mirror of
https://git.kernel.org/pub/scm/network/wireless/iwd.git
synced 2024-12-22 13:02:44 +01:00
auto-t: remove testFT-FILS-SHA384
This commit is contained in:
James Prestwood
Denis Kenzior
parent
85759a6f3c
commit
49eb17973e
@ -1,5 +0,0 @@
|
||||
[Security]
|
||||
EAP-Method=PWD
|
||||
|
||||
[Settings]
|
||||
AutoConnect=False
|
||||
@ -1,174 +0,0 @@
|
||||
#! /usr/bin/python3
|
||||
|
||||
import unittest
|
||||
import sys, os
|
||||
|
||||
sys.path.append('../util')
|
||||
import iwd
|
||||
from iwd import IWD
|
||||
from iwd import PSKAgent
|
||||
from iwd import NetworkType
|
||||
from hwsim import Hwsim
|
||||
from hostapd import HostapdCLI
|
||||
import testutil
|
||||
|
||||
class Test(unittest.TestCase):
|
||||
def test_roam_success(self):
|
||||
hwsim = Hwsim()
|
||||
|
||||
rule0 = hwsim.rules.create()
|
||||
rule0.source = self.bss_radio[0].addresses[0]
|
||||
rule0.bidirectional = True
|
||||
|
||||
rule1 = hwsim.rules.create()
|
||||
rule1.source = self.bss_radio[1].addresses[0]
|
||||
rule1.bidirectional = True
|
||||
|
||||
# Check that iwd selects BSS 0 first
|
||||
rule0.signal = -2000
|
||||
rule1.signal = -6900
|
||||
|
||||
wd = IWD(True)
|
||||
|
||||
psk_agent = PSKAgent('user@example.com', ('user@example.com',
|
||||
'secret123'))
|
||||
wd.register_psk_agent(psk_agent)
|
||||
|
||||
device = wd.list_devices(1)[0]
|
||||
|
||||
condition = 'not obj.scanning'
|
||||
wd.wait_for_object_condition(device, condition)
|
||||
|
||||
device.scan()
|
||||
|
||||
condition = 'obj.scanning'
|
||||
wd.wait_for_object_condition(device, condition)
|
||||
|
||||
condition = 'not obj.scanning'
|
||||
wd.wait_for_object_condition(device, condition)
|
||||
|
||||
ordered_network = device.get_ordered_network('TestFT')
|
||||
|
||||
self.assertEqual(ordered_network.type, NetworkType.eap)
|
||||
self.assertEqual(ordered_network.signal_strength, -2000)
|
||||
|
||||
condition = 'not obj.connected'
|
||||
wd.wait_for_object_condition(ordered_network.network_object, condition)
|
||||
|
||||
self.assertFalse(self.bss_hostapd[0].list_sta())
|
||||
self.assertFalse(self.bss_hostapd[1].list_sta())
|
||||
|
||||
ordered_network.network_object.connect()
|
||||
|
||||
condition = 'obj.state == DeviceState.connected'
|
||||
wd.wait_for_object_condition(device, condition)
|
||||
|
||||
self.assertTrue(self.bss_hostapd[0].list_sta())
|
||||
self.assertFalse(self.bss_hostapd[1].list_sta())
|
||||
|
||||
testutil.test_iface_operstate(device.name)
|
||||
testutil.test_ifaces_connected(self.bss_hostapd[0].ifname, device.name)
|
||||
self.assertRaises(Exception, testutil.test_ifaces_connected,
|
||||
(self.bss_hostapd[1].ifname, device.name, True, True))
|
||||
|
||||
device.disconnect()
|
||||
|
||||
condition = 'not obj.connected'
|
||||
wd.wait_for_object_condition(ordered_network.network_object, condition)
|
||||
|
||||
ordered_network = device.get_ordered_network('TestFT')
|
||||
|
||||
self.assertEqual(ordered_network.type, NetworkType.eap)
|
||||
|
||||
condition = 'not obj.connected'
|
||||
wd.wait_for_object_condition(ordered_network.network_object, condition)
|
||||
|
||||
ordered_network.network_object.connect()
|
||||
|
||||
condition = 'obj.state == DeviceState.connected'
|
||||
wd.wait_for_object_condition(device, condition)
|
||||
|
||||
self.assertTrue(self.bss_hostapd[0].list_sta())
|
||||
self.assertFalse(self.bss_hostapd[1].list_sta())
|
||||
|
||||
testutil.test_iface_operstate(device.name)
|
||||
testutil.test_ifaces_connected(self.bss_hostapd[0].ifname, device.name)
|
||||
self.assertRaises(Exception, testutil.test_ifaces_connected,
|
||||
(self.bss_hostapd[1].ifname, device.name, True, True))
|
||||
|
||||
# Check that iwd starts transition to BSS 1 in less than 10 seconds.
|
||||
# The 10 seconds is longer than needed to scan on just two channels
|
||||
# but short enough that a full scan on the 2.4 + 5.8 bands supported
|
||||
# by mac80211_hwsim will not finish. If this times out then, but
|
||||
# device_roam_trigger_cb has happened, it probably means that
|
||||
# Neighbor Reports are broken.
|
||||
rule0.signal = -8000
|
||||
|
||||
condition = 'obj.state == DeviceState.roaming'
|
||||
wd.wait_for_object_condition(device, condition)
|
||||
|
||||
# Check that iwd is on BSS 1 once out of roaming state and doesn't
|
||||
# go through 'disconnected', 'autoconnect', 'connecting' in between
|
||||
from_condition = 'obj.state == DeviceState.roaming'
|
||||
to_condition = 'obj.state == DeviceState.connected'
|
||||
wd.wait_for_object_change(device, from_condition, to_condition)
|
||||
|
||||
self.assertTrue(self.bss_hostapd[1].list_sta())
|
||||
|
||||
testutil.test_iface_operstate(device.name)
|
||||
testutil.test_ifaces_connected(self.bss_hostapd[1].ifname, device.name)
|
||||
self.assertRaises(Exception, testutil.test_ifaces_connected,
|
||||
(self.bss_hostapd[0].ifname, device.name, True, True))
|
||||
|
||||
def tearDown(self):
|
||||
os.system('ifconfig "' + self.bss_hostapd[0].ifname + '" down')
|
||||
os.system('ifconfig "' + self.bss_hostapd[1].ifname + '" down')
|
||||
os.system('ifconfig "' + self.bss_hostapd[0].ifname + '" up')
|
||||
os.system('ifconfig "' + self.bss_hostapd[1].ifname + '" up')
|
||||
|
||||
hwsim = Hwsim()
|
||||
for rule in list(hwsim.rules.keys()):
|
||||
del hwsim.rules[rule]
|
||||
|
||||
@classmethod
|
||||
def setUpClass(cls):
|
||||
os.system('ifconfig lo up')
|
||||
IWD.copy_to_storage('TestFT.8021x')
|
||||
|
||||
hwsim = Hwsim()
|
||||
|
||||
cls.bss_hostapd = [ HostapdCLI(config='ft-eap-ccmp-1.conf'),
|
||||
HostapdCLI(config='ft-eap-ccmp-2.conf') ]
|
||||
cls.bss_radio = [ hwsim.get_radio('rad0'),
|
||||
hwsim.get_radio('rad1') ]
|
||||
|
||||
# Set interface addresses to those expected by hostapd config files
|
||||
os.system('ifconfig "' + cls.bss_hostapd[0].ifname +
|
||||
'" down hw ether 12:00:00:00:00:01 up')
|
||||
os.system('ifconfig "' + cls.bss_hostapd[1].ifname +
|
||||
'" down hw ether 12:00:00:00:00:02 up')
|
||||
|
||||
cls.bss_hostapd[0].reload()
|
||||
cls.bss_hostapd[0].wait_for_event("AP-ENABLED")
|
||||
cls.bss_hostapd[1].reload()
|
||||
cls.bss_hostapd[1].wait_for_event("AP-ENABLED")
|
||||
|
||||
# Fill in the neighbor AP tables in both BSSes. By default each
|
||||
# instance knows only about current BSS, even inside one hostapd
|
||||
# process.
|
||||
# FT still works without the neighbor AP table but neighbor reports
|
||||
# have to be disabled in the .conf files
|
||||
cls.bss_hostapd[0].set_neighbor('12:00:00:00:00:02', 'TestFT',
|
||||
'1200000000028f0000005102060603000000')
|
||||
cls.bss_hostapd[1].set_neighbor('12:00:00:00:00:01', 'TestFT',
|
||||
'1200000000018f0000005101060603000000')
|
||||
|
||||
@classmethod
|
||||
def tearDownClass(cls):
|
||||
IWD.clear_storage()
|
||||
cls.bss_hostapd = None
|
||||
cls.bss_radio = None
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
unittest.main(exit=True)
|
||||
@ -1,42 +0,0 @@
|
||||
hw_mode=g
|
||||
channel=1
|
||||
ssid=TestFT
|
||||
utf8_ssid=1
|
||||
ctrl_interface=/var/run/hostapd
|
||||
r1_key_holder=000000000001
|
||||
nas_identifier=dummy1
|
||||
|
||||
wpa=2
|
||||
# Can support WPA-EAP and FT-EAP (space separated list) at the same
|
||||
# time but we want to force FT
|
||||
wpa_key_mgmt=FT-EAP FILS-SHA384 FT-FILS-SHA384
|
||||
wpa_pairwise=CCMP
|
||||
ieee8021x=1
|
||||
|
||||
fils_realm=example.com
|
||||
|
||||
wpa_ptk_rekey=30
|
||||
wpa_group_rekey=80
|
||||
ieee80211w=1
|
||||
rsn_preauth=1
|
||||
disable_pmksa_caching=1
|
||||
# Allow PMK cache to be shared opportunistically among configured interfaces
|
||||
# and BSSes (i.e., all configurations within a single hostapd process).
|
||||
okc=1
|
||||
mobility_domain=1234
|
||||
reassociation_deadline=60000
|
||||
r0kh=12:00:00:00:00:01 nas1.w1.fi 000102030405060708090a0b0c0d0e0f
|
||||
r0kh=12:00:00:00:00:02 nas2.w1.fi 000102030405060708090a0b0c0d0e0f
|
||||
r1kh=12:00:00:00:00:01 00:00:00:00:00:01 000102030405060708090a0b0c0d0e0f
|
||||
r1kh=12:00:00:00:00:02 00:00:00:00:00:02 000102030405060708090a0b0c0d0e0f
|
||||
# Push mode only needed for 8021x, not PSK mode since msk already known
|
||||
pmk_r1_push=1
|
||||
ft_over_ds=0
|
||||
ap_table_expiration_time=36000
|
||||
ap_table_max_size=10
|
||||
rrm_neighbor_report=1
|
||||
|
||||
auth_server_addr=127.0.0.1
|
||||
auth_server_port=1812
|
||||
auth_server_shared_secret=secret
|
||||
nas_identifier=nas1.w1.fi
|
||||
@ -1,42 +0,0 @@
|
||||
hw_mode=g
|
||||
channel=2
|
||||
ssid=TestFT
|
||||
utf8_ssid=1
|
||||
ctrl_interface=/var/run/hostapd
|
||||
r1_key_holder=000000000002
|
||||
nas_identifier=dummy2
|
||||
|
||||
wpa=2
|
||||
# Can support WPA-EAP and FT-EAP (space separated list) at the same
|
||||
# time but we want to force FT
|
||||
wpa_key_mgmt=WPA-EAP FT-FILS-SHA384
|
||||
wpa_pairwise=CCMP
|
||||
ieee8021x=1
|
||||
|
||||
fils_realm=example.com
|
||||
|
||||
wpa_ptk_rekey=30
|
||||
wpa_group_rekey=80
|
||||
ieee80211w=1
|
||||
rsn_preauth=1
|
||||
disable_pmksa_caching=1
|
||||
# Allow PMK cache to be shared opportunistically among configured interfaces
|
||||
# and BSSes (i.e., all configurations within a single hostapd process).
|
||||
okc=1
|
||||
mobility_domain=1234
|
||||
reassociation_deadline=60000
|
||||
r0kh=12:00:00:00:00:01 nas1.w1.fi 000102030405060708090a0b0c0d0e0f
|
||||
r0kh=12:00:00:00:00:02 nas2.w1.fi 000102030405060708090a0b0c0d0e0f
|
||||
r1kh=12:00:00:00:00:01 00:00:00:00:00:01 000102030405060708090a0b0c0d0e0f
|
||||
r1kh=12:00:00:00:00:02 00:00:00:00:00:02 000102030405060708090a0b0c0d0e0f
|
||||
# Push mode only needed for 8021x, not PSK mode since msk already known
|
||||
pmk_r1_push=1
|
||||
ft_over_ds=0
|
||||
ap_table_expiration_time=36000
|
||||
ap_table_max_size=10
|
||||
rrm_neighbor_report=1
|
||||
|
||||
auth_server_addr=127.0.0.1
|
||||
auth_server_port=1812
|
||||
auth_server_shared_secret=secret
|
||||
nas_identifier=nas2.w1.fi
|
||||
@ -1,8 +0,0 @@
|
||||
[SETUP]
|
||||
num_radios=3
|
||||
start_iwd=0
|
||||
|
||||
[HOSTAPD]
|
||||
rad0=ft-eap-ccmp-1.conf
|
||||
rad1=ft-eap-ccmp-2.conf
|
||||
radius_server=radius.conf
|
||||
@ -1,2 +0,0 @@
|
||||
[Scan]
|
||||
DisableMacAddressRandomization=true
|
||||
@ -1 +0,0 @@
|
||||
"user@example.com" PWD "secret123"
|
||||
@ -1,15 +0,0 @@
|
||||
driver=none
|
||||
radius_server_clients=/tmp/certs/radius-clients.text
|
||||
radius_server_auth_port=1812
|
||||
eap_user_file=/tmp/pwd.eap_user
|
||||
eap_server=0
|
||||
eap_server_erp=1
|
||||
|
||||
erp_send_reauth_start=1
|
||||
erp_domain=example.com
|
||||
fils_realm=example.com
|
||||
disable_pmksa_caching=1
|
||||
|
||||
pwd_group=19
|
||||
wpa_group_rekey=30
|
||||
wpa_ptk_rekey=30
|
||||
Loading…
Reference in New Issue
Block a user