1# Mixed AP module parameters enabled 2# Copyright (c) 2014, Qualcomm Atheros, Inc. 3# 4# This software may be distributed under the terms of the BSD license. 5# See README for more details. 6 7import logging 8logger = logging.getLogger() 9 10import hostapd 11import hwsim_utils 12from utils import * 13 14def test_ap_mixed_security(dev, apdev): 15 """WPA/WPA2 with PSK, EAP, SAE, FT in a single BSS""" 16 skip_with_fips(dev[0]) 17 skip_without_tkip(dev[0]) 18 dev[0].flush_scan_cache() 19 sae = "SAE" in dev[2].get_capability("auth_alg") 20 ssid = "test-mixed" 21 passphrase = 'qwertyuiop' 22 params = hostapd.wpa_mixed_params(ssid=ssid, passphrase=passphrase) 23 params['wpa_key_mgmt'] = "WPA-PSK WPA-PSK-SHA256 WPA-EAP WPA-EAP-SHA256 SAE FT-PSK FT-EAP FT-SAE" 24 params["ieee8021x"] = "1" 25 params["eap_server"] = "1" 26 params["eap_user_file"] = "auth_serv/eap_user.conf" 27 params['nas_identifier'] = "nas1.w1.fi" 28 hapd = hostapd.add_ap(apdev[0], params) 29 30 dev[0].connect(ssid, key_mgmt="WPA-PSK", proto="WPA", pairwise="TKIP", 31 psk=passphrase, scan_freq="2412") 32 dev[1].connect(ssid, key_mgmt="WPA-EAP-SHA256", proto="WPA2", eap="GPSK", 33 identity="gpsk user", 34 password="abcdefghijklmnop0123456789abcdef", 35 scan_freq="2412") 36 if sae: 37 dev[2].request("SET sae_groups ") 38 dev[2].connect(ssid, psk=passphrase, key_mgmt="SAE", scan_freq="2412") 39 40 logger.debug(dev[0].request("SCAN_RESULTS")) 41 bss = dev[0].get_bss(apdev[0]['bssid']) 42 logger.debug(bss) 43 if "[WPA-EAP+PSK-TKIP]" not in bss['flags']: 44 raise Exception("Unexpected flags (WPA): " + bss['flags']) 45 if sae and "[WPA2-EAP+PSK+SAE+FT/EAP+FT/PSK+FT/SAE+EAP-SHA256+PSK-SHA256-CCMP]" not in bss['flags']: 46 raise Exception("Unexpected flags (WPA2): " + bss['flags']) 47 48 if dev[0].get_status_field("key_mgmt") != "WPA-PSK": 49 raise Exception("Unexpected key_mgmt(1)") 50 if dev[0].get_status_field("pairwise_cipher") != "TKIP": 51 raise Exception("Unexpected pairwise(1)") 52 if dev[1].get_status_field("key_mgmt") != "WPA2-EAP-SHA256": 53 raise Exception("Unexpected key_mgmt(2)") 54 if sae and dev[2].get_status_field("key_mgmt") != "SAE": 55 raise Exception("Unexpected key_mgmt(3)") 56 57 hwsim_utils.test_connectivity(dev[0], dev[1]) 58 if sae: 59 hwsim_utils.test_connectivity(dev[1], dev[2]) 60 hwsim_utils.test_connectivity(dev[0], dev[2]) 61 for i in range(3): 62 if i < 2 or sae: 63 hwsim_utils.test_connectivity(dev[i], hapd) 64 dev[i].request("DISCONNECT") 65 66 dev[0].connect(ssid, key_mgmt="WPA-PSK WPA-PSK-SHA256", psk=passphrase, 67 scan_freq="2412") 68 dev[1].connect(ssid, key_mgmt="WPA-EAP", proto="WPA", eap="GPSK", 69 identity="gpsk user", 70 password="abcdefghijklmnop0123456789abcdef", 71 scan_freq="2412") 72 if sae: 73 dev[2].connect(ssid, key_mgmt="WPA-PSK WPA-PSK-SHA256 SAE", 74 psk=passphrase, scan_freq="2412") 75 76 if dev[0].get_status_field("key_mgmt") != "WPA2-PSK-SHA256": 77 raise Exception("Unexpected key_mgmt(1b)") 78 if dev[0].get_status_field("pairwise_cipher") != "CCMP": 79 raise Exception("Unexpected pairwise(1b)") 80 if dev[1].get_status_field("key_mgmt") != "WPA/IEEE 802.1X/EAP": 81 raise Exception("Unexpected key_mgmt(2b)") 82 if sae and dev[2].get_status_field("key_mgmt") != "SAE": 83 raise Exception("Unexpected key_mgmt(3b)") 84 85 for i in range(3): 86 dev[i].request("DISCONNECT") 87 88 dev[0].connect(ssid, key_mgmt="FT-PSK", psk=passphrase, scan_freq="2412") 89 dev[1].connect(ssid, key_mgmt="FT-EAP", eap="GPSK", identity="gpsk user", 90 password="abcdefghijklmnop0123456789abcdef", 91 scan_freq="2412") 92 if sae: 93 dev[2].connect(ssid, psk=passphrase, key_mgmt="FT-SAE", 94 scan_freq="2412") 95 96 if dev[0].get_status_field("key_mgmt") != "FT-PSK": 97 raise Exception("Unexpected key_mgmt(1c)") 98 if dev[1].get_status_field("key_mgmt") != "FT-EAP": 99 raise Exception("Unexpected key_mgmt(2c)") 100 if sae and dev[2].get_status_field("key_mgmt") != "FT-SAE": 101 raise Exception("Unexpected key_mgmt(3c)") 102