RE: [EXTERNAL] DPP Pixel Enrollee

Wystan,

We've been using the following procedure for testing:

sudo  hostapd_cli dpp_configurator_add
sudo  hostapd_cli SET dpp_configurator_params "conf=sta-psk ssid=73736964 pass=70617373776f7264"
sudo  hostapd_cli dpp_bootstrap_gen type=qrcode mac=00:c0:ca:97:64:ce chan=81/1 key=<key>
sudo  hostapd_cli dpp_bootstrap_get_uri 1
sudo  hostapd_cli dpp_listen 2412

Then scan QR code or feed DPP_URI into your app on Pixel.

Make sure you're setting the dpp_configurator params. The ssid and pass arguments are the asci values encoded as hex digits.

 "ssid" as hex digits == 73736964
 "password" as hex digits == 70617373776f7264



-----Original Message-----
From: Hostap <[email protected]> On Behalf Of Wystan Schmidt
Sent: Wednesday, February 19, 2020 6:18 PM
To: [email protected]
Subject: [EXTERNAL] DPP Pixel Enrollee

Hi,

I'm trying to use DPP to onboard a Pixel using a Raspberry Pi 3b+.

DPP bootstrapping and authentication succeed, but I'm having trouble setting a configuration for the Pixel enrollee. Hostapd is rejecting the configuration request.

DPP Logs:

DPP: Authentication Confirmation from <PIXEL_MAC>
DPP: Wrapped data - hexdump(len=52): c0 70 b3 e2 ec dc 35 14 f6 8a 26
90 8d 1f 23 51 51 22 7f 8a bf 2e 31 0c 57 2a 7e 79 8d ca ee 9a 04 87
98 62 1b 4d 34 53 ed 9a be d2 7a 89 9f c0 68 6d b0 58
DPP: Responder Bootstrapping Key Hash - hexdump(len=32): 4d d0 1d 2d
69 f3 79 f5 1f 04 ba 77 37 86 85 3c 7c f5 f7 99 0c 39 15 5a 1a 62 0c cd ab 0a 6f 90
DPP: Status 0
DPP: AES-SIV ciphertext - hexdump(len=52): c0 70 b3 e2 ec dc 35 14 f6 8a 26 90 8d 1f 23 51 51 22 7f 8a bf 2e 31 0c 57 2a 7e 79 8d ca ee 9a
04 87 98 62 1b 4d 34 53 ed 9a be d2 7a 89 9f c0 68 6d b0 58
DPP: AES-SIV cleartext - hexdump(len=36): 0a 10 20 00 f4 04 32 52 89 bf 79 19 14 0c f6 a2 08 f3 2e ef 82 d6 0f 04 ec 0d cf e3 a3 1d 66 76 ea 5a 82 71
DPP: Received Initiator Authenticating Tag - hexdump(len=32): f4 04 32
52 89 bf 79 19 14 0c f6 a2 08 f3 2e ef 82 d6 0f 04 ec 0d cf e3 a3 1d
66 76 ea 5a 82 71
DPP: I-auth hash components
DPP: hash component - hexdump(len=16): 4c a4 a8 f2 27 f9 06 38 b3 e0
f3 5f 98 b3 18 6d
DPP: hash component - hexdump(len=16): 21 fc 07 b8 48 c3 9c 68 e5 b5 bc e5 1a e7 bd c3
DPP: hash component - hexdump(len=32): 6e fd 0d b1 14 f2 35 b4 06 4f
a1 c9 06 4c d8 5c 4c 05 86 ea 99 27 2d df 50 df e8 91 c0 1a 5b a4
DPP: hash component - hexdump(len=32): e7 37 ed ee 09 95 7e a6 68 bf 3e 9a 63 bd 7b 12 a4 8e 05 dc 80 cf 90 dd db 91 85 09 58 5f df 76
DPP: hash component - hexdump(len=32): a5 62 05 03 de 8d ae d1 63 7f
e3 47 5c 1e 93 19 2e a6 55 7f 18 4f 8e c0 55 62 da de 67 06 e7 52
DPP: hash component - hexdump(len=1): 01
DPP: I-auth - hexdump(len=32): f4 04 32 52 89 bf 79 19 14 0c f6 a2 08
f3 2e ef 82 d6 0f 04 ec 0d cf e3 a3 1d 66 76 ea 5a 82 71
DPP: Calculated Initiator Authenticating Tag - hexdump(len=32): f4 04
32 52 89 bf 79 19 14 0c f6 a2 08 f3 2e ef 82 d6 0f 04 ec 0d cf e3 a3 1d 66 76 ea 5a 82 71
DPP: Authentication success - clear temporary keys
DPP: Authentication succeeded
wlan1: DPP-AUTH-SUCCESS init=0
DPP: Configuration Request
DPP: GAS request from <PIXEL_MAC>
DPP: Received Configuration Request (GAS Query Request) -
hexdump(len=96): <Removed>
wlan1: DPP-CONF-REQ-RX src=<PIXEL_MAC>
DPP: AES-SIV ciphertext - hexdump(len=92): <Removed>
DPP: AES-SIV cleartext - hexdump(len=76): <Removed>
DPP: Enrollee Nonce - hexdump(len=16): 1a 26 2a f3 b0 9f 66 f5 56 26 cf 55 1d 91 84 cf
DPP: Config Attributes - hexdump_ascii(len=52):
DPP: Enrollee name = 'Test'
DPP: wi-fi_tech = 'infra'
DPP: netRole = 'sta'
DPP: No configuration available for Enrollee(sta) - reject configuration request
DPP: Status 5
DPP: AES-SIV cleartext - hexdump(len=20): 14 10 10 00 1a 26 2a f3 b0 9f 66 f5 56 26 cf 55 1d 91 84 cf
DPP: AES-SIV ciphertext - hexdump(len=36): 06 18 6e 13 d9 e8 34 90 0b
41 5f a0 99 6a c1 a8 70 12 28 6d 34 00 37 21 01 bb 1c 9f 39 f2 eb 68
e6 ac 7a df
DPP: Configuration Response attributes - hexdump(len=45): 00 10 01 00
05 04 10 24 00 06 18 6e 13 d9 e8 34 90 0b 41 5f a0 99 6a c1 a8 70 12
28 6d 34 00 37 21 01 bb 1c 9f 39 f2 eb 68 e6 ac 7a df
DPP: GAS Initial response (no comeback)
wlan1: DPP-CONF-SENT

Specifically this line is the problem: DPP: No configuration available for Enrollee(sta) - reject configuration request

I'm using version: 2.8-devel.

hostapd.conf:

interface=wlan1
driver=nl80211
ctrl_interface=/var/run/hostapd
ssid=test
channel=1
wpa=2
wpa_key_mgmt=DPP
#ieee80211w=1
wpa_pairwise=CCMP
rsn_pairwise=CCMP


Any help would be appreciated. Is it currently possible to onboard a Pixel this way?

Thanks,

Wystan

_______________________________________________
Hostap mailing list
[email protected]
https://urldefense.com/v3/__http://lists.infradead.org/mailman/listinfo/hostap__;!!CQl3mcHX2A!QS0YlHA5_Vr0nU4jt1PWm7q85k2_4OBbTWDD59YyOv7Y7hdoQ5bngNuZhtZRItZD2C06xRM$