3b51cc6359
Check wpa_supplicant EAP capability and skip EAP-pwd and EAP-FAST test cases if the build did not include support for these. This is cleaner than reporting failures for such test cases when the selected TLS library does not support the EAP method. Signed-off-by: Jouni Malinen <j@w1.fi>
84 lines
3 KiB
Python
84 lines
3 KiB
Python
# -*- coding: utf-8 -*-
|
|
# TNC tests
|
|
# Copyright (c) 2014, Jouni Malinen <j@w1.fi>
|
|
#
|
|
# This software may be distributed under the terms of the BSD license.
|
|
# See README for more details.
|
|
|
|
import os.path
|
|
|
|
import hostapd
|
|
from utils import HwsimSkip
|
|
from test_ap_eap import int_eap_server_params, check_eap_capa
|
|
|
|
def test_tnc_peap_soh(dev, apdev):
|
|
"""TNC PEAP-SoH"""
|
|
params = int_eap_server_params()
|
|
params["tnc"] = "1"
|
|
hostapd.add_ap(apdev[0]['ifname'], params)
|
|
|
|
dev[0].connect("test-wpa2-eap", key_mgmt="WPA-EAP",
|
|
eap="PEAP", identity="user", password="password",
|
|
ca_cert="auth_serv/ca.pem",
|
|
phase1="peapver=0 tnc=soh cryptobinding=0",
|
|
phase2="auth=MSCHAPV2",
|
|
wait_connect=False)
|
|
dev[0].wait_connected(timeout=10)
|
|
|
|
dev[1].connect("test-wpa2-eap", key_mgmt="WPA-EAP",
|
|
eap="PEAP", identity="user", password="password",
|
|
ca_cert="auth_serv/ca.pem",
|
|
phase1="peapver=0 tnc=soh1 cryptobinding=1",
|
|
phase2="auth=MSCHAPV2",
|
|
wait_connect=False)
|
|
dev[1].wait_connected(timeout=10)
|
|
|
|
dev[2].connect("test-wpa2-eap", key_mgmt="WPA-EAP",
|
|
eap="PEAP", identity="user", password="password",
|
|
ca_cert="auth_serv/ca.pem",
|
|
phase1="peapver=0 tnc=soh2 cryptobinding=2",
|
|
phase2="auth=MSCHAPV2",
|
|
wait_connect=False)
|
|
dev[2].wait_connected(timeout=10)
|
|
|
|
def test_tnc_ttls(dev, apdev):
|
|
"""TNC TTLS"""
|
|
params = int_eap_server_params()
|
|
params["tnc"] = "1"
|
|
hostapd.add_ap(apdev[0]['ifname'], params)
|
|
|
|
if not os.path.exists("tnc/libhostap_imc.so"):
|
|
raise HwsimSkip("No IMC installed")
|
|
|
|
dev[0].connect("test-wpa2-eap", key_mgmt="WPA-EAP",
|
|
eap="TTLS", identity="DOMAIN\mschapv2 user",
|
|
anonymous_identity="ttls", password="password",
|
|
phase2="auth=MSCHAPV2",
|
|
ca_cert="auth_serv/ca.pem",
|
|
wait_connect=False)
|
|
dev[0].wait_connected(timeout=10)
|
|
|
|
def test_tnc_fast(dev, apdev):
|
|
"""TNC FAST"""
|
|
check_eap_capa(dev[0], "FAST")
|
|
params = int_eap_server_params()
|
|
params["tnc"] = "1"
|
|
params["pac_opaque_encr_key"] ="000102030405060708090a0b0c0d0e00"
|
|
params["eap_fast_a_id"] = "101112131415161718191a1b1c1d1e00"
|
|
params["eap_fast_a_id_info"] = "test server2"
|
|
|
|
hostapd.add_ap(apdev[0]['ifname'], params)
|
|
|
|
if not os.path.exists("tnc/libhostap_imc.so"):
|
|
raise HwsimSkip("No IMC installed")
|
|
|
|
dev[0].connect("test-wpa2-eap", key_mgmt="WPA-EAP",
|
|
eap="FAST", identity="user",
|
|
anonymous_identity="FAST", password="password",
|
|
phase2="auth=GTC",
|
|
phase1="fast_provisioning=2",
|
|
pac_file="blob://fast_pac_auth_tnc",
|
|
ca_cert="auth_serv/ca.pem",
|
|
wait_connect=False)
|
|
dev[0].wait_connected(timeout=10)
|