]>
Commit | Line | Data |
---|---|---|
6fc6879b | 1 | /* |
41d719d6 | 2 | * hostapd / Configuration definitions and helpers functions |
eb53b752 | 3 | * Copyright (c) 2003-2009, Jouni Malinen <j@w1.fi> |
6fc6879b JM |
4 | * |
5 | * This program is free software; you can redistribute it and/or modify | |
6 | * it under the terms of the GNU General Public License version 2 as | |
7 | * published by the Free Software Foundation. | |
8 | * | |
9 | * Alternatively, this software may be distributed under the terms of BSD | |
10 | * license. | |
11 | * | |
12 | * See README and COPYING for more details. | |
13 | */ | |
14 | ||
094393b1 JM |
15 | #ifndef HOSTAPD_CONFIG_H |
16 | #define HOSTAPD_CONFIG_H | |
6fc6879b | 17 | |
90973fb2 | 18 | #include "common/defs.h" |
6fc6879b | 19 | #include "ip_addr.h" |
90973fb2 | 20 | #include "common/wpa_common.h" |
2f646b6e | 21 | #include "wps/wps.h" |
6fc6879b | 22 | |
41d719d6 JM |
23 | #define MAX_STA_COUNT 2007 |
24 | #define MAX_VLAN_ID 4094 | |
25 | ||
6fc6879b JM |
26 | typedef u8 macaddr[ETH_ALEN]; |
27 | ||
271d2830 JM |
28 | struct mac_acl_entry { |
29 | macaddr addr; | |
30 | int vlan_id; | |
31 | }; | |
32 | ||
6fc6879b JM |
33 | struct hostapd_radius_servers; |
34 | struct ft_remote_r0kh; | |
35 | struct ft_remote_r1kh; | |
36 | ||
37 | #define HOSTAPD_MAX_SSID_LEN 32 | |
38 | ||
39 | #define NUM_WEP_KEYS 4 | |
40 | struct hostapd_wep_keys { | |
41 | u8 idx; | |
42 | u8 *key[NUM_WEP_KEYS]; | |
43 | size_t len[NUM_WEP_KEYS]; | |
44 | int keys_set; | |
45 | size_t default_len; /* key length used for dynamic key generation */ | |
46 | }; | |
47 | ||
48 | typedef enum hostap_security_policy { | |
49 | SECURITY_PLAINTEXT = 0, | |
50 | SECURITY_STATIC_WEP = 1, | |
51 | SECURITY_IEEE_802_1X = 2, | |
52 | SECURITY_WPA_PSK = 3, | |
53 | SECURITY_WPA = 4 | |
54 | } secpolicy; | |
55 | ||
56 | struct hostapd_ssid { | |
57 | char ssid[HOSTAPD_MAX_SSID_LEN + 1]; | |
58 | size_t ssid_len; | |
59 | int ssid_set; | |
60 | ||
61 | char vlan[IFNAMSIZ + 1]; | |
62 | secpolicy security_policy; | |
63 | ||
64 | struct hostapd_wpa_psk *wpa_psk; | |
65 | char *wpa_passphrase; | |
66 | char *wpa_psk_file; | |
67 | ||
68 | struct hostapd_wep_keys wep; | |
69 | ||
70 | #define DYNAMIC_VLAN_DISABLED 0 | |
71 | #define DYNAMIC_VLAN_OPTIONAL 1 | |
72 | #define DYNAMIC_VLAN_REQUIRED 2 | |
73 | int dynamic_vlan; | |
74 | #ifdef CONFIG_FULL_DYNAMIC_VLAN | |
75 | char *vlan_tagged_interface; | |
76 | #endif /* CONFIG_FULL_DYNAMIC_VLAN */ | |
77 | struct hostapd_wep_keys **dyn_vlan_keys; | |
78 | size_t max_dyn_vlan_keys; | |
79 | }; | |
80 | ||
81 | ||
82 | #define VLAN_ID_WILDCARD -1 | |
83 | ||
84 | struct hostapd_vlan { | |
85 | struct hostapd_vlan *next; | |
86 | int vlan_id; /* VLAN ID or -1 (VLAN_ID_WILDCARD) for wildcard entry */ | |
87 | char ifname[IFNAMSIZ + 1]; | |
88 | int dynamic_vlan; | |
89 | #ifdef CONFIG_FULL_DYNAMIC_VLAN | |
90 | ||
91 | #define DVLAN_CLEAN_BR 0x1 | |
92 | #define DVLAN_CLEAN_VLAN 0x2 | |
93 | #define DVLAN_CLEAN_VLAN_PORT 0x4 | |
94 | #define DVLAN_CLEAN_WLAN_PORT 0x8 | |
95 | int clean; | |
96 | #endif /* CONFIG_FULL_DYNAMIC_VLAN */ | |
97 | }; | |
98 | ||
99 | #define PMK_LEN 32 | |
100 | struct hostapd_wpa_psk { | |
101 | struct hostapd_wpa_psk *next; | |
102 | int group; | |
103 | u8 psk[PMK_LEN]; | |
104 | u8 addr[ETH_ALEN]; | |
105 | }; | |
106 | ||
6fc6879b JM |
107 | struct hostapd_eap_user { |
108 | struct hostapd_eap_user *next; | |
109 | u8 *identity; | |
110 | size_t identity_len; | |
111 | struct { | |
112 | int vendor; | |
113 | u32 method; | |
e9447a94 | 114 | } methods[EAP_MAX_METHODS]; |
6fc6879b JM |
115 | u8 *password; |
116 | size_t password_len; | |
117 | int phase2; | |
118 | int force_version; | |
119 | unsigned int wildcard_prefix:1; | |
120 | unsigned int password_hash:1; /* whether password is hashed with | |
121 | * nt_password_hash() */ | |
122 | int ttls_auth; /* EAP_TTLS_AUTH_* bitfield */ | |
123 | }; | |
124 | ||
125 | ||
7e3c1781 | 126 | #define NUM_TX_QUEUES 4 |
6fc6879b JM |
127 | |
128 | struct hostapd_tx_queue_params { | |
129 | int aifs; | |
130 | int cwmin; | |
131 | int cwmax; | |
132 | int burst; /* maximum burst time in 0.1 ms, i.e., 10 = 1 ms */ | |
6fc6879b JM |
133 | }; |
134 | ||
3ae0800c | 135 | struct hostapd_wmm_ac_params { |
6fc6879b JM |
136 | int cwmin; |
137 | int cwmax; | |
138 | int aifs; | |
3ae0800c | 139 | int txop_limit; /* in units of 32us */ |
6fc6879b JM |
140 | int admission_control_mandatory; |
141 | }; | |
142 | ||
143 | ||
4b2a77ab JM |
144 | #define MAX_ROAMING_CONSORTIUM_LEN 15 |
145 | ||
146 | struct hostapd_roaming_consortium { | |
147 | u8 len; | |
148 | u8 oi[MAX_ROAMING_CONSORTIUM_LEN]; | |
149 | }; | |
150 | ||
6fc6879b JM |
151 | /** |
152 | * struct hostapd_bss_config - Per-BSS configuration | |
153 | */ | |
154 | struct hostapd_bss_config { | |
155 | char iface[IFNAMSIZ + 1]; | |
156 | char bridge[IFNAMSIZ + 1]; | |
d38ae2ea | 157 | char wds_bridge[IFNAMSIZ + 1]; |
6fc6879b JM |
158 | |
159 | enum hostapd_logger_level logger_syslog_level, logger_stdout_level; | |
160 | ||
161 | unsigned int logger_syslog; /* module bitfield */ | |
162 | unsigned int logger_stdout; /* module bitfield */ | |
163 | ||
164 | char *dump_log_name; /* file name for state dump (SIGUSR1) */ | |
165 | ||
166 | int max_num_sta; /* maximum number of STAs in station table */ | |
167 | ||
168 | int dtim_period; | |
169 | ||
170 | int ieee802_1x; /* use IEEE 802.1X */ | |
171 | int eapol_version; | |
172 | int eap_server; /* Use internal EAP server instead of external | |
173 | * RADIUS server */ | |
174 | struct hostapd_eap_user *eap_user; | |
175 | char *eap_sim_db; | |
176 | struct hostapd_ip_addr own_ip_addr; | |
177 | char *nas_identifier; | |
178 | struct hostapd_radius_servers *radius; | |
5843e1c9 | 179 | int acct_interim_interval; |
6fc6879b JM |
180 | |
181 | struct hostapd_ssid ssid; | |
182 | ||
183 | char *eap_req_id_text; /* optional displayable message sent with | |
184 | * EAP Request-Identity */ | |
185 | size_t eap_req_id_text_len; | |
186 | int eapol_key_index_workaround; | |
187 | ||
188 | size_t default_wep_key_len; | |
189 | int individual_wep_key_len; | |
190 | int wep_rekeying_period; | |
191 | int broadcast_key_idx_min, broadcast_key_idx_max; | |
192 | int eap_reauth_period; | |
193 | ||
194 | int ieee802_11f; /* use IEEE 802.11f (IAPP) */ | |
195 | char iapp_iface[IFNAMSIZ + 1]; /* interface used with IAPP broadcast | |
196 | * frames */ | |
197 | ||
6fc6879b JM |
198 | enum { |
199 | ACCEPT_UNLESS_DENIED = 0, | |
200 | DENY_UNLESS_ACCEPTED = 1, | |
201 | USE_EXTERNAL_RADIUS_AUTH = 2 | |
202 | } macaddr_acl; | |
271d2830 | 203 | struct mac_acl_entry *accept_mac; |
6fc6879b | 204 | int num_accept_mac; |
271d2830 | 205 | struct mac_acl_entry *deny_mac; |
6fc6879b | 206 | int num_deny_mac; |
fbbfcbac | 207 | int wds_sta; |
d3b42869 | 208 | int isolate; |
6fc6879b JM |
209 | |
210 | int auth_algs; /* bitfield of allowed IEEE 802.11 authentication | |
211 | * algorithms, WPA_AUTH_ALG_{OPEN,SHARED,LEAP} */ | |
212 | ||
213 | int wpa; /* bitfield of WPA_PROTO_WPA, WPA_PROTO_RSN */ | |
214 | int wpa_key_mgmt; | |
215 | #ifdef CONFIG_IEEE80211W | |
c746331b | 216 | enum mfp_options ieee80211w; |
45c94154 JM |
217 | /* dot11AssociationSAQueryMaximumTimeout (in TUs) */ |
218 | unsigned int assoc_sa_query_max_timeout; | |
219 | /* dot11AssociationSAQueryRetryTimeout (in TUs) */ | |
220 | int assoc_sa_query_retry_timeout; | |
6fc6879b JM |
221 | #endif /* CONFIG_IEEE80211W */ |
222 | int wpa_pairwise; | |
223 | int wpa_group; | |
224 | int wpa_group_rekey; | |
225 | int wpa_strict_rekey; | |
226 | int wpa_gmk_rekey; | |
581a8cde | 227 | int wpa_ptk_rekey; |
6fc6879b JM |
228 | int rsn_pairwise; |
229 | int rsn_preauth; | |
230 | char *rsn_preauth_interfaces; | |
231 | int peerkey; | |
232 | ||
233 | #ifdef CONFIG_IEEE80211R | |
234 | /* IEEE 802.11r - Fast BSS Transition */ | |
235 | u8 mobility_domain[MOBILITY_DOMAIN_ID_LEN]; | |
236 | u8 r1_key_holder[FT_R1KH_ID_LEN]; | |
237 | u32 r0_key_lifetime; | |
238 | u32 reassociation_deadline; | |
239 | struct ft_remote_r0kh *r0kh_list; | |
240 | struct ft_remote_r1kh *r1kh_list; | |
241 | int pmk_r1_push; | |
d7956add | 242 | int ft_over_ds; |
6fc6879b JM |
243 | #endif /* CONFIG_IEEE80211R */ |
244 | ||
245 | char *ctrl_interface; /* directory for UNIX domain sockets */ | |
08230317 | 246 | #ifndef CONFIG_NATIVE_WINDOWS |
6fc6879b | 247 | gid_t ctrl_interface_gid; |
08230317 | 248 | #endif /* CONFIG_NATIVE_WINDOWS */ |
6fc6879b JM |
249 | int ctrl_interface_gid_set; |
250 | ||
251 | char *ca_cert; | |
252 | char *server_cert; | |
253 | char *private_key; | |
254 | char *private_key_passwd; | |
255 | int check_crl; | |
256 | char *dh_file; | |
257 | u8 *pac_opaque_encr_key; | |
2d867244 JM |
258 | u8 *eap_fast_a_id; |
259 | size_t eap_fast_a_id_len; | |
260 | char *eap_fast_a_id_info; | |
378eae5e | 261 | int eap_fast_prov; |
a11c90a6 JM |
262 | int pac_key_lifetime; |
263 | int pac_key_refresh_time; | |
6fc6879b | 264 | int eap_sim_aka_result_ind; |
da08a7c7 | 265 | int tnc; |
7f6ec672 | 266 | int fragment_size; |
df684d82 | 267 | u16 pwd_group; |
6fc6879b JM |
268 | |
269 | char *radius_server_clients; | |
270 | int radius_server_auth_port; | |
271 | int radius_server_ipv6; | |
272 | ||
273 | char *test_socket; /* UNIX domain socket path for driver_test */ | |
274 | ||
275 | int use_pae_group_addr; /* Whether to send EAPOL frames to PAE group | |
276 | * address instead of individual address | |
277 | * (for driver_wired.c). | |
278 | */ | |
279 | ||
280 | int ap_max_inactivity; | |
281 | int ignore_broadcast_ssid; | |
282 | ||
3ae0800c | 283 | int wmm_enabled; |
721abef9 | 284 | int wmm_uapsd; |
6fc6879b JM |
285 | |
286 | struct hostapd_vlan *vlan, *vlan_tail; | |
287 | ||
288 | macaddr bssid; | |
b0194fe0 JM |
289 | |
290 | /* | |
291 | * Maximum listen interval that STAs can use when associating with this | |
292 | * BSS. If a STA tries to use larger value, the association will be | |
293 | * denied with status code 51. | |
294 | */ | |
295 | u16 max_listen_interval; | |
bf98f7f3 | 296 | |
cb465555 | 297 | int disable_pmksa_caching; |
bf98f7f3 | 298 | int okc; /* Opportunistic Key Caching */ |
ad08c363 JM |
299 | |
300 | int wps_state; | |
301 | #ifdef CONFIG_WPS | |
302 | int ap_setup_locked; | |
303 | u8 uuid[16]; | |
304 | char *wps_pin_requests; | |
305 | char *device_name; | |
306 | char *manufacturer; | |
307 | char *model_name; | |
308 | char *model_number; | |
309 | char *serial_number; | |
2f646b6e | 310 | u8 device_type[WPS_DEV_TYPE_LEN]; |
ad08c363 JM |
311 | char *config_methods; |
312 | u8 os_version[4]; | |
313 | char *ap_pin; | |
6fa68a0e JM |
314 | int skip_cred_build; |
315 | u8 *extra_cred; | |
316 | size_t extra_cred_len; | |
d745c7cc | 317 | int wps_cred_processing; |
4c29cae9 JM |
318 | u8 *ap_settings; |
319 | size_t ap_settings_len; | |
f620268f JM |
320 | char *upnp_iface; |
321 | char *friendly_name; | |
322 | char *manufacturer_url; | |
323 | char *model_description; | |
324 | char *model_url; | |
325 | char *upc; | |
4028a7fd | 326 | struct wpabuf *wps_vendor_ext[MAX_WPS_VENDOR_EXTENSIONS]; |
ad08c363 | 327 | #endif /* CONFIG_WPS */ |
fa516558 | 328 | int pbc_in_m1; |
e44f8bf2 JM |
329 | |
330 | #define P2P_ENABLED BIT(0) | |
331 | #define P2P_GROUP_OWNER BIT(1) | |
332 | #define P2P_GROUP_FORMATION BIT(2) | |
962473c1 JM |
333 | #define P2P_MANAGE BIT(3) |
334 | #define P2P_ALLOW_CROSS_CONNECTION BIT(4) | |
e44f8bf2 | 335 | int p2p; |
0d7e5a3a JB |
336 | |
337 | int disassoc_low_ack; | |
1161ff1e JM |
338 | |
339 | #define TDLS_PROHIBIT BIT(0) | |
340 | #define TDLS_PROHIBIT_CHAN_SWITCH BIT(1) | |
341 | int tdls; | |
f39b07d7 | 342 | int disable_11n; |
b83e3e93 | 343 | |
39b97072 JM |
344 | /* IEEE 802.11v */ |
345 | int time_advertisement; | |
346 | char *time_zone; | |
347 | ||
b83e3e93 JM |
348 | /* IEEE 802.11u - Interworking */ |
349 | int interworking; | |
350 | int access_network_type; | |
351 | int internet; | |
352 | int asra; | |
353 | int esr; | |
354 | int uesa; | |
355 | int venue_info_set; | |
356 | u8 venue_group; | |
357 | u8 venue_type; | |
358 | u8 hessid[ETH_ALEN]; | |
4b2a77ab JM |
359 | |
360 | /* IEEE 802.11u - Roaming Consortium list */ | |
361 | unsigned int roaming_consortium_count; | |
362 | struct hostapd_roaming_consortium *roaming_consortium; | |
8e5f9134 BC |
363 | |
364 | u8 wps_rf_bands; /* RF bands for WPS (WPS_RF_*) */ | |
505a3694 JM |
365 | |
366 | #ifdef CONFIG_RADIUS_TEST | |
367 | char *dump_msk_file; | |
368 | #endif /* CONFIG_RADIUS_TEST */ | |
6fc6879b JM |
369 | }; |
370 | ||
371 | ||
6fc6879b JM |
372 | /** |
373 | * struct hostapd_config - Per-radio interface configuration | |
374 | */ | |
375 | struct hostapd_config { | |
376 | struct hostapd_bss_config *bss, *last_bss; | |
6fc6879b JM |
377 | size_t num_bss; |
378 | ||
379 | u16 beacon_int; | |
380 | int rts_threshold; | |
381 | int fragm_threshold; | |
382 | u8 send_probe_response; | |
383 | u8 channel; | |
71934751 | 384 | enum hostapd_hw_mode hw_mode; /* HOSTAPD_MODE_IEEE80211A, .. */ |
6fc6879b JM |
385 | enum { |
386 | LONG_PREAMBLE = 0, | |
387 | SHORT_PREAMBLE = 1 | |
388 | } preamble; | |
6fc6879b JM |
389 | |
390 | int *supported_rates; | |
391 | int *basic_rates; | |
392 | ||
c5121837 | 393 | const struct wpa_driver_ops *driver; |
6fc6879b | 394 | |
6fc6879b JM |
395 | int ap_table_max_size; |
396 | int ap_table_expiration_time; | |
397 | ||
398 | char country[3]; /* first two octets: country code as described in | |
399 | * ISO/IEC 3166-1. Third octet: | |
400 | * ' ' (ascii 32): all environments | |
401 | * 'O': Outdoor environemnt only | |
402 | * 'I': Indoor environment only | |
403 | */ | |
404 | ||
405 | int ieee80211d; | |
6fc6879b JM |
406 | |
407 | struct hostapd_tx_queue_params tx_queue[NUM_TX_QUEUES]; | |
408 | ||
409 | /* | |
3ae0800c | 410 | * WMM AC parameters, in same order as 802.1D, i.e. |
6fc6879b JM |
411 | * 0 = BE (best effort) |
412 | * 1 = BK (background) | |
413 | * 2 = VI (video) | |
414 | * 3 = VO (voice) | |
415 | */ | |
3ae0800c | 416 | struct hostapd_wmm_ac_params wmm_ac_params[4]; |
6fc6879b | 417 | |
9d2a76a2 JM |
418 | int ht_op_mode_fixed; |
419 | u16 ht_capab; | |
cfb7e8a0 | 420 | int ieee80211n; |
95da9bbc | 421 | int secondary_channel; |
29448243 | 422 | int require_ht; |
6fc6879b JM |
423 | }; |
424 | ||
425 | ||
426 | int hostapd_mac_comp(const void *a, const void *b); | |
427 | int hostapd_mac_comp_empty(const void *a); | |
89111f3b | 428 | struct hostapd_config * hostapd_config_defaults(void); |
41d719d6 | 429 | void hostapd_config_defaults_bss(struct hostapd_bss_config *bss); |
6fc6879b | 430 | void hostapd_config_free(struct hostapd_config *conf); |
271d2830 JM |
431 | int hostapd_maclist_found(struct mac_acl_entry *list, int num_entries, |
432 | const u8 *addr, int *vlan_id); | |
6fc6879b JM |
433 | int hostapd_rate_found(int *list, int rate); |
434 | int hostapd_wep_key_cmp(struct hostapd_wep_keys *a, | |
435 | struct hostapd_wep_keys *b); | |
436 | const u8 * hostapd_get_psk(const struct hostapd_bss_config *conf, | |
437 | const u8 *addr, const u8 *prev_psk); | |
438 | int hostapd_setup_wpa_psk(struct hostapd_bss_config *conf); | |
439 | const char * hostapd_get_vlan_id_ifname(struct hostapd_vlan *vlan, | |
440 | int vlan_id); | |
441 | const struct hostapd_eap_user * | |
442 | hostapd_get_eap_user(const struct hostapd_bss_config *conf, const u8 *identity, | |
443 | size_t identity_len, int phase2); | |
444 | ||
094393b1 | 445 | #endif /* HOSTAPD_CONFIG_H */ |