tests: HS 2.0 remediation required from SQL user DB
Signed-off-by: Jouni Malinen <j@w1.fi>
This commit is contained in:
		
							parent
							
								
									f6fb1926bb
								
							
						
					
					
						commit
						350a7ba90f
					
				
					 1 changed files with 62 additions and 0 deletions
				
			
		|  | @ -1954,3 +1954,65 @@ def test_ap_hs20_ft(dev, apdev): | ||||||
|                                   'update_identifier': "1234" }) |                                   'update_identifier': "1234" }) | ||||||
|     interworking_select(dev[0], bssid, "home", freq="2412") |     interworking_select(dev[0], bssid, "home", freq="2412") | ||||||
|     interworking_connect(dev[0], bssid, "TTLS") |     interworking_connect(dev[0], bssid, "TTLS") | ||||||
|  | 
 | ||||||
|  | def test_ap_hs20_remediation_sql(dev, apdev, params): | ||||||
|  |     """Hotspot 2.0 connection and remediation required using SQLite for user DB""" | ||||||
|  |     try: | ||||||
|  |         import sqlite3 | ||||||
|  |     except ImportError: | ||||||
|  |         return "skip" | ||||||
|  |     dbfile = os.path.join(params['logdir'], "eap-user.db") | ||||||
|  |     try: | ||||||
|  |         os.remove(dbfile) | ||||||
|  |     except: | ||||||
|  |         pass | ||||||
|  |     con = sqlite3.connect(dbfile) | ||||||
|  |     with con: | ||||||
|  |         cur = con.cursor() | ||||||
|  |         cur.execute("CREATE TABLE users(identity TEXT PRIMARY KEY, methods TEXT, password TEXT, remediation TEXT, phase2 INTEGER)") | ||||||
|  |         cur.execute("CREATE TABLE wildcards(identity TEXT PRIMARY KEY, methods TEXT)") | ||||||
|  |         cur.execute("INSERT INTO users(identity,methods,password,phase2,remediation) VALUES ('user-mschapv2','TTLS-MSCHAPV2','password',1,'user')") | ||||||
|  |         cur.execute("INSERT INTO wildcards(identity,methods) VALUES ('','TTLS,TLS')") | ||||||
|  |         cur.execute("CREATE TABLE authlog(timestamp TEXT, session TEXT, nas_ip TEXT, username TEXT, note TEXT)") | ||||||
|  | 
 | ||||||
|  |     try: | ||||||
|  |         params = { "ssid": "as", "beacon_int": "2000", | ||||||
|  |                    "radius_server_clients": "auth_serv/radius_clients.conf", | ||||||
|  |                    "radius_server_auth_port": '18128', | ||||||
|  |                    "eap_server": "1", | ||||||
|  |                    "eap_user_file": "sqlite:" + dbfile, | ||||||
|  |                    "ca_cert": "auth_serv/ca.pem", | ||||||
|  |                    "server_cert": "auth_serv/server.pem", | ||||||
|  |                    "private_key": "auth_serv/server.key", | ||||||
|  |                    "subscr_remediation_url": "https://example.org/", | ||||||
|  |                    "subscr_remediation_method": "1" } | ||||||
|  |         hostapd.add_ap(apdev[1]['ifname'], params) | ||||||
|  | 
 | ||||||
|  |         bssid = apdev[0]['bssid'] | ||||||
|  |         params = hs20_ap_params() | ||||||
|  |         params['auth_server_port'] = "18128" | ||||||
|  |         hostapd.add_ap(apdev[0]['ifname'], params) | ||||||
|  | 
 | ||||||
|  |         dev[0].request("SET pmf 1") | ||||||
|  |         dev[0].hs20_enable() | ||||||
|  |         id = dev[0].add_cred_values({ 'realm': "example.com", | ||||||
|  |                                       'username': "user-mschapv2", | ||||||
|  |                                       'password': "password", | ||||||
|  |                                       'ca_cert': "auth_serv/ca.pem" }) | ||||||
|  |         interworking_select(dev[0], bssid, freq="2412") | ||||||
|  |         interworking_connect(dev[0], bssid, "TTLS") | ||||||
|  |         ev = dev[0].wait_event(["HS20-SUBSCRIPTION-REMEDIATION"], timeout=5) | ||||||
|  |         if ev is None: | ||||||
|  |             raise Exception("Timeout on subscription remediation notice") | ||||||
|  |         if " 1 https://example.org/" not in ev: | ||||||
|  |             raise Exception("Unexpected subscription remediation event contents") | ||||||
|  | 
 | ||||||
|  |         with con: | ||||||
|  |             cur = con.cursor() | ||||||
|  |             cur.execute("SELECT * from authlog") | ||||||
|  |             rows = cur.fetchall() | ||||||
|  |             if len(rows) < 1: | ||||||
|  |                 raise Exception("No authlog entries") | ||||||
|  | 
 | ||||||
|  |     finally: | ||||||
|  |         os.remove(dbfile) | ||||||
|  |  | ||||||
		Loading…
	
		Reference in a new issue
	
	 Jouni Malinen
						Jouni Malinen