DPP: Send "BootstrapResult,OK,AuthResult,Timeout" on DPP-AUTH-INIT-FAILED

sigma_dut reporting an error with "errorCode,Peer did not reply to DPP
Authentication Request" for DPP-AUTH-INIT-FAILED whil

DPP: Send "BootstrapResult,OK,AuthResult,Timeout" on DPP-AUTH-INIT-FAILED

sigma_dut reporting an error with "errorCode,Peer did not reply to DPP
Authentication Request" for DPP-AUTH-INIT-FAILED while processing DPP
authentication response resulted in some test cases failing since those
tests cases where expecting the bootstrapresult as success but
AuthResult as failure (timeout).

These test cases expect the peer to send an improper DPP Auth Response
and check if these frames are properly dropped by the DUT, eventually
leading to a DPP Authentication timeout. Hence, modify sigma_dut's
response for such scenario to represent bootstrapresult as success but
AuthResult as failure/timeout.

This is a regression from past behavior from commit ed629d5181ff ("DPP:
NFC operations with ManualDPP"), so the change here restores the
previously used behavior for the response string in this type of timeout
cases.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

show more ...

DPP: Stop Configurator-over-WLAN when Controller-over-TCP is used

This avoids potential issues with the Controller-as-a-Responder
receiving frames both over TCP and WLAN when only the TCP case is be

DPP: Stop Configurator-over-WLAN when Controller-over-TCP is used

This avoids potential issues with the Controller-as-a-Responder
receiving frames both over TCP and WLAN when only the TCP case is being
tested.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

show more ...

DPP: Do not include MAC address in URI if DPPOverTCP is specified

This extends GetLocalBootstrap functionality to cover the Controller use
case where the Controller as a Responder must not add the l

DPP: Do not include MAC address in URI if DPPOverTCP is specified

This extends GetLocalBootstrap functionality to cover the Controller use
case where the Controller as a Responder must not add the local MAC
address to the bootstrapping URI to allow the AP Relay to receive the
Authentication Request (i.e., force that frame to use broadcast
destination).

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

show more ...

DPP: Update dpp_network_id on reconfiguration

The network profile id in wpa_supplicant may change when going through
reconfiguration, so the stored id value within sigma_dut needs to be
updated for

DPP: Update dpp_network_id on reconfiguration

The network profile id in wpa_supplicant may change when going through
reconfiguration, so the stored id value within sigma_dut needs to be
updated for the following operations on the network to succeed.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

show more ...

DPP: QR mutual auth as Controller

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

DPP: Configure dpp-nfc.py for handover-only mode

Do not allow NFC Tags to be read when being asked to perform a
negotiated connection handover. This will hopefully avoid potential test
operator erro

DPP: Configure dpp-nfc.py for handover-only mode

Do not allow NFC Tags to be read when being asked to perform a
negotiated connection handover. This will hopefully avoid potential test
operator errors in manual NFC testing.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

show more ...

DPP: Retry Reconfig Announcement up to 10 times

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

DPP: Report received MUD URL in Configurator result info

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

DPP: Return failure immediately if dpp-nfc.py indicates failure

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

DPP: Convert DPPNetworkRole to a dpp-nfc.py parameter

Now that dpp-nfc.py has a command line argument for specifying which
netrole to use in the NFC write tag cases, fill that argument in when a
spe

DPP: Convert DPPNetworkRole to a dpp-nfc.py parameter

Now that dpp-nfc.py has a command line argument for specifying which
netrole to use in the NFC write tag cases, fill that argument in when a
specific Enrollee network role is provided with the DPPNetworkRole
parameter.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

show more ...

DPP: Reconfiguration operations

Add support for DPPActionType,DPPReconfiguration on the Enrollee and
Configurator sides.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

DPP: Work around conflicting AP operating channel and listen channel

Add one more workaround to try to avoid conflicting beaconing and listen
operations by starting the AP operating on the explicitl

DPP: Work around conflicting AP operating channel and listen channel

Add one more workaround to try to avoid conflicting beaconing and listen
operations by starting the AP operating on the explicitly requested
listen channel and then moving to the explicitly requested operating
channel when completing provisioning.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

show more ...

DPP: NFC with DPPChannelList and DPPNFCAltChannelList

Allow channel list to be specified for NFC Tags and both the channel
list and the alternative channel list to be specified for negotiated
connec

DPP: NFC with DPPChannelList and DPPNFCAltChannelList

Allow channel list to be specified for NFC Tags and both the channel
list and the alternative channel list to be specified for negotiated
connection handover.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

show more ...

DPP: Change DPPNFCInit default to 1

Try to initiate NFC connection handover if the DPPNFCInit argument is
not specified.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

DPP: DPPNFCTag argument

Add support for explicitly requesting read-tag-only operation, write
URI, and write HS.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

DPP: Do not require DPPAuthRole for ManualDPP with NFC

This argument was not used in dpp_manual_dpp() at all for the DPPBS,NFC
case, so move the check for it to happen only after the minimal NFC
ope

DPP: Do not require DPPAuthRole for ManualDPP with NFC

This argument was not used in dpp_manual_dpp() at all for the DPPBS,NFC
case, so move the check for it to happen only after the minimal NFC
operation so that dpp_automatic_dpp() can be used without DPPAuthRole
for NFC.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

show more ...

DPP: dot1x Configurator/RA and CA

Add support for DPPConfIndex,11 for provisioning dot1x credentials. This
includes minimal CA component to allow the client certificat to be
signed.

Signed-off-by:

DPP: dot1x Configurator/RA and CA

Add support for DPPConfIndex,11 for provisioning dot1x credentials. This
includes minimal CA component to allow the client certificat to be
signed.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

show more ...

DPP: Fix the default listen-for-chirp channel

The comment here was correct on which channel (6) is supposed to be used
as the default, but the actually frequency was set to incorrect channel
(11). F

DPP: Fix the default listen-for-chirp channel

The comment here was correct on which channel (6) is supposed to be used
as the default, but the actually frequency was set to incorrect channel
(11). Fix that to be able to receive Presence Announcement frames in
cases where the chirping channel is not explicitly specified.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

show more ...

DPP: Stop wait for dpp-nfc.py on either DPP-TX or DPP-RX

When we are the Responder, we can stop wait on dpp-nfc.py completion on
DPP-RX, so that we won't miss any potential events related to the
rec

DPP: Stop wait for dpp-nfc.py on either DPP-TX or DPP-RX

When we are the Responder, we can stop wait on dpp-nfc.py completion on
DPP-RX, so that we won't miss any potential events related to the
reception of the Authentication Request message. In particular, this
covers the case of ROLES_NOT_COMPATIBLE result.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

show more ...

DPP: NFC support with hostapd

Tell dpp-nfc.py where to find the hostapd or wpa_supplicant control
interface so that this is not limited to only working with the default
wpa_supplicant location.

Sig

DPP: NFC support with hostapd

Tell dpp-nfc.py where to find the hostapd or wpa_supplicant control
interface so that this is not limited to only working with the default
wpa_supplicant location.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

show more ...

DPP: More accurate wait for NFC timeout

Use system time to determine when the timeout is reached instead of
counting looks of get_wpa_cli_event() calls that did not really take one
second each. In a

DPP: More accurate wait for NFC timeout

Use system time to determine when the timeout is reached instead of
counting looks of get_wpa_cli_event() calls that did not really take one
second each. In addition, add some more delay around operations to keep
the stdout log cleaner and to allow some more time for dpp-nfc.py to
terminate connection handover more cleanly before killing the process.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

show more ...

DPP: Request multiple chirp rounds

Previously, only a single round of chirping was done since
wpa_supplicant defaults to iter=1. Increase this to allow up to 10
rounds so that chirping gets terminat

DPP: Request multiple chirp rounds

Previously, only a single round of chirping was done since
wpa_supplicant defaults to iter=1. Increase this to allow up to 10
rounds so that chirping gets terminated by a test case timeout rather
than completion of a single round.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

show more ...

DPP: Do not issue DPP_LISTEN twice for chirp listener

wpa_command(buf) is issued at the end of this sequence of if blocks.
Remove the incorrectly added extra call from the chirp case to avoid the
un

DPP: Do not issue DPP_LISTEN twice for chirp listener

wpa_command(buf) is issued at the end of this sequence of if blocks.
Remove the incorrectly added extra call from the chirp case to avoid the
undesired duplicate call.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

show more ...

DPP: Add support for Configurator initiating DPP over TCP

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>

DPP: NFC operations with ManualDPP

Add support for DPPActionType,ManualDPP with DPPBS,NFC. Use dpp-nfc.py
to perform the requested NFC operations.

Signed-off-by: Jouni Malinen <jouni@codeaurora.org>