Home | History | Annotate | Download | only in ap
      1 /*
      2  * hostapd / Configuration definitions and helpers functions
      3  * Copyright (c) 2003-2015, Jouni Malinen <j (at) w1.fi>
      4  *
      5  * This software may be distributed under the terms of the BSD license.
      6  * See README for more details.
      7  */
      8 
      9 #ifndef HOSTAPD_CONFIG_H
     10 #define HOSTAPD_CONFIG_H
     11 
     12 #include "common/defs.h"
     13 #include "utils/list.h"
     14 #include "ip_addr.h"
     15 #include "common/wpa_common.h"
     16 #include "common/ieee802_11_defs.h"
     17 #include "common/ieee802_11_common.h"
     18 #include "wps/wps.h"
     19 #include "fst/fst.h"
     20 #include "vlan.h"
     21 
     22 /**
     23  * mesh_conf - local MBSS state and settings
     24  */
     25 struct mesh_conf {
     26 	u8 meshid[32];
     27 	u8 meshid_len;
     28 	/* Active Path Selection Protocol Identifier */
     29 	u8 mesh_pp_id;
     30 	/* Active Path Selection Metric Identifier */
     31 	u8 mesh_pm_id;
     32 	/* Congestion Control Mode Identifier */
     33 	u8 mesh_cc_id;
     34 	/* Synchronization Protocol Identifier */
     35 	u8 mesh_sp_id;
     36 	/* Authentication Protocol Identifier */
     37 	u8 mesh_auth_id;
     38 	u8 *rsn_ie;
     39 	int rsn_ie_len;
     40 #define MESH_CONF_SEC_NONE BIT(0)
     41 #define MESH_CONF_SEC_AUTH BIT(1)
     42 #define MESH_CONF_SEC_AMPE BIT(2)
     43 	unsigned int security;
     44 	enum mfp_options ieee80211w;
     45 	unsigned int pairwise_cipher;
     46 	unsigned int group_cipher;
     47 	unsigned int mgmt_group_cipher;
     48 	int dot11MeshMaxRetries;
     49 	int dot11MeshRetryTimeout; /* msec */
     50 	int dot11MeshConfirmTimeout; /* msec */
     51 	int dot11MeshHoldingTimeout; /* msec */
     52 };
     53 
     54 #define MAX_STA_COUNT 2007
     55 #define MAX_VLAN_ID 4094
     56 
     57 typedef u8 macaddr[ETH_ALEN];
     58 
     59 struct mac_acl_entry {
     60 	macaddr addr;
     61 	struct vlan_description vlan_id;
     62 };
     63 
     64 struct hostapd_radius_servers;
     65 struct ft_remote_r0kh;
     66 struct ft_remote_r1kh;
     67 
     68 #define NUM_WEP_KEYS 4
     69 struct hostapd_wep_keys {
     70 	u8 idx;
     71 	u8 *key[NUM_WEP_KEYS];
     72 	size_t len[NUM_WEP_KEYS];
     73 	int keys_set;
     74 	size_t default_len; /* key length used for dynamic key generation */
     75 };
     76 
     77 typedef enum hostap_security_policy {
     78 	SECURITY_PLAINTEXT = 0,
     79 	SECURITY_STATIC_WEP = 1,
     80 	SECURITY_IEEE_802_1X = 2,
     81 	SECURITY_WPA_PSK = 3,
     82 	SECURITY_WPA = 4,
     83 	SECURITY_OSEN = 5
     84 } secpolicy;
     85 
     86 struct hostapd_ssid {
     87 	u8 ssid[SSID_MAX_LEN];
     88 	size_t ssid_len;
     89 	unsigned int ssid_set:1;
     90 	unsigned int utf8_ssid:1;
     91 	unsigned int wpa_passphrase_set:1;
     92 	unsigned int wpa_psk_set:1;
     93 
     94 	char vlan[IFNAMSIZ + 1];
     95 	secpolicy security_policy;
     96 
     97 	struct hostapd_wpa_psk *wpa_psk;
     98 	char *wpa_passphrase;
     99 	char *wpa_psk_file;
    100 
    101 	struct hostapd_wep_keys wep;
    102 
    103 #define DYNAMIC_VLAN_DISABLED 0
    104 #define DYNAMIC_VLAN_OPTIONAL 1
    105 #define DYNAMIC_VLAN_REQUIRED 2
    106 	int dynamic_vlan;
    107 #define DYNAMIC_VLAN_NAMING_WITHOUT_DEVICE 0
    108 #define DYNAMIC_VLAN_NAMING_WITH_DEVICE 1
    109 #define DYNAMIC_VLAN_NAMING_END 2
    110 	int vlan_naming;
    111 	int per_sta_vif;
    112 #ifdef CONFIG_FULL_DYNAMIC_VLAN
    113 	char *vlan_tagged_interface;
    114 #endif /* CONFIG_FULL_DYNAMIC_VLAN */
    115 };
    116 
    117 
    118 #define VLAN_ID_WILDCARD -1
    119 
    120 struct hostapd_vlan {
    121 	struct hostapd_vlan *next;
    122 	int vlan_id; /* VLAN ID or -1 (VLAN_ID_WILDCARD) for wildcard entry */
    123 	struct vlan_description vlan_desc;
    124 	char ifname[IFNAMSIZ + 1];
    125 	int configured;
    126 	int dynamic_vlan;
    127 #ifdef CONFIG_FULL_DYNAMIC_VLAN
    128 
    129 #define DVLAN_CLEAN_WLAN_PORT	0x8
    130 	int clean;
    131 #endif /* CONFIG_FULL_DYNAMIC_VLAN */
    132 };
    133 
    134 #define PMK_LEN 32
    135 #define MIN_PASSPHRASE_LEN 8
    136 #define MAX_PASSPHRASE_LEN 63
    137 struct hostapd_sta_wpa_psk_short {
    138 	struct hostapd_sta_wpa_psk_short *next;
    139 	unsigned int is_passphrase:1;
    140 	u8 psk[PMK_LEN];
    141 	char passphrase[MAX_PASSPHRASE_LEN + 1];
    142 	int ref; /* (number of references held) - 1 */
    143 };
    144 
    145 struct hostapd_wpa_psk {
    146 	struct hostapd_wpa_psk *next;
    147 	int group;
    148 	u8 psk[PMK_LEN];
    149 	u8 addr[ETH_ALEN];
    150 	u8 p2p_dev_addr[ETH_ALEN];
    151 };
    152 
    153 struct hostapd_eap_user {
    154 	struct hostapd_eap_user *next;
    155 	u8 *identity;
    156 	size_t identity_len;
    157 	struct {
    158 		int vendor;
    159 		u32 method;
    160 	} methods[EAP_MAX_METHODS];
    161 	u8 *password;
    162 	size_t password_len;
    163 	int phase2;
    164 	int force_version;
    165 	unsigned int wildcard_prefix:1;
    166 	unsigned int password_hash:1; /* whether password is hashed with
    167 				       * nt_password_hash() */
    168 	unsigned int remediation:1;
    169 	unsigned int macacl:1;
    170 	int ttls_auth; /* EAP_TTLS_AUTH_* bitfield */
    171 	struct hostapd_radius_attr *accept_attr;
    172 };
    173 
    174 struct hostapd_radius_attr {
    175 	u8 type;
    176 	struct wpabuf *val;
    177 	struct hostapd_radius_attr *next;
    178 };
    179 
    180 
    181 #define NUM_TX_QUEUES 4
    182 
    183 struct hostapd_tx_queue_params {
    184 	int aifs;
    185 	int cwmin;
    186 	int cwmax;
    187 	int burst; /* maximum burst time in 0.1 ms, i.e., 10 = 1 ms */
    188 };
    189 
    190 
    191 #define MAX_ROAMING_CONSORTIUM_LEN 15
    192 
    193 struct hostapd_roaming_consortium {
    194 	u8 len;
    195 	u8 oi[MAX_ROAMING_CONSORTIUM_LEN];
    196 };
    197 
    198 struct hostapd_lang_string {
    199 	u8 lang[3];
    200 	u8 name_len;
    201 	u8 name[252];
    202 };
    203 
    204 #define MAX_NAI_REALMS 10
    205 #define MAX_NAI_REALMLEN 255
    206 #define MAX_NAI_EAP_METHODS 5
    207 #define MAX_NAI_AUTH_TYPES 4
    208 struct hostapd_nai_realm_data {
    209 	u8 encoding;
    210 	char realm_buf[MAX_NAI_REALMLEN + 1];
    211 	char *realm[MAX_NAI_REALMS];
    212 	u8 eap_method_count;
    213 	struct hostapd_nai_realm_eap {
    214 		u8 eap_method;
    215 		u8 num_auths;
    216 		u8 auth_id[MAX_NAI_AUTH_TYPES];
    217 		u8 auth_val[MAX_NAI_AUTH_TYPES];
    218 	} eap_method[MAX_NAI_EAP_METHODS];
    219 };
    220 
    221 struct anqp_element {
    222 	struct dl_list list;
    223 	u16 infoid;
    224 	struct wpabuf *payload;
    225 };
    226 
    227 struct fils_realm {
    228 	struct dl_list list;
    229 	u8 hash[2];
    230 	char realm[];
    231 };
    232 
    233 
    234 /**
    235  * struct hostapd_bss_config - Per-BSS configuration
    236  */
    237 struct hostapd_bss_config {
    238 	char iface[IFNAMSIZ + 1];
    239 	char bridge[IFNAMSIZ + 1];
    240 	char vlan_bridge[IFNAMSIZ + 1];
    241 	char wds_bridge[IFNAMSIZ + 1];
    242 
    243 	enum hostapd_logger_level logger_syslog_level, logger_stdout_level;
    244 
    245 	unsigned int logger_syslog; /* module bitfield */
    246 	unsigned int logger_stdout; /* module bitfield */
    247 
    248 	int max_num_sta; /* maximum number of STAs in station table */
    249 
    250 	int dtim_period;
    251 	int bss_load_update_period;
    252 
    253 	int ieee802_1x; /* use IEEE 802.1X */
    254 	int eapol_version;
    255 	int eap_server; /* Use internal EAP server instead of external
    256 			 * RADIUS server */
    257 	struct hostapd_eap_user *eap_user;
    258 	char *eap_user_sqlite;
    259 	char *eap_sim_db;
    260 	unsigned int eap_sim_db_timeout;
    261 	int eap_server_erp; /* Whether ERP is enabled on internal EAP server */
    262 	struct hostapd_ip_addr own_ip_addr;
    263 	char *nas_identifier;
    264 	struct hostapd_radius_servers *radius;
    265 	int acct_interim_interval;
    266 	int radius_request_cui;
    267 	struct hostapd_radius_attr *radius_auth_req_attr;
    268 	struct hostapd_radius_attr *radius_acct_req_attr;
    269 	int radius_das_port;
    270 	unsigned int radius_das_time_window;
    271 	int radius_das_require_event_timestamp;
    272 	int radius_das_require_message_authenticator;
    273 	struct hostapd_ip_addr radius_das_client_addr;
    274 	u8 *radius_das_shared_secret;
    275 	size_t radius_das_shared_secret_len;
    276 
    277 	struct hostapd_ssid ssid;
    278 
    279 	char *eap_req_id_text; /* optional displayable message sent with
    280 				* EAP Request-Identity */
    281 	size_t eap_req_id_text_len;
    282 	int eapol_key_index_workaround;
    283 
    284 	size_t default_wep_key_len;
    285 	int individual_wep_key_len;
    286 	int wep_rekeying_period;
    287 	int broadcast_key_idx_min, broadcast_key_idx_max;
    288 	int eap_reauth_period;
    289 	int erp_send_reauth_start;
    290 	char *erp_domain;
    291 
    292 	int ieee802_11f; /* use IEEE 802.11f (IAPP) */
    293 	char iapp_iface[IFNAMSIZ + 1]; /* interface used with IAPP broadcast
    294 					* frames */
    295 
    296 	enum macaddr_acl {
    297 		ACCEPT_UNLESS_DENIED = 0,
    298 		DENY_UNLESS_ACCEPTED = 1,
    299 		USE_EXTERNAL_RADIUS_AUTH = 2
    300 	} macaddr_acl;
    301 	struct mac_acl_entry *accept_mac;
    302 	int num_accept_mac;
    303 	struct mac_acl_entry *deny_mac;
    304 	int num_deny_mac;
    305 	int wds_sta;
    306 	int isolate;
    307 	int start_disabled;
    308 
    309 	int auth_algs; /* bitfield of allowed IEEE 802.11 authentication
    310 			* algorithms, WPA_AUTH_ALG_{OPEN,SHARED,LEAP} */
    311 
    312 	int wpa; /* bitfield of WPA_PROTO_WPA, WPA_PROTO_RSN */
    313 	int wpa_key_mgmt;
    314 #ifdef CONFIG_IEEE80211W
    315 	enum mfp_options ieee80211w;
    316 	int group_mgmt_cipher;
    317 	/* dot11AssociationSAQueryMaximumTimeout (in TUs) */
    318 	unsigned int assoc_sa_query_max_timeout;
    319 	/* dot11AssociationSAQueryRetryTimeout (in TUs) */
    320 	int assoc_sa_query_retry_timeout;
    321 #endif /* CONFIG_IEEE80211W */
    322 	enum {
    323 		PSK_RADIUS_IGNORED = 0,
    324 		PSK_RADIUS_ACCEPTED = 1,
    325 		PSK_RADIUS_REQUIRED = 2
    326 	} wpa_psk_radius;
    327 	int wpa_pairwise;
    328 	int wpa_group;
    329 	int wpa_group_rekey;
    330 	int wpa_group_rekey_set;
    331 	int wpa_strict_rekey;
    332 	int wpa_gmk_rekey;
    333 	int wpa_ptk_rekey;
    334 	u32 wpa_group_update_count;
    335 	u32 wpa_pairwise_update_count;
    336 	int wpa_disable_eapol_key_retries;
    337 	int rsn_pairwise;
    338 	int rsn_preauth;
    339 	char *rsn_preauth_interfaces;
    340 
    341 #ifdef CONFIG_IEEE80211R_AP
    342 	/* IEEE 802.11r - Fast BSS Transition */
    343 	u8 mobility_domain[MOBILITY_DOMAIN_ID_LEN];
    344 	u8 r1_key_holder[FT_R1KH_ID_LEN];
    345 	u32 r0_key_lifetime;
    346 	int rkh_pos_timeout;
    347 	int rkh_neg_timeout;
    348 	int rkh_pull_timeout; /* ms */
    349 	int rkh_pull_retries;
    350 	u32 reassociation_deadline;
    351 	struct ft_remote_r0kh *r0kh_list;
    352 	struct ft_remote_r1kh *r1kh_list;
    353 	int pmk_r1_push;
    354 	int ft_over_ds;
    355 	int ft_psk_generate_local;
    356 #endif /* CONFIG_IEEE80211R_AP */
    357 
    358 	char *ctrl_interface; /* directory for UNIX domain sockets */
    359 #ifndef CONFIG_NATIVE_WINDOWS
    360 	gid_t ctrl_interface_gid;
    361 #endif /* CONFIG_NATIVE_WINDOWS */
    362 	int ctrl_interface_gid_set;
    363 
    364 	char *ca_cert;
    365 	char *server_cert;
    366 	char *private_key;
    367 	char *private_key_passwd;
    368 	int check_crl;
    369 	unsigned int tls_session_lifetime;
    370 	unsigned int tls_flags;
    371 	char *ocsp_stapling_response;
    372 	char *ocsp_stapling_response_multi;
    373 	char *dh_file;
    374 	char *openssl_ciphers;
    375 	u8 *pac_opaque_encr_key;
    376 	u8 *eap_fast_a_id;
    377 	size_t eap_fast_a_id_len;
    378 	char *eap_fast_a_id_info;
    379 	int eap_fast_prov;
    380 	int pac_key_lifetime;
    381 	int pac_key_refresh_time;
    382 	int eap_sim_aka_result_ind;
    383 	int tnc;
    384 	int fragment_size;
    385 	u16 pwd_group;
    386 
    387 	char *radius_server_clients;
    388 	int radius_server_auth_port;
    389 	int radius_server_acct_port;
    390 	int radius_server_ipv6;
    391 
    392 	int use_pae_group_addr; /* Whether to send EAPOL frames to PAE group
    393 				 * address instead of individual address
    394 				 * (for driver_wired.c).
    395 				 */
    396 
    397 	int ap_max_inactivity;
    398 	int ignore_broadcast_ssid;
    399 	int no_probe_resp_if_max_sta;
    400 
    401 	int wmm_enabled;
    402 	int wmm_uapsd;
    403 
    404 	struct hostapd_vlan *vlan;
    405 
    406 	macaddr bssid;
    407 
    408 	/*
    409 	 * Maximum listen interval that STAs can use when associating with this
    410 	 * BSS. If a STA tries to use larger value, the association will be
    411 	 * denied with status code 51.
    412 	 */
    413 	u16 max_listen_interval;
    414 
    415 	int disable_pmksa_caching;
    416 	int okc; /* Opportunistic Key Caching */
    417 
    418 	int wps_state;
    419 #ifdef CONFIG_WPS
    420 	int wps_independent;
    421 	int ap_setup_locked;
    422 	u8 uuid[16];
    423 	char *wps_pin_requests;
    424 	char *device_name;
    425 	char *manufacturer;
    426 	char *model_name;
    427 	char *model_number;
    428 	char *serial_number;
    429 	u8 device_type[WPS_DEV_TYPE_LEN];
    430 	char *config_methods;
    431 	u8 os_version[4];
    432 	char *ap_pin;
    433 	int skip_cred_build;
    434 	u8 *extra_cred;
    435 	size_t extra_cred_len;
    436 	int wps_cred_processing;
    437 	int force_per_enrollee_psk;
    438 	u8 *ap_settings;
    439 	size_t ap_settings_len;
    440 	char *upnp_iface;
    441 	char *friendly_name;
    442 	char *manufacturer_url;
    443 	char *model_description;
    444 	char *model_url;
    445 	char *upc;
    446 	struct wpabuf *wps_vendor_ext[MAX_WPS_VENDOR_EXTENSIONS];
    447 	int wps_nfc_pw_from_config;
    448 	int wps_nfc_dev_pw_id;
    449 	struct wpabuf *wps_nfc_dh_pubkey;
    450 	struct wpabuf *wps_nfc_dh_privkey;
    451 	struct wpabuf *wps_nfc_dev_pw;
    452 #endif /* CONFIG_WPS */
    453 	int pbc_in_m1;
    454 	char *server_id;
    455 
    456 #define P2P_ENABLED BIT(0)
    457 #define P2P_GROUP_OWNER BIT(1)
    458 #define P2P_GROUP_FORMATION BIT(2)
    459 #define P2P_MANAGE BIT(3)
    460 #define P2P_ALLOW_CROSS_CONNECTION BIT(4)
    461 	int p2p;
    462 #ifdef CONFIG_P2P
    463 	u8 ip_addr_go[4];
    464 	u8 ip_addr_mask[4];
    465 	u8 ip_addr_start[4];
    466 	u8 ip_addr_end[4];
    467 #endif /* CONFIG_P2P */
    468 
    469 	int disassoc_low_ack;
    470 	int skip_inactivity_poll;
    471 
    472 #define TDLS_PROHIBIT BIT(0)
    473 #define TDLS_PROHIBIT_CHAN_SWITCH BIT(1)
    474 	int tdls;
    475 	int disable_11n;
    476 	int disable_11ac;
    477 
    478 	/* IEEE 802.11v */
    479 	int time_advertisement;
    480 	char *time_zone;
    481 	int wnm_sleep_mode;
    482 	int bss_transition;
    483 
    484 	/* IEEE 802.11u - Interworking */
    485 	int interworking;
    486 	int access_network_type;
    487 	int internet;
    488 	int asra;
    489 	int esr;
    490 	int uesa;
    491 	int venue_info_set;
    492 	u8 venue_group;
    493 	u8 venue_type;
    494 	u8 hessid[ETH_ALEN];
    495 
    496 	/* IEEE 802.11u - Roaming Consortium list */
    497 	unsigned int roaming_consortium_count;
    498 	struct hostapd_roaming_consortium *roaming_consortium;
    499 
    500 	/* IEEE 802.11u - Venue Name duples */
    501 	unsigned int venue_name_count;
    502 	struct hostapd_lang_string *venue_name;
    503 
    504 	/* IEEE 802.11u - Network Authentication Type */
    505 	u8 *network_auth_type;
    506 	size_t network_auth_type_len;
    507 
    508 	/* IEEE 802.11u - IP Address Type Availability */
    509 	u8 ipaddr_type_availability;
    510 	u8 ipaddr_type_configured;
    511 
    512 	/* IEEE 802.11u - 3GPP Cellular Network */
    513 	u8 *anqp_3gpp_cell_net;
    514 	size_t anqp_3gpp_cell_net_len;
    515 
    516 	/* IEEE 802.11u - Domain Name */
    517 	u8 *domain_name;
    518 	size_t domain_name_len;
    519 
    520 	unsigned int nai_realm_count;
    521 	struct hostapd_nai_realm_data *nai_realm_data;
    522 
    523 	struct dl_list anqp_elem; /* list of struct anqp_element */
    524 
    525 	u16 gas_comeback_delay;
    526 	size_t gas_frag_limit;
    527 	int gas_address3;
    528 
    529 	u8 qos_map_set[16 + 2 * 21];
    530 	unsigned int qos_map_set_len;
    531 
    532 	int osen;
    533 	int proxy_arp;
    534 	int na_mcast_to_ucast;
    535 #ifdef CONFIG_HS20
    536 	int hs20;
    537 	int disable_dgaf;
    538 	u16 anqp_domain_id;
    539 	unsigned int hs20_oper_friendly_name_count;
    540 	struct hostapd_lang_string *hs20_oper_friendly_name;
    541 	u8 *hs20_wan_metrics;
    542 	u8 *hs20_connection_capability;
    543 	size_t hs20_connection_capability_len;
    544 	u8 *hs20_operating_class;
    545 	u8 hs20_operating_class_len;
    546 	struct hs20_icon {
    547 		u16 width;
    548 		u16 height;
    549 		char language[3];
    550 		char type[256];
    551 		char name[256];
    552 		char file[256];
    553 	} *hs20_icons;
    554 	size_t hs20_icons_count;
    555 	u8 osu_ssid[SSID_MAX_LEN];
    556 	size_t osu_ssid_len;
    557 	struct hs20_osu_provider {
    558 		unsigned int friendly_name_count;
    559 		struct hostapd_lang_string *friendly_name;
    560 		char *server_uri;
    561 		int *method_list;
    562 		char **icons;
    563 		size_t icons_count;
    564 		char *osu_nai;
    565 		unsigned int service_desc_count;
    566 		struct hostapd_lang_string *service_desc;
    567 	} *hs20_osu_providers, *last_osu;
    568 	size_t hs20_osu_providers_count;
    569 	unsigned int hs20_deauth_req_timeout;
    570 	char *subscr_remediation_url;
    571 	u8 subscr_remediation_method;
    572 #endif /* CONFIG_HS20 */
    573 
    574 	u8 wps_rf_bands; /* RF bands for WPS (WPS_RF_*) */
    575 
    576 #ifdef CONFIG_RADIUS_TEST
    577 	char *dump_msk_file;
    578 #endif /* CONFIG_RADIUS_TEST */
    579 
    580 	struct wpabuf *vendor_elements;
    581 	struct wpabuf *assocresp_elements;
    582 
    583 	unsigned int sae_anti_clogging_threshold;
    584 	int *sae_groups;
    585 	char *sae_password;
    586 
    587 	char *wowlan_triggers; /* Wake-on-WLAN triggers */
    588 
    589 #ifdef CONFIG_TESTING_OPTIONS
    590 	u8 bss_load_test[5];
    591 	u8 bss_load_test_set;
    592 	struct wpabuf *own_ie_override;
    593 	int sae_reflection_attack;
    594 	struct wpabuf *sae_commit_override;
    595 #endif /* CONFIG_TESTING_OPTIONS */
    596 
    597 #define MESH_ENABLED BIT(0)
    598 	int mesh;
    599 
    600 	u8 radio_measurements[RRM_CAPABILITIES_IE_LEN];
    601 
    602 	int vendor_vht;
    603 	int use_sta_nsts;
    604 
    605 	char *no_probe_resp_if_seen_on;
    606 	char *no_auth_if_seen_on;
    607 
    608 	int pbss;
    609 
    610 #ifdef CONFIG_MBO
    611 	int mbo_enabled;
    612 	/**
    613 	 * oce - Enable OCE in AP and/or STA-CFON mode
    614 	 *  - BIT(0) is Reserved
    615 	 *  - Set BIT(1) to enable OCE in STA-CFON mode
    616 	 *  - Set BIT(2) to enable OCE in AP mode
    617 	 */
    618 	unsigned int oce;
    619 	int mbo_cell_data_conn_pref;
    620 #endif /* CONFIG_MBO */
    621 
    622 	int ftm_responder;
    623 	int ftm_initiator;
    624 
    625 #ifdef CONFIG_FILS
    626 	u8 fils_cache_id[FILS_CACHE_ID_LEN];
    627 	int fils_cache_id_set;
    628 	struct dl_list fils_realms; /* list of struct fils_realm */
    629 	int fils_dh_group;
    630 	struct hostapd_ip_addr dhcp_server;
    631 	int dhcp_rapid_commit_proxy;
    632 	unsigned int fils_hlp_wait_time;
    633 	u16 dhcp_server_port;
    634 	u16 dhcp_relay_port;
    635 #endif /* CONFIG_FILS */
    636 
    637 	int multicast_to_unicast;
    638 
    639 	int broadcast_deauth;
    640 
    641 #ifdef CONFIG_DPP
    642 	char *dpp_connector;
    643 	struct wpabuf *dpp_netaccesskey;
    644 	unsigned int dpp_netaccesskey_expiry;
    645 	struct wpabuf *dpp_csign;
    646 #endif /* CONFIG_DPP */
    647 
    648 #ifdef CONFIG_OWE
    649 	macaddr owe_transition_bssid;
    650 	u8 owe_transition_ssid[SSID_MAX_LEN];
    651 	size_t owe_transition_ssid_len;
    652 	char owe_transition_ifname[IFNAMSIZ + 1];
    653 	int *owe_groups;
    654 #endif /* CONFIG_OWE */
    655 };
    656 
    657 /**
    658  * struct he_phy_capabilities_info - HE PHY capabilities
    659  */
    660 struct he_phy_capabilities_info {
    661 	Boolean he_su_beamformer;
    662 	Boolean he_su_beamformee;
    663 	Boolean he_mu_beamformer;
    664 };
    665 
    666 /**
    667  * struct he_operation - HE operation
    668  */
    669 struct he_operation {
    670 	u8 he_bss_color;
    671 	u8 he_default_pe_duration;
    672 	u8 he_twt_required;
    673 	u8 he_rts_threshold;
    674 };
    675 
    676 /**
    677  * struct hostapd_config - Per-radio interface configuration
    678  */
    679 struct hostapd_config {
    680 	struct hostapd_bss_config **bss, *last_bss;
    681 	size_t num_bss;
    682 
    683 	u16 beacon_int;
    684 	int rts_threshold;
    685 	int fragm_threshold;
    686 	u8 send_probe_response;
    687 	u8 channel;
    688 	u8 acs;
    689 	struct wpa_freq_range_list acs_ch_list;
    690 	int acs_exclude_dfs;
    691 	enum hostapd_hw_mode hw_mode; /* HOSTAPD_MODE_IEEE80211A, .. */
    692 	enum {
    693 		LONG_PREAMBLE = 0,
    694 		SHORT_PREAMBLE = 1
    695 	} preamble;
    696 
    697 	int *supported_rates;
    698 	int *basic_rates;
    699 	unsigned int beacon_rate;
    700 	enum beacon_rate_type rate_type;
    701 
    702 	const struct wpa_driver_ops *driver;
    703 	char *driver_params;
    704 
    705 	int ap_table_max_size;
    706 	int ap_table_expiration_time;
    707 
    708 	unsigned int track_sta_max_num;
    709 	unsigned int track_sta_max_age;
    710 
    711 	char country[3]; /* first two octets: country code as described in
    712 			  * ISO/IEC 3166-1. Third octet:
    713 			  * ' ' (ascii 32): all environments
    714 			  * 'O': Outdoor environemnt only
    715 			  * 'I': Indoor environment only
    716 			  * 'X': Used with noncountry entity ("XXX")
    717 			  * 0x00..0x31: identifying IEEE 802.11 standard
    718 			  *	Annex E table (0x04 = global table)
    719 			  */
    720 
    721 	int ieee80211d;
    722 
    723 	int ieee80211h; /* DFS */
    724 
    725 	/*
    726 	 * Local power constraint is an octet encoded as an unsigned integer in
    727 	 * units of decibels. Invalid value -1 indicates that Power Constraint
    728 	 * element will not be added.
    729 	 */
    730 	int local_pwr_constraint;
    731 
    732 	/* Control Spectrum Management bit */
    733 	int spectrum_mgmt_required;
    734 
    735 	struct hostapd_tx_queue_params tx_queue[NUM_TX_QUEUES];
    736 
    737 	/*
    738 	 * WMM AC parameters, in same order as 802.1D, i.e.
    739 	 * 0 = BE (best effort)
    740 	 * 1 = BK (background)
    741 	 * 2 = VI (video)
    742 	 * 3 = VO (voice)
    743 	 */
    744 	struct hostapd_wmm_ac_params wmm_ac_params[4];
    745 
    746 	int ht_op_mode_fixed;
    747 	u16 ht_capab;
    748 	int ieee80211n;
    749 	int secondary_channel;
    750 	int no_pri_sec_switch;
    751 	int require_ht;
    752 	int obss_interval;
    753 	u32 vht_capab;
    754 	int ieee80211ac;
    755 	int require_vht;
    756 	u8 vht_oper_chwidth;
    757 	u8 vht_oper_centr_freq_seg0_idx;
    758 	u8 vht_oper_centr_freq_seg1_idx;
    759 	u8 ht40_plus_minus_allowed;
    760 
    761 	/* Use driver-generated interface addresses when adding multiple BSSs */
    762 	u8 use_driver_iface_addr;
    763 
    764 #ifdef CONFIG_FST
    765 	struct fst_iface_cfg fst_cfg;
    766 #endif /* CONFIG_FST */
    767 
    768 #ifdef CONFIG_P2P
    769 	u8 p2p_go_ctwindow;
    770 #endif /* CONFIG_P2P */
    771 
    772 #ifdef CONFIG_TESTING_OPTIONS
    773 	double ignore_probe_probability;
    774 	double ignore_auth_probability;
    775 	double ignore_assoc_probability;
    776 	double ignore_reassoc_probability;
    777 	double corrupt_gtk_rekey_mic_probability;
    778 	int ecsa_ie_only;
    779 #endif /* CONFIG_TESTING_OPTIONS */
    780 
    781 #ifdef CONFIG_ACS
    782 	unsigned int acs_num_scans;
    783 	struct acs_bias {
    784 		int channel;
    785 		double bias;
    786 	} *acs_chan_bias;
    787 	unsigned int num_acs_chan_bias;
    788 #endif /* CONFIG_ACS */
    789 
    790 	struct wpabuf *lci;
    791 	struct wpabuf *civic;
    792 	int stationary_ap;
    793 
    794 	int ieee80211ax;
    795 #ifdef CONFIG_IEEE80211AX
    796 	struct he_phy_capabilities_info he_phy_capab;
    797 	struct he_operation he_op;
    798 #endif /* CONFIG_IEEE80211AX */
    799 };
    800 
    801 
    802 int hostapd_mac_comp(const void *a, const void *b);
    803 struct hostapd_config * hostapd_config_defaults(void);
    804 void hostapd_config_defaults_bss(struct hostapd_bss_config *bss);
    805 void hostapd_config_free_eap_user(struct hostapd_eap_user *user);
    806 void hostapd_config_free_eap_users(struct hostapd_eap_user *user);
    807 void hostapd_config_clear_wpa_psk(struct hostapd_wpa_psk **p);
    808 void hostapd_config_free_bss(struct hostapd_bss_config *conf);
    809 void hostapd_config_free(struct hostapd_config *conf);
    810 int hostapd_maclist_found(struct mac_acl_entry *list, int num_entries,
    811 			  const u8 *addr, struct vlan_description *vlan_id);
    812 int hostapd_rate_found(int *list, int rate);
    813 const u8 * hostapd_get_psk(const struct hostapd_bss_config *conf,
    814 			   const u8 *addr, const u8 *p2p_dev_addr,
    815 			   const u8 *prev_psk);
    816 int hostapd_setup_wpa_psk(struct hostapd_bss_config *conf);
    817 int hostapd_vlan_valid(struct hostapd_vlan *vlan,
    818 		       struct vlan_description *vlan_desc);
    819 const char * hostapd_get_vlan_id_ifname(struct hostapd_vlan *vlan,
    820 					int vlan_id);
    821 struct hostapd_radius_attr *
    822 hostapd_config_get_radius_attr(struct hostapd_radius_attr *attr, u8 type);
    823 int hostapd_config_check(struct hostapd_config *conf, int full_config);
    824 void hostapd_set_security_params(struct hostapd_bss_config *bss,
    825 				 int full_config);
    826 
    827 #endif /* HOSTAPD_CONFIG_H */
    828