1# Mixed AP module parameters enabled
2# Copyright (c) 2014, Qualcomm Atheros, Inc.
3#
4# This software may be distributed under the terms of the BSD license.
5# See README for more details.
6
7import logging
8logger = logging.getLogger()
9
10import hostapd
11import hwsim_utils
12from utils import *
13
14def test_ap_mixed_security(dev, apdev):
15    """WPA/WPA2 with PSK, EAP, SAE, FT in a single BSS"""
16    skip_with_fips(dev[0])
17    skip_without_tkip(dev[0])
18    dev[0].flush_scan_cache()
19    sae = "SAE" in dev[2].get_capability("auth_alg")
20    ssid = "test-mixed"
21    passphrase = 'qwertyuiop'
22    params = hostapd.wpa_mixed_params(ssid=ssid, passphrase=passphrase)
23    params['wpa_key_mgmt'] = "WPA-PSK WPA-PSK-SHA256 WPA-EAP WPA-EAP-SHA256 SAE FT-PSK FT-EAP FT-SAE"
24    params["ieee8021x"] = "1"
25    params["eap_server"] = "1"
26    params["eap_user_file"] = "auth_serv/eap_user.conf"
27    params['nas_identifier'] = "nas1.w1.fi"
28    hapd = hostapd.add_ap(apdev[0], params)
29
30    dev[0].connect(ssid, key_mgmt="WPA-PSK", proto="WPA", pairwise="TKIP",
31                   psk=passphrase, scan_freq="2412")
32    dev[1].connect(ssid, key_mgmt="WPA-EAP-SHA256", proto="WPA2", eap="GPSK",
33                   identity="gpsk user",
34                   password="abcdefghijklmnop0123456789abcdef",
35                   scan_freq="2412")
36    if sae:
37        dev[2].request("SET sae_groups ")
38        dev[2].connect(ssid, psk=passphrase, key_mgmt="SAE", scan_freq="2412")
39
40    logger.debug(dev[0].request("SCAN_RESULTS"))
41    bss = dev[0].get_bss(apdev[0]['bssid'])
42    logger.debug(bss)
43    if "[WPA-EAP+PSK-TKIP]" not in bss['flags']:
44        raise Exception("Unexpected flags (WPA): " + bss['flags'])
45    if sae and "[WPA2-EAP+PSK+SAE+FT/EAP+FT/PSK+FT/SAE+EAP-SHA256+PSK-SHA256-CCMP]" not in bss['flags']:
46        raise Exception("Unexpected flags (WPA2): " + bss['flags'])
47
48    if dev[0].get_status_field("key_mgmt") != "WPA-PSK":
49        raise Exception("Unexpected key_mgmt(1)")
50    if dev[0].get_status_field("pairwise_cipher") != "TKIP":
51        raise Exception("Unexpected pairwise(1)")
52    if dev[1].get_status_field("key_mgmt") != "WPA2-EAP-SHA256":
53        raise Exception("Unexpected key_mgmt(2)")
54    if sae and dev[2].get_status_field("key_mgmt") != "SAE":
55        raise Exception("Unexpected key_mgmt(3)")
56
57    time.sleep(0.1) # give it time for AP to set up stations fully
58    hwsim_utils.test_connectivity(dev[0], dev[1])
59    if sae:
60        hwsim_utils.test_connectivity(dev[1], dev[2])
61        hwsim_utils.test_connectivity(dev[0], dev[2])
62    for i in range(3):
63        if i < 2 or sae:
64            hwsim_utils.test_connectivity(dev[i], hapd)
65        dev[i].request("DISCONNECT")
66
67    dev[0].connect(ssid, key_mgmt="WPA-PSK WPA-PSK-SHA256", psk=passphrase,
68                   scan_freq="2412")
69    dev[1].connect(ssid, key_mgmt="WPA-EAP", proto="WPA", eap="GPSK",
70                   identity="gpsk user",
71                   password="abcdefghijklmnop0123456789abcdef",
72                   scan_freq="2412")
73    if sae:
74        dev[2].connect(ssid, key_mgmt="WPA-PSK WPA-PSK-SHA256 SAE",
75                       psk=passphrase, scan_freq="2412")
76
77    if dev[0].get_status_field("key_mgmt") != "WPA2-PSK-SHA256":
78        raise Exception("Unexpected key_mgmt(1b)")
79    if dev[0].get_status_field("pairwise_cipher") != "CCMP":
80        raise Exception("Unexpected pairwise(1b)")
81    if dev[1].get_status_field("key_mgmt") != "WPA/IEEE 802.1X/EAP":
82        raise Exception("Unexpected key_mgmt(2b)")
83    if sae and dev[2].get_status_field("key_mgmt") != "SAE":
84        raise Exception("Unexpected key_mgmt(3b)")
85
86    for i in range(3):
87        dev[i].request("DISCONNECT")
88
89    dev[0].connect(ssid, key_mgmt="FT-PSK", psk=passphrase, scan_freq="2412")
90    dev[1].connect(ssid, key_mgmt="FT-EAP", eap="GPSK", identity="gpsk user",
91                   password="abcdefghijklmnop0123456789abcdef",
92                   scan_freq="2412")
93    if sae:
94        dev[2].connect(ssid, psk=passphrase, key_mgmt="FT-SAE",
95                       scan_freq="2412")
96
97    if dev[0].get_status_field("key_mgmt") != "FT-PSK":
98        raise Exception("Unexpected key_mgmt(1c)")
99    if dev[1].get_status_field("key_mgmt") != "FT-EAP":
100        raise Exception("Unexpected key_mgmt(2c)")
101    if sae and dev[2].get_status_field("key_mgmt") != "FT-SAE":
102        raise Exception("Unexpected key_mgmt(3c)")
103