Home | History | Annotate | Line # | Download | only in wpa_supplicant
wpas_glue.c revision 1.1.1.2
      1      1.1  christos /*
      2      1.1  christos  * WPA Supplicant - Glue code to setup EAPOL and RSN modules
      3      1.1  christos  * Copyright (c) 2003-2008, Jouni Malinen <j (at) w1.fi>
      4      1.1  christos  *
      5      1.1  christos  * This program is free software; you can redistribute it and/or modify
      6      1.1  christos  * it under the terms of the GNU General Public License version 2 as
      7      1.1  christos  * published by the Free Software Foundation.
      8      1.1  christos  *
      9      1.1  christos  * Alternatively, this software may be distributed under the terms of BSD
     10      1.1  christos  * license.
     11      1.1  christos  *
     12      1.1  christos  * See README and COPYING for more details.
     13      1.1  christos  */
     14      1.1  christos 
     15      1.1  christos #include "includes.h"
     16      1.1  christos 
     17      1.1  christos #include "common.h"
     18      1.1  christos #include "eapol_supp/eapol_supp_sm.h"
     19      1.1  christos #include "rsn_supp/wpa.h"
     20      1.1  christos #include "eloop.h"
     21      1.1  christos #include "config.h"
     22      1.1  christos #include "l2_packet/l2_packet.h"
     23      1.1  christos #include "common/wpa_common.h"
     24      1.1  christos #include "wpa_supplicant_i.h"
     25      1.1  christos #include "driver_i.h"
     26      1.1  christos #include "rsn_supp/pmksa_cache.h"
     27      1.1  christos #include "mlme.h"
     28      1.1  christos #include "sme.h"
     29      1.1  christos #include "common/ieee802_11_defs.h"
     30      1.1  christos #include "common/wpa_ctrl.h"
     31      1.1  christos #include "wpas_glue.h"
     32      1.1  christos #include "wps_supplicant.h"
     33      1.1  christos #include "bss.h"
     34      1.1  christos #include "scan.h"
     35      1.1  christos 
     36      1.1  christos 
     37      1.1  christos #ifndef CONFIG_NO_CONFIG_BLOBS
     38      1.1  christos #if defined(IEEE8021X_EAPOL) || !defined(CONFIG_NO_WPA)
     39      1.1  christos static void wpa_supplicant_set_config_blob(void *ctx,
     40      1.1  christos 					   struct wpa_config_blob *blob)
     41      1.1  christos {
     42      1.1  christos 	struct wpa_supplicant *wpa_s = ctx;
     43      1.1  christos 	wpa_config_set_blob(wpa_s->conf, blob);
     44      1.1  christos 	if (wpa_s->conf->update_config) {
     45      1.1  christos 		int ret = wpa_config_write(wpa_s->confname, wpa_s->conf);
     46      1.1  christos 		if (ret) {
     47      1.1  christos 			wpa_printf(MSG_DEBUG, "Failed to update config after "
     48      1.1  christos 				   "blob set");
     49      1.1  christos 		}
     50      1.1  christos 	}
     51      1.1  christos }
     52      1.1  christos 
     53      1.1  christos 
     54      1.1  christos static const struct wpa_config_blob *
     55      1.1  christos wpa_supplicant_get_config_blob(void *ctx, const char *name)
     56      1.1  christos {
     57      1.1  christos 	struct wpa_supplicant *wpa_s = ctx;
     58      1.1  christos 	return wpa_config_get_blob(wpa_s->conf, name);
     59      1.1  christos }
     60      1.1  christos #endif /* defined(IEEE8021X_EAPOL) || !defined(CONFIG_NO_WPA) */
     61      1.1  christos #endif /* CONFIG_NO_CONFIG_BLOBS */
     62      1.1  christos 
     63      1.1  christos 
     64      1.1  christos #if defined(IEEE8021X_EAPOL) || !defined(CONFIG_NO_WPA)
     65      1.1  christos static u8 * wpa_alloc_eapol(const struct wpa_supplicant *wpa_s, u8 type,
     66      1.1  christos 			    const void *data, u16 data_len,
     67      1.1  christos 			    size_t *msg_len, void **data_pos)
     68      1.1  christos {
     69      1.1  christos 	struct ieee802_1x_hdr *hdr;
     70      1.1  christos 
     71      1.1  christos 	*msg_len = sizeof(*hdr) + data_len;
     72      1.1  christos 	hdr = os_malloc(*msg_len);
     73      1.1  christos 	if (hdr == NULL)
     74      1.1  christos 		return NULL;
     75      1.1  christos 
     76      1.1  christos 	hdr->version = wpa_s->conf->eapol_version;
     77      1.1  christos 	hdr->type = type;
     78      1.1  christos 	hdr->length = host_to_be16(data_len);
     79      1.1  christos 
     80      1.1  christos 	if (data)
     81      1.1  christos 		os_memcpy(hdr + 1, data, data_len);
     82      1.1  christos 	else
     83      1.1  christos 		os_memset(hdr + 1, 0, data_len);
     84      1.1  christos 
     85      1.1  christos 	if (data_pos)
     86      1.1  christos 		*data_pos = hdr + 1;
     87      1.1  christos 
     88      1.1  christos 	return (u8 *) hdr;
     89      1.1  christos }
     90      1.1  christos 
     91      1.1  christos 
     92      1.1  christos /**
     93      1.1  christos  * wpa_ether_send - Send Ethernet frame
     94      1.1  christos  * @wpa_s: Pointer to wpa_supplicant data
     95      1.1  christos  * @dest: Destination MAC address
     96      1.1  christos  * @proto: Ethertype in host byte order
     97      1.1  christos  * @buf: Frame payload starting from IEEE 802.1X header
     98      1.1  christos  * @len: Frame payload length
     99      1.1  christos  * Returns: >=0 on success, <0 on failure
    100      1.1  christos  */
    101      1.1  christos static int wpa_ether_send(struct wpa_supplicant *wpa_s, const u8 *dest,
    102      1.1  christos 			  u16 proto, const u8 *buf, size_t len)
    103      1.1  christos {
    104      1.1  christos 	if (wpa_s->l2) {
    105      1.1  christos 		return l2_packet_send(wpa_s->l2, dest, proto, buf, len);
    106      1.1  christos 	}
    107      1.1  christos 
    108      1.1  christos 	return wpa_drv_send_eapol(wpa_s, dest, proto, buf, len);
    109      1.1  christos }
    110      1.1  christos #endif /* IEEE8021X_EAPOL || !CONFIG_NO_WPA */
    111      1.1  christos 
    112      1.1  christos 
    113      1.1  christos #ifdef IEEE8021X_EAPOL
    114      1.1  christos 
    115      1.1  christos /**
    116      1.1  christos  * wpa_supplicant_eapol_send - Send IEEE 802.1X EAPOL packet to Authenticator
    117      1.1  christos  * @ctx: Pointer to wpa_supplicant data (wpa_s)
    118      1.1  christos  * @type: IEEE 802.1X packet type (IEEE802_1X_TYPE_*)
    119      1.1  christos  * @buf: EAPOL payload (after IEEE 802.1X header)
    120      1.1  christos  * @len: EAPOL payload length
    121      1.1  christos  * Returns: >=0 on success, <0 on failure
    122      1.1  christos  *
    123      1.1  christos  * This function adds Ethernet and IEEE 802.1X header and sends the EAPOL frame
    124      1.1  christos  * to the current Authenticator.
    125      1.1  christos  */
    126      1.1  christos static int wpa_supplicant_eapol_send(void *ctx, int type, const u8 *buf,
    127      1.1  christos 				     size_t len)
    128      1.1  christos {
    129      1.1  christos 	struct wpa_supplicant *wpa_s = ctx;
    130      1.1  christos 	u8 *msg, *dst, bssid[ETH_ALEN];
    131      1.1  christos 	size_t msglen;
    132      1.1  christos 	int res;
    133      1.1  christos 
    134      1.1  christos 	/* TODO: could add l2_packet_sendmsg that allows fragments to avoid
    135      1.1  christos 	 * extra copy here */
    136      1.1  christos 
    137      1.1  christos 	if (wpa_key_mgmt_wpa_psk(wpa_s->key_mgmt) ||
    138      1.1  christos 	    wpa_s->key_mgmt == WPA_KEY_MGMT_NONE) {
    139      1.1  christos 		/* Current SSID is not using IEEE 802.1X/EAP, so drop possible
    140      1.1  christos 		 * EAPOL frames (mainly, EAPOL-Start) from EAPOL state
    141      1.1  christos 		 * machines. */
    142      1.1  christos 		wpa_printf(MSG_DEBUG, "WPA: drop TX EAPOL in non-IEEE 802.1X "
    143      1.1  christos 			   "mode (type=%d len=%lu)", type,
    144      1.1  christos 			   (unsigned long) len);
    145      1.1  christos 		return -1;
    146      1.1  christos 	}
    147      1.1  christos 
    148      1.1  christos 	if (pmksa_cache_get_current(wpa_s->wpa) &&
    149      1.1  christos 	    type == IEEE802_1X_TYPE_EAPOL_START) {
    150      1.1  christos 		/* Trying to use PMKSA caching - do not send EAPOL-Start frames
    151      1.1  christos 		 * since they will trigger full EAPOL authentication. */
    152      1.1  christos 		wpa_printf(MSG_DEBUG, "RSN: PMKSA caching - do not send "
    153      1.1  christos 			   "EAPOL-Start");
    154      1.1  christos 		return -1;
    155      1.1  christos 	}
    156      1.1  christos 
    157      1.1  christos 	if (is_zero_ether_addr(wpa_s->bssid)) {
    158      1.1  christos 		wpa_printf(MSG_DEBUG, "BSSID not set when trying to send an "
    159      1.1  christos 			   "EAPOL frame");
    160      1.1  christos 		if (wpa_drv_get_bssid(wpa_s, bssid) == 0 &&
    161      1.1  christos 		    !is_zero_ether_addr(bssid)) {
    162      1.1  christos 			dst = bssid;
    163      1.1  christos 			wpa_printf(MSG_DEBUG, "Using current BSSID " MACSTR
    164      1.1  christos 				   " from the driver as the EAPOL destination",
    165      1.1  christos 				   MAC2STR(dst));
    166      1.1  christos 		} else {
    167      1.1  christos 			dst = wpa_s->last_eapol_src;
    168      1.1  christos 			wpa_printf(MSG_DEBUG, "Using the source address of the"
    169      1.1  christos 				   " last received EAPOL frame " MACSTR " as "
    170      1.1  christos 				   "the EAPOL destination",
    171      1.1  christos 				   MAC2STR(dst));
    172      1.1  christos 		}
    173      1.1  christos 	} else {
    174      1.1  christos 		/* BSSID was already set (from (Re)Assoc event, so use it as
    175      1.1  christos 		 * the EAPOL destination. */
    176      1.1  christos 		dst = wpa_s->bssid;
    177      1.1  christos 	}
    178      1.1  christos 
    179      1.1  christos 	msg = wpa_alloc_eapol(wpa_s, type, buf, len, &msglen, NULL);
    180      1.1  christos 	if (msg == NULL)
    181      1.1  christos 		return -1;
    182      1.1  christos 
    183      1.1  christos 	wpa_printf(MSG_DEBUG, "TX EAPOL: dst=" MACSTR, MAC2STR(dst));
    184      1.1  christos 	wpa_hexdump(MSG_MSGDUMP, "TX EAPOL", msg, msglen);
    185      1.1  christos 	res = wpa_ether_send(wpa_s, dst, ETH_P_EAPOL, msg, msglen);
    186      1.1  christos 	os_free(msg);
    187      1.1  christos 	return res;
    188      1.1  christos }
    189      1.1  christos 
    190      1.1  christos 
    191      1.1  christos /**
    192      1.1  christos  * wpa_eapol_set_wep_key - set WEP key for the driver
    193      1.1  christos  * @ctx: Pointer to wpa_supplicant data (wpa_s)
    194      1.1  christos  * @unicast: 1 = individual unicast key, 0 = broadcast key
    195      1.1  christos  * @keyidx: WEP key index (0..3)
    196      1.1  christos  * @key: Pointer to key data
    197      1.1  christos  * @keylen: Key length in bytes
    198      1.1  christos  * Returns: 0 on success or < 0 on error.
    199      1.1  christos  */
    200      1.1  christos static int wpa_eapol_set_wep_key(void *ctx, int unicast, int keyidx,
    201      1.1  christos 				 const u8 *key, size_t keylen)
    202      1.1  christos {
    203      1.1  christos 	struct wpa_supplicant *wpa_s = ctx;
    204      1.1  christos 	if (wpa_s->key_mgmt == WPA_KEY_MGMT_IEEE8021X_NO_WPA) {
    205      1.1  christos 		int cipher = (keylen == 5) ? WPA_CIPHER_WEP40 :
    206      1.1  christos 			WPA_CIPHER_WEP104;
    207      1.1  christos 		if (unicast)
    208      1.1  christos 			wpa_s->pairwise_cipher = cipher;
    209      1.1  christos 		else
    210      1.1  christos 			wpa_s->group_cipher = cipher;
    211      1.1  christos 	}
    212      1.1  christos 	return wpa_drv_set_key(wpa_s, WPA_ALG_WEP,
    213      1.1  christos 			       unicast ? wpa_s->bssid :
    214      1.1  christos 			       (u8 *) "\xff\xff\xff\xff\xff\xff",
    215      1.1  christos 			       keyidx, unicast, (u8 *) "", 0, key, keylen);
    216      1.1  christos }
    217      1.1  christos 
    218      1.1  christos 
    219      1.1  christos static void wpa_supplicant_aborted_cached(void *ctx)
    220      1.1  christos {
    221      1.1  christos 	struct wpa_supplicant *wpa_s = ctx;
    222      1.1  christos 	wpa_sm_aborted_cached(wpa_s->wpa);
    223      1.1  christos }
    224      1.1  christos 
    225      1.1  christos 
    226      1.1  christos static void wpa_supplicant_eapol_cb(struct eapol_sm *eapol, int success,
    227      1.1  christos 				    void *ctx)
    228      1.1  christos {
    229      1.1  christos 	struct wpa_supplicant *wpa_s = ctx;
    230      1.1  christos 	int res, pmk_len;
    231      1.1  christos 	u8 pmk[PMK_LEN];
    232      1.1  christos 
    233      1.1  christos 	wpa_printf(MSG_DEBUG, "EAPOL authentication completed %ssuccessfully",
    234      1.1  christos 		   success ? "" : "un");
    235      1.1  christos 
    236      1.1  christos 	if (wpas_wps_eapol_cb(wpa_s) > 0)
    237      1.1  christos 		return;
    238      1.1  christos 
    239      1.1  christos 	if (!success) {
    240      1.1  christos 		/*
    241      1.1  christos 		 * Make sure we do not get stuck here waiting for long EAPOL
    242      1.1  christos 		 * timeout if the AP does not disconnect in case of
    243      1.1  christos 		 * authentication failure.
    244      1.1  christos 		 */
    245      1.1  christos 		wpa_supplicant_req_auth_timeout(wpa_s, 2, 0);
    246      1.1  christos 	}
    247      1.1  christos 
    248      1.1  christos 	if (!success || !(wpa_s->drv_flags & WPA_DRIVER_FLAGS_4WAY_HANDSHAKE))
    249      1.1  christos 		return;
    250      1.1  christos 
    251      1.1  christos 	if (!wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt))
    252      1.1  christos 		return;
    253      1.1  christos 
    254      1.1  christos 	wpa_printf(MSG_DEBUG, "Configure PMK for driver-based RSN 4-way "
    255      1.1  christos 		   "handshake");
    256      1.1  christos 
    257      1.1  christos 	pmk_len = PMK_LEN;
    258      1.1  christos 	res = eapol_sm_get_key(eapol, pmk, PMK_LEN);
    259      1.1  christos 	if (res) {
    260      1.1  christos 		/*
    261      1.1  christos 		 * EAP-LEAP is an exception from other EAP methods: it
    262      1.1  christos 		 * uses only 16-byte PMK.
    263      1.1  christos 		 */
    264      1.1  christos 		res = eapol_sm_get_key(eapol, pmk, 16);
    265      1.1  christos 		pmk_len = 16;
    266      1.1  christos 	}
    267      1.1  christos 
    268      1.1  christos 	if (res) {
    269      1.1  christos 		wpa_printf(MSG_DEBUG, "Failed to get PMK from EAPOL state "
    270      1.1  christos 			   "machines");
    271      1.1  christos 		return;
    272      1.1  christos 	}
    273      1.1  christos 
    274      1.1  christos 	if (wpa_drv_set_key(wpa_s, WPA_ALG_PMK, NULL, 0, 0, NULL, 0, pmk,
    275      1.1  christos 			    pmk_len)) {
    276      1.1  christos 		wpa_printf(MSG_DEBUG, "Failed to set PMK to the driver");
    277      1.1  christos 	}
    278      1.1  christos 
    279      1.1  christos 	wpa_supplicant_cancel_scan(wpa_s);
    280      1.1  christos 	wpa_supplicant_cancel_auth_timeout(wpa_s);
    281      1.1  christos 	wpa_supplicant_set_state(wpa_s, WPA_COMPLETED);
    282      1.1  christos 
    283      1.1  christos }
    284      1.1  christos 
    285      1.1  christos 
    286      1.1  christos static void wpa_supplicant_notify_eapol_done(void *ctx)
    287      1.1  christos {
    288      1.1  christos 	struct wpa_supplicant *wpa_s = ctx;
    289      1.1  christos 	wpa_msg(wpa_s, MSG_DEBUG, "WPA: EAPOL processing complete");
    290      1.1  christos 	if (wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt)) {
    291      1.1  christos 		wpa_supplicant_set_state(wpa_s, WPA_4WAY_HANDSHAKE);
    292      1.1  christos 	} else {
    293      1.1  christos 		wpa_supplicant_cancel_auth_timeout(wpa_s);
    294      1.1  christos 		wpa_supplicant_set_state(wpa_s, WPA_COMPLETED);
    295      1.1  christos 	}
    296      1.1  christos }
    297      1.1  christos 
    298      1.1  christos #endif /* IEEE8021X_EAPOL */
    299      1.1  christos 
    300      1.1  christos 
    301      1.1  christos #ifndef CONFIG_NO_WPA
    302      1.1  christos 
    303      1.1  christos static int wpa_get_beacon_ie(struct wpa_supplicant *wpa_s)
    304      1.1  christos {
    305      1.1  christos 	int ret = 0;
    306      1.1  christos 	struct wpa_bss *curr = NULL, *bss;
    307      1.1  christos 	struct wpa_ssid *ssid = wpa_s->current_ssid;
    308      1.1  christos 	const u8 *ie;
    309      1.1  christos 
    310      1.1  christos 	dl_list_for_each(bss, &wpa_s->bss, struct wpa_bss, list) {
    311      1.1  christos 		if (os_memcmp(bss->bssid, wpa_s->bssid, ETH_ALEN) != 0)
    312      1.1  christos 			continue;
    313      1.1  christos 		if (ssid == NULL ||
    314      1.1  christos 		    ((bss->ssid_len == ssid->ssid_len &&
    315      1.1  christos 		      os_memcmp(bss->ssid, ssid->ssid, ssid->ssid_len) == 0) ||
    316      1.1  christos 		     ssid->ssid_len == 0)) {
    317      1.1  christos 			curr = bss;
    318      1.1  christos 			break;
    319      1.1  christos 		}
    320      1.1  christos 	}
    321      1.1  christos 
    322      1.1  christos 	if (curr) {
    323      1.1  christos 		ie = wpa_bss_get_vendor_ie(curr, WPA_IE_VENDOR_TYPE);
    324      1.1  christos 		if (wpa_sm_set_ap_wpa_ie(wpa_s->wpa, ie, ie ? 2 + ie[1] : 0))
    325      1.1  christos 			ret = -1;
    326      1.1  christos 
    327      1.1  christos 		ie = wpa_bss_get_ie(curr, WLAN_EID_RSN);
    328      1.1  christos 		if (wpa_sm_set_ap_rsn_ie(wpa_s->wpa, ie, ie ? 2 + ie[1] : 0))
    329      1.1  christos 			ret = -1;
    330      1.1  christos 	} else {
    331      1.1  christos 		ret = -1;
    332      1.1  christos 	}
    333      1.1  christos 
    334      1.1  christos 	return ret;
    335      1.1  christos }
    336      1.1  christos 
    337      1.1  christos 
    338      1.1  christos static int wpa_supplicant_get_beacon_ie(void *ctx)
    339      1.1  christos {
    340      1.1  christos 	struct wpa_supplicant *wpa_s = ctx;
    341      1.1  christos 	if (wpa_get_beacon_ie(wpa_s) == 0) {
    342      1.1  christos 		return 0;
    343      1.1  christos 	}
    344      1.1  christos 
    345      1.1  christos 	/* No WPA/RSN IE found in the cached scan results. Try to get updated
    346      1.1  christos 	 * scan results from the driver. */
    347      1.1  christos 	if (wpa_supplicant_update_scan_results(wpa_s) < 0)
    348      1.1  christos 		return -1;
    349      1.1  christos 
    350      1.1  christos 	return wpa_get_beacon_ie(wpa_s);
    351      1.1  christos }
    352      1.1  christos 
    353      1.1  christos 
    354      1.1  christos static u8 * _wpa_alloc_eapol(void *wpa_s, u8 type,
    355      1.1  christos 			     const void *data, u16 data_len,
    356      1.1  christos 			     size_t *msg_len, void **data_pos)
    357      1.1  christos {
    358      1.1  christos 	return wpa_alloc_eapol(wpa_s, type, data, data_len, msg_len, data_pos);
    359      1.1  christos }
    360      1.1  christos 
    361      1.1  christos 
    362      1.1  christos static int _wpa_ether_send(void *wpa_s, const u8 *dest, u16 proto,
    363      1.1  christos 			   const u8 *buf, size_t len)
    364      1.1  christos {
    365      1.1  christos 	return wpa_ether_send(wpa_s, dest, proto, buf, len);
    366      1.1  christos }
    367      1.1  christos 
    368      1.1  christos 
    369      1.1  christos static void _wpa_supplicant_cancel_auth_timeout(void *wpa_s)
    370      1.1  christos {
    371      1.1  christos 	wpa_supplicant_cancel_auth_timeout(wpa_s);
    372      1.1  christos }
    373      1.1  christos 
    374      1.1  christos 
    375      1.1  christos static void _wpa_supplicant_set_state(void *wpa_s, enum wpa_states state)
    376      1.1  christos {
    377      1.1  christos 	wpa_supplicant_set_state(wpa_s, state);
    378      1.1  christos }
    379      1.1  christos 
    380      1.1  christos 
    381      1.1  christos /**
    382      1.1  christos  * wpa_supplicant_get_state - Get the connection state
    383      1.1  christos  * @wpa_s: Pointer to wpa_supplicant data
    384      1.1  christos  * Returns: The current connection state (WPA_*)
    385      1.1  christos  */
    386      1.1  christos static enum wpa_states wpa_supplicant_get_state(struct wpa_supplicant *wpa_s)
    387      1.1  christos {
    388      1.1  christos 	return wpa_s->wpa_state;
    389      1.1  christos }
    390      1.1  christos 
    391      1.1  christos 
    392      1.1  christos static enum wpa_states _wpa_supplicant_get_state(void *wpa_s)
    393      1.1  christos {
    394      1.1  christos 	return wpa_supplicant_get_state(wpa_s);
    395      1.1  christos }
    396      1.1  christos 
    397      1.1  christos 
    398      1.1  christos static void _wpa_supplicant_disassociate(void *wpa_s, int reason_code)
    399      1.1  christos {
    400      1.1  christos 	wpa_supplicant_disassociate(wpa_s, reason_code);
    401      1.1  christos 	/* Schedule a scan to make sure we continue looking for networks */
    402      1.1  christos 	wpa_supplicant_req_scan(wpa_s, 5, 0);
    403      1.1  christos }
    404      1.1  christos 
    405      1.1  christos 
    406      1.1  christos static void _wpa_supplicant_deauthenticate(void *wpa_s, int reason_code)
    407      1.1  christos {
    408      1.1  christos 	wpa_supplicant_deauthenticate(wpa_s, reason_code);
    409      1.1  christos 	/* Schedule a scan to make sure we continue looking for networks */
    410      1.1  christos 	wpa_supplicant_req_scan(wpa_s, 5, 0);
    411      1.1  christos }
    412      1.1  christos 
    413      1.1  christos 
    414      1.1  christos static void * wpa_supplicant_get_network_ctx(void *wpa_s)
    415      1.1  christos {
    416      1.1  christos 	return wpa_supplicant_get_ssid(wpa_s);
    417      1.1  christos }
    418      1.1  christos 
    419      1.1  christos 
    420      1.1  christos static int wpa_supplicant_get_bssid(void *ctx, u8 *bssid)
    421      1.1  christos {
    422      1.1  christos 	struct wpa_supplicant *wpa_s = ctx;
    423      1.1  christos 	if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_USER_SPACE_MLME) {
    424      1.1  christos 		os_memcpy(bssid, wpa_s->bssid, ETH_ALEN);
    425      1.1  christos 		return 0;
    426      1.1  christos 	}
    427      1.1  christos 	return wpa_drv_get_bssid(wpa_s, bssid);
    428      1.1  christos }
    429      1.1  christos 
    430      1.1  christos 
    431      1.1  christos static int wpa_supplicant_set_key(void *_wpa_s, enum wpa_alg alg,
    432      1.1  christos 				  const u8 *addr, int key_idx, int set_tx,
    433      1.1  christos 				  const u8 *seq, size_t seq_len,
    434      1.1  christos 				  const u8 *key, size_t key_len)
    435      1.1  christos {
    436      1.1  christos 	struct wpa_supplicant *wpa_s = _wpa_s;
    437      1.1  christos 	if (alg == WPA_ALG_TKIP && key_idx == 0 && key_len == 32) {
    438      1.1  christos 		/* Clear the MIC error counter when setting a new PTK. */
    439      1.1  christos 		wpa_s->mic_errors_seen = 0;
    440      1.1  christos 	}
    441      1.1  christos 	return wpa_drv_set_key(wpa_s, alg, addr, key_idx, set_tx, seq, seq_len,
    442      1.1  christos 			       key, key_len);
    443      1.1  christos }
    444      1.1  christos 
    445      1.1  christos 
    446      1.1  christos static int wpa_supplicant_mlme_setprotection(void *wpa_s, const u8 *addr,
    447      1.1  christos 					     int protection_type,
    448      1.1  christos 					     int key_type)
    449      1.1  christos {
    450      1.1  christos 	return wpa_drv_mlme_setprotection(wpa_s, addr, protection_type,
    451      1.1  christos 					  key_type);
    452      1.1  christos }
    453      1.1  christos 
    454      1.1  christos 
    455      1.1  christos static int wpa_supplicant_add_pmkid(void *wpa_s,
    456      1.1  christos 				    const u8 *bssid, const u8 *pmkid)
    457      1.1  christos {
    458      1.1  christos 	return wpa_drv_add_pmkid(wpa_s, bssid, pmkid);
    459      1.1  christos }
    460      1.1  christos 
    461      1.1  christos 
    462      1.1  christos static int wpa_supplicant_remove_pmkid(void *wpa_s,
    463      1.1  christos 				       const u8 *bssid, const u8 *pmkid)
    464      1.1  christos {
    465      1.1  christos 	return wpa_drv_remove_pmkid(wpa_s, bssid, pmkid);
    466      1.1  christos }
    467      1.1  christos 
    468      1.1  christos 
    469      1.1  christos #ifdef CONFIG_IEEE80211R
    470      1.1  christos static int wpa_supplicant_update_ft_ies(void *ctx, const u8 *md,
    471      1.1  christos 					const u8 *ies, size_t ies_len)
    472      1.1  christos {
    473      1.1  christos 	struct wpa_supplicant *wpa_s = ctx;
    474      1.1  christos 	if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_USER_SPACE_MLME)
    475      1.1  christos 		return ieee80211_sta_update_ft_ies(wpa_s, md, ies, ies_len);
    476      1.1  christos 	if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_SME)
    477      1.1  christos 		return sme_update_ft_ies(wpa_s, md, ies, ies_len);
    478      1.1  christos 	return wpa_drv_update_ft_ies(wpa_s, md, ies, ies_len);
    479      1.1  christos }
    480      1.1  christos 
    481      1.1  christos 
    482      1.1  christos static int wpa_supplicant_send_ft_action(void *ctx, u8 action,
    483      1.1  christos 					 const u8 *target_ap,
    484      1.1  christos 					 const u8 *ies, size_t ies_len)
    485      1.1  christos {
    486      1.1  christos 	struct wpa_supplicant *wpa_s = ctx;
    487      1.1  christos 	if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_USER_SPACE_MLME)
    488      1.1  christos 		return ieee80211_sta_send_ft_action(wpa_s, action, target_ap,
    489      1.1  christos 						    ies, ies_len);
    490      1.1  christos 	return wpa_drv_send_ft_action(wpa_s, action, target_ap, ies, ies_len);
    491      1.1  christos }
    492      1.1  christos 
    493      1.1  christos 
    494      1.1  christos static int wpa_supplicant_mark_authenticated(void *ctx, const u8 *target_ap)
    495      1.1  christos {
    496      1.1  christos 	struct wpa_supplicant *wpa_s = ctx;
    497      1.1  christos 	struct wpa_driver_auth_params params;
    498      1.1  christos 	struct wpa_bss *bss;
    499      1.1  christos 
    500      1.1  christos 	if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_USER_SPACE_MLME)
    501      1.1  christos 		return -1;
    502      1.1  christos 
    503      1.1  christos 	bss = wpa_bss_get_bssid(wpa_s, target_ap);
    504      1.1  christos 	if (bss == NULL)
    505      1.1  christos 		return -1;
    506      1.1  christos 
    507      1.1  christos 	os_memset(&params, 0, sizeof(params));
    508      1.1  christos 	params.bssid = target_ap;
    509      1.1  christos 	params.freq = bss->freq;
    510      1.1  christos 	params.ssid = bss->ssid;
    511      1.1  christos 	params.ssid_len = bss->ssid_len;
    512      1.1  christos 	params.auth_alg = WPA_AUTH_ALG_FT;
    513      1.1  christos 	params.local_state_change = 1;
    514      1.1  christos 	return wpa_drv_authenticate(wpa_s, &params);
    515      1.1  christos }
    516      1.1  christos #endif /* CONFIG_IEEE80211R */
    517      1.1  christos 
    518      1.1  christos #endif /* CONFIG_NO_WPA */
    519      1.1  christos 
    520      1.1  christos 
    521      1.1  christos #ifdef IEEE8021X_EAPOL
    522      1.1  christos #if defined(CONFIG_CTRL_IFACE) || !defined(CONFIG_NO_STDOUT_DEBUG)
    523      1.1  christos static void wpa_supplicant_eap_param_needed(void *ctx, const char *field,
    524      1.1  christos 					    const char *txt)
    525      1.1  christos {
    526      1.1  christos 	struct wpa_supplicant *wpa_s = ctx;
    527      1.1  christos 	struct wpa_ssid *ssid = wpa_s->current_ssid;
    528      1.1  christos 	char *buf;
    529      1.1  christos 	size_t buflen;
    530      1.1  christos 	int len;
    531      1.1  christos 
    532      1.1  christos 	if (ssid == NULL)
    533      1.1  christos 		return;
    534      1.1  christos 
    535      1.1  christos 	buflen = 100 + os_strlen(txt) + ssid->ssid_len;
    536      1.1  christos 	buf = os_malloc(buflen);
    537      1.1  christos 	if (buf == NULL)
    538      1.1  christos 		return;
    539      1.1  christos 	len = os_snprintf(buf, buflen,
    540      1.1  christos 			  WPA_CTRL_REQ "%s-%d:%s needed for SSID ",
    541      1.1  christos 			  field, ssid->id, txt);
    542      1.1  christos 	if (len < 0 || (size_t) len >= buflen) {
    543      1.1  christos 		os_free(buf);
    544      1.1  christos 		return;
    545      1.1  christos 	}
    546      1.1  christos 	if (ssid->ssid && buflen > len + ssid->ssid_len) {
    547      1.1  christos 		os_memcpy(buf + len, ssid->ssid, ssid->ssid_len);
    548      1.1  christos 		len += ssid->ssid_len;
    549      1.1  christos 		buf[len] = '\0';
    550      1.1  christos 	}
    551      1.1  christos 	buf[buflen - 1] = '\0';
    552      1.1  christos 	wpa_msg(wpa_s, MSG_INFO, "%s", buf);
    553      1.1  christos 	os_free(buf);
    554      1.1  christos }
    555      1.1  christos #else /* CONFIG_CTRL_IFACE || !CONFIG_NO_STDOUT_DEBUG */
    556      1.1  christos #define wpa_supplicant_eap_param_needed NULL
    557      1.1  christos #endif /* CONFIG_CTRL_IFACE || !CONFIG_NO_STDOUT_DEBUG */
    558      1.1  christos 
    559      1.1  christos 
    560      1.1  christos static void wpa_supplicant_port_cb(void *ctx, int authorized)
    561      1.1  christos {
    562      1.1  christos 	struct wpa_supplicant *wpa_s = ctx;
    563  1.1.1.2  christos #ifdef CONFIG_AP
    564  1.1.1.2  christos 	if (wpa_s->ap_iface) {
    565  1.1.1.2  christos 		wpa_printf(MSG_DEBUG, "AP mode active - skip EAPOL Supplicant "
    566  1.1.1.2  christos 			   "port status: %s",
    567  1.1.1.2  christos 			   authorized ? "Authorized" : "Unauthorized");
    568  1.1.1.2  christos 		return;
    569  1.1.1.2  christos 	}
    570  1.1.1.2  christos #endif /* CONFIG_AP */
    571      1.1  christos 	wpa_printf(MSG_DEBUG, "EAPOL: Supplicant port status: %s",
    572      1.1  christos 		   authorized ? "Authorized" : "Unauthorized");
    573      1.1  christos 	wpa_drv_set_supp_port(wpa_s, authorized);
    574      1.1  christos }
    575      1.1  christos #endif /* IEEE8021X_EAPOL */
    576      1.1  christos 
    577      1.1  christos 
    578      1.1  christos int wpa_supplicant_init_eapol(struct wpa_supplicant *wpa_s)
    579      1.1  christos {
    580      1.1  christos #ifdef IEEE8021X_EAPOL
    581      1.1  christos 	struct eapol_ctx *ctx;
    582      1.1  christos 	ctx = os_zalloc(sizeof(*ctx));
    583      1.1  christos 	if (ctx == NULL) {
    584      1.1  christos 		wpa_printf(MSG_ERROR, "Failed to allocate EAPOL context.");
    585      1.1  christos 		return -1;
    586      1.1  christos 	}
    587      1.1  christos 
    588      1.1  christos 	ctx->ctx = wpa_s;
    589      1.1  christos 	ctx->msg_ctx = wpa_s;
    590      1.1  christos 	ctx->eapol_send_ctx = wpa_s;
    591      1.1  christos 	ctx->preauth = 0;
    592      1.1  christos 	ctx->eapol_done_cb = wpa_supplicant_notify_eapol_done;
    593      1.1  christos 	ctx->eapol_send = wpa_supplicant_eapol_send;
    594      1.1  christos 	ctx->set_wep_key = wpa_eapol_set_wep_key;
    595      1.1  christos 	ctx->set_config_blob = wpa_supplicant_set_config_blob;
    596      1.1  christos 	ctx->get_config_blob = wpa_supplicant_get_config_blob;
    597      1.1  christos 	ctx->aborted_cached = wpa_supplicant_aborted_cached;
    598      1.1  christos 	ctx->opensc_engine_path = wpa_s->conf->opensc_engine_path;
    599      1.1  christos 	ctx->pkcs11_engine_path = wpa_s->conf->pkcs11_engine_path;
    600      1.1  christos 	ctx->pkcs11_module_path = wpa_s->conf->pkcs11_module_path;
    601      1.1  christos 	ctx->wps = wpa_s->wps;
    602      1.1  christos 	ctx->eap_param_needed = wpa_supplicant_eap_param_needed;
    603      1.1  christos 	ctx->port_cb = wpa_supplicant_port_cb;
    604      1.1  christos 	ctx->cb = wpa_supplicant_eapol_cb;
    605      1.1  christos 	ctx->cb_ctx = wpa_s;
    606      1.1  christos 	wpa_s->eapol = eapol_sm_init(ctx);
    607      1.1  christos 	if (wpa_s->eapol == NULL) {
    608      1.1  christos 		os_free(ctx);
    609      1.1  christos 		wpa_printf(MSG_ERROR, "Failed to initialize EAPOL state "
    610      1.1  christos 			   "machines.");
    611      1.1  christos 		return -1;
    612      1.1  christos 	}
    613      1.1  christos #endif /* IEEE8021X_EAPOL */
    614      1.1  christos 
    615      1.1  christos 	return 0;
    616      1.1  christos }
    617      1.1  christos 
    618      1.1  christos 
    619      1.1  christos int wpa_supplicant_init_wpa(struct wpa_supplicant *wpa_s)
    620      1.1  christos {
    621      1.1  christos #ifndef CONFIG_NO_WPA
    622      1.1  christos 	struct wpa_sm_ctx *ctx;
    623      1.1  christos 	ctx = os_zalloc(sizeof(*ctx));
    624      1.1  christos 	if (ctx == NULL) {
    625      1.1  christos 		wpa_printf(MSG_ERROR, "Failed to allocate WPA context.");
    626      1.1  christos 		return -1;
    627      1.1  christos 	}
    628      1.1  christos 
    629      1.1  christos 	ctx->ctx = wpa_s;
    630      1.1  christos 	ctx->msg_ctx = wpa_s;
    631      1.1  christos 	ctx->set_state = _wpa_supplicant_set_state;
    632      1.1  christos 	ctx->get_state = _wpa_supplicant_get_state;
    633      1.1  christos 	ctx->deauthenticate = _wpa_supplicant_deauthenticate;
    634      1.1  christos 	ctx->disassociate = _wpa_supplicant_disassociate;
    635      1.1  christos 	ctx->set_key = wpa_supplicant_set_key;
    636      1.1  christos 	ctx->get_network_ctx = wpa_supplicant_get_network_ctx;
    637      1.1  christos 	ctx->get_bssid = wpa_supplicant_get_bssid;
    638      1.1  christos 	ctx->ether_send = _wpa_ether_send;
    639      1.1  christos 	ctx->get_beacon_ie = wpa_supplicant_get_beacon_ie;
    640      1.1  christos 	ctx->alloc_eapol = _wpa_alloc_eapol;
    641      1.1  christos 	ctx->cancel_auth_timeout = _wpa_supplicant_cancel_auth_timeout;
    642      1.1  christos 	ctx->add_pmkid = wpa_supplicant_add_pmkid;
    643      1.1  christos 	ctx->remove_pmkid = wpa_supplicant_remove_pmkid;
    644      1.1  christos #ifndef CONFIG_NO_CONFIG_BLOBS
    645      1.1  christos 	ctx->set_config_blob = wpa_supplicant_set_config_blob;
    646      1.1  christos 	ctx->get_config_blob = wpa_supplicant_get_config_blob;
    647      1.1  christos #endif /* CONFIG_NO_CONFIG_BLOBS */
    648      1.1  christos 	ctx->mlme_setprotection = wpa_supplicant_mlme_setprotection;
    649      1.1  christos #ifdef CONFIG_IEEE80211R
    650      1.1  christos 	ctx->update_ft_ies = wpa_supplicant_update_ft_ies;
    651      1.1  christos 	ctx->send_ft_action = wpa_supplicant_send_ft_action;
    652      1.1  christos 	ctx->mark_authenticated = wpa_supplicant_mark_authenticated;
    653      1.1  christos #endif /* CONFIG_IEEE80211R */
    654      1.1  christos 
    655      1.1  christos 	wpa_s->wpa = wpa_sm_init(ctx);
    656      1.1  christos 	if (wpa_s->wpa == NULL) {
    657      1.1  christos 		wpa_printf(MSG_ERROR, "Failed to initialize WPA state "
    658      1.1  christos 			   "machine");
    659      1.1  christos 		return -1;
    660      1.1  christos 	}
    661      1.1  christos #endif /* CONFIG_NO_WPA */
    662      1.1  christos 
    663      1.1  christos 	return 0;
    664      1.1  christos }
    665      1.1  christos 
    666      1.1  christos 
    667      1.1  christos void wpa_supplicant_rsn_supp_set_config(struct wpa_supplicant *wpa_s,
    668      1.1  christos 					struct wpa_ssid *ssid)
    669      1.1  christos {
    670      1.1  christos 	struct rsn_supp_config conf;
    671      1.1  christos 	if (ssid) {
    672      1.1  christos 		os_memset(&conf, 0, sizeof(conf));
    673      1.1  christos 		conf.network_ctx = ssid;
    674      1.1  christos 		conf.peerkey_enabled = ssid->peerkey;
    675      1.1  christos 		conf.allowed_pairwise_cipher = ssid->pairwise_cipher;
    676      1.1  christos #ifdef IEEE8021X_EAPOL
    677      1.1  christos 		conf.eap_workaround = ssid->eap_workaround;
    678      1.1  christos 		conf.eap_conf_ctx = &ssid->eap;
    679      1.1  christos #endif /* IEEE8021X_EAPOL */
    680      1.1  christos 		conf.ssid = ssid->ssid;
    681      1.1  christos 		conf.ssid_len = ssid->ssid_len;
    682      1.1  christos 		conf.wpa_ptk_rekey = ssid->wpa_ptk_rekey;
    683      1.1  christos 	}
    684      1.1  christos 	wpa_sm_set_config(wpa_s->wpa, ssid ? &conf : NULL);
    685      1.1  christos }
    686