cache()
 220
 221     bssid = apdev[0]['bssid']
 222     params = hs20_ap_params()
 223     params['hessid'] = bssid
 224     hostapd.add_ap(apdev[0], params)
 225
 226     bssid2 = apdev[1]['bssid']
 227     params = hs20_ap_params(ssid="test-hs20-another")
 228     params['hessid'] = bssid
 229     params['nai_realm'] = [ "0,example.com,13[5:6],21[2:4][5:7]" ]
 230     hostapd.add_ap(apdev[1], params)
 231
 232     dev[0].hs20_enable()
 233     id = dev[0].add_cred_values({ 'realm': "example.com", 'username': "test",
 234                                   'password': "secret",
 235                                   'domain': "example.com" })
 236     logger.info("Normal network selection with shared ANQP results")
 237     dev[0].scan_for_bss(bssid, freq="2412")
 238     dev[0].scan_for_bss(bssid2, freq="2412")
 239     interworking_select(dev[0], None, "home", freq="2412")
 240
 241 def test_ap_anqp_no_sharing_missing_info(dev, apdev):
 242     """ANQP no sharing due to missing information"""
 243     check_eap_capa(dev[0], "MSCHAPV2")
 244     dev[0].flush_scan_cache()
 245
 246     bssid = apdev[0]['bssid']
 247     params = hs20_ap_params()
 248     params['hessid'] = bssid
 249     del params['roaming_consortium']
 250     del params['domain_name']
 251     del params['anqp_3gpp_cell_net']
 252     del params['nai_realm']
 253     hostapd.add_ap(apdev[0], params)
 254
 255     bssid2 = apdev[1]['bssid']
 256     params = hs20_ap_params()
 257     params['hessid'] = bssid
 258     params['nai_realm'] = [ "0,example.com,13[5:6],21[2:4][5:7]" ]
 259     hostapd.add_ap(apdev[1], params)
 260
 261     dev[0].hs20_enable()
 262     id = dev[0].add_cred_values({ 'realm': "example.com", 'username': "test",
 263                                   'password': "secret",
 264                                   'domain': "example.com" })
 265     logger.info("Normal network selection with shared ANQP results")
 266     dev[0].scan_for_bss(bssid, freq="2412")
 267     dev[0].scan_for_bss(bssid2, freq="2412")
 268     interworking_select(dev[0], None, "home", freq="2412")
 269
 270 def test_ap_anqp_sharing_oom(dev, apdev):
 271     """ANQP sharing within ESS and explicit unshare OOM"""
 272     check_eap_capa(dev[0], "MSCHAPV2")
 273     dev[0].flush_scan_cache()
 274
 275     bssid = apdev[0]['bssid']
 276     params = hs20_ap_params()
 277     params['hessid'] = bssid
 278     hostapd.add_ap(apdev[0], params)
 279
 280     bssid2 = apdev[1]['bssid']
 281     params = hs20_ap_params()
 282     params['hessid'] = bssid
 283     params['nai_realm'] = [ "0,example.com,13[5:6],21[2:4][5:7]" ]
 284     hostapd.add_ap(apdev[1], params)
 285
 286     dev[0].hs20_enable()
 287     id = dev[0].add_cred_values({ 'realm': "example.com", 'username': "test",
 288                                   'password': "secret",
 289                                   'domain': "example.com" })
 290     dev[0].scan_for_bss(bssid, freq="2412")
 291     dev[0].scan_for_bss(bssid2, freq="2412")
 292     interworking_select(dev[0], None, "home", freq="2412")
 293     dev[0].dump_monitor()
 294
 295     with alloc_fail(dev[0], 1, "wpa_bss_anqp_clone"):
 296         dev[0].request("ANQP_GET " + bssid + " 263")
 297         ev = dev[0].wait_event(["RX-ANQP"], timeout=5)
 298         if ev is None:
 299             raise Exception("ANQP operation timed out")
 300
 301 def test_ap_nai_home_realm_query(dev, apdev):
 302     """NAI Home Realm Query"""
 303     check_eap_capa(dev[0], "MSCHAPV2")
 304     bssid = apdev[0]['bssid']
 305     params = hs20_ap_params()
 306     params['nai_realm'] = [ "0,example.com,13[5:6],21[2:4][5:7]",
 307                             "0,another.example.org" ]
 308     hostapd.add_ap(apdev[0], params)
 309
 310     dev[0].scan(freq="2412")
 311     dev[0].request("HS20_GET_NAI_HOME_REALM_LIST " + bssid + " realm=example.com")
 312     ev = dev[0].wait_event(["RX-ANQP"], timeout=5)
 313     if ev is None:
 314         raise Exception("ANQP operation timed out")
 315     nai1 = dev[0].get_bss(bssid)['anqp_nai_realm']
 316     dev[0].dump_monitor()
 317
 318     dev[0].request("ANQP_GET " + bssid + " 263")
 319     ev = dev[0].wait_event(["RX-ANQP"], timeout=5)
 320     if ev is None:
 321         raise Exception("ANQP operation timed out")
 322     nai2 = dev[0].get_bss(bssid)['anqp_nai_realm']
 323
 324     if len(nai1) >= len(nai2):
 325         raise Exception("Unexpected NAI Realm list response lengths")
 326     if "example.com".encode('hex') not in nai1:
 327         raise Exception("Home realm not reported")
 328     if "example.org".encode('hex') in nai1:
 329         raise Exception("Non-home realm reported")
 330     if "example.com".encode('hex') not in nai2:
 331         raise Exception("Home realm not reported in wildcard query")
 332     if "example.org".encode('hex') not in nai2:
 333         raise Exception("Non-home realm not reported in wildcard query ")
 334
 335     cmds = [ "foo",
 336              "00:11:22:33:44:55 123",
 337              "00:11:22:33:44:55 qq" ]
 338     for cmd in cmds:
 339         if "FAIL" not in dev[0].request("HS20_GET_NAI_HOME_REALM_LIST " + cmd):
 340             raise Exception("Invalid HS20_GET_NAI_HOME_REALM_LIST accepted: " + cmd)
 341
 342     dev[0].dump_monitor()
 343     if "OK" not in dev[0].request("HS20_GET_NAI_HOME_REALM_LIST " + bssid):
 344         raise Exception("HS20_GET_NAI_HOME_REALM_LIST failed")
 345     ev = dev[0].wait_event(["GAS-QUERY-DONE"], timeout=10)
 346     if ev is None:
 347         raise Exception("ANQP operation timed out")
 348     ev = dev[0].wait_event(["RX-ANQP"], timeout=0.1)
 349     if ev is not None:
 350         raise Exception("Unexpected ANQP response: " + ev)
 351
 352     dev[0].dump_monitor()
 353     if "OK" not in dev[0].request("HS20_GET_NAI_HOME_REALM_LIST " + bssid + " 01000b6578616d706c652e636f6d"):
 354         raise Exception("HS20_GET_NAI_HOME_REALM_LIST failed")
 355     ev = dev[0].wait_event(["RX-ANQP"], timeout=10)
 356     if ev is None:
 357         raise Exception("No ANQP response")
 358     if "NAI Realm list" not in ev:
 359         raise Exception("Missing NAI Realm list: " + ev)
 360
 361     dev[0].add_cred_values({ 'realm': "example.com", 'username': "test",
 362                              'password': "secret",
 363                              'domain': "example.com" })
 364     dev[0].dump_monitor()
 365     if "OK" not in dev[0].request("HS20_GET_NAI_HOME_REALM_LIST " + bssid):
 366         raise Exception("HS20_GET_NAI_HOME_REALM_LIST failed")
 367     ev = dev[0].wait_event(["RX-ANQP"], timeout=10)
 368     if ev is None:
 369         raise Exception("No ANQP response")
 370     if "NAI Realm list" not in ev:
 371         raise Exception("Missing NAI Realm list: " + ev)
 372
 373 @remote_compatible
 374 def test_ap_interworking_scan_filtering(dev, apdev):
 375     """Interworking scan filtering with HESSID and access network type"""
 376     try:
 377         _test_ap_interworking_scan_filtering(dev, apdev)
 378     finally:
 379         dev[0].request("SET hessid 00:00:00:00:00:00")
 380         dev[0].request("SET access_network_type 15")
 381
 382 def _test_ap_interworking_scan_filtering(dev, apdev):
 383     bssid = apdev[0]['bssid']
 384     params = hs20_ap_params()
 385     ssid = "test-hs20-ap1"
 386     params['ssid'] = ssid
 387     params['hessid'] = bssid
 388     hapd0 = hostapd.add_ap(apdev[0], params)
 389
 390     bssid2 = apdev[1]['bssid']
 391     params = hs20_ap_params()
 392     ssid2 = "test-hs20-ap2"
 393     params['ssid'] = ssid2
 394     params['hessid'] = bssid2
 395     params['access_network_type'] = "1"
 396     del params['venue_group']
 397     del params['venue_type']
 398     hostapd.add_ap(apdev[1], params)
 399
 400     dev[0].hs20_enable()
 401
 402     Wlantest.setup(hapd0)
 403     wt = Wlantest()
 404     wt.flush()
 405
 406     logger.info("Check probe request filtering based on HESSID")
 407
 408     dev[0].request("SET hessid " + bssid2)
 409     dev[0].scan(freq="2412")
 410     time.sleep(0.03)
 411     check_probe_resp(wt, bssid, bssid2)
 412
 413     logger.info("Check probe request filtering based on access network type")
 414
 415     wt.clear_bss_counters(bssid)
 416     wt.clear_bss_counters(bssid2)
 417     dev[0].request("SET hessid 00:00:00:00:00:00")
 418     dev[0].request("SET access_network_type 14")
 419     dev[0].scan(freq="2412")
 420     time.sleep(0.03)
 421     check_probe_resp(wt, bssid2, bssid)
 422
 423     wt.clear_bss_counters(bssid)
 424     wt.clear_bss_counters(bssid2)
 425     dev[0].request("SET hessid 00:00:00:00:00:00")
 426     dev[0].request("SET access_network_type 1")
 427     dev[0].scan(freq="2412")
 428     time.sleep(0.03)
 429     check_probe_resp(wt, bssid, bssid2)
 430
 431     logger.info("Check probe request filtering based on HESSID and ANT")
 432
 433     wt.clear_bss_counters(bssid)
 434     wt.clear_bss_counters(bssid2)
 435     dev[0].request("SET hessid " + bssid)
 436     dev[0].request("SET access_network_type 14")
 437     dev[0].scan(freq="2412")
 438     time.sleep(0.03)
 439     check_probe_resp(wt, bssid2, bssid)
 440
 441     wt.clear_bss_counters(bssid)
 442     wt.clear_bss_counters(bssid2)
 443     dev[0].request("SET hessid " + bssid2)
 444     dev[0].request("SET access_network_type 14")
 445     dev[0].scan(freq="2412")
 446     time.sleep(0.03)
 447     check_probe_resp(wt, bssid, None)
 448     check_probe_resp(wt, bssid2, None)
 449
 450     wt.clear_bss_counters(bssid)
 451     wt.clear_bss_counters(bssid2)
 452     dev[0].request("SET hessid " + bssid)
 453     dev[0].request("SET access_network_type 1")
 454     dev[0].scan(freq="2412")
 455     time.sleep(0.03)
 456     check_probe_resp(wt, bssid, None)
 457     check_probe_resp(wt, bssid2, None)
 458
 459 def test_ap_hs20_select(dev, apdev):
 460     """Hotspot 2.0 network selection"""
 461     bssid = apdev[0]['bssid']
 462     params = hs20_ap_params()
 463     params['hessid'] = bssid
 464     hostapd.add_ap(apdev[0], params)
 465
 466     dev[0].hs20_enable()
 467     id = dev[0].add_cred_values({ 'realm': "example.com", 'username': "test",
 468                                   'password': "secret",
 469                                   'domain': "example.com" })
 470     interworking_select(dev[0], bssid, "home")
 471
 472     dev[0].remove_cred(id)
 473     id = dev[0].add_cred_values({ 'realm': "example.com", 'username': "test",
 474                                   'password': "secret",
 475                                   'domain': "no.match.example.com" })
 476     interworking_select(dev[0], bssid, "roaming", freq="2412")
 477
 478     dev[0].set_cred_quoted(id, "realm", "no.match.example.com")
 479     interworking_select(dev[0], bssid, no_match=True, freq="2412")
 480
 481     res = dev[0].request("SCAN_RESULTS")
 482     if "[HS20]" not in res:
 483         raise Exception("HS20 flag missing from scan results: " + res)
 484
 485     bssid2 = apdev[1]['bssid']
 486     params = hs20_ap_params()
 487     params['nai_realm'] = [ "0,example.org,21" ]
 488     params['hessid'] = bssid2
 489     params['domain_name'] = "example.org"
 490     hostapd.add_ap(apdev[1], params)
 491     dev[0].remove_cred(id)
 492     id = dev[0].add_cred_values({ 'realm': "example.org", 'username': "test",
 493                                   'password': "secret",
 494                                   'domain': "example.org" })
 495     interworking_select(dev[0], bssid2, "home", freq="2412")
 496
 497 def hs20_simulated_sim(dev, ap, method):
 498     bssid = ap['bssid']
 499     params = hs20_ap_params()
 500     params['hessid'] = bssid
 501     params['anqp_3gpp_cell_net'] = "555,444"
 502     params['domain_name'] = "wlan.mnc444.mcc555.3gppnetwork.org"
 503     hostapd.add_ap(ap, params)
 504
 505     dev.hs20_enable()
 506     dev.add_cred_values({ 'imsi': "555444-333222111", 'eap': method,
 507                           'milenage': "5122250214c33e723a5dd523fc145fc0:981d464c7c52eb6e5036234984ad0bcf:000000000123"})
 508     interworking_select(dev, bssid, "home", freq="2412")
 509     interworking_connect(dev, bssid, method)
 510     check_sp_type(dev, "home")
 511
 512 def test_ap_hs20_sim(dev, apdev):
 513     """Hotspot 2.0 with simulated SIM and EAP-SIM"""
 514     hlr_auc_gw_available()
 515     hs20_simulated_sim(dev[0], apdev[0], "SIM")
 516     dev[0].request("INTERWORKING_SELECT auto freq=2412")
 517     ev = dev[0].wait_event(["INTERWORKING-ALREADY-CONNECTED"], timeout=15)
 518     if ev is None:
 519         raise Exception("Timeout on already-connected event")
 520
 521 def test_ap_hs20_sim_invalid(dev, apdev):
 522     """Hotspot 2.0 with simulated SIM and EAP-SIM - invalid IMSI"""
 523     hlr_auc_gw_available()
 524     bssid = apdev[0]['bssid']
 525     params = hs20_ap_params()
 526     params['hessid'] = bssid
 527     params['anqp_3gpp_cell_net'] = "555,444"
 528     params['domain_name'] = "wlan.mnc444.mcc555.3gppnetwork.org"
 529     hostapd.add_ap(apdev[0], params)
 530
 531     dev[0].hs20_enable()
 532     dev[0].add_cred_values({ 'imsi': "555444-3332221110", 'eap': "SIM",
 533                           'milenage': "5122250214c33e723a5dd523fc145fc0:981d464c7c52eb6e5036234984ad0bcf:000000000123"})
 534     # This hits "No valid IMSI available" in build_root_nai()
 535     interworking_select(dev[0], bssid, freq="2412")
 536
 537 def test_ap_hs20_sim_oom(dev, apdev):
 538     """Hotspot 2.0 with simulated SIM and EAP-SIM - OOM"""
 539     hlr_auc_gw_available()
 540     bssid = apdev[0]['bssid']
 541     params = hs20_ap_params()
 542     params['hessid'] = bssid
 543     params['anqp_3gpp_cell_net'] = "555,444"
 544     params['domain_name'] = "wlan.mnc444.mcc555.3gppnetwork.org"
 545     hostapd.add_ap(apdev[0], params)
 546
 547     dev[0].hs20_enable()
 548     dev[0].add_cred_values({ 'imsi': "555444-333222111", 'eap': "SIM",
 549                           'milenage': "5122250214c33e723a5dd523fc145fc0:981d464c7c52eb6e5036234984ad0bcf:000000000123"})
 550     dev[0].scan_for_bss(bssid, freq=2412)
 551     interworking_select(dev[0], bssid, freq="2412")
 552
 553     with alloc_fail(dev[0], 1, "wpa_config_add_network;interworking_connect_3gpp"):
 554         dev[0].request("INTERWORKING_CONNECT " + bssid)
 555         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
 556
 557     with alloc_fail(dev[0], 1, "=interworking_connect_3gpp"):
 558         dev[0].request("INTERWORKING_CONNECT " + bssid)
 559         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
 560
 561 def test_ap_hs20_aka(dev, apdev):
 562     """Hotspot 2.0 with simulated USIM and EAP-AKA"""
 563     hlr_auc_gw_available()
 564     hs20_simulated_sim(dev[0], apdev[0], "AKA")
 565
 566 def test_ap_hs20_aka_prime(dev, apdev):
 567     """Hotspot 2.0 with simulated USIM and EAP-AKA'"""
 568     hlr_auc_gw_available()
 569     hs20_simulated_sim(dev[0], apdev[0], "AKA'")
 570
 571 def test_ap_hs20_ext_sim(dev, apdev):
 572     """Hotspot 2.0 with external SIM processing"""
 573     hlr_auc_gw_available()
 574     bssid = apdev[0]['bssid']
 575     params = hs20_ap_params()
 576     params['hessid'] = bssid
 577     params['anqp_3gpp_cell_net'] = "232,01"
 578     params['domain_name'] = "wlan.mnc001.mcc232.3gppnetwork.org"
 579     hostapd.add_ap(apdev[0], params)
 580
 581     dev[0].hs20_enable()
 582     try:
 583         dev[0].request("SET external_sim 1")
 584         dev[0].add_cred_values({ 'imsi': "23201-0000000000", 'eap': "SIM" })
 585         interworking_select(dev[0], bssid, "home", freq="2412")
 586         interworking_ext_sim_connect(dev[0], bssid, "SIM")
 587         check_sp_type(dev[0], "home")
 588     finally:
 589         dev[0].request("SET external_sim 0")
 590
 591 def test_ap_hs20_ext_sim_roaming(dev, apdev):
 592     """Hotspot 2.0 with external SIM processing in roaming network"""
 593     hlr_auc_gw_available()
 594     bssid = apdev[0]['bssid']
 595     params = hs20_ap_params()
 596     params['hessid'] = bssid
 597     params['anqp_3gpp_cell_net'] = "244,91;310,026;232,01;234,56"
 598     params['domain_name'] = "wlan.mnc091.mcc244.3gppnetwork.org"
 599     hostapd.add_ap(apdev[0], params)
 600
 601     dev[0].hs20_enable()
 602     try:
 603         dev[0].request("SET external_sim 1")
 604         dev[0].add_cred_values({ 'imsi': "23201-0000000000", 'eap': "SIM" })
 605         interworking_select(dev[0], bssid, "roaming", freq="2412")
 606         interworking_ext_sim_connect(dev[0], bssid, "SIM")
 607         check_sp_type(dev[0], "roaming")
 608     finally:
 609         dev[0].request("SET external_sim 0")
 610
 611 def test_ap_hs20_username(dev, apdev):
 612     """Hotspot 2.0 connection in username/password credential"""
 613     check_eap_capa(dev[0], "MSCHAPV2")
 614     bssid = apdev[0]['bssid']
 615     params = hs20_ap_params()
 616     params['hessid'] = bssid
 617     params['disable_dgaf'] = '1'
 618     hostapd.add_ap(apdev[0], params)
 619
 620     dev[0].hs20_enable()
 621     id = dev[0].add_cred_values({ 'realm': "example.com",
 622                                   'username': "hs20-test",
 623                                   'password': "password",
 624                                   'ca_cert': "auth_serv/ca.pem",
 625                                   'domain': "example.com",
 626                                   'update_identifier': "1234" })
 627     interworking_select(dev[0], bssid, "home", freq="2412")
 628     interworking_connect(dev[0], bssid, "TTLS")
 629     check_sp_type(dev[0], "home")
 630     status = dev[0].get_status()
 631     if status['pairwise_cipher'] != "CCMP":
 632         raise Exception("Unexpected pairwise cipher")
 633     if status['hs20'] != "2":
 634         raise Exception("Unexpected HS 2.0 support indication")
 635
 636     dev[1].connect("test-hs20", key_mgmt="WPA-EAP", eap="TTLS",
 637                    identity="hs20-test", password="password",
 638                    ca_cert="auth_serv/ca.pem", phase2="auth=MSCHAPV2",
 639                    scan_freq="2412")
 640
 641 def test_ap_hs20_connect_api(dev, apdev):
 642     """Hotspot 2.0 connection with connect API"""
 643     check_eap_capa(dev[0], "MSCHAPV2")
 644     bssid = apdev[0]['bssid']
 645     params = hs20_ap_params()
 646     params['hessid'] = bssid
 647     params['disable_dgaf'] = '1'
 648     hostapd.add_ap(apdev[0], params)
 649
 650     wpas = WpaSupplicant(global_iface='/tmp/wpas-wlan5')
 651     wpas.interface_add("wlan5", drv_params="force_connect_cmd=1")
 652     wpas.hs20_enable()
 653     wpas.flush_scan_cache()
 654     id = wpas.add_cred_values({ 'realm': "example.com",
 655                                   'username': "hs20-test",
 656                                   'password': "password",
 657                                   'ca_cert': "auth_serv/ca.pem",
 658                                   'domain': "example.com",
 659                                   'update_identifier': "1234" })
 660     interworking_select(wpas, bssid, "home", freq="2412")
 661     interworking_connect(wpas, bssid, "TTLS")
 662     check_sp_type(wpas, "home")
 663     status = wpas.get_status()
 664     if status['pairwise_cipher'] != "CCMP":
 665         raise Exception("Unexpected pairwise cipher")
 666     if status['hs20'] != "2":
 667         raise Exception("Unexpected HS 2.0 support indication")
 668
 669 def test_ap_hs20_auto_interworking(dev, apdev):
 670     """Hotspot 2.0 connection with auto_interworking=1"""
 671     check_eap_capa(dev[0], "MSCHAPV2")
 672     bssid = apdev[0]['bssid']
 673     params = hs20_ap_params()
 674     params['hessid'] = bssid
 675     params['disable_dgaf'] = '1'
 676     hostapd.add_ap(apdev[0], params)
 677
 678     dev[0].hs20_enable(auto_interworking=True)
 679     id = dev[0].add_cred_values({ 'realm': "example.com",
 680                                   'username': "hs20-test",
 681                                   'password': "password",
 682                                   'ca_cert': "auth_serv/ca.pem",
 683                                   'domain': "example.com",
 684                                   'update_identifier': "1234" })
 685     dev[0].request("REASSOCIATE")
 686     dev[0].wait_connected(timeout=15)
 687     check_sp_type(dev[0], "home")
 688     status = dev[0].get_status()
 689     if status['pairwise_cipher'] != "CCMP":
 690         raise Exception("Unexpected pairwise cipher")
 691     if status['hs20'] != "2":
 692         raise Exception("Unexpected HS 2.0 support indication")
 693
 694 @remote_compatible
 695 def test_ap_hs20_auto_interworking_no_match(dev, apdev):
 696     """Hotspot 2.0 connection with auto_interworking=1 and no matching network"""
 697     hapd = hostapd.add_ap(apdev[0], { "ssid": "mismatch" })
 698
 699     dev[0].hs20_enable(auto_interworking=True)
 700     id = dev[0].connect("mismatch", psk="12345678", scan_freq="2412",
 701                         only_add_network=True)
 702     dev[0].request("ENABLE_NETWORK " + str(id) + " no-connect")
 703
 704     id = dev[0].add_cred_values({ 'realm': "example.com",
 705                                   'username': "hs20-test",
 706                                   'password': "password",
 707                                   'ca_cert': "auth_serv/ca.pem",
 708                                   'domain': "example.com",
 709                                   'update_identifier': "1234" })
 710     dev[0].request("INTERWORKING_SELECT auto freq=2412")
 711     time.sleep(0.1)
 712     dev[0].dump_monitor()
 713     for i in range(5):
 714         logger.info("start ping")
 715         if "PONG" not in dev[0].ctrl.request("PING", timeout=2):
 716             raise Exception("PING failed")
 717         logger.info("ping done")
 718         fetch = 0
 719         scan = 0
 720         for j in range(15):
 721             ev = dev[0].wait_event([ "ANQP fetch completed",
 722                                      "CTRL-EVENT-SCAN-RESULTS" ], timeout=0.05)
 723             if ev is None:
 724                 break
 725             if "ANQP fetch completed" in ev:
 726                 fetch += 1
 727             else:
 728                 scan += 1
 729         if fetch > 2 * scan + 3:
 730             raise Exception("Too many ANQP fetch iterations")
 731         dev[0].dump_monitor()
 732     dev[0].request("DISCONNECT")
 733
 734 @remote_compatible
 735 def test_ap_hs20_auto_interworking_no_cred_match(dev, apdev):
 736     """Hotspot 2.0 connection with auto_interworking=1 but no cred match"""
 737     bssid = apdev[0]['bssid']
 738     params = { "ssid": "test" }
 739     hostapd.add_ap(apdev[0], params)
 740
 741     dev[0].hs20_enable(auto_interworking=True)
 742     dev[0].add_cred_values({ 'realm': "example.com",
 743                              'username': "hs20-test",
 744                              'password': "password",
 745                              'ca_cert': "auth_serv/ca.pem",
 746                              'domain': "example.com" })
 747
 748     id = dev[0].connect("test", psk="12345678", only_add_network=True)
 749     dev[0].request("ENABLE_NETWORK %s" % id)
 750     logger.info("Verify that scanning continues when there is partial network block match")
 751     for i in range(0, 2):
 752         ev = dev[0].wait_event(["CTRL-EVENT-SCAN-RESULTS"], 10)
 753         if ev is None:
 754             raise Exception("Scan timed out")
 755         logger.info("Scan completed")
 756
 757 def eap_test(dev, ap, eap_params, method, user):
 758     bssid = ap['bssid']
 759     params = hs20_ap_params()
 760     params['nai_realm'] = [ "0,example.com," + eap_params ]
 761     hostapd.add_ap(ap, params)
 762
 763     dev.hs20_enable()
 764     dev.add_cred_values({ 'realm': "example.com",
 765                           'ca_cert': "auth_serv/ca.pem",
 766                           'username': user,
 767                           'password': "password" })
 768     interworking_select(dev, bssid, freq="2412")
 769     interworking_connect(dev, bssid, method)
 770
 771 @remote_compatible
 772 def test_ap_hs20_eap_unknown(dev, apdev):
 773     """Hotspot 2.0 connection with unknown EAP method"""
 774     bssid = apdev[0]['bssid']
 775     params = hs20_ap_params()
 776     params['nai_realm'] = "0,example.com,99"
 777     hostapd.add_ap(apdev[0], params)
 778
 779     dev[0].hs20_enable()
 780     dev[0].add_cred_values(default_cred())
 781     interworking_select(dev[0], None, no_match=True, freq="2412")
 782
 783 def test_ap_hs20_eap_peap_mschapv2(dev, apdev):
 784     """Hotspot 2.0 connection with PEAP/MSCHAPV2"""
 785     check_eap_capa(dev[0], "MSCHAPV2")
 786     eap_test(dev[0], apdev[0], "25[3:26]", "PEAP", "user")
 787
 788 def test_ap_hs20_eap_peap_default(dev, apdev):
 789     """Hotspot 2.0 connection with PEAP/MSCHAPV2 (as default)"""
 790     check_eap_capa(dev[0], "MSCHAPV2")
 791     eap_test(dev[0], apdev[0], "25", "PEAP", "user")
 792
 793 def test_ap_hs20_eap_peap_gtc(dev, apdev):
 794     """Hotspot 2.0 connection with PEAP/GTC"""
 795     eap_test(dev[0], apdev[0], "25[3:6]", "PEAP", "user")
 796
 797 @remote_compatible
 798 def test_ap_hs20_eap_peap_unknown(dev, apdev):
 799     """Hotspot 2.0 connection with PEAP/unknown"""
 800     bssid = apdev[0]['bssid']
 801     params = hs20_ap_params()
 802     params['nai_realm'] = "0,example.com,25[3:99]"
 803     hostapd.add_ap(apdev[0], params)
 804
 805     dev[0].hs20_enable()
 806     dev[0].add_cred_values(default_cred())
 807     interworking_select(dev[0], None, no_match=True, freq="2412")
 808
 809 def test_ap_hs20_eap_ttls_chap(dev, apdev):
 810     """Hotspot 2.0 connection with TTLS/CHAP"""
 811     skip_with_fips(dev[0])
 812     eap_test(dev[0], apdev[0], "21[2:2]", "TTLS", "chap user")
 813
 814 def test_ap_hs20_eap_ttls_mschap(dev, apdev):
 815     """Hotspot 2.0 connection with TTLS/MSCHAP"""
 816     skip_with_fips(dev[0])
 817     eap_test(dev[0], apdev[0], "21[2:3]", "TTLS", "mschap user")
 818
 819 def test_ap_hs20_eap_ttls_default(dev, apdev):
 820     """Hotspot 2.0 connection with TTLS/default"""
 821     skip_with_fips(dev[0])
 822     eap_test(dev[0], apdev[0], "21", "TTLS", "hs20-test")
 823
 824 def test_ap_hs20_eap_ttls_eap_mschapv2(dev, apdev):
 825     """Hotspot 2.0 connection with TTLS/EAP-MSCHAPv2"""
 826     check_eap_capa(dev[0], "MSCHAPV2")
 827     eap_test(dev[0], apdev[0], "21[3:26][6:7][99:99]", "TTLS", "user")
 828
 829 @remote_compatible
 830 def test_ap_hs20_eap_ttls_eap_unknown(dev, apdev):
 831     """Hotspot 2.0 connection with TTLS/EAP-unknown"""
 832     bssid = apdev[0]['bssid']
 833     params = hs20_ap_params()
 834     params['nai_realm'] = "0,example.com,21[3:99]"
 835     hostapd.add_ap(apdev[0], params)
 836
 837     dev[0].hs20_enable()
 838     dev[0].add_cred_values(default_cred())
 839     interworking_select(dev[0], None, no_match=True, freq="2412")
 840
 841 @remote_compatible
 842 def test_ap_hs20_eap_ttls_eap_unsupported(dev, apdev):
 843     """Hotspot 2.0 connection with TTLS/EAP-OTP(unsupported)"""
 844     bssid = apdev[0]['bssid']
 845     params = hs20_ap_params()
 846     params['nai_realm'] = "0,example.com,21[3:5]"
 847     hostapd.add_ap(apdev[0], params)
 848
 849     dev[0].hs20_enable()
 850     dev[0].add_cred_values(default_cred())
 851     interworking_select(dev[0], None, no_match=True, freq="2412")
 852
 853 @remote_compatible
 854 def test_ap_hs20_eap_ttls_unknown(dev, apdev):
 855     """Hotspot 2.0 connection with TTLS/unknown"""
 856     bssid = apdev[0]['bssid']
 857     params = hs20_ap_params()
 858     params['nai_realm'] = "0,example.com,21[2:5]"
 859     hostapd.add_ap(apdev[0], params)
 860
 861     dev[0].hs20_enable()
 862     dev[0].add_cred_values(default_cred())
 863     interworking_select(dev[0], None, no_match=True, freq="2412")
 864
 865 def test_ap_hs20_eap_fast_mschapv2(dev, apdev):
 866     """Hotspot 2.0 connection with FAST/EAP-MSCHAPV2"""
 867     check_eap_capa(dev[0], "FAST")
 868     eap_test(dev[0], apdev[0], "43[3:26]", "FAST", "user")
 869
 870 def test_ap_hs20_eap_fast_gtc(dev, apdev):
 871     """Hotspot 2.0 connection with FAST/EAP-GTC"""
 872     check_eap_capa(dev[0], "FAST")
 873     eap_test(dev[0], apdev[0], "43[3:6]", "FAST", "user")
 874
 875 def test_ap_hs20_eap_tls(dev, apdev):
 876     """Hotspot 2.0 connection with EAP-TLS"""
 877     bssid = apdev[0]['bssid']
 878     params = hs20_ap_params()
 879     params['nai_realm'] = [ "0,example.com,13[5:6]" ]
 880     hostapd.add_ap(apdev[0], params)
 881
 882     dev[0].hs20_enable()
 883     dev[0].add_cred_values({ 'realm': "example.com",
 884                              'username': "certificate-user",
 885                              'ca_cert': "auth_serv/ca.pem",
 886                              'client_cert': "auth_serv/user.pem",
 887                              'private_key': "auth_serv/user.key"})
 888     interworking_select(dev[0], bssid, freq="2412")
 889     interworking_connect(dev[0], bssid, "TLS")
 890
 891 @remote_compatible
 892 def test_ap_hs20_eap_cert_unknown(dev, apdev):
 893     """Hotspot 2.0 connection with certificate, but unknown EAP method"""
 894     bssid = apdev[0]['bssid']
 895     params = hs20_ap_params()
 896     params['nai_realm'] = [ "0,example.com,99[5:6]" ]
 897     hostapd.add_ap(apdev[0], params)
 898
 899     dev[0].hs20_enable()
 900     dev[0].add_cred_values({ 'realm': "example.com",
 901                              'username': "certificate-user",
 902                              'ca_cert': "auth_serv/ca.pem",
 903                              'client_cert': "auth_serv/user.pem",
 904                              'private_key': "auth_serv/user.key"})
 905     interworking_select(dev[0], None, no_match=True, freq="2412")
 906
 907 @remote_compatible
 908 def test_ap_hs20_eap_cert_unsupported(dev, apdev):
 909     """Hotspot 2.0 connection with certificate, but unsupported TTLS"""
 910     bssid = apdev[0]['bssid']
 911     params = hs20_ap_params()
 912     params['nai_realm'] = [ "0,example.com,21[5:6]" ]
 913     hostapd.add_ap(apdev[0], params)
 914
 915     dev[0].hs20_enable()
 916     dev[0].add_cred_values({ 'realm': "example.com",
 917                              'username': "certificate-user",
 918                              'ca_cert': "auth_serv/ca.pem",
 919                              'client_cert': "auth_serv/user.pem",
 920                              'private_key': "auth_serv/user.key"})
 921     interworking_select(dev[0], None, no_match=True, freq="2412")
 922
 923 @remote_compatible
 924 def test_ap_hs20_eap_invalid_cred(dev, apdev):
 925     """Hotspot 2.0 connection with invalid cred configuration"""
 926     bssid = apdev[0]['bssid']
 927     params = hs20_ap_params()
 928     hostapd.add_ap(apdev[0], params)
 929
 930     dev[0].hs20_enable()
 931     dev[0].add_cred_values({ 'realm': "example.com",
 932                              'username': "certificate-user",
 933                              'client_cert': "auth_serv/user.pem" })
 934     interworking_select(dev[0], None, no_match=True, freq="2412")
 935
 936 def test_ap_hs20_nai_realms(dev, apdev):
 937     """Hotspot 2.0 connection and multiple NAI realms and TTLS/PAP"""
 938     bssid = apdev[0]['bssid']
 939     params = hs20_ap_params()
 940     params['hessid'] = bssid
 941     params['nai_realm'] = [ "0,no.match.here;example.com;no.match.here.either,21[2:1][5:7]" ]
 942     hostapd.add_ap(apdev[0], params)
 943
 944     dev[0].hs20_enable()
 945     id = dev[0].add_cred_values({ 'realm': "example.com",
 946                                   'ca_cert': "auth_serv/ca.pem",
 947                                   'username': "pap user",
 948                                   'password': "password",
 949                                   'domain': "example.com" })
 950     interworking_select(dev[0], bssid, "home", freq="2412")
 951     interworking_connect(dev[0], bssid, "TTLS")
 952     check_sp_type(dev[0], "home")
 953
 954 def test_ap_hs20_roaming_consortium(dev, apdev):
 955     """Hotspot 2.0 connection based on roaming consortium match"""
 956     bssid = apdev[0]['bssid']
 957     params = hs20_ap_params()
 958     params['hessid'] = bssid
 959     hostapd.add_ap(apdev[0], params)
 960
 961     dev[0].hs20_enable()
 962     for consortium in [ "112233", "1020304050", "010203040506", "fedcba" ]:
 963         id = dev[0].add_cred_values({ 'username': "user",
 964                                       'password': "password",
 965                                       'domain': "example.com",
 966                                       'ca_cert': "auth_serv/ca.pem",
 967                                       'roaming_consortium': consortium,
 968                                       'eap': "PEAP" })
 969         interworking_select(dev[0], bssid, "home", freq="2412")
 970         interworking_connect(dev[0], bssid, "PEAP")
 971         check_sp_type(dev[0], "home")
 972         dev[0].request("INTERWORKING_SELECT auto freq=2412")
 973         ev = dev[0].wait_event(["INTERWORKING-ALREADY-CONNECTED"], timeout=15)
 974         if ev is None:
 975             raise Exception("Timeout on already-connected event")
 976         dev[0].remove_cred(id)
 977
 978 def test_ap_hs20_roaming_consortium_invalid(dev, apdev):
 979     """Hotspot 2.0 connection and invalid roaming consortium ANQP-element"""
 980     bssid = apdev[0]['bssid']
 981     params = hs20_ap_params()
 982     params['hessid'] = bssid
 983     # Override Roaming Consortium ANQP-element with an incorrectly encoded
 984     # value.
 985     params['anqp_elem'] = "261:04fedcba"
 986     hostapd.add_ap(apdev[0], params)
 987
 988     dev[0].hs20_enable()
 989     id = dev[0].add_cred_values({ 'username': "user",
 990                                   'password': "password",
 991                                   'domain': "example.com",
 992                                   'ca_cert': "auth_serv/ca.pem",
 993                                   'roaming_consortium': "fedcba",
 994                                   'eap': "PEAP" })
 995     interworking_select(dev[0], bssid, "home", freq="2412", no_match=True)
 996
 997 def test_ap_hs20_roaming_consortium_element(dev, apdev):
 998     """Hotspot 2.0 connection and invalid roaming consortium element"""
 999     bssid = apdev[0]['bssid']
1000     params = hs20_ap_params()
1001     params['hessid'] = bssid
1002     del params['roaming_consortium']
1003     params['vendor_elements'] = '6f00'
1004     hapd = hostapd.add_ap(apdev[0], params)
1005
1006     dev[0].hs20_enable()
1007     dev[0].scan_for_bss(bssid, freq="2412")
1008     id = dev[0].add_cred_values({ 'username': "user",
1009                                   'password': "password",
1010                                   'domain': "example.com",
1011                                   'ca_cert': "auth_serv/ca.pem",
1012                                   'roaming_consortium': "112233",
1013                                   'eap': "PEAP" })
1014     interworking_select(dev[0], bssid, freq="2412", no_match=True)
1015
1016     hapd.set('vendor_elements', '6f020001')
1017     if "OK" not in hapd.request("UPDATE_BEACON"):
1018         raise Exception("UPDATE_BEACON failed")
1019     dev[0].request("BSS_FLUSH 0")
1020     dev[0].scan_for_bss(bssid, freq="2412", force_scan=True)
1021     interworking_select(dev[0], bssid, freq="2412", no_match=True)
1022
1023 def test_ap_hs20_roaming_consortium_constraints(dev, apdev):
1024     """Hotspot 2.0 connection and roaming consortium constraints"""
1025     bssid = apdev[0]['bssid']
1026     params = hs20_ap_params()
1027     params['hessid'] = bssid
1028     params['bss_load_test'] = "12:200:20000"
1029     hostapd.add_ap(apdev[0], params)
1030
1031     dev[0].hs20_enable()
1032
1033     vals = { 'username': "user",
1034              'password': "password",
1035              'domain': "example.com",
1036              'ca_cert': "auth_serv/ca.pem",
1037              'roaming_consortium': "fedcba",
1038              'eap': "TTLS" }
1039     vals2 = vals.copy()
1040     vals2['required_roaming_consortium'] = "223344"
1041     id = dev[0].add_cred_values(vals2)
1042     interworking_select(dev[0], bssid, "home", freq="2412", no_match=True)
1043     dev[0].remove_cred(id)
1044
1045     vals2 = vals.copy()
1046     vals2['min_dl_bandwidth_home'] = "65500"
1047     id = dev[0].add_cred_values(vals2)
1048     dev[0].request("INTERWORKING_SELECT freq=2412")
1049     ev = dev[0].wait_event(["INTERWORKING-AP"], timeout=15)
1050     if ev is None:
1051         raise Exception("No AP found")
1052     if "below_min_backhaul=1" not in ev:
1053         raise Exception("below_min_backhaul not reported")
1054     dev[0].remove_cred(id)
1055
1056     vals2 = vals.copy()
1057     vals2['max_bss_load'] = "100"
1058     id = dev[0].add_cred_values(vals2)
1059     dev[0].request("INTERWORKING_SELECT freq=2412")
1060     ev = dev[0].wait_event(["INTERWORKING-AP"], timeout=15)
1061     if ev is None:
1062         raise Exception("No AP found")
1063     if "over_max_bss_load=1" not in ev:
1064         raise Exception("over_max_bss_load not reported")
1065     dev[0].remove_cred(id)
1066
1067     vals2 = vals.copy()
1068     vals2['req_conn_capab'] = "6:1234"
1069     vals2['domain'] = 'example.org'
1070     id = dev[0].add_cred_values(vals2)
1071
1072     dev[0].request("INTERWORKING_SELECT freq=2412")
1073     ev = dev[0].wait_event(["INTERWORKING-AP"], timeout=15)
1074     if ev is None:
1075         raise Exception("No AP found")
1076     if "conn_capab_missing=1" not in ev:
1077         raise Exception("conn_capab_missing not reported")
1078     dev[0].remove_cred(id)
1079
1080     values = default_cred()
1081     values['roaming_consortium'] = "fedcba"
1082     id3 = dev[0].add_cred_values(values)
1083
1084     vals2 = vals.copy()
1085     vals2['roaming_consortium'] = "fedcba"
1086     vals2['priority'] = "2"
1087     id = dev[0].add_cred_values(vals2)
1088
1089     values = default_cred()
1090     values['roaming_consortium'] = "fedcba"
1091     id2 = dev[0].add_cred_values(values)
1092
1093     dev[0].request("INTERWORKING_SELECT freq=2412")
1094     ev = dev[0].wait_event(["INTERWORKING-AP"], timeout=15)
1095     if ev is None:
1096         raise Exception("No AP found")
1097     dev[0].remove_cred(id)
1098     dev[0].remove_cred(id2)
1099     dev[0].remove_cred(id3)
1100
1101 def test_ap_hs20_3gpp_constraints(dev, apdev):
1102     """Hotspot 2.0 connection and 3GPP credential constraints"""
1103     bssid = apdev[0]['bssid']
1104     params = hs20_ap_params()
1105     params['hessid'] = bssid
1106     params['anqp_3gpp_cell_net'] = "555,444"
1107     params['domain_name'] = "wlan.mnc444.mcc555.3gppnetwork.org"
1108     params['bss_load_test'] = "12:200:20000"
1109     hapd = hostapd.add_ap(apdev[0], params)
1110
1111     dev[0].hs20_enable()
1112
1113     vals = { 'imsi': "555444-333222111",
1114              'eap': "SIM",
1115              'milenage': "5122250214c33e723a5dd523fc145fc0:981d464c7c52eb6e5036234984ad0bcf:000000000123" }
1116     vals2 = vals.copy()
1117     vals2['required_roaming_consortium'] = "223344"
1118     id = dev[0].add_cred_values(vals2)
1119     interworking_select(dev[0], bssid, "home", freq="2412", no_match=True)
1120     dev[0].remove_cred(id)
1121
1122     vals2 = vals.copy()
1123     vals2['min_dl_bandwidth_home'] = "65500"
1124     id = dev[0].add_cred_values(vals2)
1125     dev[0].request("INTERWORKING_SELECT freq=2412")
1126     ev = dev[0].wait_event(["INTERWORKING-AP"], timeout=15)
1127     if ev is None:
1128         raise Exception("No AP found")
1129     if "below_min_backhaul=1" not in ev:
1130         raise Exception("below_min_backhaul not reported")
1131     dev[0].remove_cred(id)
1132
1133     vals2 = vals.copy()
1134     vals2['max_bss_load'] = "100"
1135     id = dev[0].add_cred_values(vals2)
1136     dev[0].request("INTERWORKING_SELECT freq=2412")
1137     ev = dev[0].wait_event(["INTERWORKING-AP"], timeout=15)
1138     if ev is None:
1139         raise Exception("No AP found")
1140     if "over_max_bss_load=1" not in ev:
1141         raise Exception("over_max_bss_load not reported")
1142     dev[0].remove_cred(id)
1143
1144     values = default_cred()
1145     values['roaming_consortium'] = "fedcba"
1146     id3 = dev[0].add_cred_values(values)
1147
1148     vals2 = vals.copy()
1149     vals2['roaming_consortium'] = "fedcba"
1150     vals2['priority'] = "2"
1151     id = dev[0].add_cred_values(vals2)
1152
1153     values = default_cred()
1154     values['roaming_consortium'] = "fedcba"
1155     id2 = dev[0].add_cred_values(values)
1156
1157     dev[0].request("INTERWORKING_SELECT freq=2412")
1158     ev = dev[0].wait_event(["INTERWORKING-AP"], timeout=15)
1159     if ev is None:
1160         raise Exception("No AP found")
1161     dev[0].remove_cred(id)
1162     dev[0].remove_cred(id2)
1163     dev[0].remove_cred(id3)
1164
1165     hapd.disable()
1166     params = hs20_ap_params()
1167     params['hessid'] = bssid
1168     params['anqp_3gpp_cell_net'] = "555,444"
1169     params['bss_load_test'] = "12:200:20000"
1170     hapd = hostapd.add_ap(apdev[0], params)
1171     vals2 = vals.copy()
1172     vals2['req_conn_capab'] = "6:1234"
1173     id = dev[0].add_cred_values(vals2)
1174     dev[0].request("INTERWORKING_SELECT freq=2412")
1175     ev = dev[0].wait_event(["INTERWORKING-AP"], timeout=15)
1176     if ev is None:
1177         raise Exception("No AP found")
1178     if "conn_capab_missing=1" not in ev:
1179         raise Exception("conn_capab_missing not reported")
1180     dev[0].remove_cred(id)
1181
1182 def test_ap_hs20_connect_no_full_match(dev, apdev):
1183     """Hotspot 2.0 connection and no full match"""
1184     bssid = apdev[0]['bssid']
1185     params = hs20_ap_params()
1186     params['hessid'] = bssid
1187     params['anqp_3gpp_cell_net'] = "555,444"
1188     hostapd.add_ap(apdev[0], params)
1189
1190     dev[0].hs20_enable()
1191
1192     vals = { 'username': "user",
1193              'password': "password",
1194              'domain': "example.com",
1195              'ca_cert': "auth_serv/ca.pem",
1196              'roaming_consortium': "fedcba",
1197              'eap': "TTLS",
1198              'min_dl_bandwidth_home': "65500" }
1199     id = dev[0].add_cred_values(vals)
1200     dev[0].request("INTERWORKING_SELECT freq=2412")
1201     ev = dev[0].wait_event(["INTERWORKING-AP"], timeout=15)
1202     if ev is None:
1203         raise Exception("No AP found")
1204     if "below_min_backhaul=1" not in ev:
1205         raise Exception("below_min_backhaul not reported")
1206     interworking_connect(dev[0], bssid, "TTLS")
1207     dev[0].remove_cred(id)
1208     dev[0].wait_disconnected()
1209
1210     vals = { 'imsi': "555444-333222111", 'eap': "SIM",
1211              'milenage': "5122250214c33e723a5dd523fc145fc0:981d464c7c52eb6e5036234984ad0bcf:000000000123",
1212              'min_dl_bandwidth_roaming': "65500" }
1213     id = dev[0].add_cred_values(vals)
1214     dev[0].request("INTERWORKING_SELECT freq=2412")
1215     ev = dev[0].wait_event(["INTERWORKING-AP"], timeout=15)
1216     if ev is None:
1217         raise Exception("No AP found")
1218     if "below_min_backhaul=1" not in ev:
1219         raise Exception("below_min_backhaul not reported")
1220     interworking_connect(dev[0], bssid, "SIM")
1221     dev[0].remove_cred(id)
1222     dev[0].wait_disconnected()
1223
1224 def test_ap_hs20_username_roaming(dev, apdev):
1225     """Hotspot 2.0 connection in username/password credential (roaming)"""
1226     check_eap_capa(dev[0], "MSCHAPV2")
1227     bssid = apdev[0]['bssid']
1228     params = hs20_ap_params()
1229     params['nai_realm'] = [ "0,example.com,13[5:6],21[2:4][5:7]",
1230                             "0,roaming.example.com,21[2:4][5:7]",
1231                             "0,another.example.com" ]
1232     params['domain_name'] = "another.example.com"
1233     params['hessid'] = bssid
1234     hostapd.add_ap(apdev[0], params)
1235
1236     dev[0].hs20_enable()
1237     id = dev[0].add_cred_values({ 'realm': "roaming.example.com",
1238                                   'username': "hs20-test",
1239                                   'password': "password",
1240                                   'ca_cert': "auth_serv/ca.pem",
1241                                   'domain': "example.com" })
1242     interworking_select(dev[0], bssid, "roaming", freq="2412")
1243     interworking_connect(dev[0], bssid, "TTLS")
1244     check_sp_type(dev[0], "roaming")
1245
1246 def test_ap_hs20_username_unknown(dev, apdev):
1247     """Hotspot 2.0 connection in username/password credential (no domain in cred)"""
1248     check_eap_capa(dev[0], "MSCHAPV2")
1249     bssid = apdev[0]['bssid']
1250     params = hs20_ap_params()
1251     params['hessid'] = bssid
1252     hostapd.add_ap(apdev[0], params)
1253
1254     dev[0].hs20_enable()
1255     id = dev[0].add_cred_values({ 'realm': "example.com",
1256                                   'ca_cert': "auth_serv/ca.pem",
1257                                   'username': "hs20-test",
1258                                   'password': "password" })
1259     interworking_select(dev[0], bssid, "unknown", freq="2412")
1260     interworking_connect(dev[0], bssid, "TTLS")
1261     check_sp_type(dev[0], "unknown")
1262
1263 def test_ap_hs20_username_unknown2(dev, apdev):
1264     """Hotspot 2.0 connection in username/password credential (no domain advertized)"""
1265     check_eap_capa(dev[0], "MSCHAPV2")
1266     bssid = apdev[0]['bssid']
1267     params = hs20_ap_params()
1268     params['hessid'] = bssid
1269     del params['domain_name']
1270     hostapd.add_ap(apdev[0], params)
1271
1272     dev[0].hs20_enable()
1273     id = dev[0].add_cred_values({ 'realm': "example.com",
1274                                   'ca_cert': "auth_serv/ca.pem",
1275                                   'username': "hs20-test",
1276                                   'password': "password",
1277                                   'domain': "example.com" })
1278     interworking_select(dev[0], bssid, "unknown", freq="2412")
1279     interworking_connect(dev[0], bssid, "TTLS")
1280     check_sp_type(dev[0], "unknown")
1281
1282 def test_ap_hs20_gas_while_associated(dev, apdev):
1283     """Hotspot 2.0 connection with GAS query while associated"""
1284     check_eap_capa(dev[0], "MSCHAPV2")
1285     bssid = apdev[0]['bssid']
1286     params = hs20_ap_params()
1287     params['hessid'] = bssid
1288     hostapd.add_ap(apdev[0], params)
1289
1290     dev[0].hs20_enable()
1291     id = dev[0].add_cred_values({ 'realm': "example.com",
1292                                   'ca_cert': "auth_serv/ca.pem",
1293                                   'username': "hs20-test",
1294                                   'password': "password",
1295                                   'domain': "example.com" })
1296     interworking_select(dev[0], bssid, "home", freq="2412")
1297     interworking_connect(dev[0], bssid, "TTLS")
1298
1299     logger.info("Verifying GAS query while associated")
1300     dev[0].request("FETCH_ANQP")
1301     for i in range(0, 6):
1302         ev = dev[0].wait_event(["RX-ANQP"], timeout=5)
1303         if ev is None:
1304             raise Exception("Operation timed out")
1305
1306 def test_ap_hs20_gas_with_another_ap_while_associated(dev, apdev):
1307     """GAS query with another AP while associated"""
1308     check_eap_capa(dev[0], "MSCHAPV2")
1309     bssid = apdev[0]['bssid']
1310     params = hs20_ap_params()
1311     params['hessid'] = bssid
1312     hostapd.add_ap(apdev[0], params)
1313
1314     bssid2 = apdev[1]['bssid']
1315     params = hs20_ap_params()
1316     params['hessid'] = bssid2
1317     params['nai_realm'] = [ "0,no-match.example.org,13[5:6],21[2:4][5:7]" ]
1318     hostapd.add_ap(apdev[1], params)
1319
1320     dev[0].hs20_enable()
1321     id = dev[0].add_cred_values({ 'realm': "example.com",
1322                                   'ca_cert': "auth_serv/ca.pem",
1323                                   'username': "hs20-test",
1324                                   'password': "password",
1325                                   'domain': "example.com" })
1326     interworking_select(dev[0], bssid, "home", freq="2412")
1327     interworking_connect(dev[0], bssid, "TTLS")
1328     dev[0].dump_monitor()
1329
1330     logger.info("Verifying GAS query with same AP while associated")
1331     dev[0].request("ANQP_GET " + bssid + " 263")
1332     ev = dev[0].wait_event(["RX-ANQP"], timeout=5)
1333     if ev is None:
1334         raise Exception("ANQP operation timed out")
1335     dev[0].dump_monitor()
1336
1337     logger.info("Verifying GAS query with another AP while associated")
1338     dev[0].scan_for_bss(bssid2, 2412)
1339     dev[0].request("ANQP_GET " + bssid2 + " 263")
1340     ev = dev[0].wait_event(["RX-ANQP"], timeout=5)
1341     if ev is None:
1342         raise Exception("ANQP operation timed out")
1343
1344 def test_ap_hs20_gas_while_associated_with_pmf(dev, apdev):
1345     """Hotspot 2.0 connection with GAS query while associated and using PMF"""
1346     check_eap_capa(dev[0], "MSCHAPV2")
1347     try:
1348         _test_ap_hs20_gas_while_associated_with_pmf(dev, apdev)
1349     finally:
1350         dev[0].request("SET pmf 0")
1351
1352 def _test_ap_hs20_gas_while_associated_with_pmf(dev, apdev):
1353     bssid = apdev[0]['bssid']
1354     params = hs20_ap_params()
1355     params['hessid'] = bssid
1356     hostapd.add_ap(apdev[0], params)
1357
1358     bssid2 = apdev[1]['bssid']
1359     params = hs20_ap_params()
1360     params['hessid'] = bssid2
1361     params['nai_realm'] = [ "0,no-match.example.org,13[5:6],21[2:4][5:7]" ]
1362     hostapd.add_ap(apdev[1], params)
1363
1364     dev[0].hs20_enable()
1365     dev[0].request("SET pmf 2")
1366     id = dev[0].add_cred_values({ 'realm': "example.com",
1367                                   'ca_cert': "auth_serv/ca.pem",
1368                                   'username': "hs20-test",
1369                                   'password': "password",
1370                                   'domain': "example.com" })
1371     interworking_select(dev[0], bssid, "home", freq="2412")
1372     interworking_connect(dev[0], bssid, "TTLS")
1373
1374     logger.info("Verifying GAS query while associated")
1375     dev[0].request("FETCH_ANQP")
1376     for i in range(0, 2 * 6):
1377         ev = dev[0].wait_event(["RX-ANQP"], timeout=5)
1378         if ev is None:
1379             raise Exception("Operation timed out")
1380
1381 def test_ap_hs20_gas_with_another_ap_while_using_pmf(dev, apdev):
1382     """GAS query with another AP while associated and using PMF"""
1383     check_eap_capa(dev[0], "MSCHAPV2")
1384     try:
1385         _test_ap_hs20_gas_with_another_ap_while_using_pmf(dev, apdev)
1386     finally:
1387         dev[0].request("SET pmf 0")
1388
1389 def _test_ap_hs20_gas_with_another_ap_while_using_pmf(dev, apdev):
1390     bssid = apdev[0]['bssid']
1391     params = hs20_ap_params()
1392     params['hessid'] = bssid
1393     hostapd.add_ap(apdev[0], params)
1394
1395     bssid2 = apdev[1]['bssid']
1396     params = hs20_ap_params()
1397     params['hessid'] = bssid2
1398     params['nai_realm'] = [ "0,no-match.example.org,13[5:6],21[2:4][5:7]" ]
1399     hostapd.add_ap(apdev[1], params)
1400
1401     dev[0].hs20_enable()
1402     dev[0].request("SET pmf 2")
1403     id = dev[0].add_cred_values({ 'realm': "example.com",
1404                                   'ca_cert': "auth_serv/ca.pem",
1405                                   'username': "hs20-test",
1406                                   'password': "password",
1407                                   'domain': "example.com" })
1408     interworking_select(dev[0], bssid, "home", freq="2412")
1409     interworking_connect(dev[0], bssid, "TTLS")
1410     dev[0].dump_monitor()
1411
1412     logger.info("Verifying GAS query with same AP while associated")
1413     dev[0].request("ANQP_GET " + bssid + " 263")
1414     ev = dev[0].wait_event(["RX-ANQP"], timeout=5)
1415     if ev is None:
1416         raise Exception("ANQP operation timed out")
1417     dev[0].dump_monitor()
1418
1419     logger.info("Verifying GAS query with another AP while associated")
1420     dev[0].scan_for_bss(bssid2, 2412)
1421     dev[0].request("ANQP_GET " + bssid2 + " 263")
1422     ev = dev[0].wait_event(["RX-ANQP"], timeout=5)
1423     if ev is None:
1424         raise Exception("ANQP operation timed out")
1425
1426 def test_ap_hs20_gas_frag_while_associated(dev, apdev):
1427     """Hotspot 2.0 connection with fragmented GAS query while associated"""
1428     check_eap_capa(dev[0], "MSCHAPV2")
1429     bssid = apdev[0]['bssid']
1430     params = hs20_ap_params()
1431     params['hessid'] = bssid
1432     hapd = hostapd.add_ap(apdev[0], params)
1433     hapd.set("gas_frag_limit", "50")
1434
1435     dev[0].hs20_enable()
1436     id = dev[0].add_cred_values({ 'realm': "example.com",
1437                                   'ca_cert': "auth_serv/ca.pem",
1438                                   'username': "hs20-test",
1439                                   'password': "password",
1440                                   'domain': "example.com" })
1441     interworking_select(dev[0], bssid, "home", freq="2412")
1442     interworking_connect(dev[0], bssid, "TTLS")
1443
1444     logger.info("Verifying GAS query while associated")
1445     dev[0].request("FETCH_ANQP")
1446     for i in range(0, 6):
1447         ev = dev[0].wait_event(["RX-ANQP"], timeout=5)
1448         if ev is None:
1449             raise Exception("Operation timed out")
1450
1451 def test_ap_hs20_multiple_connects(dev, apdev):
1452     """Hotspot 2.0 connection through multiple network selections"""
1453     check_eap_capa(dev[0], "MSCHAPV2")
1454     bssid = apdev[0]['bssid']
1455     params = hs20_ap_params()
1456     params['hessid'] = bssid
1457     hostapd.add_ap(apdev[0], params)
1458
1459     dev[0].hs20_enable()
1460     values = { 'realm': "example.com",
1461                'ca_cert': "auth_serv/ca.pem",
1462                'username': "hs20-test",
1463                'password': "password",
1464                'domain': "example.com" }
1465     id = dev[0].add_cred_values(values)
1466
1467     dev[0].scan_for_bss(bssid, freq="2412")
1468
1469     for i in range(0, 3):
1470         logger.info("Starting Interworking network selection")
1471         dev[0].request("INTERWORKING_SELECT auto freq=2412")
1472         while True:
1473             ev = dev[0].wait_event(["INTERWORKING-NO-MATCH",
1474                                     "INTERWORKING-ALREADY-CONNECTED",
1475                                     "CTRL-EVENT-CONNECTED"], timeout=15)
1476             if ev is None:
1477                 raise Exception("Connection timed out")
1478             if "INTERWORKING-NO-MATCH" in ev:
1479                 raise Exception("Matching AP not found")
1480             if "CTRL-EVENT-CONNECTED" in ev:
1481                 break
1482             if i == 2 and "INTERWORKING-ALREADY-CONNECTED" in ev:
1483                 break
1484         if i == 0:
1485             dev[0].request("DISCONNECT")
1486         dev[0].dump_monitor()
1487
1488     networks = dev[0].list_networks()
1489     if len(networks) > 1:
1490         raise Exception("Duplicated network block detected")
1491
1492 def test_ap_hs20_disallow_aps(dev, apdev):
1493     """Hotspot 2.0 connection and disallow_aps"""
1494     bssid = apdev[0]['bssid']
1495     params = hs20_ap_params()
1496     params['hessid'] = bssid
1497     hostapd.add_ap(apdev[0], params)
1498
1499     dev[0].hs20_enable()
1500     values = { 'realm': "example.com",
1501                'ca_cert': "auth_serv/ca.pem",
1502                'username': "hs20-test",
1503                'password': "password",
1504                'domain': "example.com" }
1505     id = dev[0].add_cred_values(values)
1506
1507     dev[0].scan_for_bss(bssid, freq="2412")
1508
1509     logger.info("Verify disallow_aps bssid")
1510     dev[0].request("SET disallow_aps bssid " + bssid.translate(None, ':'))
1511     dev[0].request("INTERWORKING_SELECT auto")
1512     ev = dev[0].wait_event(["INTERWORKING-NO-MATCH"], timeout=15)
1513     if ev is None:
1514         raise Exception("Network selection timed out")
1515     dev[0].dump_monitor()
1516
1517     logger.info("Verify disallow_aps ssid")
1518     dev[0].request("SET disallow_aps ssid 746573742d68733230")
1519     dev[0].request("INTERWORKING_SELECT auto freq=2412")
1520     ev = dev[0].wait_event(["INTERWORKING-NO-MATCH"], timeout=15)
1521     if ev is None:
1522         raise Exception("Network selection timed out")
1523     dev[0].dump_monitor()
1524
1525     logger.info("Verify disallow_aps clear")
1526     dev[0].request("SET disallow_aps ")
1527     interworking_select(dev[0], bssid, "home", freq="2412")
1528
1529     dev[0].request("SET disallow_aps bssid " + bssid.translate(None, ':'))
1530     ret = dev[0].request("INTERWORKING_CONNECT " + bssid)
1531     if "FAIL" not in ret:
1532         raise Exception("INTERWORKING_CONNECT to disallowed BSS not rejected")
1533
1534     if "FAIL" not in dev[0].request("INTERWORKING_CONNECT foo"):
1535         raise Exception("Invalid INTERWORKING_CONNECT not rejected")
1536     if "FAIL" not in dev[0].request("INTERWORKING_CONNECT 00:11:22:33:44:55"):
1537         raise Exception("Invalid INTERWORKING_CONNECT not rejected")
1538
1539 def policy_test(dev, ap, values, only_one=True):
1540     dev.dump_monitor()
1541     if ap:
1542         logger.info("Verify network selection to AP " + ap['ifname'])
1543         bssid = ap['bssid']
1544         dev.scan_for_bss(bssid, freq="2412")
1545     else:
1546         logger.info("Verify network selection")
1547         bssid = None
1548     dev.hs20_enable()
1549     id = dev.add_cred_values(values)
1550     dev.request("INTERWORKING_SELECT auto freq=2412")
1551     events = []
1552     while True:
1553         ev = dev.wait_event(["INTERWORKING-AP", "INTERWORKING-NO-MATCH",
1554                              "INTERWORKING-BLACKLISTED",
1555                              "INTERWORKING-SELECTED"], timeout=15)
1556         if ev is None:
1557             raise Exception("Network selection timed out")
1558         events.append(ev)
1559         if "INTERWORKING-NO-MATCH" in ev:
1560             raise Exception("Matching AP not found")
1561         if bssid and only_one and "INTERWORKING-AP" in ev and bssid not in ev:
1562             raise Exception("Unexpected AP claimed acceptable")
1563         if "INTERWORKING-SELECTED" in ev:
1564             if bssid and bssid not in ev:
1565                 raise Exception("Selected incorrect BSS")
1566             break
1567
1568     ev = dev.wait_connected(timeout=15)
1569     if bssid and bssid not in ev:
1570         raise Exception("Connected to incorrect BSS")
1571
1572     conn_bssid = dev.get_status_field("bssid")
1573     if bssid and conn_bssid != bssid:
1574         raise Exception("bssid information points to incorrect BSS")
1575
1576     dev.remove_cred(id)
1577     dev.dump_monitor()
1578     return events
1579
1580 def default_cred(domain=None, user="hs20-test"):
1581     cred = { 'realm': "example.com",
1582              'ca_cert': "auth_serv/ca.pem",
1583              'username': user,
1584              'password': "password" }
1585     if domain:
1586         cred['domain'] = domain
1587     return cred
1588
1589 def test_ap_hs20_prefer_home(dev, apdev):
1590     """Hotspot 2.0 required roaming consortium"""
1591     check_eap_capa(dev[0], "MSCHAPV2")
1592     params = hs20_ap_params()
1593     params['domain_name'] = "example.org"
1594     hostapd.add_ap(apdev[0], params)
1595
1596     params = hs20_ap_params()
1597     params['ssid'] = "test-hs20-other"
1598     params['domain_name'] = "example.com"
1599     hostapd.add_ap(apdev[1], params)
1600
1601     values = default_cred()
1602     values['domain'] = "example.com"
1603     policy_test(dev[0], apdev[1], values, only_one=False)
1604     values['domain'] = "example.org"
1605     policy_test(dev[0], apdev[0], values, only_one=False)
1606
1607 def test_ap_hs20_req_roaming_consortium(dev, apdev):
1608     """Hotspot 2.0 required roaming consortium"""
1609     check_eap_capa(dev[0], "MSCHAPV2")
1610     params = hs20_ap_params()
1611     hostapd.add_ap(apdev[0], params)
1612
1613     params = hs20_ap_params()
1614     params['ssid'] = "test-hs20-other"
1615     params['roaming_consortium'] = [ "223344" ]
1616     hostapd.add_ap(apdev[1], params)
1617
1618     values = default_cred()
1619     values['required_roaming_consortium'] = "223344"
1620     policy_test(dev[0], apdev[1], values)
1621     values['required_roaming_consortium'] = "112233"
1622     policy_test(dev[0], apdev[0], values)
1623
1624     id = dev[0].add_cred()
1625     dev[0].set_cred(id, "required_roaming_consortium", "112233")
1626     dev[0].set_cred(id, "required_roaming_consortium", "112233445566778899aabbccddeeff")
1627
1628     for val in [ "", "1", "11", "1122", "1122334", "112233445566778899aabbccddeeff00" ]:
1629         if "FAIL" not in dev[0].request('SET_CRED {} required_roaming_consortium {}'.format(id, val)):
1630             raise Exception("Invalid roaming consortium value accepted: " + val)
1631
1632 def test_ap_hs20_req_roaming_consortium_no_match(dev, apdev):
1633     """Hotspot 2.0 required roaming consortium and no match"""
1634     check_eap_capa(dev[0], "MSCHAPV2")
1635     params = hs20_ap_params()
1636     del params['roaming_consortium']
1637     hostapd.add_ap(apdev[0], params)
1638
1639     params = hs20_ap_params()
1640     params['ssid'] = "test-hs20-other"
1641     params['roaming_consortium'] = [ "223345" ]
1642     hostapd.add_ap(apdev[1], params)
1643
1644     values = default_cred()
1645     values['required_roaming_consortium'] = "223344"
1646     dev[0].hs20_enable()
1647     id = dev[0].add_cred_values(values)
1648     dev[0].request("INTERWORKING_SELECT auto freq=2412")
1649     ev = dev[0].wait_event(["INTERWORKING-NO-MATCH"], timeout=10)
1650     if ev is None:
1651         raise Exception("INTERWORKING-NO-MATCH not reported")
1652
1653 def test_ap_hs20_excluded_ssid(dev, apdev):
1654     """Hotspot 2.0 exclusion based on SSID"""
1655     check_eap_capa(dev[0], "MSCHAPV2")
1656     params = hs20_ap_params()
1657     params['roaming_consortium'] = [ "223344" ]
1658     params['anqp_3gpp_cell_net'] = "555,444"
1659     hostapd.add_ap(apdev[0], params)
1660
1661     params = hs20_ap_params()
1662     params['ssid'] = "test-hs20-other"
1663     params['roaming_consortium'] = [ "223344" ]
1664     params['anqp_3gpp_cell_net'] = "555,444"
1665     hostapd.add_ap(apdev[1], params)
1666
1667     values = default_cred()
1668     values['excluded_ssid'] = "test-hs20"
1669     events = policy_test(dev[0], apdev[1], values)
1670     ev = [e for e in events if "INTERWORKING-BLACKLISTED " + apdev[0]['bssid'] in e]
1671     if len(ev) != 1:
1672         raise Exception("Excluded network not reported")
1673     values['excluded_ssid'] = "test-hs20-other"
1674     events = policy_test(dev[0], apdev[0], values)
1675     ev = [e for e in events if "INTERWORKING-BLACKLISTED " + apdev[1]['bssid'] in e]
1676     if len(ev) != 1:
1677         raise Exception("Excluded network not reported")
1678
1679     values = default_cred()
1680     values['roaming_consortium'] = "223344"
1681     values['eap'] = "TTLS"
1682     values['phase2'] = "auth=MSCHAPV2"
1683     values['excluded_ssid'] = "test-hs20"
1684     events = policy_test(dev[0], apdev[1], values)
1685     ev = [e for e in events if "INTERWORKING-BLACKLISTED " + apdev[0]['bssid'] in e]
1686     if len(ev) != 1:
1687         raise Exception("Excluded network not reported")
1688
1689     values = { 'imsi': "555444-333222111", 'eap': "SIM",
1690                'milenage': "5122250214c33e723a5dd523fc145fc0:981d464c7c52eb6e5036234984ad0bcf:000000000123",
1691                'excluded_ssid': "test-hs20" }
1692     events = policy_test(dev[0], apdev[1], values)
1693     ev = [e for e in events if "INTERWORKING-BLACKLISTED " + apdev[0]['bssid'] in e]
1694     if len(ev) != 1:
1695         raise Exception("Excluded network not reported")
1696
1697 def test_ap_hs20_roam_to_higher_prio(dev, apdev):
1698     """Hotspot 2.0 and roaming from current to higher priority network"""
1699     check_eap_capa(dev[0], "MSCHAPV2")
1700     bssid = apdev[0]['bssid']
1701     params = hs20_ap_params(ssid="test-hs20-visited")
1702     params['domain_name'] = "visited.example.org"
1703     hostapd.add_ap(apdev[0], params)
1704
1705     dev[0].hs20_enable()
1706     id = dev[0].add_cred_values({ 'realm': "example.com",
1707                                   'ca_cert': "auth_serv/ca.pem",
1708                                   'username': "hs20-test",
1709                                   'password': "password",
1710                                   'domain': "example.com" })
1711     logger.info("Connect to the only network option")
1712     interworking_select(dev[0], bssid, "roaming", freq="2412")
1713     dev[0].dump_monitor()
1714     interworking_connect(dev[0], bssid, "TTLS")
1715
1716     logger.info("Start another AP (home operator) and reconnect")
1717     bssid2 = apdev[1]['bssid']
1718     params = hs20_ap_params(ssid="test-hs20-home")
1719     params['domain_name'] = "example.com"
1720     hostapd.add_ap(apdev[1], params)
1721
1722     dev[0].scan_for_bss(bssid2, freq="2412", force_scan=True)
1723     dev[0].request("INTERWORKING_SELECT auto freq=2412")
1724     ev = dev[0].wait_event(["INTERWORKING-NO-MATCH",
1725                             "INTERWORKING-ALREADY-CONNECTED",
1726                             "CTRL-EVENT-CONNECTED"], timeout=15)
1727     if ev is None:
1728         raise Exception("Connection timed out")
1729     if "INTERWORKING-NO-MATCH" in ev:
1730         raise Exception("Matching AP not found")
1731     if "INTERWORKING-ALREADY-CONNECTED" in ev:
1732         raise Exception("Unexpected AP selected")
1733     if bssid2 not in ev:
1734         raise Exception("Unexpected BSSID after reconnection")
1735
1736 def test_ap_hs20_domain_suffix_match_full(dev, apdev):
1737     """Hotspot 2.0 and domain_suffix_match"""
1738     check_domain_match_full(dev[0])
1739     check_eap_capa(dev[0], "MSCHAPV2")
1740     bssid = apdev[0]['bssid']
1741     params = hs20_ap_params()
1742     hostapd.add_ap(apdev[0], params)
1743
1744     dev[0].hs20_enable()
1745     id = dev[0].add_cred_values({ 'realm': "example.com",
1746                                   'username': "hs20-test",
1747                                   'password': "password",
1748                                   'ca_cert': "auth_serv/ca.pem",
1749                                   'domain': "example.com",
1750                                   'domain_suffix_match': "server.w1.fi" })
1751     interworking_select(dev[0], bssid, "home", freq="2412")
1752     dev[0].dump_monitor()
1753     interworking_connect(dev[0], bssid, "TTLS")
1754     dev[0].request("REMOVE_NETWORK all")
1755     dev[0].dump_monitor()
1756
1757     dev[0].set_cred_quoted(id, "domain_suffix_match", "no-match.example.com")
1758     interworking_select(dev[0], bssid, "home", freq="2412")
1759     dev[0].dump_monitor()
1760     dev[0].request("INTERWORKING_CONNECT " + bssid)
1761     ev = dev[0].wait_event(["CTRL-EVENT-EAP-TLS-CERT-ERROR"])
1762     if ev is None:
1763         raise Exception("TLS certificate error not reported")
1764     if "Domain suffix mismatch" not in ev:
1765         raise Exception("Domain suffix mismatch not reported")
1766
1767 def test_ap_hs20_domain_suffix_match(dev, apdev):
1768     """Hotspot 2.0 and domain_suffix_match"""
1769     check_eap_capa(dev[0], "MSCHAPV2")
1770     check_domain_match_full(dev[0])
1771     bssid = apdev[0]['bssid']
1772     params = hs20_ap_params()
1773     hostapd.add_ap(apdev[0], params)
1774
1775     dev[0].hs20_enable()
1776     id = dev[0].add_cred_values({ 'realm': "example.com",
1777                                   'username': "hs20-test",
1778                                   'password': "password",
1779                                   'ca_cert': "auth_serv/ca.pem",
1780                                   'domain': "example.com",
1781                                   'domain_suffix_match': "w1.fi" })
1782     interworking_select(dev[0], bssid, "home", freq="2412")
1783     dev[0].dump_monitor()
1784     interworking_connect(dev[0], bssid, "TTLS")
1785
1786 def test_ap_hs20_roaming_partner_preference(dev, apdev):
1787     """Hotspot 2.0 and roaming partner preference"""
1788     check_eap_capa(dev[0], "MSCHAPV2")
1789     params = hs20_ap_params()
1790     params['domain_name'] = "roaming.example.org"
1791     hostapd.add_ap(apdev[0], params)
1792
1793     params = hs20_ap_params()
1794     params['ssid'] = "test-hs20-other"
1795     params['domain_name'] = "roaming.example.net"
1796     hostapd.add_ap(apdev[1], params)
1797
1798     logger.info("Verify default vs. specified preference")
1799     values = default_cred()
1800     values['roaming_partner'] = "roaming.example.net,1,127,*"
1801     policy_test(dev[0], apdev[1], values, only_one=False)
1802     values['roaming_partner'] = "roaming.example.net,1,129,*"
1803     policy_test(dev[0], apdev[0], values, only_one=False)
1804
1805     logger.info("Verify partial FQDN match")
1806     values['roaming_partner'] = "example.net,0,0,*"
1807     policy_test(dev[0], apdev[1], values, only_one=False)
1808     values['roaming_partner'] = "example.net,0,255,*"
1809     policy_test(dev[0], apdev[0], values, only_one=False)
1810
1811 def test_ap_hs20_max_bss_load(dev, apdev):
1812     """Hotspot 2.0 and maximum BSS load"""
1813     check_eap_capa(dev[0], "MSCHAPV2")
1814     params = hs20_ap_params()
1815     params['bss_load_test'] = "12:200:20000"
1816     hostapd.add_ap(apdev[0], params)
1817
1818     params = hs20_ap_params()
1819     params['ssid'] = "test-hs20-other"
1820     params['bss_load_test'] = "5:20:10000"
1821     hostapd.add_ap(apdev[1], params)
1822
1823     logger.info("Verify maximum BSS load constraint")
1824     values = default_cred()
1825     values['domain'] = "example.com"
1826     values['max_bss_load'] = "100"
1827     events = policy_test(dev[0], apdev[1], values, only_one=False)
1828
1829     ev = [e for e in events if "INTERWORKING-AP " + apdev[0]['bssid'] in e]
1830     if len(ev) != 1 or "over_max_bss_load=1" not in ev[0]:
1831         raise Exception("Maximum BSS Load case not noticed")
1832     ev = [e for e in events if "INTERWORKING-AP " + apdev[1]['bssid'] in e]
1833     if len(ev) != 1 or "over_max_bss_load=1" in ev[0]:
1834         raise Exception("Maximum BSS Load case reported incorrectly")
1835
1836     logger.info("Verify maximum BSS load does not prevent connection")
1837     values['max_bss_load'] = "1"
1838     events = policy_test(dev[0], None, values)
1839
1840     ev = [e for e in events if "INTERWORKING-AP " + apdev[0]['bssid'] in e]
1841     if len(ev) != 1 or "over_max_bss_load=1" not in ev[0]:
1842         raise Exception("Maximum BSS Load case not noticed")
1843     ev = [e for e in events if "INTERWORKING-AP " + apdev[1]['bssid'] in e]
1844     if len(ev) != 1 or "over_max_bss_load=1" not in ev[0]:
1845         raise Exception("Maximum BSS Load case not noticed")
1846
1847 def test_ap_hs20_max_bss_load2(dev, apdev):
1848     """Hotspot 2.0 and maximum BSS load with one AP not advertising"""
1849     check_eap_capa(dev[0], "MSCHAPV2")
1850     params = hs20_ap_params()
1851     params['bss_load_test'] = "12:200:20000"
1852     hostapd.add_ap(apdev[0], params)
1853
1854     params = hs20_ap_params()
1855     params['ssid'] = "test-hs20-other"
1856     hostapd.add_ap(apdev[1], params)
1857
1858     logger.info("Verify maximum BSS load constraint with AP advertisement")
1859     values = default_cred()
1860     values['domain'] = "example.com"
1861     values['max_bss_load'] = "100"
1862     events = policy_test(dev[0], apdev[1], values, only_one=False)
1863
1864     ev = [e for e in events if "INTERWORKING-AP " + apdev[0]['bssid'] in e]
1865     if len(ev) != 1 or "over_max_bss_load=1" not in ev[0]:
1866         raise Exception("Maximum BSS Load case not noticed")
1867     ev = [e for e in events if "INTERWORKING-AP " + apdev[1]['bssid'] in e]
1868     if len(ev) != 1 or "over_max_bss_load=1" in ev[0]:
1869         raise Exception("Maximum BSS Load case reported incorrectly")
1870
1871 def test_ap_hs20_max_bss_load_roaming(dev, apdev):
1872     """Hotspot 2.0 and maximum BSS load (roaming)"""
1873     check_eap_capa(dev[0], "MSCHAPV2")
1874     params = hs20_ap_params()
1875     params['bss_load_test'] = "12:200:20000"
1876     hostapd.add_ap(apdev[0], params)
1877
1878     values = default_cred()
1879     values['domain'] = "roaming.example.com"
1880     values['max_bss_load'] = "100"
1881     events = policy_test(dev[0], apdev[0], values, only_one=True)
1882     ev = [e for e in events if "INTERWORKING-AP " + apdev[0]['bssid'] in e]
1883     if len(ev) != 1:
1884         raise Exception("No INTERWORKING-AP event")
1885     if "over_max_bss_load=1" in ev[0]:
1886         raise Exception("Maximum BSS Load reported for roaming")
1887
1888 def test_ap_hs20_multi_cred_sp_prio(dev, apdev):
1889     """Hotspot 2.0 multi-cred sp_priority"""
1890     check_eap_capa(dev[0], "MSCHAPV2")
1891     try:
1892         _test_ap_hs20_multi_cred_sp_prio(dev, apdev)
1893     finally:
1894         dev[0].request("SET external_sim 0")
1895
1896 def _test_ap_hs20_multi_cred_sp_prio(dev, apdev):
1897     hlr_auc_gw_available()
1898     bssid = apdev[0]['bssid']
1899     params = hs20_ap_params()
1900     params['hessid'] = bssid
1901     del params['domain_name']
1902     params['anqp_3gpp_cell_net'] = "232,01"
1903     hostapd.add_ap(apdev[0], params)
1904
1905     dev[0].hs20_enable()
1906     dev[0].scan_for_bss(bssid, freq="2412")
1907     dev[0].request("SET external_sim 1")
1908     id1 = dev[0].add_cred_values({ 'imsi': "23201-0000000000", 'eap': "SIM",
1909                                    'provisioning_sp': "example.com",
1910                                    'sp_priority' :"1" })
1911     id2 = dev[0].add_cred_values({ 'realm': "example.com",
1912                                    'ca_cert': "auth_serv/ca.pem",
1913                                    'username': "hs20-test",
1914                                    'password': "password",
1915                                    'domain': "example.com",
1916                                    'provisioning_sp': "example.com",
1917                                    'sp_priority': "2" })
1918     dev[0].dump_monitor()
1919     dev[0].scan_for_bss(bssid, freq="2412")
1920     dev[0].request("INTERWORKING_SELECT auto freq=2412")
1921     interworking_ext_sim_auth(dev[0], "SIM")
1922     check_sp_type(dev[0], "unknown")
1923     dev[0].request("REMOVE_NETWORK all")
1924
1925     dev[0].set_cred(id1, "sp_priority", "2")
1926     dev[0].set_cred(id2, "sp_priority", "1")
1927     dev[0].dump_monitor()
1928     dev[0].request("INTERWORKING_SELECT auto freq=2412")
1929     interworking_auth(dev[0], "TTLS")
1930     check_sp_type(dev[0], "unknown")
1931
1932 def test_ap_hs20_multi_cred_sp_prio2(dev, apdev):
1933     """Hotspot 2.0 multi-cred sp_priority with two BSSes"""
1934     check_eap_capa(dev[0], "MSCHAPV2")
1935     try:
1936         _test_ap_hs20_multi_cred_sp_prio2(dev, apdev)
1937     finally:
1938         dev[0].request("SET external_sim 0")
1939
1940 def _test_ap_hs20_multi_cred_sp_prio2(dev, apdev):
1941     hlr_auc_gw_available()
1942     bssid = apdev[0]['bssid']
1943     params = hs20_ap_params()
1944     params['hessid'] = bssid
1945     del params['nai_realm']
1946     del params['domain_name']
1947     params['anqp_3gpp_cell_net'] = "232,01"
1948     hostapd.add_ap(apdev[0], params)
1949
1950     bssid2 = apdev[1]['bssid']
1951     params = hs20_ap_params()
1952     params['ssid'] = "test-hs20-other"
1953     params['hessid'] = bssid2
1954     del params['domain_name']
1955     del params['anqp_3gpp_cell_net']
1956     hostapd.add_ap(apdev[1], params)
1957
1958     dev[0].hs20_enable()
1959     dev[0].request("SET external_sim 1")
1960     id1 = dev[0].add_cred_values({ 'imsi': "23201-0000000000", 'eap': "SIM",
1961                                    'provisioning_sp': "example.com",
1962                                    'sp_priority': "1" })
1963     id2 = dev[0].add_cred_values({ 'realm': "example.com",
1964                                    'ca_cert': "auth_serv/ca.pem",
1965                                    'username': "hs20-test",
1966                                    'password': "password",
1967                                    'domain': "example.com",
1968                                    'provisioning_sp': "example.com",
1969                                    'sp_priority': "2" })
1970     dev[0].dump_monitor()
1971     dev[0].scan_for_bss(bssid, freq="2412")
1972     dev[0].scan_for_bss(bssid2, freq="2412")
1973     dev[0].request("INTERWORKING_SELECT auto freq=2412")
1974     interworking_ext_sim_auth(dev[0], "SIM")
1975     check_sp_type(dev[0], "unknown")
1976     conn_bssid = dev[0].get_status_field("bssid")
1977     if conn_bssid != bssid:
1978         raise Exception("Connected to incorrect BSS")
1979     dev[0].request("REMOVE_NETWORK all")
1980
1981     dev[0].set_cred(id1, "sp_priority", "2")
1982     dev[0].set_cred(id2, "sp_priority", "1")
1983     dev[0].dump_monitor()
1984     dev[0].request("INTERWORKING_SELECT auto freq=2412")
1985     interworking_auth(dev[0], "TTLS")
1986     check_sp_type(dev[0], "unknown")
1987     conn_bssid = dev[0].get_status_field("bssid")
1988     if conn_bssid != bssid2:
1989         raise Exception("Connected to incorrect BSS")
1990
1991 def test_ap_hs20_multi_cred_sp_prio_same(dev, apdev):
1992     """Hotspot 2.0 multi-cred and same sp_priority"""
1993     check_eap_capa(dev[0], "MSCHAPV2")
1994     hlr_auc_gw_available()
1995     bssid = apdev[0]['bssid']
1996     params = hs20_ap_params()
1997     params['hessid'] = bssid
1998     del params['domain_name']
1999     params['anqp_3gpp_cell_net'] = "232,01"
2000     hostapd.add_ap(apdev[0], params)
2001
2002     dev[0].hs20_enable()
2003     dev[0].scan_for_bss(bssid, freq="2412")
2004     id1 = dev[0].add_cred_values({ 'realm': "example.com",
2005                                    'ca_cert': "auth_serv/ca.pem",
2006                                    'username': "hs20-test",
2007                                    'password': "password",
2008                                    'domain': "domain1.example.com",
2009                                    'provisioning_sp': "example.com",
2010                                    'sp_priority': "1" })
2011     id2 = dev[0].add_cred_values({ 'realm': "example.com",
2012                                    'ca_cert': "auth_serv/ca.pem",
2013                                    'username': "hs20-test",
2014                                    'password': "password",
2015                                    'domain': "domain2.example.com",
2016                                    'provisioning_sp': "example.com",
2017                                    'sp_priority': "1" })
2018     dev[0].dump_monitor()
2019     dev[0].scan_for_bss(bssid, freq="2412")
2020     check_auto_select(dev[0], bssid)
2021
2022 def check_conn_capab_selection(dev, type, missing):
2023     dev.request("INTERWORKING_SELECT freq=2412")
2024     ev = dev.wait_event(["INTERWORKING-AP"])
2025     if ev is None:
2026         raise Exception("Network selection timed out")
2027     if "type=" + type not in ev:
2028         raise Exception("Unexpected network type")
2029     if missing and "conn_capab_missing=1" not in ev:
2030         raise Exception("conn_capab_missing not reported")
2031     if not missing and "conn_capab_missing=1" in ev:
2032         raise Exception("conn_capab_missing reported unexpectedly")
2033
2034 def conn_capab_cred(domain=None, req_conn_capab=None):
2035     cred = default_cred(domain=domain)
2036     if req_conn_capab:
2037         cred['req_conn_capab'] = req_conn_capab
2038     return cred
2039
2040 def test_ap_hs20_req_conn_capab(dev, apdev):
2041     """Hotspot 2.0 network selection with req_conn_capab"""
2042     check_eap_capa(dev[0], "MSCHAPV2")
2043     bssid = apdev[0]['bssid']
2044     params = hs20_ap_params()
2045     hostapd.add_ap(apdev[0], params)
2046
2047     dev[0].hs20_enable()
2048     dev[0].scan_for_bss(bssid, freq="2412")
2049     logger.info("Not used in home network")
2050     values = conn_capab_cred(domain="example.com", req_conn_capab="6:1234")
2051     id = dev[0].add_cred_values(values)
2052     check_conn_capab_selection(dev[0], "home", False)
2053
2054     logger.info("Used in roaming network")
2055     dev[0].remove_cred(id)
2056     values = conn_capab_cred(domain="example.org", req_conn_capab="6:1234")
2057     id = dev[0].add_cred_values(values)
2058     check_conn_capab_selection(dev[0], "roaming", True)
2059
2060     logger.info("Verify that req_conn_capab does not prevent connection if no other network is available")
2061     check_auto_select(dev[0], bssid)
2062
2063     logger.info("Additional req_conn_capab checks")
2064
2065     dev[0].remove_cred(id)
2066     values = conn_capab_cred(domain="example.org", req_conn_capab="1:0")
2067     id = dev[0].add_cred_values(values)
2068     check_conn_capab_selection(dev[0], "roaming", True)
2069
2070     dev[0].remove_cred(id)
2071     values = conn_capab_cred(domain="example.org", req_conn_capab="17:5060")
2072     id = dev[0].add_cred_values(values)
2073     check_conn_capab_selection(dev[0], "roaming", True)
2074
2075     bssid2 = apdev[1]['bssid']
2076     params = hs20_ap_params(ssid="test-hs20b")
2077     params['hs20_conn_capab'] = [ "1:0:2", "6:22:1", "17:5060:0", "50:0:1" ]
2078     hostapd.add_ap(apdev[1], params)
2079
2080     dev[0].remove_cred(id)
2081     values = conn_capab_cred(domain="example.org", req_conn_capab="50")
2082     id = dev[0].add_cred_values(values)
2083     dev[0].set_cred(id, "req_conn_capab", "6:22")
2084     dev[0].scan_for_bss(bssid2, freq="2412")
2085     dev[0].request("INTERWORKING_SELECT freq=2412")
2086     for i in range(0, 2):
2087         ev = dev[0].wait_event(["INTERWORKING-AP"])
2088         if ev is None:
2089             raise Exception("Network selection timed out")
2090         if bssid in ev and "conn_capab_missing=1" not in ev:
2091             raise Exception("Missing protocol connection capability not reported")
2092         if bssid2 in ev and "conn_capab_missing=1" in ev:
2093             raise Exception("Protocol connection capability not reported correctly")
2094
2095 def test_ap_hs20_req_conn_capab2(dev, apdev):
2096     """Hotspot 2.0 network selection with req_conn_capab (not present)"""
2097     check_eap_capa(dev[0], "MSCHAPV2")
2098     bssid = apdev[0]['bssid']
2099     params = hs20_ap_params()
2100     del params['hs20_conn_capab']
2101     hostapd.add_ap(apdev[0], params)
2102
2103     dev[0].hs20_enable()
2104     dev[0].scan_for_bss(bssid, freq="2412")
2105     values = conn_capab_cred(domain="example.org", req_conn_capab="6:1234")
2106     id = dev[0].add_cred_values(values)
2107     check_conn_capab_selection(dev[0], "roaming", False)
2108
2109 def test_ap_hs20_req_conn_capab_and_roaming_partner_preference(dev, apdev):
2110     """Hotspot 2.0 and req_conn_capab with roaming partner preference"""
2111     check_eap_capa(dev[0], "MSCHAPV2")
2112     bssid = apdev[0]['bssid']
2113     params = hs20_ap_params()
2114     params['domain_name'] = "roaming.example.org"
2115     params['hs20_conn_capab'] = [ "1:0:2", "6:22:1", "17:5060:0", "50:0:1" ]
2116     hostapd.add_ap(apdev[0], params)
2117
2118     bssid2 = apdev[1]['bssid']
2119     params = hs20_ap_params(ssid="test-hs20-b")
2120     params['domain_name'] = "roaming.example.net"
2121     hostapd.add_ap(apdev[1], params)
2122
2123     values = default_cred()
2124     values['roaming_partner'] = "roaming.example.net,1,127,*"
2125     id = dev[0].add_cred_values(values)
2126     check_auto_select(dev[0], bssid2)
2127
2128     dev[0].set_cred(id, "req_conn_capab", "50")
2129     check_auto_select(dev[0], bssid)
2130
2131     dev[0].remove_cred(id)
2132     id = dev[0].add_cred_values(values)
2133     dev[0].set_cred(id, "req_conn_capab", "51")
2134     check_auto_select(dev[0], bssid2)
2135
2136 def check_bandwidth_selection(dev, type, below):
2137     dev.request("INTERWORKING_SELECT freq=2412")
2138     ev = dev.wait_event(["INTERWORKING-AP"])
2139     if ev is None:
2140         raise Exception("Network selection timed out")
2141     logger.debug("BSS entries:\n" + dev.request("BSS RANGE=ALL"))
2142     if "type=" + type not in ev:
2143         raise Exception("Unexpected network type")
2144     if below and "below_min_backhaul=1" not in ev:
2145         raise Exception("below_min_backhaul not reported")
2146     if not below and "below_min_backhaul=1" in ev:
2147         raise Exception("below_min_backhaul reported unexpectedly")
2148
2149 def bw_cred(domain=None, dl_home=None, ul_home=None, dl_roaming=None, ul_roaming=None):
2150     cred = default_cred(domain=domain)
2151     if dl_home:
2152         cred['min_dl_bandwidth_home'] = str(dl_home)
2153     if ul_home:
2154         cred['min_ul_bandwidth_home'] = str(ul_home)
2155     if dl_roaming:
2156         cred['min_dl_bandwidth_roaming'] = str(dl_roaming)
2157     if ul_roaming:
2158         cred['min_ul_bandwidth_roaming'] = str(ul_roaming)
2159     return cred
2160
2161 def test_ap_hs20_min_bandwidth_home(dev, apdev):
2162     """Hotspot 2.0 network selection with min bandwidth (home)"""
2163     check_eap_capa(dev[0], "MSCHAPV2")
2164     bssid = apdev[0]['bssid']
2165     params = hs20_ap_params()
2166     hostapd.add_ap(apdev[0], params)
2167
2168     dev[0].hs20_enable()
2169     dev[0].scan_for_bss(bssid, freq="2412")
2170     values = bw_cred(domain="example.com", dl_home=5490, ul_home=58)
2171     id = dev[0].add_cred_values(values)
2172     check_bandwidth_selection(dev[0], "home", False)
2173     dev[0].remove_cred(id)
2174
2175     values = bw_cred(domain="example.com", dl_home=5491, ul_home=58)
2176     id = dev[0].add_cred_values(values)
2177     check_bandwidth_selection(dev[0], "home", True)
2178     dev[0].remove_cred(id)
2179
2180     values = bw_cred(domain="example.com", dl_home=5490, ul_home=59)
2181     id = dev[0].add_cred_values(values)
2182     check_bandwidth_selection(dev[0], "home", True)
2183     dev[0].remove_cred(id)
2184
2185     values = bw_cred(domain="example.com", dl_home=5491, ul_home=59)
2186     id = dev[0].add_cred_values(values)
2187     check_bandwidth_selection(dev[0], "home", True)
2188     check_auto_select(dev[0], bssid)
2189
2190     bssid2 = apdev[1]['bssid']
2191     params = hs20_ap_params(ssid="test-hs20-b")
2192     params['hs20_wan_metrics'] = "01:8000:1000:1:1:3000"
2193     hostapd.add_ap(apdev[1], params)
2194
2195     check_auto_select(dev[0], bssid2)
2196
2197 def test_ap_hs20_min_bandwidth_home2(dev, apdev):
2198     """Hotspot 2.0 network selection with min bandwidth - special cases"""
2199     check_eap_capa(dev[0], "MSCHAPV2")
2200     bssid = apdev[0]['bssid']
2201     params = hs20_ap_params()
2202     hapd = hostapd.add_ap(apdev[0], params)
2203
2204     dev[0].hs20_enable()
2205     dev[0].scan_for_bss(bssid, freq="2412")
2206     values = bw_cred(domain="example.com", dl_home=5490, ul_home=58)
2207     id = dev[0].add_cred_values(values)
2208     check_bandwidth_selection(dev[0], "home", False)
2209
2210     logger.info("WAN link at capacity")
2211     hapd.set('hs20_wan_metrics', "09:8000:1000:80:240:3000")
2212     check_bandwidth_selection(dev[0], "home", True)
2213
2214     logger.info("Downlink/Uplink Load was not measured")
2215     hapd.set('hs20_wan_metrics', "01:8000:1000:80:240:0")
2216     check_bandwidth_selection(dev[0], "home", False)
2217
2218     logger.info("Uplink and Downlink max values")
2219     hapd.set('hs20_wan_metrics', "01:4294967295:4294967295:80:240:3000")
2220     check_bandwidth_selection(dev[0], "home", False)
2221
2222     dev[0].remove_cred(id)
2223
2224 def test_ap_hs20_min_bandwidth_home_hidden_ssid_in_scan_res(dev, apdev):
2225     """Hotspot 2.0 network selection with min bandwidth (home) while hidden SSID is included in scan results"""
2226     check_eap_capa(dev[0], "MSCHAPV2")
2227     bssid = apdev[0]['bssid']
2228
2229     hapd = hostapd.add_ap(apdev[0], { "ssid": 'secret',
2230                                       "ignore_broadcast_ssid": "1" })
2231     dev[0].scan_for_bss(bssid, freq=2412)
2232     hapd.disable()
2233     hapd_global = hostapd.HostapdGlobal(apdev[0])
2234     hapd_global.flush()
2235     hapd_global.remove(apdev[0]['ifname'])
2236
2237     params = hs20_ap_params()
2238     hostapd.add_ap(apdev[0], params)
2239
2240     dev[0].hs20_enable()
2241     dev[0].scan_for_bss(bssid, freq="2412")
2242     values = bw_cred(domain="example.com", dl_home=5490, ul_home=58)
2243     id = dev[0].add_cred_values(values)
2244     check_bandwidth_selection(dev[0], "home", False)
2245     dev[0].remove_cred(id)
2246
2247     values = bw_cred(domain="example.com", dl_home=5491, ul_home=58)
2248     id = dev[0].add_cred_values(values)
2249     check_bandwidth_selection(dev[0], "home", True)
2250     dev[0].remove_cred(id)
2251
2252     values = bw_cred(domain="example.com", dl_home=5490, ul_home=59)
2253     id = dev[0].add_cred_values(values)
2254     check_bandwidth_selection(dev[0], "home", True)
2255     dev[0].remove_cred(id)
2256
2257     values = bw_cred(domain="example.com", dl_home=5491, ul_home=59)
2258     id = dev[0].add_cred_values(values)
2259     check_bandwidth_selection(dev[0], "home", True)
2260     check_auto_select(dev[0], bssid)
2261
2262     bssid2 = apdev[1]['bssid']
2263     params = hs20_ap_params(ssid="test-hs20-b")
2264     params['hs20_wan_metrics'] = "01:8000:1000:1:1:3000"
2265     hostapd.add_ap(apdev[1], params)
2266
2267     check_auto_select(dev[0], bssid2)
2268
2269     dev[0].flush_scan_cache()
2270
2271 def test_ap_hs20_min_bandwidth_roaming(dev, apdev):
2272     """Hotspot 2.0 network selection with min bandwidth (roaming)"""
2273     check_eap_capa(dev[0], "MSCHAPV2")
2274     bssid = apdev[0]['bssid']
2275     params = hs20_ap_params()
2276     hostapd.add_ap(apdev[0], params)
2277
2278     dev[0].hs20_enable()
2279     dev[0].scan_for_bss(bssid, freq="2412")
2280     values = bw_cred(domain="example.org", dl_roaming=5490, ul_roaming=58)
2281     id = dev[0].add_cred_values(values)
2282     check_bandwidth_selection(dev[0], "roaming", False)
2283     dev[0].remove_cred(id)
2284
2285     values = bw_cred(domain="example.org", dl_roaming=5491, ul_roaming=58)
2286     id = dev[0].add_cred_values(values)
2287     check_bandwidth_selection(dev[0], "roaming", True)
2288     dev[0].remove_cred(id)
2289
2290     values = bw_cred(domain="example.org", dl_roaming=5490, ul_roaming=59)
2291     id = dev[0].add_cred_values(values)
2292     check_bandwidth_selection(dev[0], "roaming", True)
2293     dev[0].remove_cred(id)
2294
2295     values = bw_cred(domain="example.org", dl_roaming=5491, ul_roaming=59)
2296     id = dev[0].add_cred_values(values)
2297     check_bandwidth_selection(dev[0], "roaming", True)
2298     check_auto_select(dev[0], bssid)
2299
2300     bssid2 = apdev[1]['bssid']
2301     params = hs20_ap_params(ssid="test-hs20-b")
2302     params['hs20_wan_metrics'] = "01:8000:1000:1:1:3000"
2303     hostapd.add_ap(apdev[1], params)
2304
2305     check_auto_select(dev[0], bssid2)
2306
2307 def test_ap_hs20_min_bandwidth_and_roaming_partner_preference(dev, apdev):
2308     """Hotspot 2.0 and minimum bandwidth with roaming partner preference"""
2309     check_eap_capa(dev[0], "MSCHAPV2")
2310     bssid = apdev[0]['bssid']
2311     params = hs20_ap_params()
2312     params['domain_name'] = "roaming.example.org"
2313     params['hs20_wan_metrics'] = "01:8000:1000:1:1:3000"
2314     hostapd.add_ap(apdev[0], params)
2315
2316     bssid2 = apdev[1]['bssid']
2317     params = hs20_ap_params(ssid="test-hs20-b")
2318     params['domain_name'] = "roaming.example.net"
2319     hostapd.add_ap(apdev[1], params)
2320
2321     values = default_cred()
2322     values['roaming_partner'] = "roaming.example.net,1,127,*"
2323     id = dev[0].add_cred_values(values)
2324     check_auto_select(dev[0], bssid2)
2325
2326     dev[0].set_cred(id, "min_dl_bandwidth_roaming", "6000")
2327     check_auto_select(dev[0], bssid)
2328
2329     dev[0].set_cred(id, "min_dl_bandwidth_roaming", "10000")
2330     check_auto_select(dev[0], bssid2)
2331
2332 def test_ap_hs20_min_bandwidth_no_wan_metrics(dev, apdev):
2333     """Hotspot 2.0 network selection with min bandwidth but no WAN Metrics"""
2334     bssid = apdev[0]['bssid']
2335     params = hs20_ap_params()
2336     del params['hs20_wan_metrics']
2337     hostapd.add_ap(apdev[0], params)
2338
2339     dev[0].hs20_enable()
2340     dev[0].scan_for_bss(bssid, freq="2412")
2341     values = bw_cred(domain="example.com", dl_home=10000, ul_home=10000,
2342                      dl_roaming=10000, ul_roaming=10000)
2343     dev[0].add_cred_values(values)
2344     check_bandwidth_selection(dev[0], "home", False)
2345
2346 def test_ap_hs20_deauth_req_ess(dev, apdev):
2347     """Hotspot 2.0 connection and deauthentication request for ESS"""
2348     check_eap_capa(dev[0], "MSCHAPV2")
2349     try:
2350         _test_ap_hs20_deauth_req_ess(dev, apdev)
2351     finally:
2352         dev[0].request("SET pmf 0")
2353
2354 def _test_ap_hs20_deauth_req_ess(dev, apdev):
2355     dev[0].request("SET pmf 2")
2356     eap_test(dev[0], apdev[0], "21[3:26]", "TTLS", "user")
2357     dev[0].dump_monitor()
2358     addr = dev[0].p2p_interface_addr()
2359     hapd = hostapd.Hostapd(apdev[0]['ifname'])
2360     hapd.request("HS20_DEAUTH_REQ " + addr + " 1 120 http://example.com/")
2361     ev = dev[0].wait_event(["HS20-DEAUTH-IMMINENT-NOTICE"])
2362     if ev is None:
2363         raise Exception("Timeout on deauth imminent notice")
2364     if "1 120 http://example.com/" not in ev:
2365         raise Exception("Unexpected deauth imminent notice: " + ev)
2366     hapd.request("DEAUTHENTICATE " + addr)
2367     dev[0].wait_disconnected(timeout=10)
2368     if "[TEMP-DISABLED]" not in dev[0].list_networks()[0]['flags']:
2369         raise Exception("Network not marked temporarily disabled")
2370     ev = dev[0].wait_event(["SME: Trying to authenticate",
2371                             "Trying to associate",
2372                             "CTRL-EVENT-CONNECTED"], timeout=5)
2373     if ev is not None:
2374         raise Exception("Unexpected connection attempt")
2375
2376 def test_ap_hs20_deauth_req_bss(dev, apdev):
2377     """Hotspot 2.0 connection and deauthentication request for BSS"""
2378     check_eap_capa(dev[0], "MSCHAPV2")
2379     try:
2380         _test_ap_hs20_deauth_req_bss(dev, apdev)
2381     finally:
2382         dev[0].request("SET pmf 0")
2383
2384 def _test_ap_hs20_deauth_req_bss(dev, apdev):
2385     dev[0].request("SET pmf 2")
2386     eap_test(dev[0], apdev[0], "21[3:26]", "TTLS", "user")
2387     dev[0].dump_monitor()
2388     addr = dev[0].p2p_interface_addr()
2389     hapd = hostapd.Hostapd(apdev[0]['ifname'])
2390     hapd.request("HS20_DEAUTH_REQ " + addr + " 0 120 http://example.com/")
2391     ev = dev[0].wait_event(["HS20-DEAUTH-IMMINENT-NOTICE"])
2392     if ev is None:
2393         raise Exception("Timeout on deauth imminent notice")
2394     if "0 120 http://example.com/" not in ev:
2395         raise Exception("Unexpected deauth imminent notice: " + ev)
2396     hapd.request("DEAUTHENTICATE " + addr + " reason=4")
2397     ev = dev[0].wait_disconnected(timeout=10)
2398     if "reason=4" not in ev:
2399         raise Exception("Unexpected disconnection reason")
2400     if "[TEMP-DISABLED]" not in dev[0].list_networks()[0]['flags']:
2401         raise Exception("Network not marked temporarily disabled")
2402     ev = dev[0].wait_event(["SME: Trying to authenticate",
2403                             "Trying to associate",
2404                             "CTRL-EVENT-CONNECTED"], timeout=5)
2405     if ev is not None:
2406         raise Exception("Unexpected connection attempt")
2407
2408 def test_ap_hs20_deauth_req_from_radius(dev, apdev):
2409     """Hotspot 2.0 connection and deauthentication request from RADIUS"""
2410     check_eap_capa(dev[0], "MSCHAPV2")
2411     try:
2412         _test_ap_hs20_deauth_req_from_radius(dev, apdev)
2413     finally:
2414         dev[0].request("SET pmf 0")
2415
2416 def _test_ap_hs20_deauth_req_from_radius(dev, apdev):
2417     bssid = apdev[0]['bssid']
2418     params = hs20_ap_params()
2419     params['nai_realm'] = [ "0,example.com,21[2:4]" ]
2420     params['hs20_deauth_req_timeout'] = "2"
2421     hostapd.add_ap(apdev[0], params)
2422
2423     dev[0].request("SET pmf 2")
2424     dev[0].hs20_enable()
2425     dev[0].add_cred_values({ 'realm': "example.com",
2426                              'username': "hs20-deauth-test",
2427                              'password': "password" })
2428     interworking_select(dev[0], bssid, freq="2412")
2429     interworking_connect(dev[0], bssid, "TTLS")
2430     ev = dev[0].wait_event(["HS20-DEAUTH-IMMINENT-NOTICE"], timeout=5)
2431     if ev is None:
2432         raise Exception("Timeout on deauth imminent notice")
2433     if " 1 100" not in ev:
2434         raise Exception("Unexpected deauth imminent contents")
2435     dev[0].wait_disconnected(timeout=3)
2436
2437 def test_ap_hs20_deauth_req_without_pmf(dev, apdev):
2438     """Hotspot 2.0 connection and deauthentication request without PMF"""
2439     check_eap_capa(dev[0], "MSCHAPV2")
2440     dev[0].request("SET pmf 0")
2441     eap_test(dev[0], apdev[0], "21[3:26]", "TTLS", "user")
2442     dev[0].dump_monitor()
2443     addr = dev[0].own_addr()
2444     hapd = hostapd.Hostapd(apdev[0]['ifname'])
2445     hapd.request("HS20_DEAUTH_REQ " + addr + " 1 120 http://example.com/")
2446     ev = dev[0].wait_event(["HS20-DEAUTH-IMMINENT-NOTICE"], timeout=0.2)
2447     if ev is not None:
2448         raise Exception("Deauth imminent notice without PMF accepted")
2449
2450 def test_ap_hs20_remediation_required(dev, apdev):
2451     """Hotspot 2.0 connection and remediation required from RADIUS"""
2452     check_eap_capa(dev[0], "MSCHAPV2")
2453     try:
2454         _test_ap_hs20_remediation_required(dev, apdev)
2455     finally:
2456         dev[0].request("SET pmf 0")
2457
2458 def _test_ap_hs20_remediation_required(dev, apdev):
2459     bssid = apdev[0]['bssid']
2460     params = hs20_ap_params()
2461     params['nai_realm'] = [ "0,example.com,21[2:4]" ]
2462     hostapd.add_ap(apdev[0], params)
2463
2464     dev[0].request("SET pmf 1")
2465     dev[0].hs20_enable()
2466     dev[0].add_cred_values({ 'realm': "example.com",
2467                              'username': "hs20-subrem-test",
2468                              'password': "password" })
2469     interworking_select(dev[0], bssid, freq="2412")
2470     interworking_connect(dev[0], bssid, "TTLS")
2471     ev = dev[0].wait_event(["HS20-SUBSCRIPTION-REMEDIATION"], timeout=5)
2472     if ev is None:
2473         raise Exception("Timeout on subscription remediation notice")
2474     if " 1 https://example.com/" not in ev:
2475         raise Exception("Unexpected subscription remediation event contents")
2476
2477 def test_ap_hs20_remediation_required_ctrl(dev, apdev):
2478     """Hotspot 2.0 connection and subrem from ctrl_iface"""
2479     check_eap_capa(dev[0], "MSCHAPV2")
2480     try:
2481         _test_ap_hs20_remediation_required_ctrl(dev, apdev)
2482     finally:
2483         dev[0].request("SET pmf 0")
2484
2485 def _test_ap_hs20_remediation_required_ctrl(dev, apdev):
2486     bssid = apdev[0]['bssid']
2487     addr = dev[0].own_addr()
2488     params = hs20_ap_params()
2489     params['nai_realm'] = [ "0,example.com,21[2:4]" ]
2490     hapd = hostapd.add_ap(apdev[0], params)
2491
2492     dev[0].request("SET pmf 1")
2493     dev[0].hs20_enable()
2494     dev[0].add_cred_values(default_cred())
2495     interworking_select(dev[0], bssid, freq="2412")
2496     interworking_connect(dev[0], bssid, "TTLS")
2497
2498     hapd.request("HS20_WNM_NOTIF " + addr + " https://example.com/")
2499     ev = dev[0].wait_event(["HS20-SUBSCRIPTION-REMEDIATION"], timeout=5)
2500     if ev is None:
2501         raise Exception("Timeout on subscription remediation notice")
2502     if " 1 https://example.com/" not in ev:
2503         raise Exception("Unexpected subscription remediation event contents")
2504
2505     hapd.request("HS20_WNM_NOTIF " + addr)
2506     ev = dev[0].wait_event(["HS20-SUBSCRIPTION-REMEDIATION"], timeout=5)
2507     if ev is None:
2508         raise Exception("Timeout on subscription remediation notice")
2509     if not ev.endswith("HS20-SUBSCRIPTION-REMEDIATION "):
2510         raise Exception("Unexpected subscription remediation event contents: " + ev)
2511
2512     if "FAIL" not in hapd.request("HS20_WNM_NOTIF "):
2513         raise Exception("Unexpected HS20_WNM_NOTIF success")
2514     if "FAIL" not in hapd.request("HS20_WNM_NOTIF foo"):
2515         raise Exception("Unexpected HS20_WNM_NOTIF success")
2516     if "FAIL" not in hapd.request("HS20_WNM_NOTIF " + addr + " https://12345678923456789842345678456783456712345678923456789842345678456783456712345678923456789842345678456783456712345678923456789842345678456783456712345678923456789842345678456783456712345678923456789842345678456783456712345678923456789842345678456783456712345678927.very.long.example.com/"):
2517         raise Exception("Unexpected HS20_WNM_NOTIF success")
2518
2519 def test_ap_hs20_session_info(dev, apdev):
2520     """Hotspot 2.0 connection and session information from RADIUS"""
2521     check_eap_capa(dev[0], "MSCHAPV2")
2522     try:
2523         _test_ap_hs20_session_info(dev, apdev)
2524     finally:
2525         dev[0].request("SET pmf 0")
2526
2527 def _test_ap_hs20_session_info(dev, apdev):
2528     bssid = apdev[0]['bssid']
2529     params = hs20_ap_params()
2530     params['nai_realm'] = [ "0,example.com,21[2:4]" ]
2531     hostapd.add_ap(apdev[0], params)
2532
2533     dev[0].request("SET pmf 1")
2534     dev[0].hs20_enable()
2535     dev[0].add_cred_values({ 'realm': "example.com",
2536                              'username': "hs20-session-info-test",
2537                              'password': "password" })
2538     interworking_select(dev[0], bssid, freq="2412")
2539     interworking_connect(dev[0], bssid, "TTLS")
2540     ev = dev[0].wait_event(["ESS-DISASSOC-IMMINENT"], timeout=10)
2541     if ev is None:
2542         raise Exception("Timeout on ESS disassociation imminent notice")
2543     if " 1 59904 https://example.com/" not in ev:
2544         raise Exception("Unexpected ESS disassociation imminent event contents")
2545     ev = dev[0].wait_event(["CTRL-EVENT-SCAN-STARTED"])
2546     if ev is None:
2547         raise Exception("Scan not started")
2548     ev = dev[0].wait_event(["CTRL-EVENT-SCAN-RESULTS"], timeout=30)
2549     if ev is None:
2550         raise Exception("Scan not completed")
2551
2552 def test_ap_hs20_osen(dev, apdev):
2553     """Hotspot 2.0 OSEN connection"""
2554     params = { 'ssid': "osen",
2555                'osen': "1",
2556                'auth_server_addr': "127.0.0.1",
2557                'auth_server_port': "1812",
2558                'auth_server_shared_secret': "radius" }
2559     hostapd.add_ap(apdev[0], params)
2560
2561     dev[1].connect("osen", key_mgmt="NONE", scan_freq="2412",
2562                    wait_connect=False)
2563     dev[2].connect("osen", key_mgmt="NONE", wep_key0='"hello"',
2564                    scan_freq="2412", wait_connect=False)
2565     dev[0].flush_scan_cache()
2566     dev[0].connect("osen", proto="OSEN", key_mgmt="OSEN", pairwise="CCMP",
2567                    group="GTK_NOT_USED",
2568                    eap="WFA-UNAUTH-TLS", identity="osen@example.com",
2569                    ca_cert="auth_serv/ca.pem",
2570                    scan_freq="2412")
2571     res = dev[0].get_bss(apdev[0]['bssid'])['flags']
2572     if "[OSEN-OSEN-CCMP]" not in res:
2573         raise Exception("OSEN not reported in BSS")
2574     if "[WEP]" in res:
2575         raise Exception("WEP reported in BSS")
2576     res = dev[0].request("SCAN_RESULTS")
2577     if "[OSEN-OSEN-CCMP]" not in res:
2578         raise Exception("OSEN not reported in SCAN_RESULTS")
2579
2580     wpas = WpaSupplicant(global_iface='/tmp/wpas-wlan5')
2581     wpas.interface_add("wlan5", drv_params="force_connect_cmd=1")
2582     wpas.connect("osen", proto="OSEN", key_mgmt="OSEN", pairwise="CCMP",
2583                  group="GTK_NOT_USED",
2584                  eap="WFA-UNAUTH-TLS", identity="osen@example.com",
2585                  ca_cert="auth_serv/ca.pem",
2586                  scan_freq="2412")
2587     wpas.request("DISCONNECT")
2588
2589 def test_ap_hs20_network_preference(dev, apdev):
2590     """Hotspot 2.0 network selection with preferred home network"""
2591     check_eap_capa(dev[0], "MSCHAPV2")
2592     bssid = apdev[0]['bssid']
2593     params = hs20_ap_params()
2594     hostapd.add_ap(apdev[0], params)
2595
2596     dev[0].hs20_enable()
2597     values = { 'realm': "example.com",
2598                'username': "hs20-test",
2599                'password': "password",
2600                'domain': "example.com" }
2601     dev[0].add_cred_values(values)
2602
2603     id = dev[0].add_network()
2604     dev[0].set_network_quoted(id, "ssid", "home")
2605     dev[0].set_network_quoted(id, "psk", "12345678")
2606     dev[0].set_network(id, "priority", "1")
2607     dev[0].request("ENABLE_NETWORK %s no-connect" % id)
2608
2609     dev[0].scan_for_bss(bssid, freq="2412")
2610     dev[0].request("INTERWORKING_SELECT auto freq=2412")
2611     ev = dev[0].wait_connected(timeout=15)
2612     if bssid not in ev:
2613         raise Exception("Unexpected network selected")
2614
2615     bssid2 = apdev[1]['bssid']
2616     params = hostapd.wpa2_params(ssid="home", passphrase="12345678")
2617     hostapd.add_ap(apdev[1], params)
2618
2619     dev[0].scan_for_bss(bssid2, freq="2412")
2620     dev[0].request("INTERWORKING_SELECT auto freq=2412")
2621     ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED",
2622                             "INTERWORKING-ALREADY-CONNECTED" ], timeout=15)
2623     if ev is None:
2624         raise Exception("Connection timed out")
2625     if "INTERWORKING-ALREADY-CONNECTED" in ev:
2626         raise Exception("No roam to higher priority network")
2627     if bssid2 not in ev:
2628         raise Exception("Unexpected network selected")
2629
2630 def test_ap_hs20_network_preference2(dev, apdev):
2631     """Hotspot 2.0 network selection with preferred credential"""
2632     check_eap_capa(dev[0], "MSCHAPV2")
2633     bssid2 = apdev[1]['bssid']
2634     params = hostapd.wpa2_params(ssid="home", passphrase="12345678")
2635     hostapd.add_ap(apdev[1], params)
2636
2637     dev[0].hs20_enable()
2638     values = { 'realm': "example.com",
2639                'username': "hs20-test",
2640                'password': "password",
2641                'domain': "example.com",
2642                'priority': "1" }
2643     dev[0].add_cred_values(values)
2644
2645     id = dev[0].add_network()
2646     dev[0].set_network_quoted(id, "ssid", "home")
2647     dev[0].set_network_quoted(id, "psk", "12345678")
2648     dev[0].request("ENABLE_NETWORK %s no-connect" % id)
2649
2650     dev[0].scan_for_bss(bssid2, freq="2412")
2651     dev[0].request("INTERWORKING_SELECT auto freq=2412")
2652     ev = dev[0].wait_connected(timeout=15)
2653     if bssid2 not in ev:
2654         raise Exception("Unexpected network selected")
2655
2656     bssid = apdev[0]['bssid']
2657     params = hs20_ap_params()
2658     hostapd.add_ap(apdev[0], params)
2659
2660     dev[0].scan_for_bss(bssid, freq="2412")
2661     dev[0].request("INTERWORKING_SELECT auto freq=2412")
2662     ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED",
2663                             "INTERWORKING-ALREADY-CONNECTED" ], timeout=15)
2664     if ev is None:
2665         raise Exception("Connection timed out")
2666     if "INTERWORKING-ALREADY-CONNECTED" in ev:
2667         raise Exception("No roam to higher priority network")
2668     if bssid not in ev:
2669         raise Exception("Unexpected network selected")
2670
2671 def test_ap_hs20_network_preference3(dev, apdev):
2672     """Hotspot 2.0 network selection with two credential (one preferred)"""
2673     check_eap_capa(dev[0], "MSCHAPV2")
2674     bssid = apdev[0]['bssid']
2675     params = hs20_ap_params()
2676     hostapd.add_ap(apdev[0], params)
2677
2678     bssid2 = apdev[1]['bssid']
2679     params = hs20_ap_params(ssid="test-hs20b")
2680     params['nai_realm'] = "0,example.org,13[5:6],21[2:4][5:7]"
2681     hostapd.add_ap(apdev[1], params)
2682
2683     dev[0].hs20_enable()
2684     values = { 'realm': "example.com",
2685                'username': "hs20-test",
2686                'password': "password",
2687                'priority': "1" }
2688     dev[0].add_cred_values(values)
2689     values = { 'realm': "example.org",
2690                'username': "hs20-test",
2691                'password': "password" }
2692     id = dev[0].add_cred_values(values)
2693
2694     dev[0].scan_for_bss(bssid, freq="2412")
2695     dev[0].scan_for_bss(bssid2, freq="2412")
2696     dev[0].request("INTERWORKING_SELECT auto freq=2412")
2697     ev = dev[0].wait_connected(timeout=15)
2698     if bssid not in ev:
2699         raise Exception("Unexpected network selected")
2700
2701     dev[0].set_cred(id, "priority", "2")
2702     dev[0].request("INTERWORKING_SELECT auto freq=2412")
2703     ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED",
2704                             "INTERWORKING-ALREADY-CONNECTED" ], timeout=15)
2705     if ev is None:
2706         raise Exception("Connection timed out")
2707     if "INTERWORKING-ALREADY-CONNECTED" in ev:
2708         raise Exception("No roam to higher priority network")
2709     if bssid2 not in ev:
2710         raise Exception("Unexpected network selected")
2711
2712 def test_ap_hs20_network_preference4(dev, apdev):
2713     """Hotspot 2.0 network selection with username vs. SIM credential"""
2714     check_eap_capa(dev[0], "MSCHAPV2")
2715     bssid = apdev[0]['bssid']
2716     params = hs20_ap_params()
2717     hostapd.add_ap(apdev[0], params)
2718
2719     bssid2 = apdev[1]['bssid']
2720     params = hs20_ap_params(ssid="test-hs20b")
2721     params['hessid'] = bssid2
2722     params['anqp_3gpp_cell_net'] = "555,444"
2723     params['domain_name'] = "wlan.mnc444.mcc555.3gppnetwork.org"
2724     hostapd.add_ap(apdev[1], params)
2725
2726     dev[0].hs20_enable()
2727     values = { 'realm': "example.com",
2728                'username': "hs20-test",
2729                'password': "password",
2730                'priority': "1" }
2731     dev[0].add_cred_values(values)
2732     values = { 'imsi': "555444-333222111",
2733                'eap': "SIM",
2734                'milenage': "5122250214c33e723a5dd523fc145fc0:981d464c7c52eb6e5036234984ad0bcf:000000000123" }
2735     id = dev[0].add_cred_values(values)
2736
2737     dev[0].scan_for_bss(bssid, freq="2412")
2738     dev[0].scan_for_bss(bssid2, freq="2412")
2739     dev[0].request("INTERWORKING_SELECT auto freq=2412")
2740     ev = dev[0].wait_connected(timeout=15)
2741     if bssid not in ev:
2742         raise Exception("Unexpected network selected")
2743
2744     dev[0].set_cred(id, "priority", "2")
2745     dev[0].request("INTERWORKING_SELECT auto freq=2412")
2746     ev = dev[0].wait_event(["CTRL-EVENT-CONNECTED",
2747                             "INTERWORKING-ALREADY-CONNECTED" ], timeout=15)
2748     if ev is None:
2749         raise Exception("Connection timed out")
2750     if "INTERWORKING-ALREADY-CONNECTED" in ev:
2751         raise Exception("No roam to higher priority network")
2752     if bssid2 not in ev:
2753         raise Exception("Unexpected network selected")
2754
2755 def test_ap_hs20_interworking_select_blocking_scan(dev, apdev):
2756     """Ongoing INTERWORKING_SELECT blocking SCAN"""
2757     check_eap_capa(dev[0], "MSCHAPV2")
2758     bssid = apdev[0]['bssid']
2759     params = hs20_ap_params()
2760     hostapd.add_ap(apdev[0], params)
2761
2762     dev[0].hs20_enable()
2763     values = { 'realm': "example.com",
2764                'username': "hs20-test",
2765                'password': "password",
2766                'domain': "example.com" }
2767     dev[0].add_cred_values(values)
2768
2769     dev[0].scan_for_bss(bssid, freq="2412")
2770     dev[0].request("INTERWORKING_SELECT auto freq=2412")
2771     if "FAIL-BUSY" not in dev[0].request("SCAN"):
2772         raise Exception("Unexpected SCAN command result")
2773     dev[0].wait_connected(timeout=15)
2774
2775 def test_ap_hs20_fetch_osu(dev, apdev):
2776     """Hotspot 2.0 OSU provider and icon fetch"""
2777     bssid = apdev[0]['bssid']
2778     params = hs20_ap_params()
2779     params['hs20_icon'] = "128:80:zxx:image/png:w1fi_logo:w1fi_logo.png"
2780     params['osu_ssid'] = '"HS 2.0 OSU open"'
2781     params['osu_method_list'] = "1"
2782     params['osu_friendly_name'] = [ "eng:Test OSU", "fin:Testi-OSU" ]
2783     params['osu_icon'] = "w1fi_logo"
2784     params['osu_service_desc'] = [ "eng:Example services", "fin:Esimerkkipalveluja" ]
2785     params['osu_server_uri'] = "https://example.com/osu/"
2786     hostapd.add_ap(apdev[0], params)
2787
2788     bssid2 = apdev[1]['bssid']
2789     params = hs20_ap_params(ssid="test-hs20b")
2790     params['hessid'] = bssid2
2791     params['hs20_icon'] = "128:80:zxx:image/png:w1fi_logo:w1fi_logo.png"
2792     params['osu_ssid'] = '"HS 2.0 OSU OSEN"'
2793     params['osu_method_list'] = "0"
2794     params['osu_nai'] = "osen@example.com"
2795     params['osu_friendly_name'] = [ "eng:Test2 OSU", "fin:Testi2-OSU" ]
2796     params['osu_icon'] = "w1fi_logo"
2797     params['osu_service_desc'] = [ "eng:Example services2", "fin:Esimerkkipalveluja2" ]
2798     params['osu_server_uri'] = "https://example.org/osu/"
2799     hostapd.add_ap(apdev[1], params)
2800
2801     with open("w1fi_logo.png", "r") as f:
2802         orig_logo = f.read()
2803     dev[0].hs20_enable()
2804     dir = "/tmp/osu-fetch"
2805     if os.path.isdir(dir):
2806        files = [ f for f in os.listdir(dir) if f.startswith("osu-") ]
2807        for f in files:
2808            os.remove(dir + "/" + f)
2809     else:
2810         try:
2811             os.makedirs(dir)
2812         except:
2813             pass
2814     try:
2815         dev[1].scan_for_bss(bssid, freq="2412")
2816         dev[2].scan_for_bss(bssid, freq="2412")
2817         dev[0].request("SET osu_dir " + dir)
2818         dev[0].request("FETCH_OSU")
2819         if "FAIL" not in dev[1].request("HS20_ICON_REQUEST foo w1fi_logo"):
2820             raise Exception("Invalid HS20_ICON_REQUEST accepted")
2821         if "OK" not in dev[1].request("HS20_ICON_REQUEST " + bssid + " w1fi_logo"):
2822             raise Exception("HS20_ICON_REQUEST failed")
2823         if "OK" not in dev[2].request("REQ_HS20_ICON " + bssid + " w1fi_logo"):
2824             raise Exception("REQ_HS20_ICON failed")
2825         icons = 0
2826         while True:
2827             ev = dev[0].wait_event(["OSU provider fetch completed",
2828                                     "RX-HS20-ANQP-ICON"], timeout=15)
2829             if ev is None:
2830                 raise Exception("Timeout on OSU fetch")
2831             if "OSU provider fetch completed" in ev:
2832                 break
2833             if "RX-HS20-ANQP-ICON" in ev:
2834                 with open(ev.split(' ')[1], "r") as f:
2835                     logo = f.read()
2836                     if logo == orig_logo:
2837                         icons += 1
2838
2839         with open(dir + "/osu-providers.txt", "r") as f:
2840             prov = f.read()
2841             logger.debug("osu-providers.txt: " + prov)
2842         if "OSU-PROVIDER " + bssid not in prov:
2843             raise Exception("Missing OSU_PROVIDER(1)")
2844         if "OSU-PROVIDER " + bssid2 not in prov:
2845             raise Exception("Missing OSU_PROVIDER(2)")
2846     finally:
2847         files = [ f for f in os.listdir(dir) if f.startswith("osu-") ]
2848         for f in files:
2849             os.remove(dir + "/" + f)
2850         os.rmdir(dir)
2851
2852     if icons != 2:
2853         raise Exception("Unexpected number of icons fetched")
2854
2855     ev = dev[1].wait_event(["GAS-QUERY-START"], timeout=5)
2856     if ev is None:
2857         raise Exception("Timeout on GAS-QUERY-DONE")
2858     ev = dev[1].wait_event(["GAS-QUERY-DONE"], timeout=5)
2859     if ev is None:
2860         raise Exception("Timeout on GAS-QUERY-DONE")
2861     if "freq=2412 status_code=0 result=SUCCESS" not in ev:
2862         raise Exception("Unexpected GAS-QUERY-DONE: " + ev)
2863     ev = dev[1].wait_event(["RX-HS20-ANQP"], timeout=15)
2864     if ev is None:
2865         raise Exception("Timeout on icon fetch")
2866     if "Icon Binary File" not in ev:
2867         raise Exception("Unexpected ANQP element")
2868
2869     ev = dev[2].wait_event(["RX-HS20-ICON"], timeout=5)
2870     if ev is None:
2871         raise Exception("Timeout on RX-HS20-ICON")
2872     event_icon_len = ev.split(' ')[3]
2873     if " w1fi_logo " not in ev:
2874         raise Exception("RX-HS20-ICON did not have the expected file name")
2875     if bssid not in ev:
2876         raise Exception("RX-HS20-ICON did not have the expected BSSID")
2877     if "FAIL" in dev[2].request("GET_HS20_ICON " + bssid + " w1fi_logo 0 10"):
2878         raise Exception("GET_HS20_ICON 0..10 failed")
2879     if "FAIL" in dev[2].request("GET_HS20_ICON " + bssid + " w1fi_logo 5 10"):
2880         raise Exception("GET_HS20_ICON 5..15 failed")
2881     if "FAIL" not in  dev[2].request("GET_HS20_ICON " + bssid + " w1fi_logo 100000 10"):
2882         raise Exception("Unexpected success of GET_HS20_ICON with too large offset")
2883     icon = ""
2884     pos = 0
2885     while True:
2886         if pos > 100000:
2887             raise Exception("Unexpectedly long icon")
2888         res = dev[2].request("GET_HS20_ICON " + bssid + " w1fi_logo %d 1000" % pos)
2889         if res.startswith("FAIL"):
2890             break
2891         icon += base64.b64decode(res)
2892         pos += 1000
2893     hex = binascii.hexlify(icon)
2894     if not hex.startswith("0009696d6167652f706e677d1d"):
2895         raise Exception("Unexpected beacon binary header: " + hex)
2896     with open('w1fi_logo.png', 'r') as f:
2897         data = f.read()
2898         if icon[13:] != data:
2899             raise Exception("Unexpected icon data")
2900     if len(icon) != int(event_icon_len):
2901         raise Exception("Unexpected RX-HS20-ICON event length: " + event_icon_len)
2902
2903     for i in range(3):
2904         if "OK" not in dev[i].request("REQ_HS20_ICON " + bssid + " w1fi_logo"):
2905             raise Exception("REQ_HS20_ICON failed [2]")
2906     for i in range(3):
2907         ev = dev[i].wait_event(["RX-HS20-ICON"], timeout=5)
2908         if ev is None:
2909             raise Exception("Timeout on RX-HS20-ICON [2]")
2910
2911     if "FAIL" not in dev[2].request("DEL_HS20_ICON foo w1fi_logo"):
2912         raise Exception("Invalid DEL_HS20_ICON accepted")
2913     if "OK" not in dev[2].request("DEL_HS20_ICON " + bssid + " w1fi_logo"):
2914         raise Exception("DEL_HS20_ICON failed")
2915     if "OK" not in dev[1].request("DEL_HS20_ICON " + bssid):
2916         raise Exception("DEL_HS20_ICON failed")
2917     if "OK" not in dev[0].request("DEL_HS20_ICON "):
2918         raise Exception("DEL_HS20_ICON failed")
2919     for i in range(3):
2920         if "FAIL" not in dev[i].request("DEL_HS20_ICON "):
2921             raise Exception("DEL_HS20_ICON accepted when no icons left")
2922
2923 def test_ap_hs20_fetch_osu_no_info(dev, apdev):
2924     """Hotspot 2.0 OSU provider and no AP with info"""
2925     bssid = apdev[0]['bssid']
2926     params = hs20_ap_params()
2927     hostapd.add_ap(apdev[0], params)
2928
2929     dev[0].hs20_enable()
2930     dir = "/tmp/osu-fetch"
2931     if os.path.isdir(dir):
2932        files = [ f for f in os.listdir(dir) if f.startswith("osu-") ]
2933        for f in files:
2934            os.remove(dir + "/" + f)
2935     else:
2936         try:
2937             os.makedirs(dir)
2938         except:
2939             pass
2940     dev[0].scan_for_bss(bssid, freq="2412")
2941     try:
2942         dev[0].request("SET osu_dir " + dir)
2943         dev[0].request("FETCH_OSU")
2944         ev = dev[0].wait_event(["OSU provider fetch completed"], timeout=30)
2945         if ev is None:
2946             raise Exception("Timeout on OSU fetch")
2947     finally:
2948         files = [ f for f in os.listdir(dir) if f.startswith("osu-") ]
2949         for f in files:
2950             os.remove(dir + "/" + f)
2951         os.rmdir(dir)
2952
2953 def test_ap_hs20_fetch_osu_no_icon(dev, apdev):
2954     """Hotspot 2.0 OSU provider and no icon found"""
2955     bssid = apdev[0]['bssid']
2956     params = hs20_ap_params()
2957     params['hs20_icon'] = "128:80:zxx:image/png:w1fi_logo:w1fi_logo-no-file.png"
2958     params['osu_ssid'] = '"HS 2.0 OSU open"'
2959     params['osu_method_list'] = "1"
2960     params['osu_friendly_name'] = [ "eng:Test OSU", "fin:Testi-OSU" ]
2961     params['osu_icon'] = "w1fi_logo"
2962     params['osu_service_desc'] = [ "eng:Example services", "fin:Esimerkkipalveluja" ]
2963     params['osu_server_uri'] = "https://example.com/osu/"
2964     hostapd.add_ap(apdev[0], params)
2965
2966     dev[0].hs20_enable()
2967     dir = "/tmp/osu-fetch"
2968     if os.path.isdir(dir):
2969        files = [ f for f in os.listdir(dir) if f.startswith("osu-") ]
2970        for f in files:
2971            os.remove(dir + "/" + f)
2972     else:
2973         try:
2974             os.makedirs(dir)
2975         except:
2976             pass
2977     dev[0].scan_for_bss(bssid, freq="2412")
2978     try:
2979         dev[0].request("SET osu_dir " + dir)
2980         dev[0].request("FETCH_OSU")
2981         ev = dev[0].wait_event(["OSU provider fetch completed"], timeout=30)
2982         if ev is None:
2983             raise Exception("Timeout on OSU fetch")
2984     finally:
2985         files = [ f for f in os.listdir(dir) if f.startswith("osu-") ]
2986         for f in files:
2987             os.remove(dir + "/" + f)
2988         os.rmdir(dir)
2989
2990 def get_icon(dev, bssid, iconname):
2991     icon = ""
2992     pos = 0
2993     while True:
2994         if pos > 100000:
2995             raise Exception("Unexpectedly long icon")
2996         res = dev.request("GET_HS20_ICON " + bssid + " " + iconname + " %d 3000" % pos)
2997         if res.startswith("FAIL"):
2998             break
2999         icon += base64.b64decode(res)
3000         pos += 3000
3001     if len(icon) < 13:
3002         raise Exception("Too short GET_HS20_ICON response")
3003     return icon[0:13], icon[13:]
3004
3005 def test_ap_hs20_req_hs20_icon(dev, apdev):
3006     """Hotspot 2.0 OSU provider and multi-icon fetch with REQ_HS20_ICON"""
3007     bssid = apdev[0]['bssid']
3008     params = hs20_ap_params()
3009     params['hs20_icon'] = [ "128:80:zxx:image/png:w1fi_logo:w1fi_logo.png",
3010                             "128:80:zxx:image/png:test_logo:auth_serv/sha512-server.pem" ]
3011     params['osu_ssid'] = '"HS 2.0 OSU open"'
3012     params['osu_method_list'] = "1"
3013     params['osu_friendly_name'] = [ "eng:Test OSU", "fin:Testi-OSU" ]
3014     params['osu_icon'] = [ "w1fi_logo", "w1fi_logo2" ]
3015     params['osu_service_desc'] = [ "eng:Example services", "fin:Esimerkkipalveluja" ]
3016     params['osu_server_uri'] = "https://example.com/osu/"
3017     hostapd.add_ap(apdev[0], params)
3018
3019     dev[0].scan_for_bss(bssid, freq="2412")
3020
3021     # First, fetch two icons from the AP to wpa_supplicant
3022
3023     if "OK" not in dev[0].request("REQ_HS20_ICON " + bssid + " w1fi_logo"):
3024         raise Exception("REQ_HS20_ICON failed")
3025     ev = dev[0].wait_event(["RX-HS20-ICON"], timeout=5)
3026     if ev is None:
3027         raise Exception("Timeout on RX-HS20-ICON (1)")
3028
3029     if "OK" not in dev[0].request("REQ_HS20_ICON " + bssid + " test_logo"):
3030         raise Exception("REQ_HS20_ICON failed")
3031     ev = dev[0].wait_event(["RX-HS20-ICON"], timeout=5)
3032     if ev is None:
3033         raise Exception("Timeout on RX-HS20-ICON (2)")
3034
3035     # Then, fetch the icons from wpa_supplicant for validation
3036
3037     hdr, data1 = get_icon(dev[0], bssid, "w1fi_logo")
3038     hdr, data2 = get_icon(dev[0], bssid, "test_logo")
3039
3040     with open('w1fi_logo.png', 'r') as f:
3041         data = f.read()
3042         if data1 != data:
3043             raise Exception("Unexpected icon data (1)")
3044
3045     with open('auth_serv/sha512-server.pem', 'r') as f:
3046         data = f.read()
3047         if data2 != data:
3048             raise Exception("Unexpected icon data (2)")
3049
3050     # Finally, delete the icons from wpa_supplicant
3051
3052     if "OK" not in dev[0].request("DEL_HS20_ICON " + bssid + " w1fi_logo"):
3053         raise Exception("DEL_HS20_ICON failed")
3054     if "OK" not in dev[0].request("DEL_HS20_ICON " + bssid + " test_logo"):
3055         raise Exception("DEL_HS20_ICON failed")
3056
3057 def test_ap_hs20_req_hs20_icon_oom(dev, apdev):
3058     """Hotspot 2.0 icon fetch OOM with REQ_HS20_ICON"""
3059     bssid = apdev[0]['bssid']
3060     params = hs20_ap_params()
3061     params['hs20_icon'] = [ "128:80:zxx:image/png:w1fi_logo:w1fi_logo.png",
3062                             "128:80:zxx:image/png:test_logo:auth_serv/sha512-server.pem" ]
3063     params['osu_ssid'] = '"HS 2.0 OSU open"'
3064     params['osu_method_list'] = "1"
3065     params['osu_friendly_name'] = [ "eng:Test OSU", "fin:Testi-OSU" ]
3066     params['osu_icon'] = [ "w1fi_logo", "w1fi_logo2" ]
3067     params['osu_service_desc'] = [ "eng:Example services", "fin:Esimerkkipalveluja" ]
3068     params['osu_server_uri'] = "https://example.com/osu/"
3069     hostapd.add_ap(apdev[0], params)
3070
3071     dev[0].scan_for_bss(bssid, freq="2412")
3072
3073     if "FAIL" not in dev[0].request("REQ_HS20_ICON 11:22:33:44:55:66 w1fi_logo"):
3074         raise Exception("REQ_HS20_ICON succeeded with unknown BSSID")
3075
3076     with alloc_fail(dev[0], 1, "hs20_build_anqp_req;hs20_anqp_send_req"):
3077         if "FAIL" not in dev[0].request("REQ_HS20_ICON " + bssid + " w1fi_logo"):
3078             raise Exception("REQ_HS20_ICON succeeded during OOM")
3079
3080     with alloc_fail(dev[0], 1, "gas_query_req;hs20_anqp_send_req"):
3081         if "FAIL" not in dev[0].request("REQ_HS20_ICON " + bssid + " w1fi_logo"):
3082             raise Exception("REQ_HS20_ICON succeeded during OOM")
3083
3084     with alloc_fail(dev[0], 1, "=hs20_anqp_send_req"):
3085         if "FAIL" not in dev[0].request("REQ_HS20_ICON " + bssid + " w1fi_logo"):
3086             raise Exception("REQ_HS20_ICON succeeded during OOM")
3087     with alloc_fail(dev[0], 2, "=hs20_anqp_send_req"):
3088         if "FAIL" not in dev[0].request("REQ_HS20_ICON " + bssid + " w1fi_logo"):
3089             raise Exception("REQ_HS20_ICON succeeded during OOM")
3090
3091     if "OK" not in dev[0].request("REQ_HS20_ICON " + bssid + " w1fi_logo"):
3092         raise Exception("REQ_HS20_ICON failed")
3093     ev = dev[0].wait_event(["RX-HS20-ICON"], timeout=5)
3094     if ev is None:
3095         raise Exception("Timeout on RX-HS20-ICON (1)")
3096
3097     with alloc_fail(dev[0], 1, "hs20_get_icon"):
3098         if "FAIL" not in dev[0].request("GET_HS20_ICON " + bssid + "w1fi_logo 0 100"):
3099             raise Exception("GET_HS20_ICON succeeded during OOM")
3100
3101     if "OK" not in dev[0].request("DEL_HS20_ICON " + bssid + " w1fi_logo"):
3102         raise Exception("DEL_HS20_ICON failed")
3103
3104     with alloc_fail(dev[0], 1, "=hs20_process_icon_binary_file"):
3105         if "OK" not in dev[0].request("REQ_HS20_ICON " + bssid + " w1fi_logo"):
3106             raise Exception("REQ_HS20_ICON failed")
3107         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
3108
3109 def test_ap_hs20_req_hs20_icon_parallel(dev, apdev):
3110     """Hotspot 2.0 OSU provider and multi-icon parallel fetch with REQ_HS20_ICON"""
3111     bssid = apdev[0]['bssid']
3112     params = hs20_ap_params()
3113     params['hs20_icon'] = [ "128:80:zxx:image/png:w1fi_logo:w1fi_logo.png",
3114                             "128:80:zxx:image/png:test_logo:auth_serv/sha512-server.pem" ]
3115     params['osu_ssid'] = '"HS 2.0 OSU open"'
3116     params['osu_method_list'] = "1"
3117     params['osu_friendly_name'] = [ "eng:Test OSU", "fin:Testi-OSU" ]
3118     params['osu_icon'] = [ "w1fi_logo", "w1fi_logo2" ]
3119     params['osu_service_desc'] = [ "eng:Example services", "fin:Esimerkkipalveluja" ]
3120     params['osu_server_uri'] = "https://example.com/osu/"
3121     hostapd.add_ap(apdev[0], params)
3122
3123     dev[0].scan_for_bss(bssid, freq="2412")
3124
3125     # First, fetch two icons from the AP to wpa_supplicant
3126
3127     if "OK" not in dev[0].request("REQ_HS20_ICON " + bssid + " w1fi_logo"):
3128         raise Exception("REQ_HS20_ICON failed")
3129
3130     if "OK" not in dev[0].request("REQ_HS20_ICON " + bssid + " test_logo"):
3131         raise Exception("REQ_HS20_ICON failed")
3132     ev = dev[0].wait_event(["RX-HS20-ICON"], timeout=5)
3133     if ev is None:
3134         raise Exception("Timeout on RX-HS20-ICON (1)")
3135     ev = dev[0].wait_event(["RX-HS20-ICON"], timeout=5)
3136     if ev is None:
3137         raise Exception("Timeout on RX-HS20-ICON (2)")
3138
3139     # Then, fetch the icons from wpa_supplicant for validation
3140
3141     hdr, data1 = get_icon(dev[0], bssid, "w1fi_logo")
3142     hdr, data2 = get_icon(dev[0], bssid, "test_logo")
3143
3144     with open('w1fi_logo.png', 'r') as f:
3145         data = f.read()
3146         if data1 != data:
3147             raise Exception("Unexpected icon data (1)")
3148
3149     with open('auth_serv/sha512-server.pem', 'r') as f:
3150         data = f.read()
3151         if data2 != data:
3152             raise Exception("Unexpected icon data (2)")
3153
3154     # Finally, delete the icons from wpa_supplicant
3155
3156     if "OK" not in dev[0].request("DEL_HS20_ICON " + bssid + " w1fi_logo"):
3157         raise Exception("DEL_HS20_ICON failed")
3158     if "OK" not in dev[0].request("DEL_HS20_ICON " + bssid + " test_logo"):
3159         raise Exception("DEL_HS20_ICON failed")
3160
3161 def test_ap_hs20_fetch_osu_stop(dev, apdev):
3162     """Hotspot 2.0 OSU provider fetch stopped"""
3163     bssid = apdev[0]['bssid']
3164     params = hs20_ap_params()
3165     params['hs20_icon'] = "128:80:zxx:image/png:w1fi_logo:w1fi_logo.png"
3166     params['osu_ssid'] = '"HS 2.0 OSU open"'
3167     params['osu_method_list'] = "1"
3168     params['osu_friendly_name'] = [ "eng:Test OSU", "fin:Testi-OSU" ]
3169     params['osu_icon'] = "w1fi_logo"
3170     params['osu_service_desc'] = [ "eng:Example services", "fin:Esimerkkipalveluja" ]
3171     params['osu_server_uri'] = "https://example.com/osu/"
3172     hapd = hostapd.add_ap(apdev[0], params)
3173
3174     dev[0].hs20_enable()
3175     dir = "/tmp/osu-fetch"
3176     if os.path.isdir(dir):
3177        files = [ f for f in os.listdir(dir) if f.startswith("osu-") ]
3178        for f in files:
3179            os.remove(dir + "/" + f)
3180     else:
3181         try:
3182             os.makedirs(dir)
3183         except:
3184             pass
3185     try:
3186         dev[0].request("SET osu_dir " + dir)
3187         dev[0].request("SCAN freq=2412-2462")
3188         ev = dev[0].wait_event(["CTRL-EVENT-SCAN-STARTED"], timeout=10)
3189         if ev is None:
3190             raise Exception("Scan did not start")
3191         if "FAIL" not in dev[0].request("FETCH_OSU"):
3192             raise Exception("FETCH_OSU accepted while scanning")
3193         ev = dev[0].wait_event(["CTRL-EVENT-SCAN-RESULTS"], 10)
3194         if ev is None:
3195             raise Exception("Scan timed out")
3196         hapd.set("ext_mgmt_frame_handling", "1")
3197         dev[0].request("FETCH_ANQP")
3198         if "FAIL" not in dev[0].request("FETCH_OSU"):
3199             raise Exception("FETCH_OSU accepted while in FETCH_ANQP")
3200         dev[0].request("STOP_FETCH_ANQP")
3201         dev[0].wait_event(["GAS-QUERY-DONE"], timeout=5)
3202         dev[0].dump_monitor()
3203         hapd.dump_monitor()
3204         dev[0].request("INTERWORKING_SELECT freq=2412")
3205         for i in range(5):
3206             msg = hapd.mgmt_rx()
3207             if msg['subtype'] == 13:
3208                 break
3209         if "FAIL" not in dev[0].request("FETCH_OSU"):
3210             raise Exception("FETCH_OSU accepted while in INTERWORKING_SELECT")
3211         ev = dev[0].wait_event(["INTERWORKING-AP", "INTERWORKING-NO-MATCH"],
3212                                timeout=15)
3213         if ev is None:
3214             raise Exception("Network selection timed out")
3215
3216         dev[0].dump_monitor()
3217         if "OK" not in dev[0].request("FETCH_OSU"):
3218             raise Exception("FETCH_OSU failed")
3219         dev[0].request("CANCEL_FETCH_OSU")
3220
3221         for i in range(15):
3222             time.sleep(0.5)
3223             if dev[0].get_driver_status_field("scan_state") == "SCAN_COMPLETED":
3224                 break
3225
3226         dev[0].dump_monitor()
3227         if "OK" not in dev[0].request("FETCH_OSU"):
3228             raise Exception("FETCH_OSU failed")
3229         if "FAIL" not in dev[0].request("FETCH_OSU"):
3230             raise Exception("FETCH_OSU accepted while in FETCH_OSU")
3231         ev = dev[0].wait_event(["GAS-QUERY-START"], 10)
3232         if ev is None:
3233             raise Exception("GAS timed out")
3234         if "FAIL" not in dev[0].request("FETCH_OSU"):
3235             raise Exception("FETCH_OSU accepted while in FETCH_OSU")
3236         dev[0].request("CANCEL_FETCH_OSU")
3237         ev = dev[0].wait_event(["GAS-QUERY-DONE"], 10)
3238         if ev is None:
3239             raise Exception("GAS event timed out after CANCEL_FETCH_OSU")
3240     finally:
3241         files = [ f for f in os.listdir(dir) if f.startswith("osu-") ]
3242         for f in files:
3243             os.remove(dir + "/" + f)
3244         os.rmdir(dir)
3245
3246 def test_ap_hs20_ft(dev, apdev):
3247     """Hotspot 2.0 connection with FT"""
3248     check_eap_capa(dev[0], "MSCHAPV2")
3249     bssid = apdev[0]['bssid']
3250     params = hs20_ap_params()
3251     params['wpa_key_mgmt'] = "FT-EAP"
3252     params['nas_identifier'] = "nas1.w1.fi"
3253     params['r1_key_holder'] = "000102030405"
3254     params["mobility_domain"] = "a1b2"
3255     params["reassociation_deadline"] = "1000"
3256     hostapd.add_ap(apdev[0], params)
3257
3258     dev[0].hs20_enable()
3259     id = dev[0].add_cred_values({ 'realm': "example.com",
3260                                   'username': "hs20-test",
3261                                   'password': "password",
3262                                   'ca_cert': "auth_serv/ca.pem",
3263                                   'domain': "example.com",
3264                                   'update_identifier': "1234" })
3265     interworking_select(dev[0], bssid, "home", freq="2412")
3266     interworking_connect(dev[0], bssid, "TTLS")
3267
3268 def test_ap_hs20_remediation_sql(dev, apdev, params):
3269     """Hotspot 2.0 connection and remediation required using SQLite for user DB"""
3270     check_eap_capa(dev[0], "MSCHAPV2")
3271     try:
3272         import sqlite3
3273     except ImportError:
3274         raise HwsimSkip("No sqlite3 module available")
3275     dbfile = os.path.join(params['logdir'], "eap-user.db")
3276     try:
3277         os.remove(dbfile)
3278     except:
3279         pass
3280     con = sqlite3.connect(dbfile)
3281     with con:
3282         cur = con.cursor()
3283         cur.execute("CREATE TABLE users(identity TEXT PRIMARY KEY, methods TEXT, password TEXT, remediation TEXT, phase2 INTEGER)")
3284         cur.execute("CREATE TABLE wildcards(identity TEXT PRIMARY KEY, methods TEXT)")
3285         cur.execute("INSERT INTO users(identity,methods,password,phase2,remediation) VALUES ('user-mschapv2','TTLS-MSCHAPV2','password',1,'user')")
3286         cur.execute("INSERT INTO wildcards(identity,methods) VALUES ('','TTLS,TLS')")
3287         cur.execute("CREATE TABLE authlog(timestamp TEXT, session TEXT, nas_ip TEXT, username TEXT, note TEXT)")
3288
3289     try:
3290         params = { "ssid": "as", "beacon_int": "2000",
3291                    "radius_server_clients": "auth_serv/radius_clients.conf",
3292                    "radius_server_auth_port": '18128',
3293                    "eap_server": "1",
3294                    "eap_user_file": "sqlite:" + dbfile,
3295                    "ca_cert": "auth_serv/ca.pem",
3296                    "server_cert": "auth_serv/server.pem",
3297                    "private_key": "auth_serv/server.key",
3298                    "subscr_remediation_url": "https://example.org/",
3299                    "subscr_remediation_method": "1" }
3300         hostapd.add_ap(apdev[1], params)
3301
3302         bssid = apdev[0]['bssid']
3303         params = hs20_ap_params()
3304         params['auth_server_port'] = "18128"
3305         hostapd.add_ap(apdev[0], params)
3306
3307         dev[0].request("SET pmf 1")
3308         dev[0].hs20_enable()
3309         id = dev[0].add_cred_values({ 'realm': "example.com",
3310                                       'username': "user-mschapv2",
3311                                       'password': "password",
3312                                       'ca_cert': "auth_serv/ca.pem" })
3313         interworking_select(dev[0], bssid, freq="2412")
3314         interworking_connect(dev[0], bssid, "TTLS")
3315         ev = dev[0].wait_event(["HS20-SUBSCRIPTION-REMEDIATION"], timeout=5)
3316         if ev is None:
3317             raise Exception("Timeout on subscription remediation notice")
3318         if " 1 https://example.org/" not in ev:
3319             raise Exception("Unexpected subscription remediation event contents")
3320
3321         with con:
3322             cur = con.cursor()
3323             cur.execute("SELECT * from authlog")
3324             rows = cur.fetchall()
3325             if len(rows) < 1:
3326                 raise Exception("No authlog entries")
3327
3328     finally:
3329         os.remove(dbfile)
3330         dev[0].request("SET pmf 0")
3331
3332 def test_ap_hs20_external_selection(dev, apdev):
3333     """Hotspot 2.0 connection using external network selection and creation"""
3334     check_eap_capa(dev[0], "MSCHAPV2")
3335     bssid = apdev[0]['bssid']
3336     params = hs20_ap_params()
3337     params['hessid'] = bssid
3338     params['disable_dgaf'] = '1'
3339     hostapd.add_ap(apdev[0], params)
3340
3341     dev[0].hs20_enable()
3342     dev[0].connect("test-hs20", proto="RSN", key_mgmt="WPA-EAP", eap="TTLS",
3343                    identity="hs20-test", password="password",
3344                    ca_cert="auth_serv/ca.pem", phase2="auth=MSCHAPV2",
3345                    scan_freq="2412", update_identifier="54321")
3346     if dev[0].get_status_field("hs20") != "2":
3347         raise Exception("Unexpected hs20 indication")
3348
3349 def test_ap_hs20_random_mac_addr(dev, apdev):
3350     """Hotspot 2.0 connection with random MAC address"""
3351     check_eap_capa(dev[0], "MSCHAPV2")
3352     bssid = apdev[0]['bssid']
3353     params = hs20_ap_params()
3354     params['hessid'] = bssid
3355     params['disable_dgaf'] = '1'
3356     hapd = hostapd.add_ap(apdev[0], params)
3357
3358     wpas = WpaSupplicant(global_iface='/tmp/wpas-wlan5')
3359     wpas.interface_add("wlan5")
3360     addr = wpas.p2p_interface_addr()
3361     wpas.request("SET mac_addr 1")
3362     wpas.request("SET preassoc_mac_addr 1")
3363     wpas.request("SET rand_addr_lifetime 60")
3364     wpas.hs20_enable()
3365     wpas.flush_scan_cache()
3366     id = wpas.add_cred_values({ 'realm': "example.com",
3367                                   'username': "hs20-test",
3368                                   'password': "password",
3369                                   'ca_cert': "auth_serv/ca.pem",
3370                                   'domain': "example.com",
3371                                   'update_identifier': "1234" })
3372     interworking_select(wpas, bssid, "home", freq="2412")
3373     interworking_connect(wpas, bssid, "TTLS")
3374     addr1 = wpas.get_driver_status_field("addr")
3375     if addr == addr1:
3376         raise Exception("Did not use random MAC address")
3377
3378     sta = hapd.get_sta(addr)
3379     if sta['addr'] != "FAIL":
3380         raise Exception("Unexpected STA association with permanent address")
3381     sta = hapd.get_sta(addr1)
3382     if sta['addr'] != addr1:
3383         raise Exception("STA association with random address not found")
3384
3385 def test_ap_hs20_multi_network_and_cred_removal(dev, apdev):
3386     """Multiple networks and cred removal"""
3387     check_eap_capa(dev[0], "MSCHAPV2")
3388     bssid = apdev[0]['bssid']
3389     params = hs20_ap_params()
3390     params['nai_realm'] = [ "0,example.com,25[3:26]"]
3391     hapd = hostapd.add_ap(apdev[0], params)
3392
3393     dev[0].add_network()
3394     dev[0].hs20_enable()
3395     id = dev[0].add_cred_values({ 'realm': "example.com",
3396                                   'username': "user",
3397                                   'password': "password" })
3398     interworking_select(dev[0], bssid, freq="2412")
3399     interworking_connect(dev[0], bssid, "PEAP")
3400     dev[0].add_network()
3401
3402     dev[0].request("DISCONNECT")
3403     dev[0].wait_disconnected(timeout=10)
3404
3405     hapd.disable()
3406     hapd.set("ssid", "another ssid")
3407     hapd.enable()
3408
3409     interworking_select(dev[0], bssid, freq="2412")
3410     interworking_connect(dev[0], bssid, "PEAP")
3411     dev[0].add_network()
3412     if len(dev[0].list_networks()) != 5:
3413         raise Exception("Unexpected number of networks prior to remove_crec")
3414
3415     dev[0].dump_monitor()
3416     dev[0].remove_cred(id)
3417     if len(dev[0].list_networks()) != 3:
3418         raise Exception("Unexpected number of networks after to remove_crec")
3419     dev[0].wait_disconnected(timeout=10)
3420
3421 def test_ap_hs20_interworking_add_network(dev, apdev):
3422     """Hotspot 2.0 connection using INTERWORKING_ADD_NETWORK"""
3423     check_eap_capa(dev[0], "MSCHAPV2")
3424     bssid = apdev[0]['bssid']
3425     params = hs20_ap_params()
3426     params['nai_realm'] = [ "0,example.com,21[3:26][6:7][99:99]" ]
3427     hostapd.add_ap(apdev[0], params)
3428
3429     dev[0].hs20_enable()
3430     dev[0].add_cred_values(default_cred(user="user"))
3431     interworking_select(dev[0], bssid, freq=2412)
3432     id = dev[0].interworking_add_network(bssid)
3433     dev[0].select_network(id, freq=2412)
3434     dev[0].wait_connected()
3435
3436 def _test_ap_hs20_proxyarp(dev, apdev):
3437     bssid = apdev[0]['bssid']
3438     params = hs20_ap_params()
3439     params['hessid'] = bssid
3440     params['disable_dgaf'] = '0'
3441     params['proxy_arp'] = '1'
3442     hapd = hostapd.add_ap(apdev[0], params, no_enable=True)
3443     if "OK" in hapd.request("ENABLE"):
3444         raise Exception("Incomplete hostapd configuration was accepted")
3445     hapd.set("ap_isolate", "1")
3446     if "OK" in hapd.request("ENABLE"):
3447         raise Exception("Incomplete hostapd configuration was accepted")
3448     hapd.set('bridge', 'ap-br0')
3449     hapd.dump_monitor()
3450     try:
3451         hapd.enable()
3452     except:
3453         # For now, do not report failures due to missing kernel support
3454         raise HwsimSkip("Could not start hostapd - assume proxyarp not supported in kernel version")
3455     ev = hapd.wait_event(["AP-ENABLED", "AP-DISABLED"], timeout=10)
3456     if ev is None:
3457         raise Exception("AP startup timed out")
3458     if "AP-ENABLED" not in ev:
3459         raise Exception("AP startup failed")
3460
3461     dev[0].hs20_enable()
3462     subprocess.call(['brctl', 'setfd', 'ap-br0', '0'])
3463     subprocess.call(['ip', 'link', 'set', 'dev', 'ap-br0', 'up'])
3464
3465     id = dev[0].add_cred_values({ 'realm': "example.com",
3466                                   'username': "hs20-test",
3467                                   'password': "password",
3468                                   'ca_cert': "auth_serv/ca.pem",
3469                                   'domain': "example.com",
3470                                   'update_identifier': "1234" })
3471     interworking_select(dev[0], bssid, "home", freq="2412")
3472     interworking_connect(dev[0], bssid, "TTLS")
3473
3474     dev[1].connect("test-hs20", key_mgmt="WPA-EAP", eap="TTLS",
3475                    identity="hs20-test", password="password",
3476                    ca_cert="auth_serv/ca.pem", phase2="auth=MSCHAPV2",
3477                    scan_freq="2412")
3478     time.sleep(0.1)
3479
3480     addr0 = dev[0].p2p_interface_addr()
3481     addr1 = dev[1].p2p_interface_addr()
3482
3483     src_ll_opt0 = "\x01\x01" + binascii.unhexlify(addr0.replace(':',''))
3484     src_ll_opt1 = "\x01\x01" + binascii.unhexlify(addr1.replace(':',''))
3485
3486     pkt = build_ns(src_ll=addr0, ip_src="aaaa:bbbb:cccc::2",
3487                    ip_dst="ff02::1:ff00:2", target="aaaa:bbbb:cccc::2",
3488                    opt=src_ll_opt0)
3489     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
3490         raise Exception("DATA_TEST_FRAME failed")
3491
3492     pkt = build_ns(src_ll=addr1, ip_src="aaaa:bbbb:dddd::2",
3493                    ip_dst="ff02::1:ff00:2", target="aaaa:bbbb:dddd::2",
3494                    opt=src_ll_opt1)
3495     if "OK" not in dev[1].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
3496         raise Exception("DATA_TEST_FRAME failed")
3497
3498     pkt = build_ns(src_ll=addr1, ip_src="aaaa:bbbb:eeee::2",
3499                    ip_dst="ff02::1:ff00:2", target="aaaa:bbbb:eeee::2",
3500                    opt=src_ll_opt1)
3501     if "OK" not in dev[1].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
3502         raise Exception("DATA_TEST_FRAME failed")
3503
3504     matches = get_permanent_neighbors("ap-br0")
3505     logger.info("After connect: " + str(matches))
3506     if len(matches) != 3:
3507         raise Exception("Unexpected number of neighbor entries after connect")
3508     if 'aaaa:bbbb:cccc::2 dev ap-br0 lladdr 02:00:00:00:00:00 PERMANENT' not in matches:
3509         raise Exception("dev0 addr missing")
3510     if 'aaaa:bbbb:dddd::2 dev ap-br0 lladdr 02:00:00:00:01:00 PERMANENT' not in matches:
3511         raise Exception("dev1 addr(1) missing")
3512     if 'aaaa:bbbb:eeee::2 dev ap-br0 lladdr 02:00:00:00:01:00 PERMANENT' not in matches:
3513         raise Exception("dev1 addr(2) missing")
3514     dev[0].request("DISCONNECT")
3515     dev[1].request("DISCONNECT")
3516     time.sleep(0.5)
3517     matches = get_permanent_neighbors("ap-br0")
3518     logger.info("After disconnect: " + str(matches))
3519     if len(matches) > 0:
3520         raise Exception("Unexpected neighbor entries after disconnect")
3521
3522 def test_ap_hs20_hidden_ssid_in_scan_res(dev, apdev):
3523     """Hotspot 2.0 connection with hidden SSId in scan results"""
3524     check_eap_capa(dev[0], "MSCHAPV2")
3525     bssid = apdev[0]['bssid']
3526
3527     hapd = hostapd.add_ap(apdev[0], { "ssid": 'secret',
3528                                       "ignore_broadcast_ssid": "1" })
3529     dev[0].scan_for_bss(bssid, freq=2412)
3530     hapd.disable()
3531     hapd_global = hostapd.HostapdGlobal(apdev[0])
3532     hapd_global.flush()
3533     hapd_global.remove(apdev[0]['ifname'])
3534
3535     params = hs20_ap_params()
3536     params['hessid'] = bssid
3537     hapd = hostapd.add_ap(apdev[0], params)
3538
3539     dev[0].hs20_enable()
3540     id = dev[0].add_cred_values({ 'realm': "example.com",
3541                                   'username': "hs20-test",
3542                                   'password': "password",
3543                                   'ca_cert': "auth_serv/ca.pem",
3544                                   'domain': "example.com" })
3545     interworking_select(dev[0], bssid, "home", freq="2412")
3546     interworking_connect(dev[0], bssid, "TTLS")
3547
3548     # clear BSS table to avoid issues in following test cases
3549     dev[0].request("DISCONNECT")
3550     dev[0].wait_disconnected()
3551     hapd.disable()
3552     dev[0].flush_scan_cache()
3553     dev[0].flush_scan_cache()
3554
3555 def test_ap_hs20_proxyarp(dev, apdev):
3556     """Hotspot 2.0 and ProxyARP"""
3557     check_eap_capa(dev[0], "MSCHAPV2")
3558     try:
3559         _test_ap_hs20_proxyarp(dev, apdev)
3560     finally:
3561         subprocess.call(['ip', 'link', 'set', 'dev', 'ap-br0', 'down'],
3562                         stderr=open('/dev/null', 'w'))
3563         subprocess.call(['brctl', 'delbr', 'ap-br0'],
3564                         stderr=open('/dev/null', 'w'))
3565
3566 def _test_ap_hs20_proxyarp_dgaf(dev, apdev, disabled):
3567     bssid = apdev[0]['bssid']
3568     params = hs20_ap_params()
3569     params['hessid'] = bssid
3570     params['disable_dgaf'] = '1' if disabled else '0'
3571     params['proxy_arp'] = '1'
3572     params['na_mcast_to_ucast'] = '1'
3573     params['ap_isolate'] = '1'
3574     params['bridge'] = 'ap-br0'
3575     hapd = hostapd.add_ap(apdev[0], params, no_enable=True)
3576     try:
3577         hapd.enable()
3578     except:
3579         # For now, do not report failures due to missing kernel support
3580         raise HwsimSkip("Could not start hostapd - assume proxyarp not supported in kernel version")
3581     ev = hapd.wait_event(["AP-ENABLED"], timeout=10)
3582     if ev is None:
3583         raise Exception("AP startup timed out")
3584
3585     dev[0].hs20_enable()
3586     subprocess.call(['brctl', 'setfd', 'ap-br0', '0'])
3587     subprocess.call(['ip', 'link', 'set', 'dev', 'ap-br0', 'up'])
3588
3589     id = dev[0].add_cred_values({ 'realm': "example.com",
3590                                   'username': "hs20-test",
3591                                   'password': "password",
3592                                   'ca_cert': "auth_serv/ca.pem",
3593                                   'domain': "example.com",
3594                                   'update_identifier': "1234" })
3595     interworking_select(dev[0], bssid, "home", freq="2412")
3596     interworking_connect(dev[0], bssid, "TTLS")
3597
3598     dev[1].connect("test-hs20", key_mgmt="WPA-EAP", eap="TTLS",
3599                    identity="hs20-test", password="password",
3600                    ca_cert="auth_serv/ca.pem", phase2="auth=MSCHAPV2",
3601                    scan_freq="2412")
3602     time.sleep(0.1)
3603
3604     addr0 = dev[0].p2p_interface_addr()
3605
3606     src_ll_opt0 = "\x01\x01" + binascii.unhexlify(addr0.replace(':',''))
3607
3608     pkt = build_ns(src_ll=addr0, ip_src="aaaa:bbbb:cccc::2",
3609                    ip_dst="ff02::1:ff00:2", target="aaaa:bbbb:cccc::2",
3610                    opt=src_ll_opt0)
3611     if "OK" not in dev[0].request("DATA_TEST_FRAME " + binascii.hexlify(pkt)):
3612         raise Exception("DATA_TEST_FRAME failed")
3613
3614     pkt = build_ra(src_ll=apdev[0]['bssid'], ip_src="aaaa:bbbb:cccc::33",
3615                    ip_dst="ff01::1")
3616     if "OK" not in hapd.request("DATA_TEST_FRAME ifname=ap-br0 " + binascii.hexlify(pkt)):
3617         raise Exception("DATA_TEST_FRAME failed")
3618
3619     pkt = build_na(src_ll=apdev[0]['bssid'], ip_src="aaaa:bbbb:cccc::44",
3620                    ip_dst="ff01::1", target="aaaa:bbbb:cccc::55")
3621     if "OK" not in hapd.request("DATA_TEST_FRAME ifname=ap-br0 " + binascii.hexlify(pkt)):
3622         raise Exception("DATA_TEST_FRAME failed")
3623
3624     pkt = build_dhcp_ack(dst_ll="ff:ff:ff:ff:ff:ff", src_ll=bssid,
3625                          ip_src="192.168.1.1", ip_dst="255.255.255.255",
3626                          yiaddr="192.168.1.123", chaddr=addr0)
3627     if "OK" not in hapd.request("DATA_TEST_FRAME ifname=ap-br0 " + binascii.hexlify(pkt)):
3628         raise Exception("DATA_TEST_FRAME failed")
3629     # another copy for additional code coverage
3630     pkt = build_dhcp_ack(dst_ll=addr0, src_ll=bssid,
3631                          ip_src="192.168.1.1", ip_dst="255.255.255.255",
3632                          yiaddr="192.168.1.123", chaddr=addr0)
3633     if "OK" not in hapd.request("DATA_TEST_FRAME ifname=ap-br0 " + binascii.hexlify(pkt)):
3634         raise Exception("DATA_TEST_FRAME failed")
3635
3636     matches = get_permanent_neighbors("ap-br0")
3637     logger.info("After connect: " + str(matches))
3638     if len(matches) != 2:
3639         raise Exception("Unexpected number of neighbor entries after connect")
3640     if 'aaaa:bbbb:cccc::2 dev ap-br0 lladdr 02:00:00:00:00:00 PERMANENT' not in matches:
3641         raise Exception("dev0 addr missing")
3642     if '192.168.1.123 dev ap-br0 lladdr 02:00:00:00:00:00 PERMANENT' not in matches:
3643         raise Exception("dev0 IPv4 addr missing")
3644     dev[0].request("DISCONNECT")
3645     dev[1].request("DISCONNECT")
3646     time.sleep(0.5)
3647     matches = get_permanent_neighbors("ap-br0")
3648     logger.info("After disconnect: " + str(matches))
3649     if len(matches) > 0:
3650         raise Exception("Unexpected neighbor entries after disconnect")
3651
3652 def test_ap_hs20_proxyarp_disable_dgaf(dev, apdev):
3653     """Hotspot 2.0 and ProxyARP with DGAF disabled"""
3654     check_eap_capa(dev[0], "MSCHAPV2")
3655     try:
3656         _test_ap_hs20_proxyarp_dgaf(dev, apdev, True)
3657     finally:
3658         subprocess.call(['ip', 'link', 'set', 'dev', 'ap-br0', 'down'],
3659                         stderr=open('/dev/null', 'w'))
3660         subprocess.call(['brctl', 'delbr', 'ap-br0'],
3661                         stderr=open('/dev/null', 'w'))
3662
3663 def test_ap_hs20_proxyarp_enable_dgaf(dev, apdev):
3664     """Hotspot 2.0 and ProxyARP with DGAF enabled"""
3665     check_eap_capa(dev[0], "MSCHAPV2")
3666     try:
3667         _test_ap_hs20_proxyarp_dgaf(dev, apdev, False)
3668     finally:
3669         subprocess.call(['ip', 'link', 'set', 'dev', 'ap-br0', 'down'],
3670                         stderr=open('/dev/null', 'w'))
3671         subprocess.call(['brctl', 'delbr', 'ap-br0'],
3672                         stderr=open('/dev/null', 'w'))
3673
3674 def ip_checksum(buf):
3675     sum = 0
3676     if len(buf) & 0x01:
3677         buf += '\0x00'
3678     for i in range(0, len(buf), 2):
3679         val, = struct.unpack('H', buf[i:i+2])
3680         sum += val
3681     while (sum >> 16):
3682         sum = (sum & 0xffff) + (sum >> 16)
3683     return struct.pack('H', ~sum & 0xffff)
3684
3685 def ipv6_solicited_node_mcaddr(target):
3686     prefix = socket.inet_pton(socket.AF_INET6, "ff02::1:ff00:0")
3687     mask = socket.inet_pton(socket.AF_INET6, "::ff:ffff")
3688     _target = socket.inet_pton(socket.AF_INET6, target)
3689     p = struct.unpack('4I', prefix)
3690     m = struct.unpack('4I', mask)
3691     t = struct.unpack('4I', _target)
3692     res = (p[0] | (t[0] & m[0]),
3693            p[1] | (t[1] & m[1]),
3694            p[2] | (t[2] & m[2]),
3695            p[3] | (t[3] & m[3]))
3696     return socket.inet_ntop(socket.AF_INET6, struct.pack('4I', *res))
3697
3698 def build_icmpv6(ipv6_addrs, type, code, payload):
3699     start = struct.pack("BB", type, code)
3700     end = payload
3701     icmp = start + '\x00\x00' + end
3702     pseudo = ipv6_addrs + struct.pack(">LBBBB", len(icmp), 0, 0, 0, 58)
3703     csum = ip_checksum(pseudo + icmp)
3704     return start + csum + end
3705
3706 def build_ra(src_ll, ip_src, ip_dst, cur_hop_limit=0, router_lifetime=0,
3707              reachable_time=0, retrans_timer=0, opt=None):
3708     link_mc = binascii.unhexlify("3333ff000002")
3709     _src_ll = binascii.unhexlify(src_ll.replace(':',''))
3710     proto = '\x86\xdd'
3711     ehdr = link_mc + _src_ll + proto
3712     _ip_src = socket.inet_pton(socket.AF_INET6, ip_src)
3713     _ip_dst = socket.inet_pton(socket.AF_INET6, ip_dst)
3714
3715     adv = struct.pack('>BBHLL', cur_hop_limit, 0, router_lifetime,
3716                       reachable_time, retrans_timer)
3717     if opt:
3718         payload = adv + opt
3719     else:
3720         payload = adv
3721     icmp = build_icmpv6(_ip_src + _ip_dst, 134, 0, payload)
3722
3723     ipv6 = struct.pack('>BBBBHBB', 0x60, 0, 0, 0, len(icmp), 58, 255)
3724     ipv6 += _ip_src + _ip_dst
3725
3726     return ehdr + ipv6 + icmp
3727
3728 def build_ns(src_ll, ip_src, ip_dst, target, opt=None):
3729     link_mc = binascii.unhexlify("3333ff000002")
3730     _src_ll = binascii.unhexlify(src_ll.replace(':',''))
3731     proto = '\x86\xdd'
3732     ehdr = link_mc + _src_ll + proto
3733     _ip_src = socket.inet_pton(socket.AF_INET6, ip_src)
3734     if ip_dst is None:
3735         ip_dst = ipv6_solicited_node_mcaddr(target)
3736     _ip_dst = socket.inet_pton(socket.AF_INET6, ip_dst)
3737
3738     reserved = '\x00\x00\x00\x00'
3739     _target = socket.inet_pton(socket.AF_INET6, target)
3740     if opt:
3741         payload = reserved + _target + opt
3742     else:
3743         payload = reserved + _target
3744     icmp = build_icmpv6(_ip_src + _ip_dst, 135, 0, payload)
3745
3746     ipv6 = struct.pack('>BBBBHBB', 0x60, 0, 0, 0, len(icmp), 58, 255)
3747     ipv6 += _ip_src + _ip_dst
3748
3749     return ehdr + ipv6 + icmp
3750
3751 def send_ns(dev, src_ll=None, target=None, ip_src=None, ip_dst=None, opt=None,
3752             hapd_bssid=None):
3753     if hapd_bssid:
3754         if src_ll is None:
3755             src_ll = hapd_bssid
3756         cmd = "DATA_TEST_FRAME ifname=ap-br0 "
3757     else:
3758         if src_ll is None:
3759             src_ll = dev.p2p_interface_addr()
3760         cmd = "DATA_TEST_FRAME "
3761
3762     if opt is None:
3763         opt = "\x01\x01" + binascii.unhexlify(src_ll.replace(':',''))
3764
3765     pkt = build_ns(src_ll=src_ll, ip_src=ip_src, ip_dst=ip_dst, target=target,
3766                    opt=opt)
3767     if "OK" not in dev.request(cmd + binascii.hexlify(pkt)):
3768         raise Exception("DATA_TEST_FRAME failed")
3769
3770 def build_na(src_ll, ip_src, ip_dst, target, opt=None, flags=0):
3771     link_mc = binascii.unhexlify("3333ff000002")
3772     _src_ll = binascii.unhexlify(src_ll.replace(':',''))
3773     proto = '\x86\xdd'
3774     ehdr = link_mc + _src_ll + proto
3775     _ip_src = socket.inet_pton(socket.AF_INET6, ip_src)
3776     _ip_dst = socket.inet_pton(socket.AF_INET6, ip_dst)
3777
3778     _target = socket.inet_pton(socket.AF_INET6, target)
3779     if opt:
3780         payload = struct.pack('>Bxxx', flags) + _target + opt
3781     else:
3782         payload = struct.pack('>Bxxx', flags) + _target
3783     icmp = build_icmpv6(_ip_src + _ip_dst, 136, 0, payload)
3784
3785     ipv6 = struct.pack('>BBBBHBB', 0x60, 0, 0, 0, len(icmp), 58, 255)
3786     ipv6 += _ip_src + _ip_dst
3787
3788     return ehdr + ipv6 + icmp
3789
3790 def send_na(dev, src_ll=None, target=None, ip_src=None, ip_dst=None, opt=None,
3791             hapd_bssid=None):
3792     if hapd_bssid:
3793         if src_ll is None:
3794             src_ll = hapd_bssid
3795         cmd = "DATA_TEST_FRAME ifname=ap-br0 "
3796     else:
3797         if src_ll is None:
3798             src_ll = dev.p2p_interface_addr()
3799         cmd = "DATA_TEST_FRAME "
3800
3801     pkt = build_na(src_ll=src_ll, ip_src=ip_src, ip_dst=ip_dst, target=target,
3802                    opt=opt)
3803     if "OK" not in dev.request(cmd + binascii.hexlify(pkt)):
3804         raise Exception("DATA_TEST_FRAME failed")
3805
3806 def build_dhcp_ack(dst_ll, src_ll, ip_src, ip_dst, yiaddr, chaddr,
3807                    subnet_mask="255.255.255.0", truncated_opt=False,
3808                    wrong_magic=False, force_tot_len=None, no_dhcp=False):
3809     _dst_ll = binascii.unhexlify(dst_ll.replace(':',''))
3810     _src_ll = binascii.unhexlify(src_ll.replace(':',''))
3811     proto = '\x08\x00'
3812     ehdr = _dst_ll + _src_ll + proto
3813     _ip_src = socket.inet_pton(socket.AF_INET, ip_src)
3814     _ip_dst = socket.inet_pton(socket.AF_INET, ip_dst)
3815     _subnet_mask = socket.inet_pton(socket.AF_INET, subnet_mask)
3816
3817     _ciaddr = '\x00\x00\x00\x00'
3818     _yiaddr = socket.inet_pton(socket.AF_INET, yiaddr)
3819     _siaddr = '\x00\x00\x00\x00'
3820     _giaddr = '\x00\x00\x00\x00'
3821     _chaddr = binascii.unhexlify(chaddr.replace(':','') + "00000000000000000000")
3822     payload = struct.pack('>BBBBL3BB', 2, 1, 6, 0, 12345, 0, 0, 0, 0)
3823     payload += _ciaddr + _yiaddr + _siaddr + _giaddr + _chaddr + 192*'\x00'
3824     # magic
3825     if wrong_magic:
3826         payload += '\x63\x82\x53\x00'
3827     else:
3828         payload += '\x63\x82\x53\x63'
3829     if truncated_opt:
3830         payload += '\x22\xff\x00'
3831     # Option: DHCP Message Type = ACK
3832     payload += '\x35\x01\x05'
3833     # Pad Option
3834     payload += '\x00'
3835     # Option: Subnet Mask
3836     payload += '\x01\x04' + _subnet_mask
3837     # Option: Time Offset
3838     payload += struct.pack('>BBL', 2, 4, 0)
3839     # End Option
3840     payload += '\xff'
3841     # Pad Option
3842     payload += '\x00\x00\x00\x00'
3843
3844     if no_dhcp:
3845         payload = struct.pack('>BBBBL3BB', 2, 1, 6, 0, 12345, 0, 0, 0, 0)
3846         payload += _ciaddr + _yiaddr + _siaddr + _giaddr + _chaddr + 192*'\x00'
3847
3848     udp = struct.pack('>HHHH', 67, 68, 8 + len(payload), 0) + payload
3849
3850     if force_tot_len:
3851         tot_len = force_tot_len
3852     else:
3853         tot_len = 20 + len(udp)
3854     start = struct.pack('>BBHHBBBB', 0x45, 0, tot_len, 0, 0, 0, 128, 17)
3855     ipv4 = start + '\x00\x00' + _ip_src + _ip_dst
3856     csum = ip_checksum(ipv4)
3857     ipv4 = start + csum + _ip_src + _ip_dst
3858
3859     return ehdr + ipv4 + udp
3860
3861 def build_arp(dst_ll, src_ll, opcode, sender_mac, sender_ip,
3862               target_mac, target_ip):
3863     _dst_ll = binascii.unhexlify(dst_ll.replace(':',''))
3864     _src_ll = binascii.unhexlify(src_ll.replace(':',''))
3865     proto = '\x08\x06'
3866     ehdr = _dst_ll + _src_ll + proto
3867
3868     _sender_mac = binascii.unhexlify(sender_mac.replace(':',''))
3869     _sender_ip = socket.inet_pton(socket.AF_INET, sender_ip)
3870     _target_mac = binascii.unhexlify(target_mac.replace(':',''))
3871     _target_ip = socket.inet_pton(socket.AF_INET, target_ip)
3872
3873     arp = struct.pack('>HHBBH', 1, 0x0800, 6, 4, opcode)
3874     arp += _sender_mac + _sender_ip
3875     arp += _target_mac + _target_ip
3876
3877     return ehdr + arp
3878
3879 def send_arp(dev, dst_ll="ff:ff:ff:ff:ff:ff", src_ll=None, opcode=1,
3880              sender_mac=None, sender_ip="0.0.0.0",
3881              target_mac="00:00:00:00:00:00", target_ip="0.0.0.0",
3882              hapd_bssid=None):
3883     if hapd_bssid:
3884         if src_ll is None:
3885             src_ll = hapd_bssid
3886         if sender_mac is None:
3887             sender_mac = hapd_bssid
3888         cmd = "DATA_TEST_FRAME ifname=ap-br0 "
3889     else:
3890         if src_ll is None:
3891             src_ll = dev.p2p_interface_addr()
3892         if sender_mac is None:
3893             sender_mac = dev.p2p_interface_addr()
3894         cmd = "DATA_TEST_FRAME "
3895
3896     pkt = build_arp(dst_ll=dst_ll, src_ll=src_ll, opcode=opcode,
3897                     sender_mac=sender_mac, sender_ip=sender_ip,
3898                     target_mac=target_mac, target_ip=target_ip)
3899     if "OK" not in dev.request(cmd + binascii.hexlify(pkt)):
3900         raise Exception("DATA_TEST_FRAME failed")
3901
3902 def get_permanent_neighbors(ifname):
3903     cmd = subprocess.Popen(['ip', 'nei'], stdout=subprocess.PIPE)
3904     res = cmd.stdout.read()
3905     cmd.stdout.close()
3906     return [ line for line in res.splitlines() if "PERMANENT" in line and ifname in line ]
3907
3908 def get_bridge_macs(ifname):
3909     cmd = subprocess.Popen(['brctl', 'showmacs', ifname],
3910                            stdout=subprocess.PIPE)
3911     res = cmd.stdout.read()
3912     cmd.stdout.close()
3913     return res
3914
3915 def tshark_get_arp(cap, filter):
3916     res = run_tshark(cap, filter,
3917                      [ "eth.dst", "eth.src",
3918                        "arp.src.hw_mac", "arp.src.proto_ipv4",
3919                        "arp.dst.hw_mac", "arp.dst.proto_ipv4" ],
3920                      wait=False)
3921     frames = []
3922     for l in res.splitlines():
3923         frames.append(l.split('\t'))
3924     return frames
3925
3926 def tshark_get_ns(cap):
3927     res = run_tshark(cap, "icmpv6.type == 135",
3928                      [ "eth.dst", "eth.src",
3929                        "ipv6.src", "ipv6.dst",
3930                        "icmpv6.nd.ns.target_address",
3931                        "icmpv6.opt.linkaddr" ],
3932                      wait=False)
3933     frames = []
3934     for l in res.splitlines():
3935         frames.append(l.split('\t'))
3936     return frames
3937
3938 def tshark_get_na(cap):
3939     res = run_tshark(cap, "icmpv6.type == 136",
3940                      [ "eth.dst", "eth.src",
3941                        "ipv6.src", "ipv6.dst",
3942                        "icmpv6.nd.na.target_address",
3943                        "icmpv6.opt.linkaddr" ],
3944                      wait=False)
3945     frames = []
3946     for l in res.splitlines():
3947         frames.append(l.split('\t'))
3948     return frames
3949
3950 def _test_proxyarp_open(dev, apdev, params, ebtables=False):
3951     prefix = "proxyarp_open"
3952     if ebtables:
3953         prefix += "_ebtables"
3954     cap_br = os.path.join(params['logdir'], prefix + ".ap-br0.pcap")
3955     cap_dev0 = os.path.join(params['logdir'],
3956                             prefix + ".%s.pcap" % dev[0].ifname)
3957     cap_dev1 = os.path.join(params['logdir'],
3958                             prefix + ".%s.pcap" % dev[1].ifname)
3959     cap_dev2 = os.path.join(params['logdir'],
3960                             prefix + ".%s.pcap" % dev[2].ifname)
3961
3962     bssid = apdev[0]['bssid']
3963     params = { 'ssid': 'open' }
3964     params['proxy_arp'] = '1'
3965     hapd = hostapd.add_ap(apdev[0], params, no_enable=True)
3966     hapd.set("ap_isolate", "1")
3967     hapd.set('bridge', 'ap-br0')
3968     hapd.dump_monitor()
3969     try:
3970         hapd.enable()
3971     except:
3972         # For now, do not report failures due to missing kernel support
3973         raise HwsimSkip("Could not start hostapd - assume proxyarp not supported in kernel version")
3974     ev = hapd.wait_event(["AP-ENABLED", "AP-DISABLED"], timeout=10)
3975     if ev is None:
3976         raise Exception("AP startup timed out")
3977     if "AP-ENABLED" not in ev:
3978         raise Exception("AP startup failed")
3979
3980     params2 = { 'ssid': 'another' }
3981     hapd2 = hostapd.add_ap(apdev[1], params2, no_enable=True)
3982     hapd2.set('bridge', 'ap-br0')
3983     hapd2.enable()
3984
3985     subprocess.call(['brctl', 'setfd', 'ap-br0', '0'])
3986     subprocess.call(['ip', 'link', 'set', 'dev', 'ap-br0', 'up'])
3987
3988     if ebtables:
3989         for chain in [ 'FORWARD', 'OUTPUT' ]:
3990             subprocess.call(['ebtables', '-A', chain, '-p', 'ARP',
3991                              '-d', 'Broadcast', '-o', apdev[0]['ifname'],
3992                              '-j', 'DROP'])
3993             subprocess.call(['ebtables', '-A', chain, '-d', 'Multicast',
3994                              '-p', 'IPv6', '--ip6-protocol', 'ipv6-icmp',
3995                              '--ip6-icmp-type', 'neighbor-solicitation',
3996                              '-o', apdev[0]['ifname'], '-j', 'DROP'])
3997             subprocess.call(['ebtables', '-A', chain, '-d', 'Multicast',
3998                              '-p', 'IPv6', '--ip6-protocol', 'ipv6-icmp',
3999                              '--ip6-icmp-type', 'neighbor-advertisement',
4000                              '-o', apdev[0]['ifname'], '-j', 'DROP'])
4001             subprocess.call(['ebtables', '-A', chain,
4002                              '-p', 'IPv6', '--ip6-protocol', 'ipv6-icmp',
4003                              '--ip6-icmp-type', 'router-solicitation',
4004                              '-o', apdev[0]['ifname'], '-j', 'DROP'])
4005             # Multicast Listener Report Message
4006             subprocess.call(['ebtables', '-A', chain, '-d', 'Multicast',
4007                              '-p', 'IPv6', '--ip6-protocol', 'ipv6-icmp',
4008                              '--ip6-icmp-type', '143',
4009                              '-o', apdev[0]['ifname'], '-j', 'DROP'])
4010
4011     time.sleep(0.5)
4012     cmd = {}
4013     cmd[0] = subprocess.Popen(['tcpdump', '-p', '-U', '-i', 'ap-br0',
4014                                '-w', cap_br, '-s', '2000'],
4015                               stderr=open('/dev/null', 'w'))
4016     cmd[1] = subprocess.Popen(['tcpdump', '-p', '-U', '-i', dev[0].ifname,
4017                                '-w', cap_dev0, '-s', '2000'],
4018                               stderr=open('/dev/null', 'w'))
4019     cmd[2] = subprocess.Popen(['tcpdump', '-p', '-U', '-i', dev[1].ifname,
4020                                '-w', cap_dev1, '-s', '2000'],
4021                               stderr=open('/dev/null', 'w'))
4022     cmd[3] = subprocess.Popen(['tcpdump', '-p', '-U', '-i', dev[2].ifname,
4023                                '-w', cap_dev2, '-s', '2000'],
4024                               stderr=open('/dev/null', 'w'))
4025
4026     dev[0].connect("open", key_mgmt="NONE", scan_freq="2412")
4027     dev[1].connect("open", key_mgmt="NONE", scan_freq="2412")
4028     dev[2].connect("another", key_mgmt="NONE", scan_freq="2412")
4029     time.sleep(0.1)
4030
4031     brcmd = subprocess.Popen(['brctl', 'show'], stdout=subprocess.PIPE)
4032     res = brcmd.stdout.read()
4033     brcmd.stdout.close()
4034     logger.info("Bridge setup: " + res)
4035
4036     brcmd = subprocess.Popen(['brctl', 'showstp', 'ap-br0'],
4037                              stdout=subprocess.PIPE)
4038     res = brcmd.stdout.read()
4039     brcmd.stdout.close()
4040     logger.info("Bridge showstp: " + res)
4041
4042     addr0 = dev[0].p2p_interface_addr()
4043     addr1 = dev[1].p2p_interface_addr()
4044     addr2 = dev[2].p2p_interface_addr()
4045
4046     src_ll_opt0 = "\x01\x01" + binascii.unhexlify(addr0.replace(':',''))
4047     src_ll_opt1 = "\x01\x01" + binascii.unhexlify(addr1.replace(':',''))
4048
4049     # DAD NS
4050     send_ns(dev[0], ip_src="::", target="aaaa:bbbb:cccc::2")
4051
4052     send_ns(dev[0], ip_src="aaaa:bbbb:cccc::2", target="aaaa:bbbb:cccc::2")
4053     # test frame without source link-layer address option
4054     send_ns(dev[0], ip_src="aaaa:bbbb:cccc::2", target="aaaa:bbbb:cccc::2",
4055             opt='')
4056     # test frame with bogus option
4057     send_ns(dev[0], ip_src="aaaa:bbbb:cccc::2", target="aaaa:bbbb:cccc::2",
4058             opt="\x70\x01\x01\x02\x03\x04\x05\x05")
4059     # test frame with truncated source link-layer address option
4060     send_ns(dev[0], ip_src="aaaa:bbbb:cccc::2", target="aaaa:bbbb:cccc::2",
4061             opt="\x01\x01\x01\x02\x03\x04")
4062     # test frame with foreign source link-layer address option
4063     send_ns(dev[0], ip_src="aaaa:bbbb:cccc::2", target="aaaa:bbbb:cccc::2",
4064             opt="\x01\x01\x01\x02\x03\x04\x05\x06")
4065
4066     send_ns(dev[1], ip_src="aaaa:bbbb:dddd::2", target="aaaa:bbbb:dddd::2")
4067
4068     send_ns(dev[1], ip_src="aaaa:bbbb:eeee::2", target="aaaa:bbbb:eeee::2")
4069     # another copy for additional code coverage
4070     send_ns(dev[1], ip_src="aaaa:bbbb:eeee::2", target="aaaa:bbbb:eeee::2")
4071
4072     pkt = build_dhcp_ack(dst_ll="ff:ff:ff:ff:ff:ff", src_ll=bssid,
4073                          ip_src="192.168.1.1", ip_dst="255.255.255.255",
4074                          yiaddr="192.168.1.124", chaddr=addr0)
4075     if "OK" not in hapd.request("DATA_TEST_FRAME ifname=ap-br0 " + binascii.hexlify(pkt)):
4076         raise Exception("DATA_TEST_FRAME failed")
4077     # Change address and verify unicast
4078     pkt = build_dhcp_ack(dst_ll=addr0, src_ll=bssid,
4079                          ip_src="192.168.1.1", ip_dst="255.255.255.255",
4080                          yiaddr="192.168.1.123", chaddr=addr0)
4081     if "OK" not in hapd.request("DATA_TEST_FRAME ifname=ap-br0 " + binascii.hexlify(pkt)):
4082         raise Exception("DATA_TEST_FRAME failed")
4083
4084     # Not-associated client MAC address
4085     pkt = build_dhcp_ack(dst_ll="ff:ff:ff:ff:ff:ff", src_ll=bssid,
4086                          ip_src="192.168.1.1", ip_dst="255.255.255.255",
4087                          yiaddr="192.168.1.125", chaddr="22:33:44:55:66:77")
4088     if "OK" not in hapd.request("DATA_TEST_FRAME ifname=ap-br0 " + binascii.hexlify(pkt)):
4089         raise Exception("DATA_TEST_FRAME failed")
4090
4091     # No IP address
4092     pkt = build_dhcp_ack(dst_ll=addr1, src_ll=bssid,
4093                          ip_src="192.168.1.1", ip_dst="255.255.255.255",
4094                          yiaddr="0.0.0.0", chaddr=addr1)
4095     if "OK" not in hapd.request("DATA_TEST_FRAME ifname=ap-br0 " + binascii.hexlify(pkt)):
4096         raise Exception("DATA_TEST_FRAME failed")
4097
4098     # Zero subnet mask
4099     pkt = build_dhcp_ack(dst_ll=addr1, src_ll=bssid,
4100                          ip_src="192.168.1.1", ip_dst="255.255.255.255",
4101                          yiaddr="192.168.1.126", chaddr=addr1,
4102                          subnet_mask="0.0.0.0")
4103     if "OK" not in hapd.request("DATA_TEST_FRAME ifname=ap-br0 " + binascii.hexlify(pkt)):
4104         raise Exception("DATA_TEST_FRAME failed")
4105
4106     # Truncated option
4107     pkt = build_dhcp_ack(dst_ll=addr1, src_ll=bssid,
4108                          ip_src="192.168.1.1", ip_dst="255.255.255.255",
4109                          yiaddr="192.168.1.127", chaddr=addr1,
4110                          truncated_opt=True)
4111     if "OK" not in hapd.request("DATA_TEST_FRAME ifname=ap-br0 " + binascii.hexlify(pkt)):
4112         raise Exception("DATA_TEST_FRAME failed")
4113
4114     # Wrong magic
4115     pkt = build_dhcp_ack(dst_ll=addr1, src_ll=bssid,
4116                          ip_src="192.168.1.1", ip_dst="255.255.255.255",
4117                          yiaddr="192.168.1.128", chaddr=addr1,
4118                          wrong_magic=True)
4119     if "OK" not in hapd.request("DATA_TEST_FRAME ifname=ap-br0 " + binascii.hexlify(pkt)):
4120         raise Exception("DATA_TEST_FRAME failed")
4121
4122     # Wrong IPv4 total length
4123     pkt = build_dhcp_ack(dst_ll=addr1, src_ll=bssid,
4124                          ip_src="192.168.1.1", ip_dst="255.255.255.255",
4125                          yiaddr="192.168.1.129", chaddr=addr1,
4126                          force_tot_len=1000)
4127     if "OK" not in hapd.request("DATA_TEST_FRAME ifname=ap-br0 " + binascii.hexlify(pkt)):
4128         raise Exception("DATA_TEST_FRAME failed")
4129
4130     # BOOTP
4131     pkt = build_dhcp_ack(dst_ll=addr1, src_ll=bssid,
4132                          ip_src="192.168.1.1", ip_dst="255.255.255.255",
4133                          yiaddr="192.168.1.129", chaddr=addr1,
4134                          no_dhcp=True)
4135     if "OK" not in hapd.request("DATA_TEST_FRAME ifname=ap-br0 " + binascii.hexlify(pkt)):
4136         raise Exception("DATA_TEST_FRAME failed")
4137
4138     macs = get_bridge_macs("ap-br0")
4139     logger.info("After connect (showmacs): " + str(macs))
4140
4141     matches = get_permanent_neighbors("ap-br0")
4142     logger.info("After connect: " + str(matches))
4143     if len(matches) != 4:
4144         raise Exception("Unexpected number of neighbor entries after connect")
4145     if 'aaaa:bbbb:cccc::2 dev ap-br0 lladdr 02:00:00:00:00:00 PERMANENT' not in matches:
4146         raise Exception("dev0 addr missing")
4147     if 'aaaa:bbbb:dddd::2 dev ap-br0 lladdr 02:00:00:00:01:00 PERMANENT' not in matches:
4148         raise Exception("dev1 addr(1) missing")
4149     if 'aaaa:bbbb:eeee::2 dev ap-br0 lladdr 02:00:00:00:01:00 PERMANENT' not in matches:
4150         raise Exception("dev1 addr(2) missing")
4151     if '192.168.1.123 dev ap-br0 lladdr 02:00:00:00:00:00 PERMANENT' not in matches:
4152         raise Exception("dev0 IPv4 addr missing")
4153
4154     targets = [ "192.168.1.123", "192.168.1.124", "192.168.1.125",
4155                 "192.168.1.126" ]
4156     for target in targets:
4157         send_arp(dev[1], sender_ip="192.168.1.100", target_ip=target)
4158
4159     for target in targets:
4160         send_arp(hapd, hapd_bssid=bssid, sender_ip="192.168.1.101",
4161                  target_ip=target)
4162
4163     for target in targets:
4164         send_arp(dev[2], sender_ip="192.168.1.103", target_ip=target)
4165
4166     # ARP Probe from wireless STA
4167     send_arp(dev[1], target_ip="192.168.1.127")
4168     # ARP Announcement from wireless STA
4169     send_arp(dev[1], sender_ip="192.168.1.127", target_ip="192.168.1.127")
4170     send_arp(dev[1], sender_ip="192.168.1.127", target_ip="192.168.1.127",
4171              opcode=2)
4172
4173     macs = get_bridge_macs("ap-br0")
4174     logger.info("After ARP Probe + Announcement (showmacs): " + str(macs))
4175
4176     matches = get_permanent_neighbors("ap-br0")
4177     logger.info("After ARP Probe + Announcement: " + str(matches))
4178
4179     # ARP Request for the newly introduced IP address from wireless STA
4180     send_arp(dev[0], sender_ip="192.168.1.123", target_ip="192.168.1.127")
4181
4182     # ARP Request for the newly introduced IP address from bridge
4183     send_arp(hapd, hapd_bssid=bssid, sender_ip="192.168.1.102",
4184              target_ip="192.168.1.127")
4185     send_arp(dev[2], sender_ip="192.168.1.103", target_ip="192.168.1.127")
4186
4187     # ARP Probe from bridge
4188     send_arp(hapd, hapd_bssid=bssid, target_ip="192.168.1.130")
4189     send_arp(dev[2], target_ip="192.168.1.131")
4190     # ARP Announcement from bridge (not to be learned by AP for proxyarp)
4191     send_arp(hapd, hapd_bssid=bssid, sender_ip="192.168.1.130",
4192              target_ip="192.168.1.130")
4193     send_arp(hapd, hapd_bssid=bssid, sender_ip="192.168.1.130",
4194              target_ip="192.168.1.130", opcode=2)
4195     send_arp(dev[2], sender_ip="192.168.1.131", target_ip="192.168.1.131")
4196     send_arp(dev[2], sender_ip="192.168.1.131", target_ip="192.168.1.131",
4197              opcode=2)
4198
4199     macs = get_bridge_macs("ap-br0")
4200     logger.info("After ARP Probe + Announcement (showmacs): " + str(macs))
4201
4202     matches = get_permanent_neighbors("ap-br0")
4203     logger.info("After ARP Probe + Announcement: " + str(matches))
4204
4205     # ARP Request for the newly introduced IP address from wireless STA
4206     send_arp(dev[0], sender_ip="192.168.1.123", target_ip="192.168.1.130")
4207     # ARP Response from bridge (AP does not proxy for non-wireless devices)
4208     send_arp(hapd, hapd_bssid=bssid, dst_ll=addr0, sender_ip="192.168.1.130",
4209              target_ip="192.168.1.123", opcode=2)
4210
4211     # ARP Request for the newly introduced IP address from wireless STA
4212     send_arp(dev[0], sender_ip="192.168.1.123", target_ip="192.168.1.131")
4213     # ARP Response from bridge (AP does not proxy for non-wireless devices)
4214     send_arp(dev[2], dst_ll=addr0, sender_ip="192.168.1.131",
4215              target_ip="192.168.1.123", opcode=2)
4216
4217     # ARP Request for the newly introduced IP address from bridge
4218     send_arp(hapd, hapd_bssid=bssid, sender_ip="192.168.1.102",
4219              target_ip="192.168.1.130")
4220     send_arp(dev[2], sender_ip="192.168.1.104", target_ip="192.168.1.131")
4221
4222     # ARP Probe from wireless STA (duplicate address; learned through DHCP)
4223     send_arp(dev[1], target_ip="192.168.1.123")
4224     # ARP Probe from wireless STA (duplicate address; learned through ARP)
4225     send_arp(dev[0], target_ip="192.168.1.127")
4226
4227     # Gratuitous ARP Reply for another STA's IP address
4228     send_arp(dev[0], opcode=2, sender_mac=addr0, sender_ip="192.168.1.127",
4229              target_mac=addr1, target_ip="192.168.1.127")
4230     send_arp(dev[1], opcode=2, sender_mac=addr1, sender_ip="192.168.1.123",
4231              target_mac=addr0, target_ip="192.168.1.123")
4232     # ARP Request to verify previous mapping
4233     send_arp(dev[1], sender_ip="192.168.1.127", target_ip="192.168.1.123")
4234     send_arp(dev[0], sender_ip="192.168.1.123", target_ip="192.168.1.127")
4235
4236     time.sleep(0.1)
4237
4238     send_ns(dev[0], target="aaaa:bbbb:dddd::2", ip_src="aaaa:bbbb:cccc::2")
4239     time.sleep(0.1)
4240     send_ns(dev[1], target="aaaa:bbbb:cccc::2", ip_src="aaaa:bbbb:dddd::2")
4241     time.sleep(0.1)
4242     send_ns(hapd, hapd_bssid=bssid, target="aaaa:bbbb:dddd::2",
4243             ip_src="aaaa:bbbb:ffff::2")
4244     time.sleep(0.1)
4245     send_ns(dev[2], target="aaaa:bbbb:cccc::2", ip_src="aaaa:bbbb:ff00::2")
4246     time.sleep(0.1)
4247     send_ns(dev[2], target="aaaa:bbbb:dddd::2", ip_src="aaaa:bbbb:ff00::2")
4248     time.sleep(0.1)
4249     send_ns(dev[2], target="aaaa:bbbb:eeee::2", ip_src="aaaa:bbbb:ff00::2")
4250     time.sleep(0.1)
4251
4252     # Try to probe for an already assigned address
4253     send_ns(dev[1], target="aaaa:bbbb:cccc::2", ip_src="::")
4254     time.sleep(0.1)
4255     send_ns(hapd, hapd_bssid=bssid, target="aaaa:bbbb:cccc::2", ip_src="::")
4256     time.sleep(0.1)
4257     send_ns(dev[2], target="aaaa:bbbb:cccc::2", ip_src="::")
4258     time.sleep(0.1)
4259
4260     # Unsolicited NA
4261     send_na(dev[1], target="aaaa:bbbb:cccc:aeae::3",
4262             ip_src="aaaa:bbbb:cccc:aeae::3", ip_dst="ff02::1")
4263     send_na(hapd, hapd_bssid=bssid, target="aaaa:bbbb:cccc:aeae::4",
4264             ip_src="aaaa:bbbb:cccc:aeae::4", ip_dst="ff02::1")
4265     send_na(dev[2], target="aaaa:bbbb:cccc:aeae::5",
4266             ip_src="aaaa:bbbb:cccc:aeae::5", ip_dst="ff02::1")
4267
4268     try:
4269         hwsim_utils.test_connectivity_iface(dev[0], hapd, "ap-br0")
4270     except Exception, e:
4271         logger.info("test_connectibity_iface failed: " + str(e))
4272         raise HwsimSkip("Assume kernel did not have the required patches for proxyarp")
4273     hwsim_utils.test_connectivity_iface(dev[1], hapd, "ap-br0")
4274     hwsim_utils.test_connectivity(dev[0], dev[1])
4275
4276     dev[0].request("DISCONNECT")
4277     dev[1].request("DISCONNECT")
4278     time.sleep(0.5)
4279     for i in range(len(cmd)):
4280         cmd[i].terminate()
4281     macs = get_bridge_macs("ap-br0")
4282     logger.info("After disconnect (showmacs): " + str(macs))
4283     matches = get_permanent_neighbors("ap-br0")
4284     logger.info("After disconnect: " + str(matches))
4285     if len(matches) > 0:
4286         raise Exception("Unexpected neighbor entries after disconnect")
4287     if ebtables:
4288         cmd = subprocess.Popen(['ebtables', '-L', '--Lc'],
4289                                stdout=subprocess.PIPE)
4290         res = cmd.stdout.read()
4291         cmd.stdout.close()
4292         logger.info("ebtables results:\n" + res)
4293
4294     # Verify that expected ARP messages were seen and no unexpected
4295     # ARP messages were seen.
4296
4297     arp_req = tshark_get_arp(cap_dev0, "arp.opcode == 1")
4298     arp_reply = tshark_get_arp(cap_dev0, "arp.opcode == 2")
4299     logger.info("dev0 seen ARP requests:\n" + str(arp_req))
4300     logger.info("dev0 seen ARP replies:\n" + str(arp_reply))
4301
4302     if [ 'ff:ff:ff:ff:ff:ff', addr1,
4303          addr1, '192.168.1.100',
4304          '00:00:00:00:00:00', '192.168.1.123' ] in arp_req:
4305         raise Exception("dev0 saw ARP request from dev1")
4306     if [ 'ff:ff:ff:ff:ff:ff', addr2,
4307          addr2, '192.168.1.103',
4308          '00:00:00:00:00:00', '192.168.1.123' ] in arp_req:
4309         raise Exception("dev0 saw ARP request from dev2")
4310     # TODO: Uncomment once fixed in kernel
4311     #if [ 'ff:ff:ff:ff:ff:ff', bssid,
4312     #     bssid, '192.168.1.101',
4313     #     '00:00:00:00:00:00', '192.168.1.123' ] in arp_req:
4314     #    raise Exception("dev0 saw ARP request from br")
4315
4316     if ebtables:
4317         for req in arp_req:
4318             if req[1] != addr0:
4319                 raise Exception("Unexpected foreign ARP request on dev0")
4320
4321     arp_req = tshark_get_arp(cap_dev1, "arp.opcode == 1")
4322     arp_reply = tshark_get_arp(cap_dev1, "arp.opcode == 2")
4323     logger.info("dev1 seen ARP requests:\n" + str(arp_req))
4324     logger.info("dev1 seen ARP replies:\n" + str(arp_reply))
4325
4326     if [ 'ff:ff:ff:ff:ff:ff', addr2,
4327          addr2, '192.168.1.103',
4328          '00:00:00:00:00:00', '192.168.1.123' ] in arp_req:
4329         raise Exception("dev1 saw ARP request from dev2")
4330     if [addr1, addr0, addr0, '192.168.1.123', addr1, '192.168.1.100'] not in arp_reply:
4331         raise Exception("dev1 did not get ARP response for 192.168.1.123")
4332
4333     if ebtables:
4334         for req in arp_req:
4335             if req[1] != addr1:
4336                 raise Exception("Unexpected foreign ARP request on dev1")
4337
4338     arp_req = tshark_get_arp(cap_dev2, "arp.opcode == 1")
4339     arp_reply = tshark_get_arp(cap_dev2, "arp.opcode == 2")
4340     logger.info("dev2 seen ARP requests:\n" + str(arp_req))
4341     logger.info("dev2 seen ARP replies:\n" + str(arp_reply))
4342
4343     if [ addr2, addr0,
4344          addr0, '192.168.1.123',
4345          addr2, '192.168.1.103' ] not in arp_reply:
4346         raise Exception("dev2 did not get ARP response for 192.168.1.123")
4347
4348     arp_req = tshark_get_arp(cap_br, "arp.opcode == 1")
4349     arp_reply = tshark_get_arp(cap_br, "arp.opcode == 2")
4350     logger.info("br seen ARP requests:\n" + str(arp_req))
4351     logger.info("br seen ARP replies:\n" + str(arp_reply))
4352
4353     # TODO: Uncomment once fixed in kernel
4354     #if [ bssid, addr0,
4355     #     addr0, '192.168.1.123',
4356     #     bssid, '192.168.1.101' ] not in arp_reply:
4357     #    raise Exception("br did not get ARP response for 192.168.1.123")
4358
4359     ns = tshark_get_ns(cap_dev0)
4360     logger.info("dev0 seen NS: " + str(ns))
4361     na = tshark_get_na(cap_dev0)
4362     logger.info("dev0 seen NA: " + str(na))
4363
4364     if [ addr0, addr1, 'aaaa:bbbb:dddd::2', 'aaaa:bbbb:cccc::2',
4365          'aaaa:bbbb:dddd::2', addr1 ] not in na:
4366         raise Exception("dev0 did not get NA for aaaa:bbbb:dddd::2")
4367
4368     if ebtables:
4369         for req in ns:
4370             if req[1] != addr0:
4371                 raise Exception("Unexpected foreign NS on dev0: " + str(req))
4372
4373     ns = tshark_get_ns(cap_dev1)
4374     logger.info("dev1 seen NS: " + str(ns))
4375     na = tshark_get_na(cap_dev1)
4376     logger.info("dev1 seen NA: " + str(na))
4377
4378     if [ addr1, addr0, 'aaaa:bbbb:cccc::2', 'aaaa:bbbb:dddd::2',
4379          'aaaa:bbbb:cccc::2', addr0 ] not in na:
4380         raise Exception("dev1 did not get NA for aaaa:bbbb:cccc::2")
4381
4382     if ebtables:
4383         for req in ns:
4384             if req[1] != addr1:
4385                 raise Exception("Unexpected foreign NS on dev1: " + str(req))
4386
4387     ns = tshark_get_ns(cap_dev2)
4388     logger.info("dev2 seen NS: " + str(ns))
4389     na = tshark_get_na(cap_dev2)
4390     logger.info("dev2 seen NA: " + str(na))
4391
4392     # FIX: enable once kernel implementation for proxyarp IPv6 is fixed
4393     #if [ addr2, addr0, 'aaaa:bbbb:cccc::2', 'aaaa:bbbb:ff00::2',
4394     #     'aaaa:bbbb:cccc::2', addr0 ] not in na:
4395     #    raise Exception("dev2 did not get NA for aaaa:bbbb:cccc::2")
4396     #if [ addr2, addr1, 'aaaa:bbbb:dddd::2', 'aaaa:bbbb:ff00::2',
4397     #     'aaaa:bbbb:dddd::2', addr1 ] not in na:
4398     #    raise Exception("dev2 did not get NA for aaaa:bbbb:dddd::2")
4399     #if [ addr2, addr1, 'aaaa:bbbb:eeee::2', 'aaaa:bbbb:ff00::2',
4400     #     'aaaa:bbbb:eeee::2', addr1 ] not in na:
4401     #    raise Exception("dev2 did not get NA for aaaa:bbbb:eeee::2")
4402
4403 def test_proxyarp_open(dev, apdev, params):
4404     """ProxyARP with open network"""
4405     try:
4406         _test_proxyarp_open(dev, apdev, params)
4407     finally:
4408         subprocess.call(['ip', 'link', 'set', 'dev', 'ap-br0', 'down'],
4409                         stderr=open('/dev/null', 'w'))
4410         subprocess.call(['brctl', 'delbr', 'ap-br0'],
4411                         stderr=open('/dev/null', 'w'))
4412
4413 def test_proxyarp_open_ebtables(dev, apdev, params):
4414     """ProxyARP with open network"""
4415     try:
4416         _test_proxyarp_open(dev, apdev, params, ebtables=True)
4417     finally:
4418         try:
4419             subprocess.call(['ebtables', '-F', 'FORWARD'])
4420             subprocess.call(['ebtables', '-F', 'OUTPUT'])
4421         except:
4422             pass
4423         subprocess.call(['ip', 'link', 'set', 'dev', 'ap-br0', 'down'],
4424                         stderr=open('/dev/null', 'w'))
4425         subprocess.call(['brctl', 'delbr', 'ap-br0'],
4426                         stderr=open('/dev/null', 'w'))
4427
4428 def test_ap_hs20_connect_deinit(dev, apdev):
4429     """Hotspot 2.0 connection interrupted with deinit"""
4430     check_eap_capa(dev[0], "MSCHAPV2")
4431     bssid = apdev[0]['bssid']
4432     params = hs20_ap_params()
4433     params['hessid'] = bssid
4434     hapd = hostapd.add_ap(apdev[0], params)
4435
4436     wpas = WpaSupplicant(global_iface='/tmp/wpas-wlan5')
4437     wpas.interface_add("wlan5", drv_params="")
4438     wpas.hs20_enable()
4439     wpas.flush_scan_cache()
4440     wpas.add_cred_values({ 'realm': "example.com",
4441                            'username': "hs20-test",
4442                            'password': "password",
4443                            'ca_cert': "auth_serv/ca.pem",
4444                            'domain': "example.com" })
4445
4446     wpas.scan_for_bss(bssid, freq=2412)
4447     hapd.disable()
4448
4449     wpas.request("INTERWORKING_SELECT freq=2412")
4450
4451     id = wpas.request("RADIO_WORK add block-work")
4452     ev = wpas.wait_event(["GAS-QUERY-START", "EXT-RADIO-WORK-START"], timeout=5)
4453     if ev is None:
4454         raise Exception("Timeout while waiting radio work to start")
4455     ev = wpas.wait_event(["GAS-QUERY-START", "EXT-RADIO-WORK-START"], timeout=5)
4456     if ev is None:
4457         raise Exception("Timeout while waiting radio work to start (2)")
4458
4459     # Remove the interface while the gas-query radio work is still pending and
4460     # GAS query has not yet been started.
4461     wpas.interface_remove("wlan5")
4462
4463 def test_ap_hs20_anqp_format_errors(dev, apdev):
4464     """Interworking network selection and ANQP format errors"""
4465     bssid = apdev[0]['bssid']
4466     params = hs20_ap_params()
4467     params['hessid'] = bssid
4468     hapd = hostapd.add_ap(apdev[0], params)
4469
4470     dev[0].hs20_enable()
4471     values = { 'realm': "example.com",
4472                'ca_cert': "auth_serv/ca.pem",
4473                'username': "hs20-test",
4474                'password': "password",
4475                'domain': "example.com" }
4476     id = dev[0].add_cred_values(values)
4477
4478     dev[0].scan_for_bss(bssid, freq="2412")
4479
4480     tests = [ "00", "ffff", "010011223344", "020008000005112233445500",
4481               "01000400000000", "01000000000000",
4482               "01000300000200", "0100040000ff0000", "01000300000100",
4483               "01000300000001",
4484               "01000600000056112233",
4485               "01000900000002050001000111",
4486               "01000600000001000000", "01000600000001ff0000",
4487               "01000600000001020001",
4488               "010008000000010400010001", "0100080000000104000100ff",
4489               "010011000000010d00050200020100030005000600",
4490               "0000" ]
4491     for t in tests:
4492         hapd.set("anqp_elem", "263:" + t)
4493         dev[0].request("INTERWORKING_SELECT freq=2412")
4494         ev = dev[0].wait_event(["INTERWORKING-NO-MATCH"], timeout=5)
4495         if ev is None:
4496             raise Exception("Network selection timed out")
4497         dev[0].dump_monitor()
4498
4499     dev[0].remove_cred(id)
4500     id = dev[0].add_cred_values({ 'imsi': "555444-333222111", 'eap': "AKA",
4501                                   'milenage': "5122250214c33e723a5dd523fc145fc0:981d464c7c52eb6e5036234984ad0bcf:000000000123"})
4502
4503     tests = [ "00", "0100", "0001", "00ff", "000200ff", "0003000101",
4504               "00020100" ]
4505     for t in tests:
4506         hapd.set("anqp_elem", "264:" + t)
4507         dev[0].request("INTERWORKING_SELECT freq=2412")
4508         ev = dev[0].wait_event(["INTERWORKING-NO-MATCH"], timeout=5)
4509         if ev is None:
4510             raise Exception("Network selection timed out")
4511         dev[0].dump_monitor()
4512
4513 def test_ap_hs20_cred_with_nai_realm(dev, apdev):
4514     """Hotspot 2.0 network selection and cred_with_nai_realm cred->realm"""
4515     bssid = apdev[0]['bssid']
4516     params = hs20_ap_params()
4517     params['hessid'] = bssid
4518     hostapd.add_ap(apdev[0], params)
4519
4520     dev[0].hs20_enable()
4521
4522     id = dev[0].add_cred_values({ 'realm': "example.com",
4523                                   'username': "test",
4524                                   'password': "secret",
4525                                   'domain': "example.com",
4526                                   'eap': 'TTLS' })
4527     interworking_select(dev[0], bssid, "home", freq=2412)
4528     dev[0].remove_cred(id)
4529
4530     id = dev[0].add_cred_values({ 'realm': "foo.com",
4531                                   'username': "test",
4532                                   'password': "secret",
4533                                   'domain': "example.com",
4534                                   'roaming_consortium': "112234",
4535                                   'eap': 'TTLS' })
4536     interworking_select(dev[0], bssid, "home", freq=2412, no_match=True)
4537     dev[0].remove_cred(id)
4538
4539 def test_ap_hs20_cred_and_no_roaming_consortium(dev, apdev):
4540     """Hotspot 2.0 network selection and no roaming consortium"""
4541     bssid = apdev[0]['bssid']
4542     params = hs20_ap_params()
4543     params['hessid'] = bssid
4544     del params['roaming_consortium']
4545     hostapd.add_ap(apdev[0], params)
4546
4547     dev[0].hs20_enable()
4548
4549     id = dev[0].add_cred_values({ 'realm': "example.com",
4550                                   'username': "test",
4551                                   'password': "secret",
4552                                   'domain': "example.com",
4553                                   'roaming_consortium': "112234",
4554                                   'eap': 'TTLS' })
4555     interworking_select(dev[0], bssid, "home", freq=2412, no_match=True)
4556
4557 def test_ap_hs20_interworking_oom(dev, apdev):
4558     """Hotspot 2.0 network selection and OOM"""
4559     bssid = apdev[0]['bssid']
4560     params = hs20_ap_params()
4561     params['hessid'] = bssid
4562     params['nai_realm'] = [ "0,no.match.here;example.com;no.match.here.either,21[2:1][5:7]",
4563                             "0,example.com,13[5:6],21[2:4][5:7]",
4564                             "0,another.example.com" ]
4565     hostapd.add_ap(apdev[0], params)
4566
4567     dev[0].hs20_enable()
4568
4569     id = dev[0].add_cred_values({ 'realm': "example.com",
4570                                   'username': "test",
4571                                   'password': "secret",
4572                                   'domain': "example.com",
4573                                   'eap': 'TTLS' })
4574
4575     dev[0].scan_for_bss(bssid, freq="2412")
4576
4577     funcs = [ "wpabuf_alloc;interworking_anqp_send_req",
4578               "anqp_build_req;interworking_anqp_send_req",
4579               "gas_query_req;interworking_anqp_send_req",
4580               "dup_binstr;nai_realm_parse_realm",
4581               "=nai_realm_parse_realm",
4582               "=nai_realm_parse",
4583               "=nai_realm_match" ]
4584     for func in funcs:
4585         with alloc_fail(dev[0], 1, func):
4586             dev[0].request("INTERWORKING_SELECT auto freq=2412")
4587             ev = dev[0].wait_event(["Starting ANQP"], timeout=5)
4588             if ev is None:
4589                 raise Exception("ANQP did not start")
4590             wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4591
4592 def test_ap_hs20_no_cred_connect(dev, apdev):
4593     """Hotspot 2.0 and connect attempt without credential"""
4594     bssid = apdev[0]['bssid']
4595     params = hs20_ap_params()
4596     params['hessid'] = bssid
4597     hapd = hostapd.add_ap(apdev[0], params)
4598
4599     dev[0].hs20_enable()
4600     dev[0].scan_for_bss(bssid, freq="2412")
4601     if "FAIL" not in dev[0].request("INTERWORKING_CONNECT " + bssid):
4602         raise Exception("Unexpected INTERWORKING_CONNECT success")
4603
4604 def test_ap_hs20_no_rsn_connect(dev, apdev):
4605     """Hotspot 2.0 and connect attempt without RSN"""
4606     bssid = apdev[0]['bssid']
4607     params = hostapd.wpa_params(ssid="test-hs20")
4608     params['wpa_key_mgmt'] = "WPA-EAP"
4609     params['ieee80211w'] = "1"
4610     params['ieee8021x'] = "1"
4611     params['auth_server_addr'] = "127.0.0.1"
4612     params['auth_server_port'] = "1812"
4613     params['auth_server_shared_secret'] = "radius"
4614     params['interworking'] = "1"
4615     params['roaming_consortium'] = [ "112233", "1020304050", "010203040506",
4616                                      "fedcba" ]
4617     params['nai_realm'] = [ "0,example.com,13[5:6],21[2:4][5:7]",
4618                             "0,another.example.com" ]
4619     hapd = hostapd.add_ap(apdev[0], params)
4620
4621     dev[0].hs20_enable()
4622     dev[0].scan_for_bss(bssid, freq="2412")
4623
4624     id = dev[0].add_cred_values({ 'realm': "example.com",
4625                                   'username': "test",
4626                                   'password': "secret",
4627                                   'domain': "example.com",
4628                                   'roaming_consortium': "112233",
4629                                   'eap': 'TTLS' })
4630
4631     interworking_select(dev[0], bssid, freq=2412, no_match=True)
4632     if "FAIL" not in dev[0].request("INTERWORKING_CONNECT " + bssid):
4633         raise Exception("Unexpected INTERWORKING_CONNECT success")
4634
4635 def test_ap_hs20_no_match_connect(dev, apdev):
4636     """Hotspot 2.0 and connect attempt without matching cred"""
4637     bssid = apdev[0]['bssid']
4638     params = hs20_ap_params()
4639     hapd = hostapd.add_ap(apdev[0], params)
4640
4641     dev[0].hs20_enable()
4642     dev[0].scan_for_bss(bssid, freq="2412")
4643
4644     id = dev[0].add_cred_values({ 'realm': "example.org",
4645                                   'username': "test",
4646                                   'password': "secret",
4647                                   'domain': "example.org",
4648                                   'roaming_consortium': "112234",
4649                                   'eap': 'TTLS' })
4650
4651     interworking_select(dev[0], bssid, freq=2412, no_match=True)
4652     if "FAIL" not in dev[0].request("INTERWORKING_CONNECT " + bssid):
4653         raise Exception("Unexpected INTERWORKING_CONNECT success")
4654
4655 def test_ap_hs20_multiple_home_cred(dev, apdev):
4656     """Hotspot 2.0 and select with multiple matching home credentials"""
4657     bssid = apdev[0]['bssid']
4658     params = hs20_ap_params()
4659     params['hessid'] = bssid
4660     params['nai_realm'] = [ "0,example.com,13[5:6],21[2:4][5:7]" ]
4661     params['domain_name'] = "example.com"
4662     hapd = hostapd.add_ap(apdev[0], params)
4663
4664     bssid2 = apdev[1]['bssid']
4665     params = hs20_ap_params(ssid="test-hs20-other")
4666     params['hessid'] = bssid2
4667     params['nai_realm'] = [ "0,example.org,13[5:6],21[2:4][5:7]" ]
4668     params['domain_name'] = "example.org"
4669     hapd2 = hostapd.add_ap(apdev[1], params)
4670
4671     dev[0].hs20_enable()
4672     dev[0].scan_for_bss(bssid2, freq="2412")
4673     dev[0].scan_for_bss(bssid, freq="2412")
4674     id = dev[0].add_cred_values({ 'realm': "example.com",
4675                                   'priority': '2',
4676                                   'username': "hs20-test",
4677                                   'password': "password",
4678                                   'domain': "example.com" })
4679     id2 = dev[0].add_cred_values({ 'realm': "example.org",
4680                                    'priority': '3',
4681                                    'username': "hs20-test",
4682                                    'password': "password",
4683                                    'domain': "example.org" })
4684     dev[0].request("INTERWORKING_SELECT auto freq=2412")
4685     ev = dev[0].wait_connected(timeout=15)
4686     if bssid2 not in ev:
4687         raise Exception("Connected to incorrect network")
4688
4689 def test_ap_hs20_anqp_invalid_gas_response(dev, apdev):
4690     """Hotspot 2.0 network selection and invalid GAS response"""
4691     bssid = apdev[0]['bssid']
4692     params = hs20_ap_params()
4693     params['hessid'] = bssid
4694     hapd = hostapd.add_ap(apdev[0], params)
4695
4696     dev[0].scan_for_bss(bssid, freq="2412")
4697     hapd.set("ext_mgmt_frame_handling", "1")
4698
4699     dev[0].hs20_enable()
4700
4701     id = dev[0].add_cred_values({ 'realm': "example.com",
4702                                   'username': "test",
4703                                   'password': "secret",
4704                                   'domain': "example.com",
4705                                   'roaming_consortium': "112234",
4706                                   'eap': 'TTLS' })
4707     dev[0].request("INTERWORKING_SELECT freq=2412")
4708
4709     query = gas_rx(hapd)
4710     gas = parse_gas(query['payload'])
4711
4712     logger.info("ANQP: Unexpected Advertisement Protocol in response")
4713     resp = action_response(query)
4714     adv_proto = struct.pack('8B', 108, 6, 127, 0xdd, 0x00, 0x11, 0x22, 0x33)
4715     data = struct.pack('<H', 0)
4716     resp['payload'] = struct.pack('<BBBHH', ACTION_CATEG_PUBLIC,
4717                                   GAS_INITIAL_RESPONSE,
4718                                   gas['dialog_token'], 0, 0) + adv_proto + data
4719     send_gas_resp(hapd, resp)
4720
4721     ev = dev[0].wait_event(["ANQP-QUERY-DONE"], timeout=5)
4722     if ev is None:
4723         raise Exception("No ANQP-QUERY-DONE seen")
4724     if "result=INVALID_FRAME" not in ev:
4725         raise Exception("Unexpected result: " + ev)
4726
4727     dev[0].request("INTERWORKING_SELECT freq=2412")
4728
4729     query = gas_rx(hapd)
4730     gas = parse_gas(query['payload'])
4731
4732     logger.info("ANQP: Invalid element length for Info ID 1234")
4733     resp = action_response(query)
4734     adv_proto = struct.pack('BBBB', 108, 2, 127, 0)
4735     elements = struct.pack('<HH', 1234, 1)
4736     data = struct.pack('<H', len(elements)) + elements
4737     resp['payload'] = struct.pack('<BBBHH', ACTION_CATEG_PUBLIC,
4738                                   GAS_INITIAL_RESPONSE,
4739                                   gas['dialog_token'], 0, 0) + adv_proto + data
4740     send_gas_resp(hapd, resp)
4741
4742     ev = dev[0].wait_event(["ANQP-QUERY-DONE"], timeout=5)
4743     if ev is None:
4744         raise Exception("No ANQP-QUERY-DONE seen")
4745     if "result=INVALID_FRAME" not in ev:
4746         raise Exception("Unexpected result: " + ev)
4747
4748     with alloc_fail(dev[0], 1, "=anqp_add_extra"):
4749         dev[0].request("INTERWORKING_SELECT freq=2412")
4750
4751         query = gas_rx(hapd)
4752         gas = parse_gas(query['payload'])
4753
4754         resp = action_response(query)
4755         elements = struct.pack('<HHHH', 1, 0, 1, 0)
4756         data = struct.pack('<H', len(elements)) + elements
4757         resp['payload'] = struct.pack('<BBBHH', ACTION_CATEG_PUBLIC,
4758                                       GAS_INITIAL_RESPONSE,
4759                                       gas['dialog_token'], 0, 0) + adv_proto + data
4760         send_gas_resp(hapd, resp)
4761
4762         ev = dev[0].wait_event(["ANQP-QUERY-DONE"], timeout=5)
4763         if ev is None:
4764             raise Exception("No ANQP-QUERY-DONE seen")
4765         if "result=SUCCESS" not in ev:
4766             raise Exception("Unexpected result: " + ev)
4767
4768     with alloc_fail(dev[0], 1, "wpabuf_alloc_copy;anqp_add_extra"):
4769         dev[0].request("INTERWORKING_SELECT freq=2412")
4770
4771         query = gas_rx(hapd)
4772         gas = parse_gas(query['payload'])
4773
4774         resp = action_response(query)
4775         elements = struct.pack('<HHHH', 1, 0, 1, 0)
4776         data = struct.pack('<H', len(elements)) + elements
4777         resp['payload'] = struct.pack('<BBBHH', ACTION_CATEG_PUBLIC,
4778                                       GAS_INITIAL_RESPONSE,
4779                                       gas['dialog_token'], 0, 0) + adv_proto + data
4780         send_gas_resp(hapd, resp)
4781
4782         ev = dev[0].wait_event(["ANQP-QUERY-DONE"], timeout=5)
4783         if ev is None:
4784             raise Exception("No ANQP-QUERY-DONE seen")
4785         if "result=SUCCESS" not in ev:
4786             raise Exception("Unexpected result: " + ev)
4787
4788     tests = [ struct.pack('<HH', 0xdddd, 0),
4789               struct.pack('<HH3B', 0xdddd, 3, 0x50, 0x6f, 0x9a),
4790               struct.pack('<HH4B', 0xdddd, 4, 0x50, 0x6f, 0x9a, 0),
4791               struct.pack('<HH4B', 0xdddd, 4, 0x11, 0x22, 0x33, 0),
4792               struct.pack('<HHHH', 1, 0, 1, 0) ]
4793     for elements in tests:
4794         dev[0].request("INTERWORKING_SELECT freq=2412")
4795
4796         query = gas_rx(hapd)
4797         gas = parse_gas(query['payload'])
4798
4799         resp = action_response(query)
4800         data = struct.pack('<H', len(elements)) + elements
4801         resp['payload'] = struct.pack('<BBBHH', ACTION_CATEG_PUBLIC,
4802                                       GAS_INITIAL_RESPONSE,
4803                                       gas['dialog_token'], 0, 0) + adv_proto + data
4804         send_gas_resp(hapd, resp)
4805
4806         ev = dev[0].wait_event(["ANQP-QUERY-DONE"], timeout=5)
4807         if ev is None:
4808             raise Exception("No ANQP-QUERY-DONE seen")
4809         if "result=SUCCESS" not in ev:
4810             raise Exception("Unexpected result: " + ev)
4811
4812 def test_ap_hs20_set_profile_failures(dev, apdev):
4813     """Hotspot 2.0 and failures during profile configuration"""
4814     bssid = apdev[0]['bssid']
4815     params = hs20_ap_params()
4816     params['hessid'] = bssid
4817     params['anqp_3gpp_cell_net'] = "555,444"
4818     hapd = hostapd.add_ap(apdev[0], params)
4819
4820     dev[0].hs20_enable()
4821     dev[0].scan_for_bss(bssid, freq="2412")
4822
4823     id = dev[0].add_cred_values({ 'realm': "example.com",
4824                                   'domain': "example.com",
4825                                   'username': "test",
4826                                   'password': "secret",
4827                                   'eap': 'TTLS' })
4828     interworking_select(dev[0], bssid, "home", freq=2412)
4829     dev[0].dump_monitor()
4830     dev[0].request("NOTE ssid->eap.eap_methods = os_malloc()")
4831     with alloc_fail(dev[0], 1, "interworking_set_eap_params"):
4832         dev[0].request("INTERWORKING_CONNECT " + bssid)
4833         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4834     dev[0].remove_cred(id)
4835
4836     id = dev[0].add_cred_values({ 'realm': "example.com",
4837                                   'domain': "example.com",
4838                                   'username': "hs20-test-with-domain@example.com",
4839                                   'password': "password" })
4840     interworking_select(dev[0], bssid, "home", freq=2412)
4841     dev[0].dump_monitor()
4842     dev[0].request("NOTE anon = os_malloc()")
4843     with alloc_fail(dev[0], 1, "interworking_set_eap_params"):
4844         dev[0].request("INTERWORKING_CONNECT " + bssid)
4845         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4846     dev[0].request("NOTE Successful connection with cred->username including realm")
4847     dev[0].request("INTERWORKING_CONNECT " + bssid)
4848     dev[0].wait_connected()
4849     dev[0].remove_cred(id)
4850     dev[0].wait_disconnected()
4851
4852     id = dev[0].add_cred_values({ 'realm': "example.com",
4853                                   'domain': "example.com",
4854                                   'username': "hs20-test",
4855                                   'password': "password" })
4856     interworking_select(dev[0], bssid, "home", freq=2412)
4857     dev[0].dump_monitor()
4858     dev[0].request("NOTE anon = os_malloc() (second)")
4859     with alloc_fail(dev[0], 1, "interworking_set_eap_params"):
4860         dev[0].request("INTERWORKING_CONNECT " + bssid)
4861         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4862     with alloc_fail(dev[0], 1, "wpa_config_add_network;interworking_connect"):
4863         dev[0].request("INTERWORKING_CONNECT " + bssid)
4864         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4865     with alloc_fail(dev[0], 1, "=interworking_connect"):
4866         dev[0].request("INTERWORKING_CONNECT " + bssid)
4867         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4868     dev[0].request("NOTE wpa_config_set(eap)")
4869     with alloc_fail(dev[0], 1, "wpa_config_parse_eap;wpa_config_set;interworking_connect"):
4870         dev[0].request("INTERWORKING_CONNECT " + bssid)
4871         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4872     dev[0].request("NOTE wpa_config_set(TTLS-NON_EAP_MSCHAPV2-phase2)")
4873     with alloc_fail(dev[0], 1, "wpa_config_parse_str;wpa_config_set;interworking_connect"):
4874         dev[0].request("INTERWORKING_CONNECT " + bssid)
4875         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4876     dev[0].remove_cred(id)
4877
4878     id = dev[0].add_cred_values({ 'roaming_consortium': "112233",
4879                                   'domain': "example.com",
4880                                   'username': "hs20-test",
4881                                   'password': "password",
4882                                   'eap': 'TTLS',
4883                                   'phase2': "auth=MSCHAPV2" })
4884     interworking_select(dev[0], bssid, "home", freq=2412)
4885     dev[0].dump_monitor()
4886     dev[0].request("NOTE anon = os_strdup()")
4887     with alloc_fail(dev[0], 2, "interworking_set_eap_params"):
4888         dev[0].request("INTERWORKING_CONNECT " + bssid)
4889         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4890     dev[0].request("NOTE wpa_config_set_quoted(anonymous_identity)")
4891     with alloc_fail(dev[0], 1, "=wpa_config_set_quoted;interworking_set_eap_params"):
4892         dev[0].request("INTERWORKING_CONNECT " + bssid)
4893         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4894     dev[0].request("NOTE Successful connection with cred->realm not included")
4895     dev[0].request("INTERWORKING_CONNECT " + bssid)
4896     dev[0].wait_connected()
4897     dev[0].remove_cred(id)
4898     dev[0].wait_disconnected()
4899
4900     id = dev[0].add_cred_values({ 'roaming_consortium': "112233",
4901                                   'domain': "example.com",
4902                                   'realm': "example.com",
4903                                   'username': "user",
4904                                   'password': "password",
4905                                   'eap': 'PEAP' })
4906     interworking_select(dev[0], bssid, "home", freq=2412)
4907     dev[0].dump_monitor()
4908     dev[0].request("NOTE id = os_strdup()")
4909     with alloc_fail(dev[0], 2, "interworking_set_eap_params"):
4910         dev[0].request("INTERWORKING_CONNECT " + bssid)
4911         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4912     dev[0].request("NOTE wpa_config_set_quoted(identity)")
4913     with alloc_fail(dev[0], 1, "=wpa_config_set_quoted;interworking_set_eap_params"):
4914         dev[0].request("INTERWORKING_CONNECT " + bssid)
4915         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4916     dev[0].remove_cred(id)
4917
4918     id = dev[0].add_cred_values({ 'roaming_consortium': "112233",
4919                                   'domain': "example.com",
4920                                   'realm': "example.com",
4921                                   'username': "user",
4922                                   'password': "password",
4923                                   'eap': "TTLS" })
4924     interworking_select(dev[0], bssid, "home", freq=2412)
4925     dev[0].dump_monitor()
4926     dev[0].request("NOTE wpa_config_set_quoted(identity) (second)")
4927     with alloc_fail(dev[0], 2, "=wpa_config_set_quoted;interworking_set_eap_params"):
4928         dev[0].request("INTERWORKING_CONNECT " + bssid)
4929         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4930     dev[0].request("NOTE wpa_config_set_quoted(password)")
4931     with alloc_fail(dev[0], 3, "=wpa_config_set_quoted;interworking_set_eap_params"):
4932         dev[0].request("INTERWORKING_CONNECT " + bssid)
4933         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4934     with alloc_fail(dev[0], 1, "wpa_config_add_network;interworking_connect_roaming_consortium"):
4935         dev[0].request("INTERWORKING_CONNECT " + bssid)
4936         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4937     with alloc_fail(dev[0], 1, "=interworking_connect_roaming_consortium"):
4938         dev[0].request("INTERWORKING_CONNECT " + bssid)
4939         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4940     dev[0].remove_cred(id)
4941
4942     id = dev[0].add_cred_values({ 'roaming_consortium': "112233",
4943                                   'domain': "example.com",
4944                                   'realm': "example.com",
4945                                   'username': "user",
4946                                   'eap': "PEAP" })
4947     dev[0].set_cred(id, "password", "ext:password");
4948     interworking_select(dev[0], bssid, "home", freq=2412)
4949     dev[0].dump_monitor()
4950     dev[0].request("NOTE wpa_config_set(password)")
4951     with alloc_fail(dev[0], 3, "wpa_config_set;interworking_set_eap_params"):
4952         dev[0].request("INTERWORKING_CONNECT " + bssid)
4953         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4954     with alloc_fail(dev[0], 1, "interworking_set_hs20_params"):
4955         dev[0].request("INTERWORKING_CONNECT " + bssid)
4956         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4957     dev[0].remove_cred(id)
4958
4959     id = dev[0].add_cred_values({ 'realm': "example.com",
4960                                   'domain': "example.com",
4961                                   'username': "certificate-user",
4962                                   'phase1': "include_tls_length=0",
4963                                   'domain_suffix_match': "example.com",
4964                                   'ca_cert': "auth_serv/ca.pem",
4965                                   'client_cert': "auth_serv/user.pem",
4966                                   'private_key': "auth_serv/user.key",
4967                                   'private_key_passwd': "secret" })
4968     interworking_select(dev[0], bssid, "home", freq=2412)
4969     dev[0].dump_monitor()
4970     dev[0].request("NOTE wpa_config_set_quoted(client_cert)")
4971     with alloc_fail(dev[0], 2, "=wpa_config_set_quoted;interworking_set_eap_params"):
4972         dev[0].request("INTERWORKING_CONNECT " + bssid)
4973         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4974     dev[0].request("NOTE wpa_config_set_quoted(private_key)")
4975     with alloc_fail(dev[0], 3, "=wpa_config_set_quoted;interworking_set_eap_params"):
4976         dev[0].request("INTERWORKING_CONNECT " + bssid)
4977         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4978     dev[0].request("NOTE wpa_config_set_quoted(private_key_passwd)")
4979     with alloc_fail(dev[0], 4, "=wpa_config_set_quoted;interworking_set_eap_params"):
4980         dev[0].request("INTERWORKING_CONNECT " + bssid)
4981         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4982     dev[0].request("NOTE wpa_config_set_quoted(ca_cert)")
4983     with alloc_fail(dev[0], 5, "=wpa_config_set_quoted;interworking_set_eap_params"):
4984         dev[0].request("INTERWORKING_CONNECT " + bssid)
4985         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4986     dev[0].request("NOTE wpa_config_set_quoted(domain_suffix_match)")
4987     with alloc_fail(dev[0], 6, "=wpa_config_set_quoted;interworking_set_eap_params"):
4988         dev[0].request("INTERWORKING_CONNECT " + bssid)
4989         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4990     with alloc_fail(dev[0], 1, "interworking_set_hs20_params"):
4991         dev[0].request("INTERWORKING_CONNECT " + bssid)
4992         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
4993     dev[0].remove_cred(id)
4994
4995     id = dev[0].add_cred_values({ 'imsi': "555444-333222111", 'eap': "SIM",
4996                                   'milenage': "5122250214c33e723a5dd523fc145fc0:981d464c7c52eb6e5036234984ad0bcf:000000000123"})
4997     interworking_select(dev[0], bssid, freq=2412)
4998     dev[0].dump_monitor()
4999     with alloc_fail(dev[0], 1, "interworking_set_hs20_params"):
5000         dev[0].request("INTERWORKING_CONNECT " + bssid)
5001         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
5002     dev[0].request("NOTE wpa_config_set_quoted(password;milenage)")
5003     with alloc_fail(dev[0], 2, "=wpa_config_set_quoted;interworking_connect_3gpp"):
5004         dev[0].request("INTERWORKING_CONNECT " + bssid)
5005         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
5006     dev[0].request("NOTE wpa_config_set(eap)")
5007     with alloc_fail(dev[0], 1, "wpa_config_parse_eap;wpa_config_set;interworking_connect_3gpp"):
5008         dev[0].request("INTERWORKING_CONNECT " + bssid)
5009         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
5010     dev[0].request("NOTE set_root_nai:wpa_config_set(identity)")
5011     with alloc_fail(dev[0], 1, "wpa_config_parse_str;interworking_connect_3gpp"):
5012             dev[0].request("INTERWORKING_CONNECT " + bssid)
5013             wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
5014     dev[0].remove_cred(id)
5015
5016     id = dev[0].add_cred_values({ 'roaming_consortium': "112233",
5017                                   'username': "user@example.com",
5018                                   'password': "password" })
5019     interworking_select(dev[0], bssid, freq=2412)
5020     dev[0].dump_monitor()
5021     dev[0].request("NOTE Interworking: No EAP method set for credential using roaming consortium")
5022     dev[0].request("INTERWORKING_CONNECT " + bssid)
5023     dev[0].remove_cred(id)
5024
5025     hapd.disable()
5026     params = hs20_ap_params()
5027     params['nai_realm'] = "0,example.com,25[3:26]"
5028     hapd = hostapd.add_ap(apdev[0], params)
5029     id = dev[0].add_cred_values({ 'realm': "example.com",
5030                                   'domain': "example.com",
5031                                   'username': "hs20-test",
5032                                   'password': "password" })
5033     interworking_select(dev[0], bssid, freq=2412)
5034     dev[0].dump_monitor()
5035     dev[0].request("NOTE wpa_config_set(PEAP/FAST-phase1)")
5036     with alloc_fail(dev[0], 1, "wpa_config_parse_str;wpa_config_set;interworking_connect"):
5037         dev[0].request("INTERWORKING_CONNECT " + bssid)
5038         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
5039     dev[0].request("NOTE wpa_config_set(PEAP/FAST-pac_interworking)")
5040     with alloc_fail(dev[0], 2, "wpa_config_parse_str;wpa_config_set;interworking_connect"):
5041         dev[0].request("INTERWORKING_CONNECT " + bssid)
5042         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
5043     dev[0].request("NOTE wpa_config_set(PEAP/FAST-phase2)")
5044     with alloc_fail(dev[0], 3, "wpa_config_parse_str;wpa_config_set;interworking_connect"):
5045         dev[0].request("INTERWORKING_CONNECT " + bssid)
5046         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
5047
5048     hapd.disable()
5049     params = hs20_ap_params()
5050     params['nai_realm'] = "0,example.com,21"
5051     hapd = hostapd.add_ap(apdev[0], params)
5052     interworking_select(dev[0], bssid, freq=2412)
5053     dev[0].request("NOTE wpa_config_set(TTLS-defaults-phase2)")
5054     with alloc_fail(dev[0], 1, "wpa_config_parse_str;wpa_config_set;interworking_connect"):
5055         dev[0].request("INTERWORKING_CONNECT " + bssid)
5056         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
5057
5058     hapd.disable()
5059     params = hs20_ap_params()
5060     params['nai_realm'] = "0,example.com,21[2:3]"
5061     hapd = hostapd.add_ap(apdev[0], params)
5062     interworking_select(dev[0], bssid, freq=2412)
5063     dev[0].request("NOTE wpa_config_set(TTLS-NON_EAP_MSCHAP-phase2)")
5064     with alloc_fail(dev[0], 1, "wpa_config_parse_str;wpa_config_set;interworking_connect"):
5065         dev[0].request("INTERWORKING_CONNECT " + bssid)
5066         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
5067
5068     hapd.disable()
5069     params = hs20_ap_params()
5070     params['nai_realm'] = "0,example.com,21[2:2]"
5071     hapd = hostapd.add_ap(apdev[0], params)
5072     interworking_select(dev[0], bssid, freq=2412)
5073     dev[0].request("NOTE wpa_config_set(TTLS-NON_EAP_CHAP-phase2)")
5074     with alloc_fail(dev[0], 1, "wpa_config_parse_str;wpa_config_set;interworking_connect"):
5075         dev[0].request("INTERWORKING_CONNECT " + bssid)
5076         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
5077
5078     hapd.disable()
5079     params = hs20_ap_params()
5080     params['nai_realm'] = "0,example.com,21[2:1]"
5081     hapd = hostapd.add_ap(apdev[0], params)
5082     interworking_select(dev[0], bssid, freq=2412)
5083     dev[0].request("NOTE wpa_config_set(TTLS-NON_EAP_PAP-phase2)")
5084     with alloc_fail(dev[0], 1, "wpa_config_parse_str;wpa_config_set;interworking_connect"):
5085         dev[0].request("INTERWORKING_CONNECT " + bssid)
5086         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
5087
5088     hapd.disable()
5089     params = hs20_ap_params()
5090     params['nai_realm'] = "0,example.com,21[3:26]"
5091     hapd = hostapd.add_ap(apdev[0], params)
5092     interworking_select(dev[0], bssid, freq=2412)
5093     dev[0].request("NOTE wpa_config_set(TTLS-EAP-MSCHAPV2-phase2)")
5094     with alloc_fail(dev[0], 1, "wpa_config_parse_str;wpa_config_set;interworking_connect"):
5095         dev[0].request("INTERWORKING_CONNECT " + bssid)
5096         wait_fail_trigger(dev[0], "GET_ALLOC_FAIL")
5097
5098     dev[0].remove_cred(id)