# Test cases for Device Provisioning Protocol (DPP) # Copyright (c) 2017, Qualcomm Atheros, Inc. # # This software may be distributed under the terms of the BSD license. # See README for more details. import logging logger = logging.getLogger() import time import hostapd from utils import HwsimSkip def check_dpp_capab(dev): if "UNKNOWN COMMAND" in dev.request("DPP_BOOTSTRAP_GET_URI 0"): raise HwsimSkip("DPP not supported") def test_dpp_qr_code_parsing(dev, apdev): """DPP QR Code parsing""" check_dpp_capab(dev[0]) id = [] tests = [ "DPP:C:81/1,115/36;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADM2206avxHJaHXgLMkq/24e0rsrfMP9K1Tm8gx+ovP0I=;;", "DPP:I:SN=4774LH2b4044;M:010203040506;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;", "DPP:I:;M:010203040506;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;" ] for uri in tests: res = dev[0].request("DPP_QR_CODE " + uri) if "FAIL" in res: raise Exception("Failed to parse QR Code") id.append(int(res)) uri2 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id[-1]) if uri != uri2: raise Exception("Returned URI does not match") tests = [ "foo", "DPP:", "DPP:;;", "DPP:C:1/2;M:;K;;", "DPP:I:;M:01020304050;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;" ] for t in tests: res = dev[0].request("DPP_QR_CODE " + t) if "FAIL" not in res: raise Exception("Accepted invalid QR Code: " + t) logger.info("ID: " + str(id)) if id[0] == id[1] or id[0] == id[2] or id[1] == id[2]: raise Exception("Duplicate ID returned") if "FAIL" not in dev[0].request("DPP_BOOTSTRAP_REMOVE 12345678"): raise Exception("DPP_BOOTSTRAP_REMOVE accepted unexpectedly") if "OK" not in dev[0].request("DPP_BOOTSTRAP_REMOVE %d" % id[1]): raise Exception("DPP_BOOTSTRAP_REMOVE failed") res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode") if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") uri = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % int(res)) logger.info("Generated URI: " + uri) res = dev[0].request("DPP_QR_CODE " + uri) if "FAIL" in res: raise Exception("Failed to parse self-generated QR Code URI") res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1,115/36 mac=010203040506 info=foo") if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") uri = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % int(res)) logger.info("Generated URI: " + uri) res = dev[0].request("DPP_QR_CODE " + uri) if "FAIL" in res: raise Exception("Failed to parse self-generated QR Code URI") def test_dpp_qr_code_auth_broadcast(dev, apdev): """DPP QR Code and authentication exchange (broadcast)""" check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) logger.info("dev0 displays QR Code") res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1") if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id0 = int(res) uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0) logger.info("dev1 scans QR Code") res = dev[1].request("DPP_QR_CODE " + uri0) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id1 = int(res) logger.info("dev1 initiates DPP Authentication") if "OK" not in dev[0].request("DPP_LISTEN 2412"): raise Exception("Failed to start listen operation") if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d" % id1): raise Exception("Failed to initiate DPP Authentication") ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Responder)") ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Initiator)") dev[0].request("DPP_STOP_LISTEN") def test_dpp_qr_code_auth_unicast(dev, apdev): """DPP QR Code and authentication exchange (unicast)""" run_dpp_qr_code_auth_unicast(dev, apdev, None) def test_dpp_qr_code_auth_unicast_ap_enrollee(dev, apdev): """DPP QR Code and authentication exchange (AP enrollee)""" run_dpp_qr_code_auth_unicast(dev, apdev, None, netrole="ap") def test_dpp_qr_code_curve_prime256v1(dev, apdev): """DPP QR Code and curve prime256v1""" run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1") def test_dpp_qr_code_curve_secp384r1(dev, apdev): """DPP QR Code and curve secp384r1""" run_dpp_qr_code_auth_unicast(dev, apdev, "secp384r1") def test_dpp_qr_code_curve_secp521r1(dev, apdev): """DPP QR Code and curve secp521r1""" run_dpp_qr_code_auth_unicast(dev, apdev, "secp521r1") def test_dpp_qr_code_curve_brainpoolP256r1(dev, apdev): """DPP QR Code and curve brainpoolP256r1""" run_dpp_qr_code_auth_unicast(dev, apdev, "brainpoolP256r1") def test_dpp_qr_code_curve_brainpoolP384r1(dev, apdev): """DPP QR Code and curve brainpoolP384r1""" run_dpp_qr_code_auth_unicast(dev, apdev, "brainpoolP384r1") def test_dpp_qr_code_curve_brainpoolP512r1(dev, apdev): """DPP QR Code and curve brainpoolP512r1""" run_dpp_qr_code_auth_unicast(dev, apdev, "brainpoolP512r1") def test_dpp_qr_code_set_key(dev, apdev): """DPP QR Code and fixed bootstrapping key""" run_dpp_qr_code_auth_unicast(dev, apdev, None, key="30770201010420e5143ac74682cc6869a830e8f5301a5fa569130ac329b1d7dd6f2a7495dbcbe1a00a06082a8648ce3d030107a144034200045e13e167c33dbc7d85541e5509600aa8139bbb3e39e25898992c5d01be92039ee2850f17e71506ded0d6b25677441eae249f8e225c68dd15a6354dca54006383") def run_dpp_qr_code_auth_unicast(dev, apdev, curve, netrole=None, key=None, require_conf_success=False, init_extra=None, require_conf_failure=False, configurator=False, conf_curve=None): check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) if configurator: logger.info("Create configurator on dev1") cmd = "DPP_CONFIGURATOR_ADD" if conf_curve: cmd += " curve=" + conf_curve res = dev[1].request(cmd); if "FAIL" in res: raise Exception("Failed to add configurator") conf_id = int(res) logger.info("dev0 displays QR Code") addr = dev[0].own_addr().replace(':', '') cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr if curve: cmd += " curve=" + curve if key: cmd += " key=" + key res = dev[0].request(cmd) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id0 = int(res) uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0) logger.info("dev1 scans QR Code") res = dev[1].request("DPP_QR_CODE " + uri0) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id1 = int(res) logger.info("dev1 initiates DPP Authentication") cmd = "DPP_LISTEN 2412" if netrole: cmd += " netrole=" + netrole if "OK" not in dev[0].request(cmd): raise Exception("Failed to start listen operation") cmd = "DPP_AUTH_INIT peer=%d" % id1 if init_extra: cmd += " " + init_extra if configurator: cmd += " configurator=%d" % conf_id if "OK" not in dev[1].request(cmd): raise Exception("Failed to initiate DPP Authentication") ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Responder)") ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Initiator)") ev = dev[1].wait_event(["DPP-CONF-SENT"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Configurator)") ev = dev[0].wait_event(["DPP-CONF-RECEIVED", "DPP-CONF-FAILED"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Enrollee)") if require_conf_success: if "DPP-CONF-FAILED" in ev: raise Exception("DPP configuration failed") if require_conf_failure: if "DPP-CONF-SUCCESS" in ev: raise Exception("DPP configuration succeeded unexpectedly") dev[0].request("DPP_STOP_LISTEN") dev[0].dump_monitor() dev[1].dump_monitor() def test_dpp_qr_code_auth_mutual(dev, apdev): """DPP QR Code and authentication exchange (mutual)""" check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) logger.info("dev0 displays QR Code") addr = dev[0].own_addr().replace(':', '') res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id0 = int(res) uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0) logger.info("dev1 scans QR Code") res = dev[1].request("DPP_QR_CODE " + uri0) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id1 = int(res) logger.info("dev1 displays QR Code") addr = dev[1].own_addr().replace(':', '') res = dev[1].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id1b = int(res) uri1b = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id1b) logger.info("dev0 scans QR Code") res = dev[0].request("DPP_QR_CODE " + uri1b) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id0b = int(res) logger.info("dev1 initiates DPP Authentication") if "OK" not in dev[0].request("DPP_LISTEN 2412"): raise Exception("Failed to start listen operation") if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d own=%d" % (id1, id1b)): raise Exception("Failed to initiate DPP Authentication") ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Responder)") ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Initiator)") dev[0].request("DPP_STOP_LISTEN") def test_dpp_qr_code_auth_mutual2(dev, apdev): """DPP QR Code and authentication exchange (mutual2)""" check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) logger.info("dev0 displays QR Code") addr = dev[0].own_addr().replace(':', '') res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id0 = int(res) uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0) logger.info("dev1 scans QR Code") res = dev[1].request("DPP_QR_CODE " + uri0) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id1 = int(res) logger.info("dev1 displays QR Code") addr = dev[1].own_addr().replace(':', '') res = dev[1].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id1b = int(res) uri1b = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id1b) logger.info("dev1 initiates DPP Authentication") if "OK" not in dev[0].request("DPP_LISTEN 2412 qr=mutual"): raise Exception("Failed to start listen operation") if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d own=%d" % (id1, id1b)): raise Exception("Failed to initiate DPP Authentication") ev = dev[1].wait_event(["DPP-RESPONSE-PENDING"], timeout=5) if ev is None: raise Exception("Pending response not reported") ev = dev[0].wait_event(["DPP-SCAN-PEER-QR-CODE"], timeout=5) if ev is None: raise Exception("QR Code scan for mutual authentication not requested") logger.info("dev0 scans QR Code") res = dev[0].request("DPP_QR_CODE " + uri1b) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id0b = int(res) ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Responder)") ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Initiator)") dev[0].request("DPP_STOP_LISTEN") def test_dpp_qr_code_auth_mutual_curve_mismatch(dev, apdev): """DPP QR Code and authentication exchange (mutual/mismatch)""" check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) logger.info("dev0 displays QR Code") addr = dev[0].own_addr().replace(':', '') res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id0 = int(res) uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0) logger.info("dev1 scans QR Code") res = dev[1].request("DPP_QR_CODE " + uri0) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id1 = int(res) logger.info("dev1 displays QR Code") addr = dev[1].own_addr().replace(':', '') res = dev[1].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr + " curve=secp384r1") if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id1b = int(res) uri1b = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id1b) logger.info("dev0 scans QR Code") res = dev[0].request("DPP_QR_CODE " + uri1b) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id0b = int(res) res = dev[1].request("DPP_AUTH_INIT peer=%d own=%d" % (id1, id1b)) if "FAIL" not in res: raise Exception("DPP_AUTH_INIT accepted unexpectedly") def test_dpp_qr_code_listen_continue(dev, apdev): """DPP QR Code and listen operation needing continuation""" check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) logger.info("dev0 displays QR Code") addr = dev[0].own_addr().replace(':', '') res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id0 = int(res) uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0) logger.info("dev1 scans QR Code") res = dev[1].request("DPP_QR_CODE " + uri0) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id1 = int(res) if "OK" not in dev[0].request("DPP_LISTEN 2412"): raise Exception("Failed to start listen operation") logger.info("Wait for listen to expire and get restarted") time.sleep(5.5) logger.info("dev1 initiates DPP Authentication") if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d" % id1): raise Exception("Failed to initiate DPP Authentication") ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Responder)") ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Initiator)") dev[0].request("DPP_STOP_LISTEN") def test_dpp_qr_code_auth_initiator_enrollee(dev, apdev): """DPP QR Code and authentication exchange (Initiator in Enrollee role)""" check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) dev[0].request("SET gas_address3 1") dev[1].request("SET gas_address3 1") logger.info("dev0 displays QR Code") addr = dev[0].own_addr().replace(':', '') res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id0 = int(res) uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0) logger.info("dev1 scans QR Code") res = dev[1].request("DPP_QR_CODE " + uri0) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id1 = int(res) logger.info("dev1 initiates DPP Authentication") if "OK" not in dev[0].request("DPP_LISTEN 2412"): raise Exception("Failed to start listen operation") if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d role=enrollee" % id1): raise Exception("Failed to initiate DPP Authentication") ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Responder)") ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Initiator)") dev[0].request("DPP_STOP_LISTEN") def test_dpp_qr_code_auth_incompatible_roles(dev, apdev): """DPP QR Code and authentication exchange (incompatible roles)""" check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) logger.info("dev0 displays QR Code") addr = dev[0].own_addr().replace(':', '') res = dev[0].request("DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id0 = int(res) uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0) logger.info("dev1 scans QR Code") res = dev[1].request("DPP_QR_CODE " + uri0) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id1 = int(res) logger.info("dev1 initiates DPP Authentication") if "OK" not in dev[0].request("DPP_LISTEN 2412 role=enrollee"): raise Exception("Failed to start listen operation") if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d role=enrollee" % id1): raise Exception("Failed to initiate DPP Authentication") ev = dev[1].wait_event(["DPP-NOT-COMPATIBLE"], timeout=5) if ev is None: raise Exception("DPP-NOT-COMPATIBLE event on initiator timed out") ev = dev[0].wait_event(["DPP-NOT-COMPATIBLE"], timeout=1) if ev is None: raise Exception("DPP-NOT-COMPATIBLE event on responder timed out") if "OK" not in dev[1].request("DPP_AUTH_INIT peer=%d role=configurator" % id1): raise Exception("Failed to initiate DPP Authentication") ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Responder)") ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Initiator)") dev[0].request("DPP_STOP_LISTEN") def test_dpp_config_legacy(dev, apdev): """DPP Config Object for legacy network using passphrase""" check_dpp_capab(dev[1]) conf = '{"wi-fi_tech":"infra", "discovery":{"ssid":"test"},"cred":{"akm":"psk","pass":"secret passphrase"}}' dev[1].set("dpp_config_obj_override", conf) run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1", require_conf_success=True) def test_dpp_config_legacy_psk_hex(dev, apdev): """DPP Config Object for legacy network using PSK""" check_dpp_capab(dev[1]) conf = '{"wi-fi_tech":"infra", "discovery":{"ssid":"test"},"cred":{"akm":"psk","psk_hex":"' + 32*"12" + '"}}' dev[1].set("dpp_config_obj_override", conf) run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1", require_conf_success=True) def test_dpp_config_fragmentation(dev, apdev): """DPP Config Object for legacy network requiring fragmentation""" check_dpp_capab(dev[1]) conf = '{"wi-fi_tech":"infra", "discovery":{"ssid":"test"},"cred":{"akm":"psk","pass":"secret passphrase"}}' + 3000*' ' dev[1].set("dpp_config_obj_override", conf) run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1", require_conf_success=True) def test_dpp_config_legacy_gen(dev, apdev): """Generate DPP Config Object for legacy network""" run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1", init_extra="conf=sta-psk pass=%s" % "passphrase".encode("hex"), require_conf_success=True) def test_dpp_config_dpp_gen_prime256v1(dev, apdev): """Generate DPP Config Object for DPP network (P-256)""" run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1", init_extra="conf=sta-dpp", require_conf_success=True, configurator=True) def test_dpp_config_dpp_gen_secp384r1(dev, apdev): """Generate DPP Config Object for DPP network (P-384)""" run_dpp_qr_code_auth_unicast(dev, apdev, "secp384r1", init_extra="conf=sta-dpp", require_conf_success=True, configurator=True) def test_dpp_config_dpp_gen_secp521r1(dev, apdev): """Generate DPP Config Object for DPP network (P-521)""" run_dpp_qr_code_auth_unicast(dev, apdev, "secp521r1", init_extra="conf=sta-dpp", require_conf_success=True, configurator=True) def test_dpp_config_dpp_gen_prime256v1_prime256v1(dev, apdev): """Generate DPP Config Object for DPP network (P-256 + P-256)""" run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1", init_extra="conf=sta-dpp", require_conf_success=True, configurator=True, conf_curve="prime256v1") def test_dpp_config_dpp_gen_prime256v1_secp384r1(dev, apdev): """Generate DPP Config Object for DPP network (P-256 + P-384)""" run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1", init_extra="conf=sta-dpp", require_conf_success=True, configurator=True, conf_curve="secp384r1") def test_dpp_config_dpp_gen_prime256v1_secp521r1(dev, apdev): """Generate DPP Config Object for DPP network (P-256 + P-521)""" run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1", init_extra="conf=sta-dpp", require_conf_success=True, configurator=True, conf_curve="secp521r1") def test_dpp_config_dpp_gen_secp384r1_prime256v1(dev, apdev): """Generate DPP Config Object for DPP network (P-384 + P-256)""" run_dpp_qr_code_auth_unicast(dev, apdev, "secp384r1", init_extra="conf=sta-dpp", require_conf_success=True, configurator=True, conf_curve="prime256v1") def test_dpp_config_dpp_gen_secp384r1_secp384r1(dev, apdev): """Generate DPP Config Object for DPP network (P-384 + P-384)""" run_dpp_qr_code_auth_unicast(dev, apdev, "secp384r1", init_extra="conf=sta-dpp", require_conf_success=True, configurator=True, conf_curve="secp384r1") def test_dpp_config_dpp_gen_secp384r1_secp521r1(dev, apdev): """Generate DPP Config Object for DPP network (P-384 + P-521)""" run_dpp_qr_code_auth_unicast(dev, apdev, "secp384r1", init_extra="conf=sta-dpp", require_conf_success=True, configurator=True, conf_curve="secp521r1") def test_dpp_config_dpp_gen_secp521r1_prime256v1(dev, apdev): """Generate DPP Config Object for DPP network (P-521 + P-256)""" run_dpp_qr_code_auth_unicast(dev, apdev, "secp521r1", init_extra="conf=sta-dpp", require_conf_success=True, configurator=True, conf_curve="prime256v1") def test_dpp_config_dpp_gen_secp521r1_secp384r1(dev, apdev): """Generate DPP Config Object for DPP network (P-521 + P-384)""" run_dpp_qr_code_auth_unicast(dev, apdev, "secp521r1", init_extra="conf=sta-dpp", require_conf_success=True, configurator=True, conf_curve="secp384r1") def test_dpp_config_dpp_gen_secp521r1_secp521r1(dev, apdev): """Generate DPP Config Object for DPP network (P-521 + P-521)""" run_dpp_qr_code_auth_unicast(dev, apdev, "secp521r1", init_extra="conf=sta-dpp", require_conf_success=True, configurator=True, conf_curve="secp521r1") def test_dpp_config_dpp_gen_expiry(dev, apdev): """Generate DPP Config Object for DPP network with expiry value""" run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1", init_extra="conf=sta-dpp expiry=%d" % (time.time() + 1000), require_conf_success=True, configurator=True) def test_dpp_config_dpp_gen_expired_key(dev, apdev): """Generate DPP Config Object for DPP network with expiry value""" run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1", init_extra="conf=sta-dpp expiry=%d" % (time.time() - 10), require_conf_failure=True, configurator=True) def test_dpp_config_dpp_override_prime256v1(dev, apdev): """DPP Config Object override (P-256)""" check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) conf = '{"wi-fi_tech":"infra","discovery":{"ssid":"test"},"cred":{"akm":"dpp","signedConnector":"eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJUbkdLaklsTlphYXRyRUFZcmJiamlCNjdyamtMX0FHVldYTzZxOWhESktVIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6InN0YSJ9XSwibmV0QWNjZXNzS2V5Ijp7Imt0eSI6IkVDIiwiY3J2IjoiUC0yNTYiLCJ4IjoiYVRGNEpFR0lQS1NaMFh2OXpkQ01qbS10bjVYcE1zWUlWWjl3eVNBejFnSSIsInkiOiJRR2NIV0FfNnJiVTlYRFhBenRvWC1NNVEzc3VUbk1hcUVoVUx0bjdTU1h3In19._sm6YswxMf6hJLVTyYoU1uYUeY2VVkUNjrzjSiEhY42StD_RWowStEE-9CRsdCvLmsTptZ72_g40vTFwdId20A","csign":{"kty":"EC","crv":"P-256","x":"W4-Y5N1Pkos3UWb9A5qme0KUYRtY3CVUpekx_MapZ9s","y":"Et-M4NSF4NGjvh2VCh4B1sJ9eSCZ4RNzP2DBdP137VE","kid":"TnGKjIlNZaatrEAYrbbjiB67rjkL_AGVWXO6q9hDJKU"}}}' dev[0].set("dpp_ignore_netaccesskey_mismatch", "1") dev[1].set("dpp_config_obj_override", conf) run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1", require_conf_success=True) def test_dpp_config_dpp_override_secp384r1(dev, apdev): """DPP Config Object override (P-384)""" check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) conf = '{"wi-fi_tech":"infra","discovery":{"ssid":"test"},"cred":{"akm":"dpp","signedConnector":"eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJabi1iMndjbjRLM2pGQklkYmhGZkpVTHJTXzdESS0yMWxFQi02R3gxNjl3IiwiYWxnIjoiRVMzODQifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6InN0YSJ9XSwibmV0QWNjZXNzS2V5Ijp7Imt0eSI6IkVDIiwiY3J2IjoiUC0zODQiLCJ4IjoickdrSGg1UUZsOUtfWjdqYUZkVVhmbThoY1RTRjM1b25Xb1NIRXVsbVNzWW9oX1RXZGpoRjhiVGdiS0ZRN2tBViIsInkiOiJBbU1QVDA5VmFENWpGdzMwTUFKQlp2VkZXeGNlVVlKLXR5blQ0bVJ5N0xOZWxhZ0dEWHpfOExaRlpOU2FaNUdLIn19.Yn_F7m-bbOQ5PlaYQJ9-1qsuqYQ6V-rAv8nWw1COKiCYwwbt3WFBJ8DljY0dPrlg5CHJC4saXwkytpI-CpELW1yUdzYb4Lrun07d20Eo_g10ICyOl5sqQCAUElKMe_Xr","csign":{"kty":"EC","crv":"P-384","x":"dmTyXXiPV2Y8a01fujL-jo08gvzyby23XmzOtzjAiujKQZZgPJsbhfEKrZDlc6ey","y":"H5Z0av5c7bqInxYb2_OOJdNiMhVf3zlcULR0516ZZitOY4U31KhL4wl4KGV7g2XW","kid":"Zn-b2wcn4K3jFBIdbhFfJULrS_7DI-21lEB-6Gx169w"}}}' dev[0].set("dpp_ignore_netaccesskey_mismatch", "1") dev[1].set("dpp_config_obj_override", conf) run_dpp_qr_code_auth_unicast(dev, apdev, "secp384r1", require_conf_success=True) def test_dpp_config_dpp_override_secp521r1(dev, apdev): """DPP Config Object override (P-521)""" check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) conf = '{"wi-fi_tech":"infra","discovery":{"ssid":"test"},"cred":{"akm":"dpp","signedConnector":"eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJMZkhKY3hnV2ZKcG1uS2IwenZRT0F2VDB2b0ZKc0JjZnBmYzgxY3Y5ZXFnIiwiYWxnIjoiRVM1MTIifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6InN0YSJ9XSwibmV0QWNjZXNzS2V5Ijp7Imt0eSI6IkVDIiwiY3J2IjoiUC01MjEiLCJ4IjoiQVJlUFBrMFNISkRRR2NWbnlmM3lfbTlaQllHNjFJeElIbDN1NkdwRHVhMkU1WVd4TE1BSUtMMnZuUGtlSGFVRXljRmZaZlpYZ2JlNkViUUxMVkRVUm1VUSIsInkiOiJBWUtaYlNwUkFFNjJVYm9YZ2c1ZWRBVENzbEpzTlpwcm9RR1dUcW9Md04weXkzQkVoT3ZRZmZrOWhaR2lKZ295TzFobXFRRVRrS0pXb2tIYTBCQUpLSGZtIn19.ACEZLyPk13cM_OFScpLoCElQ2t1sxq5z2d_W_3_QslTQQe5SFiH_o8ycL4632YLAH4RV0gZcMKKRMtZdHgBYHjkzASDqgY-_aYN2SBmpfl8hw0YdDlUJWX3DJf-ofqNAlTbnGmhpSg69cEAhFn41Xgvx2MdwYcPVncxxESVOtWl5zNLK","csign":{"kty":"EC","crv":"P-521","x":"ADiOI_YJOAipEXHB-SpGl4KqokX8m8h3BVYCc8dgiwssZ061-nIIY3O1SIO6Re4Jjfy53RPgzDG6jitOgOGLtzZs","y":"AZKggKaQi0ExutSpJAU3-lqDV03sBQLA9C7KabfWoAn8qD6Vk4jU0WAJdt-wBBTF9o1nVuiqS2OxMVYrxN4lOz79","kid":"LfHJcxgWfJpmnKb0zvQOAvT0voFJsBcfpfc81cv9eqg"}}}' dev[0].set("dpp_ignore_netaccesskey_mismatch", "1") dev[1].set("dpp_config_obj_override", conf) run_dpp_qr_code_auth_unicast(dev, apdev, "secp521r1", require_conf_success=True) def test_dpp_config_override_objects(dev, apdev): """Generate DPP Config Object and override objects)""" check_dpp_capab(dev[1]) discovery = '{\n"ssid":"mywifi",\n"op_cl":81,\n"ch_list":\n[\n{"ch":1},\n{"ch":6},\n{"ch":11}\n]\n}' groups = '[\n {"groupId":"home","netRole":"sta"},\n {"groupId":"cottage","netRole":"sta"}\n]' devices = '[\n{"deviceId":"G1YaJYMbA9029ocP3BVCg5kj3yGHWYi3M2hJqyOmcxQ","netRole":"sta"},\n{"deviceId":"Azs-ksefien1CA8EYIliu6N6vGrTa3qowqCHKK8Iu0Y","netRole":"sta"}\n]' dev[1].set("dpp_discovery_override", discovery) dev[1].set("dpp_groups_override", groups) dev[1].set("dpp_devices_override", devices) run_dpp_qr_code_auth_unicast(dev, apdev, "prime256v1", init_extra="conf=sta-dpp", require_conf_success=True, configurator=True) def test_dpp_gas_timeout(dev, apdev): """DPP and GAS server timeout for a query""" check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) logger.info("dev0 displays QR Code") addr = dev[0].own_addr().replace(':', '') cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr res = dev[0].request(cmd) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id0 = int(res) uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0) logger.info("dev1 scans QR Code") res = dev[1].request("DPP_QR_CODE " + uri0) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id1 = int(res) logger.info("dev1 initiates DPP Authentication") dev[0].set("ext_mgmt_frame_handling", "1") cmd = "DPP_LISTEN 2412" if "OK" not in dev[0].request(cmd): raise Exception("Failed to start listen operation") # Force GAS fragmentation conf = '{"wi-fi_tech":"infra", "discovery":{"ssid":"test"},"cred":{"akm":"psk","pass":"secret passphrase"}}' + 3000*' ' dev[1].set("dpp_config_obj_override", conf) cmd = "DPP_AUTH_INIT peer=%d" % id1 if "OK" not in dev[1].request(cmd): raise Exception("Failed to initiate DPP Authentication") # DPP Authentication Request msg = dev[0].mgmt_rx() if "OK" not in dev[0].request("MGMT_RX_PROCESS freq={} datarate={} ssi_signal={} frame={}".format(msg['freq'], msg['datarate'], msg['ssi_signal'], msg['frame'].encode('hex'))): raise Exception("MGMT_RX_PROCESS failed") # DPP Authentication Confirmation msg = dev[0].mgmt_rx() if "OK" not in dev[0].request("MGMT_RX_PROCESS freq={} datarate={} ssi_signal={} frame={}".format(msg['freq'], msg['datarate'], msg['ssi_signal'], msg['frame'].encode('hex'))): raise Exception("MGMT_RX_PROCESS failed") ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Responder)") ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Initiator)") # DPP Configuration Response (GAS Initial Response frame) msg = dev[0].mgmt_rx() if "OK" not in dev[0].request("MGMT_RX_PROCESS freq={} datarate={} ssi_signal={} frame={}".format(msg['freq'], msg['datarate'], msg['ssi_signal'], msg['frame'].encode('hex'))): raise Exception("MGMT_RX_PROCESS failed") # GAS Comeback Response frame msg = dev[0].mgmt_rx() # Do not continue to force timeout on GAS server ev = dev[0].wait_event(["GAS-QUERY-DONE"], timeout=10) if ev is None: raise Exception("GAS result not reported (Enrollee)") if "result=TIMEOUT" not in ev: raise Exception("Unexpected GAS result (Enrollee): " + ev) dev[0].set("ext_mgmt_frame_handling", "0") ev = dev[1].wait_event(["DPP-CONF-FAILED"], timeout=15) if ev is None: raise Exception("DPP configuration failure not reported (Configurator)") ev = dev[0].wait_event(["DPP-CONF-FAILED"], timeout=1) if ev is None: raise Exception("DPP configuration failure not reported (Enrollee)") def test_dpp_akm_sha256(dev, apdev): """DPP AKM (SHA256)""" run_dpp_akm(dev, apdev, 32) def test_dpp_akm_sha384(dev, apdev): """DPP AKM (SHA384)""" run_dpp_akm(dev, apdev, 48) def test_dpp_akm_sha512(dev, apdev): """DPP AKM (SHA512)""" run_dpp_akm(dev, apdev, 64) def run_dpp_akm(dev, apdev, pmk_len): check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) params = { "ssid": "dpp", "wpa": "2", "wpa_key_mgmt": "DPP", "rsn_pairwise": "CCMP" } try: hapd = hostapd.add_ap(apdev[0], params) except: raise HwsimSkip("DPP not supported") id = dev[0].connect("dpp", key_mgmt="DPP", scan_freq="2412", wait_connect=False) ev = dev[0].wait_event(["CTRL-EVENT-NETWORK-NOT-FOUND"], timeout=2) if not ev: raise Exception("Network mismatch not reported") dev[0].request("DISCONNECT") dev[0].dump_monitor() bssid = hapd.own_addr() pmkid = 16*'11' akmp = 2**23 pmk = pmk_len*'22' cmd = "PMKSA_ADD %d %s %s %s 30240 43200 %d 0" % (id, bssid, pmkid, pmk, akmp) if "OK" not in dev[0].request(cmd): raise Exception("PMKSA_ADD failed (wpa_supplicant)") dev[0].select_network(id, freq="2412") ev = dev[0].wait_event(["CTRL-EVENT-ASSOC-REJECT"], timeout=2) dev[0].request("DISCONNECT") dev[0].dump_monitor() if not ev: raise Exception("Association attempt was not rejected") if "status_code=53" not in ev: raise Exception("Unexpected status code: " + ev) addr = dev[0].own_addr() cmd = "PMKSA_ADD %s %s %s 0 %d" % (addr, pmkid, pmk, akmp) if "OK" not in hapd.request(cmd): raise Exception("PMKSA_ADD failed (hostapd)") dev[0].select_network(id, freq="2412") dev[0].wait_connected() def test_dpp_network_introduction(dev, apdev): """DPP network introduction""" check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) csign = "3059301306072a8648ce3d020106082a8648ce3d03010703420004d02e5bd81a120762b5f0f2994777f5d40297238a6c294fd575cdf35fabec44c050a6421c401d98d659fd2ed13c961cc8287944dd3202f516977800d3ab2f39ee" ap_connector = "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJzOEFrYjg5bTV4UGhoYk5UbTVmVVo0eVBzNU5VMkdxYXNRY3hXUWhtQVFRIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6ImFwIn1dLCJuZXRBY2Nlc3NLZXkiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiIwOHF4TlNYRzRWemdCV3BjVUdNSmc1czNvbElOVFJsRVQ1aERpNkRKY3ZjIiwieSI6IlVhaGFYQXpKRVpRQk1YaHRUQnlZZVlrOWtJYjk5UDA3UV9NcW9TVVZTVEkifX0.a5_nfMVr7Qe1SW0ZL3u6oQRm5NUCYUSfixDAJOUFN3XUfECBZ6E8fm8xjeSfdOytgRidTz0CTlIRjzPQo82dmQ" ap_netaccesskey = "30770201010420f6531d17f29dfab655b7c9e923478d5a345164c489aadd44a3519c3e9dcc792da00a06082a8648ce3d030107a14403420004d3cab13525c6e15ce0056a5c506309839b37a2520d4d19444f98438ba0c972f751a85a5c0cc911940131786d4c1c9879893d9086fdf4fd3b43f32aa125154932" sta_connector = "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJzOEFrYjg5bTV4UGhoYk5UbTVmVVo0eVBzNU5VMkdxYXNRY3hXUWhtQVFRIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6InN0YSJ9XSwibmV0QWNjZXNzS2V5Ijp7Imt0eSI6IkVDIiwiY3J2IjoiUC0yNTYiLCJ4IjoiZWMzR3NqQ3lQMzVBUUZOQUJJdEltQnN4WXVyMGJZX1dES1lfSE9zUGdjNCIsInkiOiJTRS1HVllkdWVnTFhLMU1TQXZNMEx2QWdLREpTNWoyQVhCbE9PMTdUSTRBIn19.PDK9zsGlK-e1pEOmNxVeJfCS8pNeay6ckIS1TXCQsR64AR-9wFPCNVjqOxWvVKltehyMFqVAtOcv0IrjtMJFqQ" sta_netaccesskey = "30770201010420bc33380c26fd2168b69cd8242ed1df07ba89aa4813f8d4e8523de6ca3f8dd28ba00a06082a8648ce3d030107a1440342000479cdc6b230b23f7e40405340048b48981b3162eaf46d8fd60ca63f1ceb0f81ce484f8655876e7a02d72b531202f3342ef020283252e63d805c194e3b5ed32380" params = { "ssid": "dpp", "wpa": "2", "wpa_key_mgmt": "DPP", "rsn_pairwise": "CCMP", "dpp_connector": ap_connector, "dpp_csign": csign, "dpp_netaccesskey": ap_netaccesskey } try: hapd = hostapd.add_ap(apdev[0], params) except: raise HwsimSkip("DPP not supported") id = dev[0].connect("dpp", key_mgmt="DPP", scan_freq="2412", dpp_csign=csign, dpp_connector=sta_connector, dpp_netaccesskey=sta_netaccesskey) def test_dpp_ap_config(dev, apdev): """DPP and AP configuration""" run_dpp_ap_config(dev, apdev) def test_dpp_ap_config_p256_p256(dev, apdev): """DPP and AP configuration (P-256 + P-256)""" run_dpp_ap_config(dev, apdev, curve="P-256", conf_curve="P-256") def test_dpp_ap_config_p256_p384(dev, apdev): """DPP and AP configuration (P-256 + P-384)""" run_dpp_ap_config(dev, apdev, curve="P-256", conf_curve="P-384") def test_dpp_ap_config_p256_p521(dev, apdev): """DPP and AP configuration (P-256 + P-521)""" run_dpp_ap_config(dev, apdev, curve="P-256", conf_curve="P-521") def test_dpp_ap_config_p384_p256(dev, apdev): """DPP and AP configuration (P-384 + P-256)""" run_dpp_ap_config(dev, apdev, curve="P-384", conf_curve="P-256") def test_dpp_ap_config_p384_p384(dev, apdev): """DPP and AP configuration (P-384 + P-384)""" run_dpp_ap_config(dev, apdev, curve="P-384", conf_curve="P-384") def test_dpp_ap_config_p384_p521(dev, apdev): """DPP and AP configuration (P-384 + P-521)""" run_dpp_ap_config(dev, apdev, curve="P-384", conf_curve="P-521") def test_dpp_ap_config_p521_p256(dev, apdev): """DPP and AP configuration (P-521 + P-256)""" run_dpp_ap_config(dev, apdev, curve="P-521", conf_curve="P-256") def test_dpp_ap_config_p521_p384(dev, apdev): """DPP and AP configuration (P-521 + P-384)""" run_dpp_ap_config(dev, apdev, curve="P-521", conf_curve="P-384") def test_dpp_ap_config_p521_p521(dev, apdev): """DPP and AP configuration (P-521 + P-521)""" run_dpp_ap_config(dev, apdev, curve="P-521", conf_curve="P-521") def run_dpp_ap_config(dev, apdev, curve=None, conf_curve=None): check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured" }) check_dpp_capab(hapd) addr = hapd.own_addr().replace(':', '') cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr if curve: cmd += " curve=" + curve res = hapd.request(cmd) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id_h = int(res) uri = hapd.request("DPP_BOOTSTRAP_GET_URI %d" % id_h) cmd = "DPP_CONFIGURATOR_ADD expiry=%d" % (time.time() + 100000) if conf_curve: cmd += " curve=" + conf_curve res = dev[0].request(cmd); if "FAIL" in res: raise Exception("Failed to add configurator") conf_id = int(res) res = dev[0].request("DPP_QR_CODE " + uri) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id = int(res) cmd = "DPP_AUTH_INIT peer=%d conf=ap-dpp configurator=%d" % (id, conf_id) if "OK" not in dev[0].request(cmd): raise Exception("Failed to initiate DPP Authentication") ev = hapd.wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Responder)") ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Initiator)") ev = dev[0].wait_event(["DPP-CONF-SENT"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Configurator)") ev = hapd.wait_event(["DPP-CONF-RECEIVED", "DPP-CONF-FAILED"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Enrollee)") if "DPP-CONF-FAILED" in ev: raise Exception("DPP configuration failed") ev = hapd.wait_event(["DPP-CONFOBJ-SSID"], timeout=1) if ev is None: raise Exception("SSID not reported (AP)") ssid = ev.split(' ')[1] ev = hapd.wait_event(["DPP-CONNECTOR"], timeout=1) if ev is None: raise Exception("Connector not reported (AP)") connector = ev.split(' ')[1] ev = hapd.wait_event(["DPP-C-SIGN-KEY"], timeout=1) if ev is None: raise Exception("C-sign-key not reported (AP)") p = ev.split(' ') csign = p[1] csign_expiry = p[2] if len(p) > 2 else None ev = hapd.wait_event(["DPP-NET-ACCESS-KEY"], timeout=1) if ev is None: raise Exception("netAccessKey not reported (AP)") p = ev.split(' ') net_access_key = p[1] net_access_key_expiry = p[2] if len(p) > 2 else None logger.info("Update AP configuration to use key_mgmt=DPP") hapd.disable() hapd.set("ssid", ssid) hapd.set("wpa", "2") hapd.set("wpa_key_mgmt", "DPP") hapd.set("rsn_pairwise", "CCMP") hapd.set("dpp_connector", connector) hapd.set("dpp_csign", csign) if csign_expiry: hapd.set("dpp_csign_expiry", csign_expiry) hapd.set("dpp_netaccesskey", net_access_key) if net_access_key_expiry: hapd.set("dpp_netaccesskey_expiry", net_access_key_expiry) hapd.enable() addr = dev[1].own_addr().replace(':', '') cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr if curve: cmd += " curve=" + curve res = dev[1].request(cmd) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id1 = int(res) uri1 = dev[1].request("DPP_BOOTSTRAP_GET_URI %d" % id1) res = dev[0].request("DPP_QR_CODE " + uri1) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id0b = int(res) cmd = "DPP_LISTEN 2412" if "OK" not in dev[1].request(cmd): raise Exception("Failed to start listen operation") cmd = "DPP_AUTH_INIT peer=%d conf=sta-dpp configurator=%d" % (id0b, conf_id) if "OK" not in dev[0].request(cmd): raise Exception("Failed to initiate DPP Authentication") ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Responder)") ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Initiator)") ev = dev[0].wait_event(["DPP-CONF-SENT"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Configurator)") ev = dev[1].wait_event(["DPP-CONF-RECEIVED"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Enrollee)") dev[1].request("DPP_STOP_LISTEN") ev = dev[1].wait_event(["DPP-CONFOBJ-SSID"], timeout=1) if ev is None: raise Exception("SSID not reported") ssid = ev.split(' ')[1] ev = dev[1].wait_event(["DPP-CONNECTOR"], timeout=1) if ev is None: raise Exception("Connector not reported") connector = ev.split(' ')[1] ev = dev[1].wait_event(["DPP-C-SIGN-KEY"], timeout=1) if ev is None: raise Exception("C-sign-key not reported") p = ev.split(' ') csign = p[1] csign_expiry = p[2] if len(p) > 2 else None ev = dev[1].wait_event(["DPP-NET-ACCESS-KEY"], timeout=1) if ev is None: raise Exception("netAccessKey not reported") p = ev.split(' ') net_access_key = p[1] net_access_key_expiry = p[2] if len(p) > 2 else None dev[1].dump_monitor() id = dev[1].connect(ssid, key_mgmt="DPP", scan_freq="2412", only_add_network=True) dev[1].set_network_quoted(id, "dpp_connector", connector) dev[1].set_network(id, "dpp_csign", csign) if csign_expiry: dev[1].set_network(id, "dpp_csign_expiry", csign_expiry) dev[1].set_network(id, "dpp_netaccesskey", net_access_key) if net_access_key_expiry: dev[1].set_network(id, "dpp_netaccess_expiry", net_access_key_expiry) logger.info("Check data connection") dev[1].select_network(id, freq="2412") dev[1].wait_connected() def test_dpp_auto_connect_1(dev, apdev): """DPP and auto connect (1)""" try: run_dpp_auto_connect(dev, apdev, 1) finally: dev[0].set("dpp_config_processing", "0") def test_dpp_auto_connect_2(dev, apdev): """DPP and auto connect (2)""" try: run_dpp_auto_connect(dev, apdev, 2) finally: dev[0].set("dpp_config_processing", "0") def run_dpp_auto_connect(dev, apdev, processing): check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) csign = "30770201010420768240a3fc89d6662d9782f120527fe7fb9edc6366ab0b9c7dde96125cfd250fa00a06082a8648ce3d030107a144034200042908e1baf7bf413cc66f9e878a03e8bb1835ba94b033dbe3d6969fc8575d5eb5dfda1cb81c95cee21d0cd7d92ba30541ffa05cb6296f5dd808b0c1c2a83c0708" csign_pub = "3059301306072a8648ce3d020106082a8648ce3d030107034200042908e1baf7bf413cc66f9e878a03e8bb1835ba94b033dbe3d6969fc8575d5eb5dfda1cb81c95cee21d0cd7d92ba30541ffa05cb6296f5dd808b0c1c2a83c0708" ap_connector = "eyJ0eXAiOiJkcHBDb24iLCJraWQiOiJwYWtZbXVzd1dCdWpSYTl5OEsweDViaTVrT3VNT3dzZHRlaml2UG55ZHZzIiwiYWxnIjoiRVMyNTYifQ.eyJncm91cHMiOlt7Imdyb3VwSWQiOiIqIiwibmV0Um9sZSI6ImFwIn1dLCJuZXRBY2Nlc3NLZXkiOnsia3R5IjoiRUMiLCJjcnYiOiJQLTI1NiIsIngiOiIybU5vNXZuRkI5bEw3d1VWb1hJbGVPYzBNSEE1QXZKbnpwZXZULVVTYzVNIiwieSI6IlhzS3dqVHJlLTg5WWdpU3pKaG9CN1haeUttTU05OTl3V2ZaSVl0bi01Q3MifX0.XhjFpZgcSa7G2lHy0OCYTvaZFRo5Hyx6b7g7oYyusLC7C_73AJ4_BxEZQVYJXAtDuGvb3dXSkHEKxREP9Q6Qeg" ap_netaccesskey = "30770201010420ceba752db2ad5200fa7bc565b9c05c69b7eb006751b0b329b0279de1c19ca67ca00a06082a8648ce3d030107a14403420004da6368e6f9c507d94bef0515a1722578e73430703902f267ce97af4fe51273935ec2b08d3adefbcf588224b3261a01ed76722a630cf7df7059f64862d9fee42b" params = { "ssid": "test", "wpa": "2", "wpa_key_mgmt": "DPP", "rsn_pairwise": "CCMP", "dpp_connector": ap_connector, "dpp_csign": csign_pub, "dpp_netaccesskey": ap_netaccesskey } try: hapd = hostapd.add_ap(apdev[0], params) except: raise HwsimSkip("DPP not supported") cmd = "DPP_CONFIGURATOR_ADD key=" + csign res = dev[1].request(cmd) if "FAIL" in res: raise Exception("DPP_CONFIGURATOR_ADD failed") conf_id = int(res) dev[0].set("dpp_config_processing", str(processing)) addr = dev[0].own_addr().replace(':', '') cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr res = dev[0].request(cmd) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id0 = int(res) uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0) res = dev[1].request("DPP_QR_CODE " + uri0) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id1 = int(res) cmd = "DPP_LISTEN 2412" if "OK" not in dev[0].request(cmd): raise Exception("Failed to start listen operation") cmd = "DPP_AUTH_INIT peer=%d conf=sta-dpp configurator=%d" % (id1, conf_id) if "OK" not in dev[1].request(cmd): raise Exception("Failed to initiate DPP Authentication") ev = dev[1].wait_event(["DPP-CONF-SENT"], timeout=10) if ev is None: raise Exception("DPP configuration not completed (Configurator)") ev = dev[0].wait_event(["DPP-CONF-RECEIVED"], timeout=2) if ev is None: raise Exception("DPP configuration not completed (Enrollee)") ev = dev[0].wait_event(["DPP-NETWORK-ID"], timeout=1) if ev is None: raise Exception("DPP network profile not generated") id = ev.split(' ')[1] if processing == 1: dev[0].select_network(id, freq=2412) dev[0].wait_connected() def test_dpp_auto_connect_legacy(dev, apdev): """DPP and auto connect (legacy)""" try: run_dpp_auto_connect_legacy(dev, apdev) finally: dev[0].set("dpp_config_processing", "0") def run_dpp_auto_connect_legacy(dev, apdev): check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) params = hostapd.wpa2_params(ssid="dpp-legacy", passphrase="secret passphrase") hapd = hostapd.add_ap(apdev[0], params) dev[0].set("dpp_config_processing", "2") addr = dev[0].own_addr().replace(':', '') cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr res = dev[0].request(cmd) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id0 = int(res) uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0) res = dev[1].request("DPP_QR_CODE " + uri0) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id1 = int(res) cmd = "DPP_LISTEN 2412" if "OK" not in dev[0].request(cmd): raise Exception("Failed to start listen operation") cmd = "DPP_AUTH_INIT peer=%d conf=sta-psk ssid=%s pass=%s" % (id1, "dpp-legacy".encode("hex"), "secret passphrase".encode("hex")) if "OK" not in dev[1].request(cmd): raise Exception("Failed to initiate DPP Authentication") ev = dev[1].wait_event(["DPP-CONF-SENT"], timeout=10) if ev is None: raise Exception("DPP configuration not completed (Configurator)") ev = dev[0].wait_event(["DPP-CONF-RECEIVED"], timeout=2) if ev is None: raise Exception("DPP configuration not completed (Enrollee)") ev = dev[0].wait_event(["DPP-NETWORK-ID"], timeout=1) if ev is None: raise Exception("DPP network profile not generated") id = ev.split(' ')[1] dev[0].wait_connected() def test_dpp_qr_code_auth_responder_configurator(dev, apdev): """DPP QR Code and responder as the configurator""" check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) cmd = "DPP_CONFIGURATOR_ADD" res = dev[0].request(cmd); if "FAIL" in res: raise Exception("Failed to add configurator") conf_id = int(res) addr = dev[0].own_addr().replace(':', '') cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr res = dev[0].request(cmd) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id0 = int(res) uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0) res = dev[1].request("DPP_QR_CODE " + uri0) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id1 = int(res) dev[0].set("dpp_configurator_params", " conf=sta-dpp configurator=%d" % conf_id); cmd = "DPP_LISTEN 2412 role=configurator" if "OK" not in dev[0].request(cmd): raise Exception("Failed to start listen operation") cmd = "DPP_AUTH_INIT peer=%d role=enrollee" % id1 if "OK" not in dev[1].request(cmd): raise Exception("Failed to initiate DPP Authentication") ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Responder)") ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Initiator)") ev = dev[0].wait_event(["DPP-CONF-SENT"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Configurator)") ev = dev[1].wait_event(["DPP-CONF-RECEIVED"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Enrollee)") dev[0].request("DPP_STOP_LISTEN") dev[0].dump_monitor() dev[1].dump_monitor() def test_dpp_qr_code_hostapd_init(dev, apdev): """DPP QR Code and hostapd as initiator""" check_dpp_capab(dev[0]) hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured", "channel": "6" }) check_dpp_capab(hapd) cmd = "DPP_CONFIGURATOR_ADD" res = dev[0].request(cmd); if "FAIL" in res: raise Exception("Failed to add configurator") conf_id = int(res) addr = dev[0].own_addr().replace(':', '') cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/6 mac=" + addr res = dev[0].request(cmd) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id0 = int(res) uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0) dev[0].set("dpp_configurator_params", " conf=ap-dpp configurator=%d" % conf_id); cmd = "DPP_LISTEN 2437 role=configurator" if "OK" not in dev[0].request(cmd): raise Exception("Failed to start listen operation") res = hapd.request("DPP_QR_CODE " + uri0) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id1 = int(res) cmd = "DPP_AUTH_INIT peer=%d role=enrollee" % id1 if "OK" not in hapd.request(cmd): raise Exception("Failed to initiate DPP Authentication") ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Responder)") ev = hapd.wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Initiator)") ev = dev[0].wait_event(["DPP-CONF-SENT"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Configurator)") ev = hapd.wait_event(["DPP-CONF-RECEIVED"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Enrollee)") dev[0].request("DPP_STOP_LISTEN") dev[0].dump_monitor() def test_dpp_pkex(dev, apdev): """DPP and PKEX""" run_dpp_pkex(dev, apdev) def test_dpp_pkex_p256(dev, apdev): """DPP and PKEX (P-256)""" run_dpp_pkex(dev, apdev, "P-256") def test_dpp_pkex_p384(dev, apdev): """DPP and PKEX (P-384)""" run_dpp_pkex(dev, apdev, "P-384") def test_dpp_pkex_p521(dev, apdev): """DPP and PKEX (P-521)""" run_dpp_pkex(dev, apdev, "P-521") def test_dpp_pkex_bp256(dev, apdev): """DPP and PKEX (BP-256)""" run_dpp_pkex(dev, apdev, "brainpoolP256r1") def test_dpp_pkex_bp384(dev, apdev): """DPP and PKEX (BP-384)""" run_dpp_pkex(dev, apdev, "brainpoolP384r1") def test_dpp_pkex_bp512(dev, apdev): """DPP and PKEX (BP-512)""" run_dpp_pkex(dev, apdev, "brainpoolP512r1") def test_dpp_pkex_config(dev, apdev): """DPP and PKEX with initiator as the configurator""" cmd = "DPP_CONFIGURATOR_ADD" res = dev[1].request(cmd); if "FAIL" in res: raise Exception("Failed to add configurator") conf_id = int(res) run_dpp_pkex(dev, apdev, init_extra="conf=sta-dpp configurator=%d" % (conf_id), check_config=True) def run_dpp_pkex(dev, apdev, curve=None, init_extra="", check_config=False): check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) cmd = "DPP_BOOTSTRAP_GEN type=pkex" if curve: cmd += " curve=" + curve res = dev[0].request(cmd) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id0 = int(res) cmd = "DPP_BOOTSTRAP_GEN type=pkex" if curve: cmd += " curve=" + curve res = dev[1].request(cmd) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id1 = int(res) cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id0) res = dev[0].request(cmd) if "FAIL" in res: raise Exception("Failed to set PKEX data (responder)") cmd = "DPP_LISTEN 2437" if "OK" not in dev[0].request(cmd): raise Exception("Failed to start listen operation") cmd = "DPP_PKEX_ADD own=%d identifier=test init=1 %s code=secret" % (id1, init_extra) res = dev[1].request(cmd) if "FAIL" in res: raise Exception("Failed to set PKEX data (initiator)") ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Initiator)") ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Responder)") if check_config: ev = dev[1].wait_event(["DPP-CONF-SENT"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Configurator)") ev = dev[0].wait_event(["DPP-CONF-RECEIVED"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Enrollee)") def test_dpp_pkex_config2(dev, apdev): """DPP and PKEX with responder as the configurator""" cmd = "DPP_CONFIGURATOR_ADD" res = dev[0].request(cmd); if "FAIL" in res: raise Exception("Failed to add configurator") conf_id = int(res) dev[0].set("dpp_configurator_params", " conf=sta-dpp configurator=%d" % conf_id); run_dpp_pkex2(dev, apdev) def run_dpp_pkex2(dev, apdev, curve=None, init_extra=""): check_dpp_capab(dev[0]) check_dpp_capab(dev[1]) cmd = "DPP_BOOTSTRAP_GEN type=pkex" if curve: cmd += " curve=" + curve res = dev[0].request(cmd) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id0 = int(res) cmd = "DPP_BOOTSTRAP_GEN type=pkex" if curve: cmd += " curve=" + curve res = dev[1].request(cmd) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id1 = int(res) cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id0) res = dev[0].request(cmd) if "FAIL" in res: raise Exception("Failed to set PKEX data (responder)") cmd = "DPP_LISTEN 2437 role=configurator" if "OK" not in dev[0].request(cmd): raise Exception("Failed to start listen operation") cmd = "DPP_PKEX_ADD own=%d identifier=test init=1 role=enrollee %s code=secret" % (id1, init_extra) res = dev[1].request(cmd) if "FAIL" in res: raise Exception("Failed to set PKEX data (initiator)") ev = dev[1].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Initiator)") ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Responder)") ev = dev[0].wait_event(["DPP-CONF-SENT"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Configurator)") ev = dev[1].wait_event(["DPP-CONF-RECEIVED"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Enrollee)") def test_dpp_pkex_hostapd_responder(dev, apdev): """DPP PKEX with hostapd as responder""" check_dpp_capab(dev[0]) hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured", "channel": "6" }) check_dpp_capab(hapd) cmd = "DPP_BOOTSTRAP_GEN type=pkex" res = hapd.request(cmd) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info (hostapd)") id_h = int(res) cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id_h) res = hapd.request(cmd) if "FAIL" in res: raise Exception("Failed to set PKEX data (responder/hostapd)") cmd = "DPP_CONFIGURATOR_ADD" res = dev[0].request(cmd); if "FAIL" in res: raise Exception("Failed to add configurator") conf_id = int(res) cmd = "DPP_BOOTSTRAP_GEN type=pkex" res = dev[0].request(cmd) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info (wpa_supplicant)") id0 = int(res) cmd = "DPP_PKEX_ADD own=%d identifier=test init=1 conf=ap-dpp configurator=%d code=secret" % (id0, conf_id) res = dev[0].request(cmd) if "FAIL" in res: raise Exception("Failed to set PKEX data (initiator/wpa_supplicant)") ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Initiator)") ev = hapd.wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Responder)") ev = dev[0].wait_event(["DPP-CONF-SENT"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Configurator)") ev = hapd.wait_event(["DPP-CONF-RECEIVED"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Enrollee)") dev[0].request("DPP_STOP_LISTEN") dev[0].dump_monitor() def test_dpp_pkex_hostapd_initiator(dev, apdev): """DPP PKEX with hostapd as initiator""" check_dpp_capab(dev[0]) hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured", "channel": "6" }) check_dpp_capab(hapd) cmd = "DPP_CONFIGURATOR_ADD" res = dev[0].request(cmd); if "FAIL" in res: raise Exception("Failed to add configurator") conf_id = int(res) cmd = "DPP_BOOTSTRAP_GEN type=pkex" res = dev[0].request(cmd) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info (wpa_supplicant)") id0 = int(res) dev[0].set("dpp_configurator_params", " conf=ap-dpp configurator=%d" % conf_id); cmd = "DPP_PKEX_ADD own=%d identifier=test code=secret" % (id0) res = dev[0].request(cmd) if "FAIL" in res: raise Exception("Failed to set PKEX data (responder/wpa_supplicant)") cmd = "DPP_LISTEN 2437 role=configurator" if "OK" not in dev[0].request(cmd): raise Exception("Failed to start listen operation") cmd = "DPP_BOOTSTRAP_GEN type=pkex" res = hapd.request(cmd) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info (hostapd)") id_h = int(res) cmd = "DPP_PKEX_ADD own=%d identifier=test init=1 role=enrollee code=secret" % (id_h) res = hapd.request(cmd) if "FAIL" in res: raise Exception("Failed to set PKEX data (initiator/hostapd)") ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Initiator)") ev = hapd.wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Responder)") ev = dev[0].wait_event(["DPP-CONF-SENT"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Configurator)") ev = hapd.wait_event(["DPP-CONF-RECEIVED"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Enrollee)") dev[0].request("DPP_STOP_LISTEN") dev[0].dump_monitor() def test_dpp_hostapd_configurator(dev, apdev): """DPP with hostapd as configurator/initiator""" check_dpp_capab(dev[0]) hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured", "channel": "1" }) check_dpp_capab(hapd) cmd = "DPP_CONFIGURATOR_ADD" res = hapd.request(cmd); if "FAIL" in res: raise Exception("Failed to add configurator") conf_id = int(res) addr = dev[0].own_addr().replace(':', '') cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr res = dev[0].request(cmd) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id0 = int(res) uri0 = dev[0].request("DPP_BOOTSTRAP_GET_URI %d" % id0) res = hapd.request("DPP_QR_CODE " + uri0) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id1 = int(res) cmd = "DPP_LISTEN 2412" if "OK" not in dev[0].request(cmd): raise Exception("Failed to start listen operation") cmd = "DPP_AUTH_INIT peer=%d configurator=%d conf=sta-dpp" % (id1, conf_id) if "OK" not in hapd.request(cmd): raise Exception("Failed to initiate DPP Authentication") ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Responder)") ev = hapd.wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Initiator)") ev = hapd.wait_event(["DPP-CONF-SENT"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Configurator)") ev = dev[0].wait_event(["DPP-CONF-RECEIVED"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Enrollee)") dev[0].request("DPP_STOP_LISTEN") dev[0].dump_monitor() def test_dpp_hostapd_configurator_responder(dev, apdev): """DPP with hostapd as configurator/responder""" check_dpp_capab(dev[0]) hapd = hostapd.add_ap(apdev[0], { "ssid": "unconfigured", "channel": "1" }) check_dpp_capab(hapd) cmd = "DPP_CONFIGURATOR_ADD" res = hapd.request(cmd); if "FAIL" in res: raise Exception("Failed to add configurator") conf_id = int(res) hapd.set("dpp_configurator_params", " conf=sta-dpp configurator=%d" % conf_id); addr = hapd.own_addr().replace(':', '') cmd = "DPP_BOOTSTRAP_GEN type=qrcode chan=81/1 mac=" + addr res = hapd.request(cmd) if "FAIL" in res: raise Exception("Failed to generate bootstrapping info") id0 = int(res) uri0 = hapd.request("DPP_BOOTSTRAP_GET_URI %d" % id0) res = dev[0].request("DPP_QR_CODE " + uri0) if "FAIL" in res: raise Exception("Failed to parse QR Code URI") id1 = int(res) cmd = "DPP_AUTH_INIT peer=%d role=enrollee" % (id1) if "OK" not in dev[0].request(cmd): raise Exception("Failed to initiate DPP Authentication") ev = hapd.wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Responder)") ev = dev[0].wait_event(["DPP-AUTH-SUCCESS"], timeout=5) if ev is None: raise Exception("DPP authentication did not succeed (Initiator)") ev = hapd.wait_event(["DPP-CONF-SENT"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Configurator)") ev = dev[0].wait_event(["DPP-CONF-RECEIVED"], timeout=5) if ev is None: raise Exception("DPP configuration not completed (Enrollee)") dev[0].request("DPP_STOP_LISTEN") dev[0].dump_monitor()