krackattacks/tests/hwsim/test_ap_hs20.py

#!/usr/bin/python
#
# Hotspot 2.0 tests
# Copyright (c) 2013, Jouni Malinen <j@w1.fi>
#
# This software may be distributed under the terms of the BSD license.
# See README for more details.

import time
import subprocess
import logging
logger = logging.getLogger(__name__)

import hostapd

def hs20_ap_params():
    params = hostapd.wpa2_params(ssid="test-hs20")
    params['wpa_key_mgmt'] = "WPA-EAP"
    params['ieee80211w'] = "1"
    params['ieee8021x'] = "1"
    params['auth_server_addr'] = "127.0.0.1"
    params['auth_server_port'] = "1812"
    params['auth_server_shared_secret'] = "radius"
    params['interworking'] = "1"
    params['access_network_type'] = "14"
    params['internet'] = "1"
    params['asra'] = "0"
    params['esr'] = "0"
    params['uesa'] = "0"
    params['venue_group'] = "7"
    params['venue_type'] = "1"
    params['venue_name'] = [ "eng:Example venue", "fin:Esimerkkipaikka" ]
    params['roaming_consortium'] = [ "112233", "1020304050", "010203040506",
                                     "fedcba" ]
    params['domain_name'] = "example.com,another.example.com"
    params['nai_realm'] = [ "0,example.com,13[5:6],21[2:4][5:7]",
                            "0,another.example.com" ]
    params['hs20'] = "1"
    params['hs20_wan_metrics'] = "01:8000:1000:80:240:3000"
    params['hs20_conn_capab'] = [ "1:0:2", "6:22:1", "17:5060:0" ]
    params['hs20_operating_class'] = "5173"
    params['anqp_3gpp_cell_net'] = "244,91"
    return params

def test_ap_hs20_select(dev, apdev):
    """Hotspot 2.0 network selection"""
    bssid = apdev[0]['bssid']
    params = hs20_ap_params()
    params['hessid'] = bssid
    hostapd.add_ap(apdev[0]['ifname'], params)

    dev[0].request("SET interworking 1")
    dev[0].request("SET hs20 1")

    id = dev[0].add_cred()
    dev[0].set_cred_quoted(id, "realm", "example.com");
    dev[0].set_cred_quoted(id, "username", "test");
    dev[0].set_cred_quoted(id, "password", "secret");
    dev[0].set_cred_quoted(id, "domain", "example.com");

    dev[0].dump_monitor()
    dev[0].request("INTERWORKING_SELECT")
    ev = dev[0].wait_event(["INTERWORKING-AP", "INTERWORKING-NO-MATCH"],
                           timeout=15)
    if ev is None:
        raise Exception("Network selection timed out");
    if "INTERWORKING-NO-MATCH" in ev:
        raise Exception("Matching network not found")
    if bssid not in ev:
        raise Exception("Unexpected BSSID in match")
    if "type=home" not in ev:
        raise Exception("Home network not recognized")

    dev[0].set_cred_quoted(id, "domain", "no.match.example.com");
    dev[0].dump_monitor()
    dev[0].request("INTERWORKING_SELECT")
    ev = dev[0].wait_event(["INTERWORKING-AP", "INTERWORKING-NO-MATCH"],
                           timeout=15)
    if ev is None:
        raise Exception("Network selection timed out");
    if "INTERWORKING-NO-MATCH" in ev:
        raise Exception("Matching network not found")
    if bssid not in ev:
        raise Exception("Unexpected BSSID in match")
    if "type=roaming" not in ev:
        raise Exception("Roaming network not recognized")

    dev[0].set_cred_quoted(id, "realm", "no.match.example.com");
    dev[0].dump_monitor()
    dev[0].request("INTERWORKING_SELECT")
    ev = dev[0].wait_event(["INTERWORKING-AP", "INTERWORKING-NO-MATCH"],
                           timeout=15)
    if ev is None:
        raise Exception("Network selection timed out");
    if "INTERWORKING-NO-MATCH" not in ev:
        raise Exception("Unexpected network match")