1 /* 2 * WPA Supplicant - Glue code to setup EAPOL and RSN modules 3 * Copyright (c) 2003-2008, Jouni Malinen <j (at) w1.fi> 4 * 5 * This software may be distributed under the terms of the BSD license. 6 * See README for more details. 7 */ 8 9 #include "includes.h" 10 11 #include "common.h" 12 #include "eapol_supp/eapol_supp_sm.h" 13 #include "rsn_supp/wpa.h" 14 #include "eloop.h" 15 #include "config.h" 16 #include "l2_packet/l2_packet.h" 17 #include "common/wpa_common.h" 18 #include "wpa_supplicant_i.h" 19 #include "driver_i.h" 20 #include "rsn_supp/pmksa_cache.h" 21 #include "sme.h" 22 #include "common/ieee802_11_defs.h" 23 #include "common/wpa_ctrl.h" 24 #include "wpas_glue.h" 25 #include "wps_supplicant.h" 26 #include "bss.h" 27 #include "scan.h" 28 #include "notify.h" 29 30 31 #ifndef CONFIG_NO_CONFIG_BLOBS 32 #if defined(IEEE8021X_EAPOL) || !defined(CONFIG_NO_WPA) 33 static void wpa_supplicant_set_config_blob(void *ctx, 34 struct wpa_config_blob *blob) 35 { 36 struct wpa_supplicant *wpa_s = ctx; 37 wpa_config_set_blob(wpa_s->conf, blob); 38 if (wpa_s->conf->update_config) { 39 int ret = wpa_config_write(wpa_s->confname, wpa_s->conf); 40 if (ret) { 41 wpa_printf(MSG_DEBUG, "Failed to update config after " 42 "blob set"); 43 } 44 } 45 } 46 47 48 static const struct wpa_config_blob * 49 wpa_supplicant_get_config_blob(void *ctx, const char *name) 50 { 51 struct wpa_supplicant *wpa_s = ctx; 52 return wpa_config_get_blob(wpa_s->conf, name); 53 } 54 #endif /* defined(IEEE8021X_EAPOL) || !defined(CONFIG_NO_WPA) */ 55 #endif /* CONFIG_NO_CONFIG_BLOBS */ 56 57 58 #if defined(IEEE8021X_EAPOL) || !defined(CONFIG_NO_WPA) 59 static u8 * wpa_alloc_eapol(const struct wpa_supplicant *wpa_s, u8 type, 60 const void *data, u16 data_len, 61 size_t *msg_len, void **data_pos) 62 { 63 struct ieee802_1x_hdr *hdr; 64 65 *msg_len = sizeof(*hdr) + data_len; 66 hdr = os_malloc(*msg_len); 67 if (hdr == NULL) 68 return NULL; 69 70 hdr->version = wpa_s->conf->eapol_version; 71 hdr->type = type; 72 hdr->length = host_to_be16(data_len); 73 74 if (data) 75 os_memcpy(hdr + 1, data, data_len); 76 else 77 os_memset(hdr + 1, 0, data_len); 78 79 if (data_pos) 80 *data_pos = hdr + 1; 81 82 return (u8 *) hdr; 83 } 84 85 86 /** 87 * wpa_ether_send - Send Ethernet frame 88 * @wpa_s: Pointer to wpa_supplicant data 89 * @dest: Destination MAC address 90 * @proto: Ethertype in host byte order 91 * @buf: Frame payload starting from IEEE 802.1X header 92 * @len: Frame payload length 93 * Returns: >=0 on success, <0 on failure 94 */ 95 static int wpa_ether_send(struct wpa_supplicant *wpa_s, const u8 *dest, 96 u16 proto, const u8 *buf, size_t len) 97 { 98 if (wpa_s->l2) { 99 return l2_packet_send(wpa_s->l2, dest, proto, buf, len); 100 } 101 102 return wpa_drv_send_eapol(wpa_s, dest, proto, buf, len); 103 } 104 #endif /* IEEE8021X_EAPOL || !CONFIG_NO_WPA */ 105 106 107 #ifdef IEEE8021X_EAPOL 108 109 /** 110 * wpa_supplicant_eapol_send - Send IEEE 802.1X EAPOL packet to Authenticator 111 * @ctx: Pointer to wpa_supplicant data (wpa_s) 112 * @type: IEEE 802.1X packet type (IEEE802_1X_TYPE_*) 113 * @buf: EAPOL payload (after IEEE 802.1X header) 114 * @len: EAPOL payload length 115 * Returns: >=0 on success, <0 on failure 116 * 117 * This function adds Ethernet and IEEE 802.1X header and sends the EAPOL frame 118 * to the current Authenticator. 119 */ 120 static int wpa_supplicant_eapol_send(void *ctx, int type, const u8 *buf, 121 size_t len) 122 { 123 struct wpa_supplicant *wpa_s = ctx; 124 u8 *msg, *dst, bssid[ETH_ALEN]; 125 size_t msglen; 126 int res; 127 128 /* TODO: could add l2_packet_sendmsg that allows fragments to avoid 129 * extra copy here */ 130 131 if (wpa_key_mgmt_wpa_psk(wpa_s->key_mgmt) || 132 wpa_s->key_mgmt == WPA_KEY_MGMT_NONE) { 133 /* Current SSID is not using IEEE 802.1X/EAP, so drop possible 134 * EAPOL frames (mainly, EAPOL-Start) from EAPOL state 135 * machines. */ 136 wpa_printf(MSG_DEBUG, "WPA: drop TX EAPOL in non-IEEE 802.1X " 137 "mode (type=%d len=%lu)", type, 138 (unsigned long) len); 139 return -1; 140 } 141 142 if (pmksa_cache_get_current(wpa_s->wpa) && 143 type == IEEE802_1X_TYPE_EAPOL_START) { 144 /* Trying to use PMKSA caching - do not send EAPOL-Start frames 145 * since they will trigger full EAPOL authentication. */ 146 wpa_printf(MSG_DEBUG, "RSN: PMKSA caching - do not send " 147 "EAPOL-Start"); 148 return -1; 149 } 150 151 if (is_zero_ether_addr(wpa_s->bssid)) { 152 wpa_printf(MSG_DEBUG, "BSSID not set when trying to send an " 153 "EAPOL frame"); 154 if (wpa_drv_get_bssid(wpa_s, bssid) == 0 && 155 !is_zero_ether_addr(bssid)) { 156 dst = bssid; 157 wpa_printf(MSG_DEBUG, "Using current BSSID " MACSTR 158 " from the driver as the EAPOL destination", 159 MAC2STR(dst)); 160 } else { 161 dst = wpa_s->last_eapol_src; 162 wpa_printf(MSG_DEBUG, "Using the source address of the" 163 " last received EAPOL frame " MACSTR " as " 164 "the EAPOL destination", 165 MAC2STR(dst)); 166 } 167 } else { 168 /* BSSID was already set (from (Re)Assoc event, so use it as 169 * the EAPOL destination. */ 170 dst = wpa_s->bssid; 171 } 172 173 msg = wpa_alloc_eapol(wpa_s, type, buf, len, &msglen, NULL); 174 if (msg == NULL) 175 return -1; 176 177 wpa_printf(MSG_DEBUG, "TX EAPOL: dst=" MACSTR, MAC2STR(dst)); 178 wpa_hexdump(MSG_MSGDUMP, "TX EAPOL", msg, msglen); 179 res = wpa_ether_send(wpa_s, dst, ETH_P_EAPOL, msg, msglen); 180 os_free(msg); 181 return res; 182 } 183 184 185 /** 186 * wpa_eapol_set_wep_key - set WEP key for the driver 187 * @ctx: Pointer to wpa_supplicant data (wpa_s) 188 * @unicast: 1 = individual unicast key, 0 = broadcast key 189 * @keyidx: WEP key index (0..3) 190 * @key: Pointer to key data 191 * @keylen: Key length in bytes 192 * Returns: 0 on success or < 0 on error. 193 */ 194 static int wpa_eapol_set_wep_key(void *ctx, int unicast, int keyidx, 195 const u8 *key, size_t keylen) 196 { 197 struct wpa_supplicant *wpa_s = ctx; 198 if (wpa_s->key_mgmt == WPA_KEY_MGMT_IEEE8021X_NO_WPA) { 199 int cipher = (keylen == 5) ? WPA_CIPHER_WEP40 : 200 WPA_CIPHER_WEP104; 201 if (unicast) 202 wpa_s->pairwise_cipher = cipher; 203 else 204 wpa_s->group_cipher = cipher; 205 } 206 return wpa_drv_set_key(wpa_s, WPA_ALG_WEP, 207 unicast ? wpa_s->bssid : NULL, 208 keyidx, unicast, NULL, 0, key, keylen); 209 } 210 211 212 static void wpa_supplicant_aborted_cached(void *ctx) 213 { 214 struct wpa_supplicant *wpa_s = ctx; 215 wpa_sm_aborted_cached(wpa_s->wpa); 216 } 217 218 219 static void wpa_supplicant_eapol_cb(struct eapol_sm *eapol, int success, 220 void *ctx) 221 { 222 struct wpa_supplicant *wpa_s = ctx; 223 int res, pmk_len; 224 u8 pmk[PMK_LEN]; 225 226 wpa_printf(MSG_DEBUG, "EAPOL authentication completed %ssuccessfully", 227 success ? "" : "un"); 228 229 if (wpas_wps_eapol_cb(wpa_s) > 0) 230 return; 231 232 if (!success) { 233 /* 234 * Make sure we do not get stuck here waiting for long EAPOL 235 * timeout if the AP does not disconnect in case of 236 * authentication failure. 237 */ 238 wpa_supplicant_req_auth_timeout(wpa_s, 2, 0); 239 } 240 241 if (!success || !(wpa_s->drv_flags & WPA_DRIVER_FLAGS_4WAY_HANDSHAKE)) 242 return; 243 244 if (!wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt)) 245 return; 246 247 wpa_printf(MSG_DEBUG, "Configure PMK for driver-based RSN 4-way " 248 "handshake"); 249 250 pmk_len = PMK_LEN; 251 if (wpa_key_mgmt_ft(wpa_s->key_mgmt)) { 252 #ifdef CONFIG_IEEE80211R 253 u8 buf[2 * PMK_LEN]; 254 wpa_printf(MSG_DEBUG, "RSN: Use FT XXKey as PMK for " 255 "driver-based 4-way hs and FT"); 256 res = eapol_sm_get_key(eapol, buf, 2 * PMK_LEN); 257 if (res == 0) { 258 os_memcpy(pmk, buf + PMK_LEN, PMK_LEN); 259 os_memset(buf, 0, sizeof(buf)); 260 } 261 #else /* CONFIG_IEEE80211R */ 262 res = -1; 263 #endif /* CONFIG_IEEE80211R */ 264 } else { 265 res = eapol_sm_get_key(eapol, pmk, PMK_LEN); 266 if (res) { 267 /* 268 * EAP-LEAP is an exception from other EAP methods: it 269 * uses only 16-byte PMK. 270 */ 271 res = eapol_sm_get_key(eapol, pmk, 16); 272 pmk_len = 16; 273 } 274 } 275 276 if (res) { 277 wpa_printf(MSG_DEBUG, "Failed to get PMK from EAPOL state " 278 "machines"); 279 return; 280 } 281 282 wpa_hexdump_key(MSG_DEBUG, "RSN: Configure PMK for driver-based 4-way " 283 "handshake", pmk, pmk_len); 284 285 if (wpa_drv_set_key(wpa_s, WPA_ALG_PMK, NULL, 0, 0, NULL, 0, pmk, 286 pmk_len)) { 287 wpa_printf(MSG_DEBUG, "Failed to set PMK to the driver"); 288 } 289 290 wpa_supplicant_cancel_scan(wpa_s); 291 wpa_supplicant_cancel_auth_timeout(wpa_s); 292 wpa_supplicant_set_state(wpa_s, WPA_COMPLETED); 293 294 } 295 296 297 static void wpa_supplicant_notify_eapol_done(void *ctx) 298 { 299 struct wpa_supplicant *wpa_s = ctx; 300 wpa_msg(wpa_s, MSG_DEBUG, "WPA: EAPOL processing complete"); 301 if (wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt)) { 302 wpa_supplicant_set_state(wpa_s, WPA_4WAY_HANDSHAKE); 303 } else { 304 wpa_supplicant_cancel_auth_timeout(wpa_s); 305 wpa_supplicant_set_state(wpa_s, WPA_COMPLETED); 306 } 307 } 308 309 #endif /* IEEE8021X_EAPOL */ 310 311 312 #ifndef CONFIG_NO_WPA 313 314 static int wpa_get_beacon_ie(struct wpa_supplicant *wpa_s) 315 { 316 int ret = 0; 317 struct wpa_bss *curr = NULL, *bss; 318 struct wpa_ssid *ssid = wpa_s->current_ssid; 319 const u8 *ie; 320 321 dl_list_for_each(bss, &wpa_s->bss, struct wpa_bss, list) { 322 if (os_memcmp(bss->bssid, wpa_s->bssid, ETH_ALEN) != 0) 323 continue; 324 if (ssid == NULL || 325 ((bss->ssid_len == ssid->ssid_len && 326 os_memcmp(bss->ssid, ssid->ssid, ssid->ssid_len) == 0) || 327 ssid->ssid_len == 0)) { 328 curr = bss; 329 break; 330 } 331 } 332 333 if (curr) { 334 ie = wpa_bss_get_vendor_ie(curr, WPA_IE_VENDOR_TYPE); 335 if (wpa_sm_set_ap_wpa_ie(wpa_s->wpa, ie, ie ? 2 + ie[1] : 0)) 336 ret = -1; 337 338 ie = wpa_bss_get_ie(curr, WLAN_EID_RSN); 339 if (wpa_sm_set_ap_rsn_ie(wpa_s->wpa, ie, ie ? 2 + ie[1] : 0)) 340 ret = -1; 341 } else { 342 ret = -1; 343 } 344 345 return ret; 346 } 347 348 349 static int wpa_supplicant_get_beacon_ie(void *ctx) 350 { 351 struct wpa_supplicant *wpa_s = ctx; 352 if (wpa_get_beacon_ie(wpa_s) == 0) { 353 return 0; 354 } 355 356 /* No WPA/RSN IE found in the cached scan results. Try to get updated 357 * scan results from the driver. */ 358 if (wpa_supplicant_update_scan_results(wpa_s) < 0) 359 return -1; 360 361 return wpa_get_beacon_ie(wpa_s); 362 } 363 364 365 static u8 * _wpa_alloc_eapol(void *wpa_s, u8 type, 366 const void *data, u16 data_len, 367 size_t *msg_len, void **data_pos) 368 { 369 return wpa_alloc_eapol(wpa_s, type, data, data_len, msg_len, data_pos); 370 } 371 372 373 static int _wpa_ether_send(void *wpa_s, const u8 *dest, u16 proto, 374 const u8 *buf, size_t len) 375 { 376 return wpa_ether_send(wpa_s, dest, proto, buf, len); 377 } 378 379 380 static void _wpa_supplicant_cancel_auth_timeout(void *wpa_s) 381 { 382 wpa_supplicant_cancel_auth_timeout(wpa_s); 383 } 384 385 386 static void _wpa_supplicant_set_state(void *wpa_s, enum wpa_states state) 387 { 388 wpa_supplicant_set_state(wpa_s, state); 389 } 390 391 392 /** 393 * wpa_supplicant_get_state - Get the connection state 394 * @wpa_s: Pointer to wpa_supplicant data 395 * Returns: The current connection state (WPA_*) 396 */ 397 static enum wpa_states wpa_supplicant_get_state(struct wpa_supplicant *wpa_s) 398 { 399 return wpa_s->wpa_state; 400 } 401 402 403 static enum wpa_states _wpa_supplicant_get_state(void *wpa_s) 404 { 405 return wpa_supplicant_get_state(wpa_s); 406 } 407 408 409 static void _wpa_supplicant_disassociate(void *wpa_s, int reason_code) 410 { 411 wpa_supplicant_disassociate(wpa_s, reason_code); 412 /* Schedule a scan to make sure we continue looking for networks */ 413 wpa_supplicant_req_scan(wpa_s, 5, 0); 414 } 415 416 417 static void _wpa_supplicant_deauthenticate(void *wpa_s, int reason_code) 418 { 419 wpa_supplicant_deauthenticate(wpa_s, reason_code); 420 /* Schedule a scan to make sure we continue looking for networks */ 421 wpa_supplicant_req_scan(wpa_s, 5, 0); 422 } 423 424 425 static void * wpa_supplicant_get_network_ctx(void *wpa_s) 426 { 427 return wpa_supplicant_get_ssid(wpa_s); 428 } 429 430 431 static int wpa_supplicant_get_bssid(void *ctx, u8 *bssid) 432 { 433 struct wpa_supplicant *wpa_s = ctx; 434 return wpa_drv_get_bssid(wpa_s, bssid); 435 } 436 437 438 static int wpa_supplicant_set_key(void *_wpa_s, enum wpa_alg alg, 439 const u8 *addr, int key_idx, int set_tx, 440 const u8 *seq, size_t seq_len, 441 const u8 *key, size_t key_len) 442 { 443 struct wpa_supplicant *wpa_s = _wpa_s; 444 if (alg == WPA_ALG_TKIP && key_idx == 0 && key_len == 32) { 445 /* Clear the MIC error counter when setting a new PTK. */ 446 wpa_s->mic_errors_seen = 0; 447 } 448 return wpa_drv_set_key(wpa_s, alg, addr, key_idx, set_tx, seq, seq_len, 449 key, key_len); 450 } 451 452 453 static int wpa_supplicant_mlme_setprotection(void *wpa_s, const u8 *addr, 454 int protection_type, 455 int key_type) 456 { 457 return wpa_drv_mlme_setprotection(wpa_s, addr, protection_type, 458 key_type); 459 } 460 461 462 static int wpa_supplicant_add_pmkid(void *wpa_s, 463 const u8 *bssid, const u8 *pmkid) 464 { 465 return wpa_drv_add_pmkid(wpa_s, bssid, pmkid); 466 } 467 468 469 static int wpa_supplicant_remove_pmkid(void *wpa_s, 470 const u8 *bssid, const u8 *pmkid) 471 { 472 return wpa_drv_remove_pmkid(wpa_s, bssid, pmkid); 473 } 474 475 476 #ifdef CONFIG_IEEE80211R 477 static int wpa_supplicant_update_ft_ies(void *ctx, const u8 *md, 478 const u8 *ies, size_t ies_len) 479 { 480 struct wpa_supplicant *wpa_s = ctx; 481 if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_SME) 482 return sme_update_ft_ies(wpa_s, md, ies, ies_len); 483 return wpa_drv_update_ft_ies(wpa_s, md, ies, ies_len); 484 } 485 486 487 static int wpa_supplicant_send_ft_action(void *ctx, u8 action, 488 const u8 *target_ap, 489 const u8 *ies, size_t ies_len) 490 { 491 struct wpa_supplicant *wpa_s = ctx; 492 return wpa_drv_send_ft_action(wpa_s, action, target_ap, ies, ies_len); 493 } 494 495 496 static int wpa_supplicant_mark_authenticated(void *ctx, const u8 *target_ap) 497 { 498 struct wpa_supplicant *wpa_s = ctx; 499 struct wpa_driver_auth_params params; 500 struct wpa_bss *bss; 501 502 bss = wpa_bss_get_bssid(wpa_s, target_ap); 503 if (bss == NULL) 504 return -1; 505 506 os_memset(¶ms, 0, sizeof(params)); 507 params.bssid = target_ap; 508 params.freq = bss->freq; 509 params.ssid = bss->ssid; 510 params.ssid_len = bss->ssid_len; 511 params.auth_alg = WPA_AUTH_ALG_FT; 512 params.local_state_change = 1; 513 return wpa_drv_authenticate(wpa_s, ¶ms); 514 } 515 #endif /* CONFIG_IEEE80211R */ 516 517 #endif /* CONFIG_NO_WPA */ 518 519 520 #ifdef CONFIG_TDLS 521 522 static int wpa_supplicant_tdls_get_capa(void *ctx, int *tdls_supported, 523 int *tdls_ext_setup) 524 { 525 struct wpa_supplicant *wpa_s = ctx; 526 527 *tdls_supported = 0; 528 *tdls_ext_setup = 0; 529 530 if (!wpa_s->drv_capa_known) 531 return -1; 532 533 if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_TDLS_SUPPORT) 534 *tdls_supported = 1; 535 536 if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_TDLS_EXTERNAL_SETUP) 537 *tdls_ext_setup = 1; 538 539 return 0; 540 } 541 542 543 static int wpa_supplicant_send_tdls_mgmt(void *ctx, const u8 *dst, 544 u8 action_code, u8 dialog_token, 545 u16 status_code, const u8 *buf, 546 size_t len) 547 { 548 struct wpa_supplicant *wpa_s = ctx; 549 return wpa_drv_send_tdls_mgmt(wpa_s, dst, action_code, dialog_token, 550 status_code, buf, len); 551 } 552 553 554 static int wpa_supplicant_tdls_oper(void *ctx, int oper, const u8 *peer) 555 { 556 struct wpa_supplicant *wpa_s = ctx; 557 return wpa_drv_tdls_oper(wpa_s, oper, peer); 558 } 559 560 561 static int wpa_supplicant_tdls_peer_addset( 562 void *ctx, const u8 *peer, int add, u16 capability, 563 const u8 *supp_rates, size_t supp_rates_len) 564 { 565 struct wpa_supplicant *wpa_s = ctx; 566 struct hostapd_sta_add_params params; 567 568 params.addr = peer; 569 params.aid = 1; 570 params.capability = capability; 571 params.flags = WPA_STA_TDLS_PEER | WPA_STA_AUTHORIZED; 572 params.ht_capabilities = NULL; 573 params.listen_interval = 0; 574 params.supp_rates = supp_rates; 575 params.supp_rates_len = supp_rates_len; 576 params.set = !add; 577 578 return wpa_drv_sta_add(wpa_s, ¶ms); 579 } 580 581 #endif /* CONFIG_TDLS */ 582 583 584 enum wpa_ctrl_req_type wpa_supplicant_ctrl_req_from_string(const char *field) 585 { 586 if (os_strcmp(field, "IDENTITY") == 0) 587 return WPA_CTRL_REQ_EAP_IDENTITY; 588 else if (os_strcmp(field, "PASSWORD") == 0) 589 return WPA_CTRL_REQ_EAP_PASSWORD; 590 else if (os_strcmp(field, "NEW_PASSWORD") == 0) 591 return WPA_CTRL_REQ_EAP_NEW_PASSWORD; 592 else if (os_strcmp(field, "PIN") == 0) 593 return WPA_CTRL_REQ_EAP_PIN; 594 else if (os_strcmp(field, "OTP") == 0) 595 return WPA_CTRL_REQ_EAP_OTP; 596 else if (os_strcmp(field, "PASSPHRASE") == 0) 597 return WPA_CTRL_REQ_EAP_PASSPHRASE; 598 return WPA_CTRL_REQ_UNKNOWN; 599 } 600 601 602 const char * wpa_supplicant_ctrl_req_to_string(enum wpa_ctrl_req_type field, 603 const char *default_txt, 604 const char **txt) 605 { 606 const char *ret = NULL; 607 608 *txt = default_txt; 609 610 switch (field) { 611 case WPA_CTRL_REQ_EAP_IDENTITY: 612 *txt = "Identity"; 613 ret = "IDENTITY"; 614 break; 615 case WPA_CTRL_REQ_EAP_PASSWORD: 616 *txt = "Password"; 617 ret = "PASSWORD"; 618 break; 619 case WPA_CTRL_REQ_EAP_NEW_PASSWORD: 620 *txt = "New Password"; 621 ret = "NEW_PASSWORD"; 622 break; 623 case WPA_CTRL_REQ_EAP_PIN: 624 *txt = "PIN"; 625 ret = "PIN"; 626 break; 627 case WPA_CTRL_REQ_EAP_OTP: 628 ret = "OTP"; 629 break; 630 case WPA_CTRL_REQ_EAP_PASSPHRASE: 631 *txt = "Private key passphrase"; 632 ret = "PASSPHRASE"; 633 break; 634 default: 635 break; 636 } 637 638 /* txt needs to be something */ 639 if (*txt == NULL) { 640 wpa_printf(MSG_WARNING, "No message for request %d", field); 641 ret = NULL; 642 } 643 644 return ret; 645 } 646 647 #ifdef IEEE8021X_EAPOL 648 #if defined(CONFIG_CTRL_IFACE) || !defined(CONFIG_NO_STDOUT_DEBUG) 649 static void wpa_supplicant_eap_param_needed(void *ctx, 650 enum wpa_ctrl_req_type field, 651 const char *default_txt) 652 { 653 struct wpa_supplicant *wpa_s = ctx; 654 struct wpa_ssid *ssid = wpa_s->current_ssid; 655 const char *field_name, *txt = NULL; 656 char *buf; 657 size_t buflen; 658 int len; 659 660 if (ssid == NULL) 661 return; 662 663 wpas_notify_network_request(wpa_s, ssid, field, default_txt); 664 665 field_name = wpa_supplicant_ctrl_req_to_string(field, default_txt, 666 &txt); 667 if (field_name == NULL) { 668 wpa_printf(MSG_WARNING, "Unhandled EAP param %d needed", 669 field); 670 return; 671 } 672 673 buflen = 100 + os_strlen(txt) + ssid->ssid_len; 674 buf = os_malloc(buflen); 675 if (buf == NULL) 676 return; 677 len = os_snprintf(buf, buflen, 678 WPA_CTRL_REQ "%s-%d:%s needed for SSID ", 679 field_name, ssid->id, txt); 680 if (len < 0 || (size_t) len >= buflen) { 681 os_free(buf); 682 return; 683 } 684 if (ssid->ssid && buflen > len + ssid->ssid_len) { 685 os_memcpy(buf + len, ssid->ssid, ssid->ssid_len); 686 len += ssid->ssid_len; 687 buf[len] = '\0'; 688 } 689 buf[buflen - 1] = '\0'; 690 wpa_msg(wpa_s, MSG_INFO, "%s", buf); 691 os_free(buf); 692 } 693 #else /* CONFIG_CTRL_IFACE || !CONFIG_NO_STDOUT_DEBUG */ 694 #define wpa_supplicant_eap_param_needed NULL 695 #endif /* CONFIG_CTRL_IFACE || !CONFIG_NO_STDOUT_DEBUG */ 696 697 698 static void wpa_supplicant_port_cb(void *ctx, int authorized) 699 { 700 struct wpa_supplicant *wpa_s = ctx; 701 #ifdef CONFIG_AP 702 if (wpa_s->ap_iface) { 703 wpa_printf(MSG_DEBUG, "AP mode active - skip EAPOL Supplicant " 704 "port status: %s", 705 authorized ? "Authorized" : "Unauthorized"); 706 return; 707 } 708 #endif /* CONFIG_AP */ 709 wpa_printf(MSG_DEBUG, "EAPOL: Supplicant port status: %s", 710 authorized ? "Authorized" : "Unauthorized"); 711 wpa_drv_set_supp_port(wpa_s, authorized); 712 } 713 714 715 static void wpa_supplicant_cert_cb(void *ctx, int depth, const char *subject, 716 const char *cert_hash, 717 const struct wpabuf *cert) 718 { 719 struct wpa_supplicant *wpa_s = ctx; 720 721 wpas_notify_certification(wpa_s, depth, subject, cert_hash, cert); 722 } 723 #endif /* IEEE8021X_EAPOL */ 724 725 726 int wpa_supplicant_init_eapol(struct wpa_supplicant *wpa_s) 727 { 728 #ifdef IEEE8021X_EAPOL 729 struct eapol_ctx *ctx; 730 ctx = os_zalloc(sizeof(*ctx)); 731 if (ctx == NULL) { 732 wpa_printf(MSG_ERROR, "Failed to allocate EAPOL context."); 733 return -1; 734 } 735 736 ctx->ctx = wpa_s; 737 ctx->msg_ctx = wpa_s; 738 ctx->eapol_send_ctx = wpa_s; 739 ctx->preauth = 0; 740 ctx->eapol_done_cb = wpa_supplicant_notify_eapol_done; 741 ctx->eapol_send = wpa_supplicant_eapol_send; 742 ctx->set_wep_key = wpa_eapol_set_wep_key; 743 ctx->set_config_blob = wpa_supplicant_set_config_blob; 744 ctx->get_config_blob = wpa_supplicant_get_config_blob; 745 ctx->aborted_cached = wpa_supplicant_aborted_cached; 746 ctx->opensc_engine_path = wpa_s->conf->opensc_engine_path; 747 ctx->pkcs11_engine_path = wpa_s->conf->pkcs11_engine_path; 748 ctx->pkcs11_module_path = wpa_s->conf->pkcs11_module_path; 749 ctx->wps = wpa_s->wps; 750 ctx->eap_param_needed = wpa_supplicant_eap_param_needed; 751 ctx->port_cb = wpa_supplicant_port_cb; 752 ctx->cb = wpa_supplicant_eapol_cb; 753 ctx->cert_cb = wpa_supplicant_cert_cb; 754 ctx->cb_ctx = wpa_s; 755 wpa_s->eapol = eapol_sm_init(ctx); 756 if (wpa_s->eapol == NULL) { 757 os_free(ctx); 758 wpa_printf(MSG_ERROR, "Failed to initialize EAPOL state " 759 "machines."); 760 return -1; 761 } 762 #endif /* IEEE8021X_EAPOL */ 763 764 return 0; 765 } 766 767 768 static void wpa_supplicant_set_rekey_offload(void *ctx, const u8 *kek, 769 const u8 *kck, 770 const u8 *replay_ctr) 771 { 772 struct wpa_supplicant *wpa_s = ctx; 773 774 wpa_drv_set_rekey_info(wpa_s, kek, kck, replay_ctr); 775 } 776 777 778 int wpa_supplicant_init_wpa(struct wpa_supplicant *wpa_s) 779 { 780 #ifndef CONFIG_NO_WPA 781 struct wpa_sm_ctx *ctx; 782 ctx = os_zalloc(sizeof(*ctx)); 783 if (ctx == NULL) { 784 wpa_printf(MSG_ERROR, "Failed to allocate WPA context."); 785 return -1; 786 } 787 788 ctx->ctx = wpa_s; 789 ctx->msg_ctx = wpa_s; 790 ctx->set_state = _wpa_supplicant_set_state; 791 ctx->get_state = _wpa_supplicant_get_state; 792 ctx->deauthenticate = _wpa_supplicant_deauthenticate; 793 ctx->disassociate = _wpa_supplicant_disassociate; 794 ctx->set_key = wpa_supplicant_set_key; 795 ctx->get_network_ctx = wpa_supplicant_get_network_ctx; 796 ctx->get_bssid = wpa_supplicant_get_bssid; 797 ctx->ether_send = _wpa_ether_send; 798 ctx->get_beacon_ie = wpa_supplicant_get_beacon_ie; 799 ctx->alloc_eapol = _wpa_alloc_eapol; 800 ctx->cancel_auth_timeout = _wpa_supplicant_cancel_auth_timeout; 801 ctx->add_pmkid = wpa_supplicant_add_pmkid; 802 ctx->remove_pmkid = wpa_supplicant_remove_pmkid; 803 #ifndef CONFIG_NO_CONFIG_BLOBS 804 ctx->set_config_blob = wpa_supplicant_set_config_blob; 805 ctx->get_config_blob = wpa_supplicant_get_config_blob; 806 #endif /* CONFIG_NO_CONFIG_BLOBS */ 807 ctx->mlme_setprotection = wpa_supplicant_mlme_setprotection; 808 #ifdef CONFIG_IEEE80211R 809 ctx->update_ft_ies = wpa_supplicant_update_ft_ies; 810 ctx->send_ft_action = wpa_supplicant_send_ft_action; 811 ctx->mark_authenticated = wpa_supplicant_mark_authenticated; 812 #endif /* CONFIG_IEEE80211R */ 813 #ifdef CONFIG_TDLS 814 ctx->tdls_get_capa = wpa_supplicant_tdls_get_capa; 815 ctx->send_tdls_mgmt = wpa_supplicant_send_tdls_mgmt; 816 ctx->tdls_oper = wpa_supplicant_tdls_oper; 817 ctx->tdls_peer_addset = wpa_supplicant_tdls_peer_addset; 818 #endif /* CONFIG_TDLS */ 819 ctx->set_rekey_offload = wpa_supplicant_set_rekey_offload; 820 821 wpa_s->wpa = wpa_sm_init(ctx); 822 if (wpa_s->wpa == NULL) { 823 wpa_printf(MSG_ERROR, "Failed to initialize WPA state " 824 "machine"); 825 return -1; 826 } 827 #endif /* CONFIG_NO_WPA */ 828 829 return 0; 830 } 831 832 833 void wpa_supplicant_rsn_supp_set_config(struct wpa_supplicant *wpa_s, 834 struct wpa_ssid *ssid) 835 { 836 struct rsn_supp_config conf; 837 if (ssid) { 838 os_memset(&conf, 0, sizeof(conf)); 839 conf.network_ctx = ssid; 840 conf.peerkey_enabled = ssid->peerkey; 841 conf.allowed_pairwise_cipher = ssid->pairwise_cipher; 842 #ifdef IEEE8021X_EAPOL 843 conf.proactive_key_caching = ssid->proactive_key_caching; 844 conf.eap_workaround = ssid->eap_workaround; 845 conf.eap_conf_ctx = &ssid->eap; 846 #endif /* IEEE8021X_EAPOL */ 847 conf.ssid = ssid->ssid; 848 conf.ssid_len = ssid->ssid_len; 849 conf.wpa_ptk_rekey = ssid->wpa_ptk_rekey; 850 } 851 wpa_sm_set_config(wpa_s->wpa, ssid ? &conf : NULL); 852 } 853
