Kernel/iwd
3
0
Fork 0
mirror of https://git.kernel.org/pub/scm/network/wireless/iwd.git synced 2024-11-02 18:19:23 +01:00
Code Releases Activity
fe2272c112
iwd/autotests/testPreauth-roam/connection_test.py

97 lines
3.3 KiB
Python
Raw Normal View History

autotests: Add a Preauthentication test Unfortunately this doesn't currently ensure that the preauthentication has succeeded and that later the PMKSA from the preauthentication was used in the transition, only that the preauthentication process doesn't break the transition. For now this can be confirmed by looking at the testrunner -v output to see that the line "EAP completed with eapSuccess" appears before the following line, and not after: src/device.c:device_enter_state() Old State: connected, new state: roaming
2017-04-29 03:53:29 +02:00
#! /usr/bin/python3
import unittest
import sys, os
sys.path.append('../util')
from iwd import IWD
from iwd import NetworkType
auto-t: prepare autotests for test-runner re-write The tests basically remained the same with a few minor changes. The wiphy_map and in turn hostapd_map are no longer used. This was already partially converted a long time ago when the 'config' parameter was added to HostapdCLI. This patch fully converts all autotests to use 'config' rather than looking up by interface. Some test scripts were named 'test.py' which was fine before but the new rewrite actually loads each python test as a module. The name 'test' is too ambiguous and causes issues due to a native python module with the same name. All of these files were renamed to 'connection_test.py'.
2020-09-11 01:12:22 +02:00
from hostapd import HostapdCLI
autotests: Test communication when iwd reports connected Test that the AP interface and the station interface managed by iwd can actually send and receive ethernet traffic when iwd is in the connected state. Due to linux routing none of the high level utilities like ping or arping can be easily used to test communication between two interfaces of the same machine so use a method based on the mac80211_hwsim/tools/hwsim_test.c utility in the wpa_supplicant tree that uses a raw socket to inject unicast and broadcast frames. Add this check in three tests of different security type connections that simulate a single AP, and the two roaming tests with two APs. Check that the station can't communicate with the other AP's interface.
2017-05-22 10:49:47 +02:00
import testutil
autotests: Add a Preauthentication test Unfortunately this doesn't currently ensure that the preauthentication has succeeded and that later the PMKSA from the preauthentication was used in the transition, only that the preauthentication process doesn't break the transition. For now this can be confirmed by looking at the testrunner -v output to see that the line "EAP completed with eapSuccess" appears before the following line, and not after: src/device.c:device_enter_state() Old State: connected, new state: roaming
2017-04-29 03:53:29 +02:00
class Test(unittest.TestCase):
def test_preauth_success(self):
auto-t: updated autotests to use hwsim.get_radio This removes all the duplicated code where the interfaces are iterated and the radio/hostapd instances are created. Instead the two new APIs are used to get each instance, e.g.: hapd = HostapdCLI(config='ssid.conf') radio = hwsim.get_radio('radX')
2019-06-11 18:25:54 +02:00
bss_hostapd = [ HostapdCLI(config='eaptls-preauth-1.conf'),
HostapdCLI(config='eaptls-preauth-2.conf') ]
autotests: Add a Preauthentication test Unfortunately this doesn't currently ensure that the preauthentication has succeeded and that later the PMKSA from the preauthentication was used in the transition, only that the preauthentication process doesn't break the transition. For now this can be confirmed by looking at the testrunner -v output to see that the line "EAP completed with eapSuccess" appears before the following line, and not after: src/device.c:device_enter_state() Old State: connected, new state: roaming
2017-04-29 03:53:29 +02:00
auto-t: update testPreauth-roam to use connect_bssid/roam()
2021-08-12 22:22:06 +02:00
bss0_addr = bss_hostapd[0].bssid
bss1_addr = bss_hostapd[1].bssid
autotests: Add a Preauthentication test Unfortunately this doesn't currently ensure that the preauthentication has succeeded and that later the PMKSA from the preauthentication was used in the transition, only that the preauthentication process doesn't break the transition. For now this can be confirmed by looking at the testrunner -v output to see that the line "EAP completed with eapSuccess" appears before the following line, and not after: src/device.c:device_enter_state() Old State: connected, new state: roaming
2017-04-29 03:53:29 +02:00
# Fill in the neighbor AP tables in both BSSes. By default each
# instance knows only about current BSS, even inside one hostapd
# process.
# Roaming still works without the neighbor AP table but neighbor
# reports have to be disabled in the .conf files
auto-t: update testPreauth-roam to use connect_bssid/roam()
2021-08-12 22:22:06 +02:00
bss0_nr = ''.join(bss0_addr.split(':')) + \
autotests: Add a Preauthentication test Unfortunately this doesn't currently ensure that the preauthentication has succeeded and that later the PMKSA from the preauthentication was used in the transition, only that the preauthentication process doesn't break the transition. For now this can be confirmed by looking at the testrunner -v output to see that the line "EAP completed with eapSuccess" appears before the following line, and not after: src/device.c:device_enter_state() Old State: connected, new state: roaming
2017-04-29 03:53:29 +02:00
'8f0000005101060603000000'
auto-t: update testPreauth-roam to use connect_bssid/roam()
2021-08-12 22:22:06 +02:00
bss1_nr = ''.join(bss1_addr.split(':')) + \
autotests: Add a Preauthentication test Unfortunately this doesn't currently ensure that the preauthentication has succeeded and that later the PMKSA from the preauthentication was used in the transition, only that the preauthentication process doesn't break the transition. For now this can be confirmed by looking at the testrunner -v output to see that the line "EAP completed with eapSuccess" appears before the following line, and not after: src/device.c:device_enter_state() Old State: connected, new state: roaming
2017-04-29 03:53:29 +02:00
'8f0000005102060603000000'
auto-t: update testPreauth-roam to use connect_bssid/roam()
2021-08-12 22:22:06 +02:00
bss_hostapd[0].set_neighbor(bss1_addr, 'TestPreauth', bss1_nr)
bss_hostapd[1].set_neighbor(bss0_addr, 'TestPreauth', bss0_nr)
autotests: Add a Preauthentication test Unfortunately this doesn't currently ensure that the preauthentication has succeeded and that later the PMKSA from the preauthentication was used in the transition, only that the preauthentication process doesn't break the transition. For now this can be confirmed by looking at the testrunner -v output to see that the line "EAP completed with eapSuccess" appears before the following line, and not after: src/device.c:device_enter_state() Old State: connected, new state: roaming
2017-04-29 03:53:29 +02:00
auto-t: Use stard_iwd=0 for testPreauth This test is quite similar to FT tests, so use start_iwd=0 here as well
2021-05-21 19:36:10 +02:00
wd = IWD(True)
auto-t: fix testPreauth-roam Changed to wait for DeviceState instead of network object as well as moved hwsim rules ahead of the IWD initializer to avoid IWD scanning before the rules are fully in place.
2020-09-11 01:12:46 +02:00
device = wd.list_devices(1)[0]
auto-t: update all tests to remove bad scanning logic This changes all tests to use the default get_ordered_network behavior rather than some custom or incorrect logic. Any use of scan_if_needed=True has been removed since this is now the default. Also any explicit scanning has been removed for tests which do not require it (where the default behavior is good enough).
2021-08-12 22:38:11 +02:00
ordered_network = device.get_ordered_network('TestPreauth')
autotests: Add a Preauthentication test Unfortunately this doesn't currently ensure that the preauthentication has succeeded and that later the PMKSA from the preauthentication was used in the transition, only that the preauthentication process doesn't break the transition. For now this can be confirmed by looking at the testrunner -v output to see that the line "EAP completed with eapSuccess" appears before the following line, and not after: src/device.c:device_enter_state() Old State: connected, new state: roaming
2017-04-29 03:53:29 +02:00
self.assertEqual(ordered_network.type, NetworkType.eap)
condition = 'not obj.connected'
wd.wait_for_object_condition(ordered_network.network_object, condition)
self.assertFalse(bss_hostapd[0].list_sta())
self.assertFalse(bss_hostapd[1].list_sta())
auto-t: update testPreauth-roam to use connect_bssid/roam()
2021-08-12 22:22:06 +02:00
device.connect_bssid(bss0_addr)
autotests: Add a Preauthentication test Unfortunately this doesn't currently ensure that the preauthentication has succeeded and that later the PMKSA from the preauthentication was used in the transition, only that the preauthentication process doesn't break the transition. For now this can be confirmed by looking at the testrunner -v output to see that the line "EAP completed with eapSuccess" appears before the following line, and not after: src/device.c:device_enter_state() Old State: connected, new state: roaming
2017-04-29 03:53:29 +02:00
auto-t: fix testPreauth-roam Changed to wait for DeviceState instead of network object as well as moved hwsim rules ahead of the IWD initializer to avoid IWD scanning before the rules are fully in place.
2020-09-11 01:12:46 +02:00
condition = 'obj.state == DeviceState.connected'
wd.wait_for_object_condition(device, condition)
autotests: Add a Preauthentication test Unfortunately this doesn't currently ensure that the preauthentication has succeeded and that later the PMKSA from the preauthentication was used in the transition, only that the preauthentication process doesn't break the transition. For now this can be confirmed by looking at the testrunner -v output to see that the line "EAP completed with eapSuccess" appears before the following line, and not after: src/device.c:device_enter_state() Old State: connected, new state: roaming
2017-04-29 03:53:29 +02:00
self.assertTrue(bss_hostapd[0].list_sta())
self.assertFalse(bss_hostapd[1].list_sta())
autotests: Test operstate is IF_OPER_UP when state == connected Test that iwd correctly sets the interface's operstate before and after a roam, in the same autotests which run the connectivity check.
2017-05-30 14:26:20 +02:00
testutil.test_iface_operstate(device.name)
autotests: Test communication when iwd reports connected Test that the AP interface and the station interface managed by iwd can actually send and receive ethernet traffic when iwd is in the connected state. Due to linux routing none of the high level utilities like ping or arping can be easily used to test communication between two interfaces of the same machine so use a method based on the mac80211_hwsim/tools/hwsim_test.c utility in the wpa_supplicant tree that uses a raw socket to inject unicast and broadcast frames. Add this check in three tests of different security type connections that simulate a single AP, and the two roaming tests with two APs. Check that the station can't communicate with the other AP's interface.
2017-05-22 10:49:47 +02:00
testutil.test_ifaces_connected(bss_hostapd[0].ifname, device.name)
self.assertRaises(Exception, testutil.test_ifaces_connected,
auto-t: update testPreauth-roam to use connect_bssid/roam()
2021-08-12 22:22:06 +02:00
bss_hostapd[1].ifname, device.name, True, True)
autotests: Test communication when iwd reports connected Test that the AP interface and the station interface managed by iwd can actually send and receive ethernet traffic when iwd is in the connected state. Due to linux routing none of the high level utilities like ping or arping can be easily used to test communication between two interfaces of the same machine so use a method based on the mac80211_hwsim/tools/hwsim_test.c utility in the wpa_supplicant tree that uses a raw socket to inject unicast and broadcast frames. Add this check in three tests of different security type connections that simulate a single AP, and the two roaming tests with two APs. Check that the station can't communicate with the other AP's interface.
2017-05-22 10:49:47 +02:00
auto-t: update testPreauth-roam to use connect_bssid/roam()
2021-08-12 22:22:06 +02:00
device.roam(bss1_addr)
autotests: Add a Preauthentication test Unfortunately this doesn't currently ensure that the preauthentication has succeeded and that later the PMKSA from the preauthentication was used in the transition, only that the preauthentication process doesn't break the transition. For now this can be confirmed by looking at the testrunner -v output to see that the line "EAP completed with eapSuccess" appears before the following line, and not after: src/device.c:device_enter_state() Old State: connected, new state: roaming
2017-04-29 03:53:29 +02:00
condition = 'obj.state == DeviceState.roaming'
auto-t: Increase all test timeouts Slower systems may not be able to make some timeouts that tests mandated. All timeouts were increased significantly to allow tests to pass on slow systems.
2020-09-11 01:12:37 +02:00
wd.wait_for_object_condition(device, condition)
autotests: Add a Preauthentication test Unfortunately this doesn't currently ensure that the preauthentication has succeeded and that later the PMKSA from the preauthentication was used in the transition, only that the preauthentication process doesn't break the transition. For now this can be confirmed by looking at the testrunner -v output to see that the line "EAP completed with eapSuccess" appears before the following line, and not after: src/device.c:device_enter_state() Old State: connected, new state: roaming
2017-04-29 03:53:29 +02:00
# TODO: verify that the PMK from preauthentication was used
# Check that iwd is on BSS 1 once out of roaming state and doesn't
# go through 'disconnected', 'autoconnect', 'connecting' in between
auto-t: update roaming tests with wait_for_object_change Every single roaming test had one of two problems with watching the state change between roaming --> connected. Either the test used wait_for_object_condition to wait for 'connected' which could allow other states in between. Or it simply used an assert. The assert wouldn't allow other state changes, but at the cost of potentially failing due to IWD not having made it to the 'connected' state yet. Now we have wait_for_object_change which takes two conditions: initial (from_str) and expected (to_str). This API will not allow any other conditions except these, and will wait for the expected condition before continuing. This allows roaming test to reliably wait for the roaming --> connected state change.
2021-02-05 20:06:37 +01:00
from_condition = 'obj.state == DeviceState.roaming'
to_condition = 'obj.state == DeviceState.connected'
wd.wait_for_object_change(device, from_condition, to_condition)
autotests: Add a Preauthentication test Unfortunately this doesn't currently ensure that the preauthentication has succeeded and that later the PMKSA from the preauthentication was used in the transition, only that the preauthentication process doesn't break the transition. For now this can be confirmed by looking at the testrunner -v output to see that the line "EAP completed with eapSuccess" appears before the following line, and not after: src/device.c:device_enter_state() Old State: connected, new state: roaming
2017-04-29 03:53:29 +02:00
self.assertTrue(bss_hostapd[1].list_sta())
autotests: Test operstate is IF_OPER_UP when state == connected Test that iwd correctly sets the interface's operstate before and after a roam, in the same autotests which run the connectivity check.
2017-05-30 14:26:20 +02:00
testutil.test_iface_operstate(device.name)
autotests: Test communication when iwd reports connected Test that the AP interface and the station interface managed by iwd can actually send and receive ethernet traffic when iwd is in the connected state. Due to linux routing none of the high level utilities like ping or arping can be easily used to test communication between two interfaces of the same machine so use a method based on the mac80211_hwsim/tools/hwsim_test.c utility in the wpa_supplicant tree that uses a raw socket to inject unicast and broadcast frames. Add this check in three tests of different security type connections that simulate a single AP, and the two roaming tests with two APs. Check that the station can't communicate with the other AP's interface.
2017-05-22 10:49:47 +02:00
testutil.test_ifaces_connected(bss_hostapd[1].ifname, device.name)
self.assertRaises(Exception, testutil.test_ifaces_connected,
auto-t: update testPreauth-roam to use connect_bssid/roam()
2021-08-12 22:22:06 +02:00
(bss_hostapd[0].ifname, device.name, True, True))
autotests: Test communication when iwd reports connected Test that the AP interface and the station interface managed by iwd can actually send and receive ethernet traffic when iwd is in the connected state. Due to linux routing none of the high level utilities like ping or arping can be easily used to test communication between two interfaces of the same machine so use a method based on the mac80211_hwsim/tools/hwsim_test.c utility in the wpa_supplicant tree that uses a raw socket to inject unicast and broadcast frames. Add this check in three tests of different security type connections that simulate a single AP, and the two roaming tests with two APs. Check that the station can't communicate with the other AP's interface.
2017-05-22 10:49:47 +02:00
autotests: Add a Preauthentication test Unfortunately this doesn't currently ensure that the preauthentication has succeeded and that later the PMKSA from the preauthentication was used in the transition, only that the preauthentication process doesn't break the transition. For now this can be confirmed by looking at the testrunner -v output to see that the line "EAP completed with eapSuccess" appears before the following line, and not after: src/device.c:device_enter_state() Old State: connected, new state: roaming
2017-04-29 03:53:29 +02:00
device.disconnect()
condition = 'not obj.connected'
wd.wait_for_object_condition(ordered_network.network_object, condition)
@classmethod
def setUpClass(cls):
IWD.copy_to_storage('TestPreauth.8021x')
auto-t: replace ifconfig with ip commands ifconfig has long been deprecated in favor of ip from iproute2. It is usually no longer installed by default.
2021-11-11 03:12:02 +01:00
os.system('ip link set lo up')
autotests: Add a Preauthentication test Unfortunately this doesn't currently ensure that the preauthentication has succeeded and that later the PMKSA from the preauthentication was used in the transition, only that the preauthentication process doesn't break the transition. For now this can be confirmed by looking at the testrunner -v output to see that the line "EAP completed with eapSuccess" appears before the following line, and not after: src/device.c:device_enter_state() Old State: connected, new state: roaming
2017-04-29 03:53:29 +02:00
@classmethod
def tearDownClass(cls):
IWD.clear_storage()
if __name__ == '__main__':
unittest.main(exit=True)
Copy Permalink