| # -*- coding: utf-8 -*- |
| # TNC tests |
| # Copyright (c) 2014-2015, Jouni Malinen <j@w1.fi> |
| # |
| # This software may be distributed under the terms of the BSD license. |
| # See README for more details. |
| |
| import os.path |
| |
| import hostapd |
| from utils import HwsimSkip |
| from test_ap_eap import int_eap_server_params, check_eap_capa |
| |
| def test_tnc_peap_soh(dev, apdev): |
| """TNC PEAP-SoH""" |
| params = int_eap_server_params() |
| params["tnc"] = "1" |
| hostapd.add_ap(apdev[0]['ifname'], params) |
| |
| dev[0].connect("test-wpa2-eap", key_mgmt="WPA-EAP", |
| eap="PEAP", identity="user", password="password", |
| ca_cert="auth_serv/ca.pem", |
| phase1="peapver=0 tnc=soh cryptobinding=0", |
| phase2="auth=MSCHAPV2", |
| wait_connect=False) |
| dev[0].wait_connected(timeout=10) |
| |
| dev[1].connect("test-wpa2-eap", key_mgmt="WPA-EAP", |
| eap="PEAP", identity="user", password="password", |
| ca_cert="auth_serv/ca.pem", |
| phase1="peapver=0 tnc=soh1 cryptobinding=1", |
| phase2="auth=MSCHAPV2", |
| wait_connect=False) |
| dev[1].wait_connected(timeout=10) |
| |
| dev[2].connect("test-wpa2-eap", key_mgmt="WPA-EAP", |
| eap="PEAP", identity="user", password="password", |
| ca_cert="auth_serv/ca.pem", |
| phase1="peapver=0 tnc=soh2 cryptobinding=2", |
| phase2="auth=MSCHAPV2", |
| wait_connect=False) |
| dev[2].wait_connected(timeout=10) |
| |
| def test_tnc_ttls(dev, apdev): |
| """TNC TTLS""" |
| check_eap_capa(dev[0], "MSCHAPV2") |
| params = int_eap_server_params() |
| params["tnc"] = "1" |
| hostapd.add_ap(apdev[0]['ifname'], params) |
| |
| if not os.path.exists("tnc/libhostap_imc.so"): |
| raise HwsimSkip("No IMC installed") |
| |
| dev[0].connect("test-wpa2-eap", key_mgmt="WPA-EAP", |
| eap="TTLS", identity="DOMAIN\mschapv2 user", |
| anonymous_identity="ttls", password="password", |
| phase2="auth=MSCHAPV2", |
| ca_cert="auth_serv/ca.pem", |
| wait_connect=False) |
| dev[0].wait_connected(timeout=10) |
| |
| def test_tnc_ttls_fragmentation(dev, apdev): |
| """TNC TTLS with fragmentation""" |
| check_eap_capa(dev[0], "MSCHAPV2") |
| params = int_eap_server_params() |
| params["tnc"] = "1" |
| params["fragment_size"] = "150" |
| hostapd.add_ap(apdev[0]['ifname'], params) |
| |
| if not os.path.exists("tnc/libhostap_imc.so"): |
| raise HwsimSkip("No IMC installed") |
| |
| dev[0].connect("test-wpa2-eap", key_mgmt="WPA-EAP", |
| eap="TTLS", identity="DOMAIN\mschapv2 user", |
| anonymous_identity="ttls", password="password", |
| phase2="auth=MSCHAPV2", |
| ca_cert="auth_serv/ca.pem", |
| fragment_size="150", |
| wait_connect=False) |
| dev[0].wait_connected(timeout=10) |
| |
| def test_tnc_fast(dev, apdev): |
| """TNC FAST""" |
| check_eap_capa(dev[0], "FAST") |
| params = int_eap_server_params() |
| params["tnc"] = "1" |
| params["pac_opaque_encr_key"] ="000102030405060708090a0b0c0d0e00" |
| params["eap_fast_a_id"] = "101112131415161718191a1b1c1d1e00" |
| params["eap_fast_a_id_info"] = "test server2" |
| |
| hostapd.add_ap(apdev[0]['ifname'], params) |
| |
| if not os.path.exists("tnc/libhostap_imc.so"): |
| raise HwsimSkip("No IMC installed") |
| |
| dev[0].connect("test-wpa2-eap", key_mgmt="WPA-EAP", |
| eap="FAST", identity="user", |
| anonymous_identity="FAST", password="password", |
| phase2="auth=GTC", |
| phase1="fast_provisioning=2", |
| pac_file="blob://fast_pac_auth_tnc", |
| ca_cert="auth_serv/ca.pem", |
| wait_connect=False) |
| dev[0].wait_connected(timeout=10) |
