Re: [EXTERNAL] DPP Pixel Enrollee

Thanks for replying Jacob.

Still no luck.

hostapd_cli input/output:

>dpp_configurator_add
>1
>SET dpp_configurator_params "conf=sta-psk ssid=73736964 pass=70617373776f7264"
>OK
>dpp_bootstrap_gen type=qrcode
>1
>dpp_bootstrap_get_uri 1
>DPP:K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgAD8m3J1hebDWcWOWoKbKdO/Gs5bYJRy/+kPyjoNzNxRnc=;;

<3>DPP-RX src=16:21:d5:c6:e2:e1 freq=2412 type=0
<3>DPP-TX dst=16:21:d5:c6:e2:e1 freq=2412 type=1
<3>DPP-TX-STATUS dst=16:21:d5:c6:e2:e1 result=SUCCESS
<3>DPP-RX src=16:21:d5:c6:e2:e1 freq=2412 type=2
<3>DPP-AUTH-SUCCESS init=0
<3>DPP-CONF-REQ-RX src=16:21:d5:c6:e2:e1
<3>DPP-CONF-SENT

ssid is set to 'test' = 73736964
pass is set to 'demodemo' = 70617373776f7264


Hostapd DPP logs:

DPP: Authentication success - clear temporary keys
DPP: Authentication succeeded
wlan1: DPP-AUTH-SUCCESS init=0
DPP: Configuration Request
DPP: GAS request from 16:21:d5:c6:e2:e1
DPP: Received Configuration Request (GAS Query Request) -
hexdump(len=96): [REMOVED]
wlan1: DPP-CONF-REQ-RX src=16:21:d5:c6:e2:e1
DPP: AES-SIV ciphertext - hexdump(len=92): [REMOVED]
DPP: AES-SIV cleartext - hexdump(len=76): [REMOVED]
DPP: Enrollee Nonce - hexdump(len=16): e9 1b 26 23 c6 af a6 81 03 1c
a7 72 f1 7f 58 e7
DPP: Config Attributes - hexdump_ascii(len=52):
DPP: Enrollee name = 'Test'
DPP: wi-fi_tech = 'infra'
DPP: netRole = 'sta'
DPP: No configuration available for Enrollee(sta) - reject configuration request
DPP: Status 5
DPP: AES-SIV cleartext - hexdump(len=20): 14 10 10 00 e9 1b 26 23 c6
af a6 81 03 1c a7 72 f1 7f 58 e7
DPP: AES-SIV ciphertext - hexdump(len=36): b1 0b 85 ff db 99 7e c0 bf
84 b9 df 81 42 93 c2 99 36 bd 2d 42 6d 58 34 24 12 ea 58 9c 24 16 98
75 88 55 b5
DPP: Configuration Response attributes - hexdump(len=45): 00 10 01 00
05 04 10 24 00 b1 0b 85 ff db 99 7e c0 bf 84 b9 df 81 42 93 c2 99 36
bd 2d 42 6d 58
34 24 12 ea 58 9c 24 16 98 75 88 55 b5
DPP: GAS Initial response (no comeback)
DPP: Configuration exchange completed (ok=1)
wlan1: DPP-CONF-SENT

Hostapd is still rejecting the configuration request.

I've tried on hostapd version 2.8-devel and 2.9

Updated hostapd.conf:

interface=wlan1
driver=nl80211
ctrl_interface=/var/run/hostapd
ssid=test
channel=1
wpa=2
wpa_key_mgmt=DPP WPA-PSK
wpa_passphrase=demodemo
#ieee80211w=1
wpa_pairwise=CCMP
rsn_pairwise=CCMP


Can you elaborate on what you are testing with? Any other suggestions?

Thanks,

Wystan

On Thu, Feb 20, 2020 at 1:12 PM Gladish, Jacob
<[email protected]> wrote:
>
> Wystan,
>
> We've been using the following procedure for testing:
>
> sudo  hostapd_cli dpp_configurator_add
> sudo  hostapd_cli SET dpp_configurator_params "conf=sta-psk ssid=73736964 pass=70617373776f7264"
> sudo  hostapd_cli dpp_bootstrap_gen type=qrcode mac=00:c0:ca:97:64:ce chan=81/1 key=<key>
> sudo  hostapd_cli dpp_bootstrap_get_uri 1
> sudo  hostapd_cli dpp_listen 2412
>
> Then scan QR code or feed DPP_URI into your app on Pixel.
>
> Make sure you're setting the dpp_configurator params. The ssid and pass arguments are the asci values encoded as hex digits.
>
>  "ssid" as hex digits == 73736964
>  "password" as hex digits == 70617373776f7264
>
>
>
> -----Original Message-----
> From: Hostap <[email protected]> On Behalf Of Wystan Schmidt
> Sent: Wednesday, February 19, 2020 6:18 PM
> To: [email protected]
> Subject: [EXTERNAL] DPP Pixel Enrollee
>
> Hi,
>
> I'm trying to use DPP to onboard a Pixel using a Raspberry Pi 3b+.
>
> DPP bootstrapping and authentication succeed, but I'm having trouble setting a configuration for the Pixel enrollee. Hostapd is rejecting the configuration request.
>
> DPP Logs:
>
> DPP: Authentication Confirmation from <PIXEL_MAC>
> DPP: Wrapped data - hexdump(len=52): c0 70 b3 e2 ec dc 35 14 f6 8a 26
> 90 8d 1f 23 51 51 22 7f 8a bf 2e 31 0c 57 2a 7e 79 8d ca ee 9a 04 87
> 98 62 1b 4d 34 53 ed 9a be d2 7a 89 9f c0 68 6d b0 58
> DPP: Responder Bootstrapping Key Hash - hexdump(len=32): 4d d0 1d 2d
> 69 f3 79 f5 1f 04 ba 77 37 86 85 3c 7c f5 f7 99 0c 39 15 5a 1a 62 0c cd ab 0a 6f 90
> DPP: Status 0
> DPP: AES-SIV ciphertext - hexdump(len=52): c0 70 b3 e2 ec dc 35 14 f6 8a 26 90 8d 1f 23 51 51 22 7f 8a bf 2e 31 0c 57 2a 7e 79 8d ca ee 9a
> 04 87 98 62 1b 4d 34 53 ed 9a be d2 7a 89 9f c0 68 6d b0 58
> DPP: AES-SIV cleartext - hexdump(len=36): 0a 10 20 00 f4 04 32 52 89 bf 79 19 14 0c f6 a2 08 f3 2e ef 82 d6 0f 04 ec 0d cf e3 a3 1d 66 76 ea 5a 82 71
> DPP: Received Initiator Authenticating Tag - hexdump(len=32): f4 04 32
> 52 89 bf 79 19 14 0c f6 a2 08 f3 2e ef 82 d6 0f 04 ec 0d cf e3 a3 1d
> 66 76 ea 5a 82 71
> DPP: I-auth hash components
> DPP: hash component - hexdump(len=16): 4c a4 a8 f2 27 f9 06 38 b3 e0
> f3 5f 98 b3 18 6d
> DPP: hash component - hexdump(len=16): 21 fc 07 b8 48 c3 9c 68 e5 b5 bc e5 1a e7 bd c3
> DPP: hash component - hexdump(len=32): 6e fd 0d b1 14 f2 35 b4 06 4f
> a1 c9 06 4c d8 5c 4c 05 86 ea 99 27 2d df 50 df e8 91 c0 1a 5b a4
> DPP: hash component - hexdump(len=32): e7 37 ed ee 09 95 7e a6 68 bf 3e 9a 63 bd 7b 12 a4 8e 05 dc 80 cf 90 dd db 91 85 09 58 5f df 76
> DPP: hash component - hexdump(len=32): a5 62 05 03 de 8d ae d1 63 7f
> e3 47 5c 1e 93 19 2e a6 55 7f 18 4f 8e c0 55 62 da de 67 06 e7 52
> DPP: hash component - hexdump(len=1): 01
> DPP: I-auth - hexdump(len=32): f4 04 32 52 89 bf 79 19 14 0c f6 a2 08
> f3 2e ef 82 d6 0f 04 ec 0d cf e3 a3 1d 66 76 ea 5a 82 71
> DPP: Calculated Initiator Authenticating Tag - hexdump(len=32): f4 04
> 32 52 89 bf 79 19 14 0c f6 a2 08 f3 2e ef 82 d6 0f 04 ec 0d cf e3 a3 1d 66 76 ea 5a 82 71
> DPP: Authentication success - clear temporary keys
> DPP: Authentication succeeded
> wlan1: DPP-AUTH-SUCCESS init=0
> DPP: Configuration Request
> DPP: GAS request from <PIXEL_MAC>
> DPP: Received Configuration Request (GAS Query Request) -
> hexdump(len=96): <Removed>
> wlan1: DPP-CONF-REQ-RX src=<PIXEL_MAC>
> DPP: AES-SIV ciphertext - hexdump(len=92): <Removed>
> DPP: AES-SIV cleartext - hexdump(len=76): <Removed>
> DPP: Enrollee Nonce - hexdump(len=16): 1a 26 2a f3 b0 9f 66 f5 56 26 cf 55 1d 91 84 cf
> DPP: Config Attributes - hexdump_ascii(len=52):
> DPP: Enrollee name = 'Test'
> DPP: wi-fi_tech = 'infra'
> DPP: netRole = 'sta'
> DPP: No configuration available for Enrollee(sta) - reject configuration request
> DPP: Status 5
> DPP: AES-SIV cleartext - hexdump(len=20): 14 10 10 00 1a 26 2a f3 b0 9f 66 f5 56 26 cf 55 1d 91 84 cf
> DPP: AES-SIV ciphertext - hexdump(len=36): 06 18 6e 13 d9 e8 34 90 0b
> 41 5f a0 99 6a c1 a8 70 12 28 6d 34 00 37 21 01 bb 1c 9f 39 f2 eb 68
> e6 ac 7a df
> DPP: Configuration Response attributes - hexdump(len=45): 00 10 01 00
> 05 04 10 24 00 06 18 6e 13 d9 e8 34 90 0b 41 5f a0 99 6a c1 a8 70 12
> 28 6d 34 00 37 21 01 bb 1c 9f 39 f2 eb 68 e6 ac 7a df
> DPP: GAS Initial response (no comeback)
> wlan1: DPP-CONF-SENT
>
> Specifically this line is the problem: DPP: No configuration available for Enrollee(sta) - reject configuration request
>
> I'm using version: 2.8-devel.
>
> hostapd.conf:
>
> interface=wlan1
> driver=nl80211
> ctrl_interface=/var/run/hostapd
> ssid=test
> channel=1
> wpa=2
> wpa_key_mgmt=DPP
> #ieee80211w=1
> wpa_pairwise=CCMP
> rsn_pairwise=CCMP
>
>
> Any help would be appreciated. Is it currently possible to onboard a Pixel this way?
>
> Thanks,
>
> Wystan
>
> _______________________________________________
> Hostap mailing list
> [email protected]
> https://urldefense.com/v3/__http://lists.infradead.org/mailman/listinfo/hostap__;!!CQl3mcHX2A!QS0YlHA5_Vr0nU4jt1PWm7q85k2_4OBbTWDD59YyOv7Y7hdoQ5bngNuZhtZRItZD2C06xRM$