src/ap/ap_config.h

   1 /*
   2  * hostapd / Configuration definitions and helpers functions
   3  * Copyright (c) 2003-2015, Jouni Malinen <j@w1.fi>
   4  *
   5  * This software may be distributed under the terms of the BSD license.
   6  * See README for more details.
   7  */
   8
   9 #ifndef HOSTAPD_CONFIG_H
  10 #define HOSTAPD_CONFIG_H
  11
  12 #include "common/defs.h"
  13 #include "utils/list.h"
  14 #include "ip_addr.h"
  15 #include "common/wpa_common.h"
  16 #include "common/ieee802_11_defs.h"
  17 #include "common/ieee802_11_common.h"
  18 #include "crypto/sha256.h"
  19 #include "wps/wps.h"
  20 #include "fst/fst.h"
  21 #include "vlan.h"
  22
  23 /**
  24  * mesh_conf - local MBSS state and settings
  25  */
  26 struct mesh_conf {
  27         u8 meshid[32];
  28         u8 meshid_len;
  29         /* Active Path Selection Protocol Identifier */
  30         u8 mesh_pp_id;
  31         /* Active Path Selection Metric Identifier */
  32         u8 mesh_pm_id;
  33         /* Congestion Control Mode Identifier */
  34         u8 mesh_cc_id;
  35         /* Synchronization Protocol Identifier */
  36         u8 mesh_sp_id;
  37         /* Authentication Protocol Identifier */
  38         u8 mesh_auth_id;
  39         u8 *rsn_ie;
  40         int rsn_ie_len;
  41 #define MESH_CONF_SEC_NONE BIT(0)
  42 #define MESH_CONF_SEC_AUTH BIT(1)
  43 #define MESH_CONF_SEC_AMPE BIT(2)
  44         unsigned int security;
  45         enum mfp_options ieee80211w;
  46         int ocv;
  47         unsigned int pairwise_cipher;
  48         unsigned int group_cipher;
  49         unsigned int mgmt_group_cipher;
  50         int dot11MeshMaxRetries;
  51         int dot11MeshRetryTimeout; /* msec */
  52         int dot11MeshConfirmTimeout; /* msec */
  53         int dot11MeshHoldingTimeout; /* msec */
  54 };
  55
  56 #define MAX_STA_COUNT 2007
  57 #define MAX_VLAN_ID 4094
  58
  59 typedef u8 macaddr[ETH_ALEN];
  60
  61 struct mac_acl_entry {
  62         macaddr addr;
  63         struct vlan_description vlan_id;
  64 };
  65
  66 struct hostapd_radius_servers;
  67 struct ft_remote_r0kh;
  68 struct ft_remote_r1kh;
  69
  70 #ifdef CONFIG_WEP
  71 #define NUM_WEP_KEYS 4
  72 struct hostapd_wep_keys {
  73         u8 idx;
  74         u8 *key[NUM_WEP_KEYS];
  75         size_t len[NUM_WEP_KEYS];
  76         int keys_set;
  77         size_t default_len; /* key length used for dynamic key generation */
  78 };
  79 #endif /* CONFIG_WEP */
  80
  81 typedef enum hostap_security_policy {
  82         SECURITY_PLAINTEXT = 0,
  83 #ifdef CONFIG_WEP
  84         SECURITY_STATIC_WEP = 1,
  85 #endif /* CONFIG_WEP */
  86         SECURITY_IEEE_802_1X = 2,
  87         SECURITY_WPA_PSK = 3,
  88         SECURITY_WPA = 4,
  89         SECURITY_OSEN = 5
  90 } secpolicy;
  91
  92 struct hostapd_ssid {
  93         u8 ssid[SSID_MAX_LEN];
  94         size_t ssid_len;
  95         u32 short_ssid;
  96         unsigned int ssid_set:1;
  97         unsigned int utf8_ssid:1;
  98         unsigned int wpa_passphrase_set:1;
  99         unsigned int wpa_psk_set:1;
 100
 101         char vlan[IFNAMSIZ + 1];
 102         secpolicy security_policy;
 103
 104         struct hostapd_wpa_psk *wpa_psk;
 105         char *wpa_passphrase;
 106         char *wpa_psk_file;
 107         struct sae_pt *pt;
 108
 109 #ifdef CONFIG_WEP
 110         struct hostapd_wep_keys wep;
 111 #endif /* CONFIG_WEP */
 112
 113 #define DYNAMIC_VLAN_DISABLED 0
 114 #define DYNAMIC_VLAN_OPTIONAL 1
 115 #define DYNAMIC_VLAN_REQUIRED 2
 116         int dynamic_vlan;
 117 #define DYNAMIC_VLAN_NAMING_WITHOUT_DEVICE 0
 118 #define DYNAMIC_VLAN_NAMING_WITH_DEVICE 1
 119 #define DYNAMIC_VLAN_NAMING_END 2
 120         int vlan_naming;
 121         int per_sta_vif;
 122 #ifdef CONFIG_FULL_DYNAMIC_VLAN
 123         char *vlan_tagged_interface;
 124 #endif /* CONFIG_FULL_DYNAMIC_VLAN */
 125 };
 126
 127
 128 #define VLAN_ID_WILDCARD -1
 129
 130 struct hostapd_vlan {
 131         struct hostapd_vlan *next;
 132         int vlan_id; /* VLAN ID or -1 (VLAN_ID_WILDCARD) for wildcard entry */
 133         struct vlan_description vlan_desc;
 134         char ifname[IFNAMSIZ + 1];
 135         char bridge[IFNAMSIZ + 1];
 136         int configured;
 137         int dynamic_vlan;
 138 #ifdef CONFIG_FULL_DYNAMIC_VLAN
 139
 140 #define DVLAN_CLEAN_WLAN_PORT   0x8
 141         int clean;
 142 #endif /* CONFIG_FULL_DYNAMIC_VLAN */
 143 };
 144
 145 #define PMK_LEN 32
 146 #define KEYID_LEN 32
 147 #define MIN_PASSPHRASE_LEN 8
 148 #define MAX_PASSPHRASE_LEN 63
 149 struct hostapd_sta_wpa_psk_short {
 150         struct hostapd_sta_wpa_psk_short *next;
 151         unsigned int is_passphrase:1;
 152         u8 psk[PMK_LEN];
 153         char passphrase[MAX_PASSPHRASE_LEN + 1];
 154         int ref; /* (number of references held) - 1 */
 155 };
 156
 157 struct hostapd_wpa_psk {
 158         struct hostapd_wpa_psk *next;
 159         int group;
 160         char keyid[KEYID_LEN];
 161         int wps;
 162         u8 psk[PMK_LEN];
 163         u8 addr[ETH_ALEN];
 164         u8 p2p_dev_addr[ETH_ALEN];
 165         int vlan_id;
 166 };
 167
 168 struct hostapd_eap_user {
 169         struct hostapd_eap_user *next;
 170         u8 *identity;
 171         size_t identity_len;
 172         struct {
 173                 int vendor;
 174                 u32 method;
 175         } methods[EAP_MAX_METHODS];
 176         u8 *password;
 177         size_t password_len;
 178         u8 *salt;
 179         size_t salt_len; /* non-zero when password is salted */
 180         int phase2;
 181         int force_version;
 182         unsigned int wildcard_prefix:1;
 183         unsigned int password_hash:1; /* whether password is hashed with
 184                                        * nt_password_hash() */
 185         unsigned int remediation:1;
 186         unsigned int macacl:1;
 187         int ttls_auth; /* EAP_TTLS_AUTH_* bitfield */
 188         struct hostapd_radius_attr *accept_attr;
 189         u32 t_c_timestamp;
 190 };
 191
 192 struct hostapd_radius_attr {
 193         u8 type;
 194         struct wpabuf *val;
 195         struct hostapd_radius_attr *next;
 196 };
 197
 198
 199 #define NUM_TX_QUEUES 4
 200
 201 struct hostapd_tx_queue_params {
 202         int aifs;
 203         int cwmin;
 204         int cwmax;
 205         int burst; /* maximum burst time in 0.1 ms, i.e., 10 = 1 ms */
 206 };
 207
 208
 209 #define MAX_ROAMING_CONSORTIUM_LEN 15
 210
 211 struct hostapd_roaming_consortium {
 212         u8 len;
 213         u8 oi[MAX_ROAMING_CONSORTIUM_LEN];
 214 };
 215
 216 struct hostapd_lang_string {
 217         u8 lang[3];
 218         u8 name_len;
 219         u8 name[252];
 220 };
 221
 222 struct hostapd_venue_url {
 223         u8 venue_number;
 224         u8 url_len;
 225         u8 url[254];
 226 };
 227
 228 #define MAX_NAI_REALMS 10
 229 #define MAX_NAI_REALMLEN 255
 230 #define MAX_NAI_EAP_METHODS 5
 231 #define MAX_NAI_AUTH_TYPES 4
 232 struct hostapd_nai_realm_data {
 233         u8 encoding;
 234         char realm_buf[MAX_NAI_REALMLEN + 1];
 235         char *realm[MAX_NAI_REALMS];
 236         u8 eap_method_count;
 237         struct hostapd_nai_realm_eap {
 238                 u8 eap_method;
 239                 u8 num_auths;
 240                 u8 auth_id[MAX_NAI_AUTH_TYPES];
 241                 u8 auth_val[MAX_NAI_AUTH_TYPES];
 242         } eap_method[MAX_NAI_EAP_METHODS];
 243 };
 244
 245 struct anqp_element {
 246         struct dl_list list;
 247         u16 infoid;
 248         struct wpabuf *payload;
 249 };
 250
 251 struct fils_realm {
 252         struct dl_list list;
 253         u8 hash[2];
 254         char realm[];
 255 };
 256
 257 struct sae_password_entry {
 258         struct sae_password_entry *next;
 259         char *password;
 260         char *identifier;
 261         u8 peer_addr[ETH_ALEN];
 262         int vlan_id;
 263         struct sae_pt *pt;
 264 };
 265
 266 struct dpp_controller_conf {
 267         struct dpp_controller_conf *next;
 268         u8 pkhash[SHA256_MAC_LEN];
 269         struct hostapd_ip_addr ipaddr;
 270 };
 271
 272 struct airtime_sta_weight {
 273         struct airtime_sta_weight *next;
 274         unsigned int weight;
 275         u8 addr[ETH_ALEN];
 276 };
 277
 278 /**
 279  * struct hostapd_bss_config - Per-BSS configuration
 280  */
 281 struct hostapd_bss_config {
 282         char iface[IFNAMSIZ + 1];
 283         char bridge[IFNAMSIZ + 1];
 284         char vlan_bridge[IFNAMSIZ + 1];
 285         char wds_bridge[IFNAMSIZ + 1];
 286
 287         enum hostapd_logger_level logger_syslog_level, logger_stdout_level;
 288
 289         unsigned int logger_syslog; /* module bitfield */
 290         unsigned int logger_stdout; /* module bitfield */
 291
 292         int max_num_sta; /* maximum number of STAs in station table */
 293
 294         int dtim_period;
 295         unsigned int bss_load_update_period;
 296         unsigned int chan_util_avg_period;
 297
 298         int ieee802_1x; /* use IEEE 802.1X */
 299         int eapol_version;
 300         int eap_server; /* Use internal EAP server instead of external
 301                          * RADIUS server */
 302         struct hostapd_eap_user *eap_user;
 303         char *eap_user_sqlite;
 304         char *eap_sim_db;
 305         unsigned int eap_sim_db_timeout;
 306         int eap_server_erp; /* Whether ERP is enabled on internal EAP server */
 307         struct hostapd_ip_addr own_ip_addr;
 308         char *nas_identifier;
 309         struct hostapd_radius_servers *radius;
 310         int acct_interim_interval;
 311         int radius_request_cui;
 312         struct hostapd_radius_attr *radius_auth_req_attr;
 313         struct hostapd_radius_attr *radius_acct_req_attr;
 314         char *radius_req_attr_sqlite;
 315         int radius_das_port;
 316         unsigned int radius_das_time_window;
 317         int radius_das_require_event_timestamp;
 318         int radius_das_require_message_authenticator;
 319         struct hostapd_ip_addr radius_das_client_addr;
 320         u8 *radius_das_shared_secret;
 321         size_t radius_das_shared_secret_len;
 322
 323         struct hostapd_ssid ssid;
 324
 325         char *eap_req_id_text; /* optional displayable message sent with
 326                                 * EAP Request-Identity */
 327         size_t eap_req_id_text_len;
 328         int eapol_key_index_workaround;
 329
 330 #ifdef CONFIG_WEP
 331         size_t default_wep_key_len;
 332         int individual_wep_key_len;
 333         int wep_rekeying_period;
 334         int broadcast_key_idx_min, broadcast_key_idx_max;
 335 #endif /* CONFIG_WEP */
 336         int eap_reauth_period;
 337         int erp_send_reauth_start;
 338         char *erp_domain;
 339
 340         enum macaddr_acl {
 341                 ACCEPT_UNLESS_DENIED = 0,
 342                 DENY_UNLESS_ACCEPTED = 1,
 343                 USE_EXTERNAL_RADIUS_AUTH = 2
 344         } macaddr_acl;
 345         struct mac_acl_entry *accept_mac;
 346         int num_accept_mac;
 347         struct mac_acl_entry *deny_mac;
 348         int num_deny_mac;
 349         int wds_sta;
 350         int isolate;
 351         int start_disabled;
 352
 353         int auth_algs; /* bitfield of allowed IEEE 802.11 authentication
 354                         * algorithms, WPA_AUTH_ALG_{OPEN,SHARED,LEAP} */
 355
 356         int wpa; /* bitfield of WPA_PROTO_WPA, WPA_PROTO_RSN */
 357         int wpa_key_mgmt;
 358         enum mfp_options ieee80211w;
 359         int group_mgmt_cipher;
 360         int beacon_prot;
 361         /* dot11AssociationSAQueryMaximumTimeout (in TUs) */
 362         unsigned int assoc_sa_query_max_timeout;
 363         /* dot11AssociationSAQueryRetryTimeout (in TUs) */
 364         int assoc_sa_query_retry_timeout;
 365 #ifdef CONFIG_OCV
 366         int ocv; /* Operating Channel Validation */
 367 #endif /* CONFIG_OCV */
 368         enum {
 369                 PSK_RADIUS_IGNORED = 0,
 370                 PSK_RADIUS_ACCEPTED = 1,
 371                 PSK_RADIUS_REQUIRED = 2
 372         } wpa_psk_radius;
 373         int wpa_pairwise;
 374         int group_cipher; /* wpa_group value override from configuation */
 375         int wpa_group;
 376         int wpa_group_rekey;
 377         int wpa_group_rekey_set;
 378         int wpa_strict_rekey;
 379         int wpa_gmk_rekey;
 380         int wpa_ptk_rekey;
 381         enum ptk0_rekey_handling wpa_deny_ptk0_rekey;
 382         u32 wpa_group_update_count;
 383         u32 wpa_pairwise_update_count;
 384         int wpa_disable_eapol_key_retries;
 385         int rsn_pairwise;
 386         int rsn_preauth;
 387         char *rsn_preauth_interfaces;
 388
 389 #ifdef CONFIG_IEEE80211R_AP
 390         /* IEEE 802.11r - Fast BSS Transition */
 391         u8 mobility_domain[MOBILITY_DOMAIN_ID_LEN];
 392         u8 r1_key_holder[FT_R1KH_ID_LEN];
 393         u32 r0_key_lifetime; /* PMK-R0 lifetime seconds */
 394         int rkh_pos_timeout;
 395         int rkh_neg_timeout;
 396         int rkh_pull_timeout; /* ms */
 397         int rkh_pull_retries;
 398         u32 reassociation_deadline;
 399         struct ft_remote_r0kh *r0kh_list;
 400         struct ft_remote_r1kh *r1kh_list;
 401         int pmk_r1_push;
 402         int ft_over_ds;
 403         int ft_psk_generate_local;
 404         int r1_max_key_lifetime;
 405 #endif /* CONFIG_IEEE80211R_AP */
 406
 407         char *ctrl_interface; /* directory for UNIX domain sockets */
 408 #ifndef CONFIG_NATIVE_WINDOWS
 409         gid_t ctrl_interface_gid;
 410 #endif /* CONFIG_NATIVE_WINDOWS */
 411         int ctrl_interface_gid_set;
 412
 413         char *ca_cert;
 414         char *server_cert;
 415         char *server_cert2;
 416         char *private_key;
 417         char *private_key2;
 418         char *private_key_passwd;
 419         char *private_key_passwd2;
 420         char *check_cert_subject;
 421         int check_crl;
 422         int check_crl_strict;
 423         unsigned int crl_reload_interval;
 424         unsigned int tls_session_lifetime;
 425         unsigned int tls_flags;
 426         unsigned int max_auth_rounds;
 427         unsigned int max_auth_rounds_short;
 428         char *ocsp_stapling_response;
 429         char *ocsp_stapling_response_multi;
 430         char *dh_file;
 431         char *openssl_ciphers;
 432         char *openssl_ecdh_curves;
 433         u8 *pac_opaque_encr_key;
 434         u8 *eap_fast_a_id;
 435         size_t eap_fast_a_id_len;
 436         char *eap_fast_a_id_info;
 437         int eap_fast_prov;
 438         int pac_key_lifetime;
 439         int pac_key_refresh_time;
 440         int eap_teap_auth;
 441         int eap_teap_pac_no_inner;
 442         int eap_teap_separate_result;
 443         int eap_teap_id;
 444         int eap_sim_aka_result_ind;
 445         int eap_sim_id;
 446         int tnc;
 447         int fragment_size;
 448         u16 pwd_group;
 449
 450         char *radius_server_clients;
 451         int radius_server_auth_port;
 452         int radius_server_acct_port;
 453         int radius_server_ipv6;
 454
 455         int use_pae_group_addr; /* Whether to send EAPOL frames to PAE group
 456                                  * address instead of individual address
 457                                  * (for driver_wired.c).
 458                                  */
 459
 460         int ap_max_inactivity;
 461         int ignore_broadcast_ssid;
 462         int no_probe_resp_if_max_sta;
 463
 464         int wmm_enabled;
 465         int wmm_uapsd;
 466
 467         struct hostapd_vlan *vlan;
 468
 469         macaddr bssid;
 470
 471         /*
 472          * Maximum listen interval that STAs can use when associating with this
 473          * BSS. If a STA tries to use larger value, the association will be
 474          * denied with status code 51.
 475          */
 476         u16 max_listen_interval;
 477
 478         int disable_pmksa_caching;
 479         int okc; /* Opportunistic Key Caching */
 480
 481         int wps_state;
 482 #ifdef CONFIG_WPS
 483         int wps_independent;
 484         int ap_setup_locked;
 485         u8 uuid[16];
 486         char *wps_pin_requests;
 487         char *device_name;
 488         char *manufacturer;
 489         char *model_name;
 490         char *model_number;
 491         char *serial_number;
 492         u8 device_type[WPS_DEV_TYPE_LEN];
 493         char *config_methods;
 494         u8 os_version[4];
 495         char *ap_pin;
 496         int skip_cred_build;
 497         u8 *extra_cred;
 498         size_t extra_cred_len;
 499         int wps_cred_processing;
 500         int wps_cred_add_sae;
 501         int force_per_enrollee_psk;
 502         u8 *ap_settings;
 503         size_t ap_settings_len;
 504         struct hostapd_ssid multi_ap_backhaul_ssid;
 505         char *upnp_iface;
 506         char *friendly_name;
 507         char *manufacturer_url;
 508         char *model_description;
 509         char *model_url;
 510         char *upc;
 511         struct wpabuf *wps_vendor_ext[MAX_WPS_VENDOR_EXTENSIONS];
 512         struct wpabuf *wps_application_ext;
 513         int wps_nfc_pw_from_config;
 514         int wps_nfc_dev_pw_id;
 515         struct wpabuf *wps_nfc_dh_pubkey;
 516         struct wpabuf *wps_nfc_dh_privkey;
 517         struct wpabuf *wps_nfc_dev_pw;
 518 #endif /* CONFIG_WPS */
 519         int pbc_in_m1;
 520         char *server_id;
 521
 522 #define P2P_ENABLED BIT(0)
 523 #define P2P_GROUP_OWNER BIT(1)
 524 #define P2P_GROUP_FORMATION BIT(2)
 525 #define P2P_MANAGE BIT(3)
 526 #define P2P_ALLOW_CROSS_CONNECTION BIT(4)
 527         int p2p;
 528 #ifdef CONFIG_P2P
 529         u8 ip_addr_go[4];
 530         u8 ip_addr_mask[4];
 531         u8 ip_addr_start[4];
 532         u8 ip_addr_end[4];
 533 #endif /* CONFIG_P2P */
 534
 535         int disassoc_low_ack;
 536         int skip_inactivity_poll;
 537
 538 #define TDLS_PROHIBIT BIT(0)
 539 #define TDLS_PROHIBIT_CHAN_SWITCH BIT(1)
 540         int tdls;
 541         int disable_11n;
 542         int disable_11ac;
 543
 544         /* IEEE 802.11v */
 545         int time_advertisement;
 546         char *time_zone;
 547         int wnm_sleep_mode;
 548         int wnm_sleep_mode_no_keys;
 549         int bss_transition;
 550
 551         /* IEEE 802.11u - Interworking */
 552         int interworking;
 553         int access_network_type;
 554         int internet;
 555         int asra;
 556         int esr;
 557         int uesa;
 558         int venue_info_set;
 559         u8 venue_group;
 560         u8 venue_type;
 561         u8 hessid[ETH_ALEN];
 562
 563         /* IEEE 802.11u - Roaming Consortium list */
 564         unsigned int roaming_consortium_count;
 565         struct hostapd_roaming_consortium *roaming_consortium;
 566
 567         /* IEEE 802.11u - Venue Name duples */
 568         unsigned int venue_name_count;
 569         struct hostapd_lang_string *venue_name;
 570
 571         /* Venue URL duples */
 572         unsigned int venue_url_count;
 573         struct hostapd_venue_url *venue_url;
 574
 575         /* IEEE 802.11u - Network Authentication Type */
 576         u8 *network_auth_type;
 577         size_t network_auth_type_len;
 578
 579         /* IEEE 802.11u - IP Address Type Availability */
 580         u8 ipaddr_type_availability;
 581         u8 ipaddr_type_configured;
 582
 583         /* IEEE 802.11u - 3GPP Cellular Network */
 584         u8 *anqp_3gpp_cell_net;
 585         size_t anqp_3gpp_cell_net_len;
 586
 587         /* IEEE 802.11u - Domain Name */
 588         u8 *domain_name;
 589         size_t domain_name_len;
 590
 591         unsigned int nai_realm_count;
 592         struct hostapd_nai_realm_data *nai_realm_data;
 593
 594         struct dl_list anqp_elem; /* list of struct anqp_element */
 595
 596         u16 gas_comeback_delay;
 597         size_t gas_frag_limit;
 598         int gas_address3;
 599
 600         u8 qos_map_set[16 + 2 * 21];
 601         unsigned int qos_map_set_len;
 602
 603         int osen;
 604         int proxy_arp;
 605         int na_mcast_to_ucast;
 606
 607 #ifdef CONFIG_HS20
 608         int hs20;
 609         int hs20_release;
 610         int disable_dgaf;
 611         u16 anqp_domain_id;
 612         unsigned int hs20_oper_friendly_name_count;
 613         struct hostapd_lang_string *hs20_oper_friendly_name;
 614         u8 *hs20_wan_metrics;
 615         u8 *hs20_connection_capability;
 616         size_t hs20_connection_capability_len;
 617         u8 *hs20_operating_class;
 618         u8 hs20_operating_class_len;
 619         struct hs20_icon {
 620                 u16 width;
 621                 u16 height;
 622                 char language[3];
 623                 char type[256];
 624                 char name[256];
 625                 char file[256];
 626         } *hs20_icons;
 627         size_t hs20_icons_count;
 628         u8 osu_ssid[SSID_MAX_LEN];
 629         size_t osu_ssid_len;
 630         struct hs20_osu_provider {
 631                 unsigned int friendly_name_count;
 632                 struct hostapd_lang_string *friendly_name;
 633                 char *server_uri;
 634                 int *method_list;
 635                 char **icons;
 636                 size_t icons_count;
 637                 char *osu_nai;
 638                 char *osu_nai2;
 639                 unsigned int service_desc_count;
 640                 struct hostapd_lang_string *service_desc;
 641         } *hs20_osu_providers, *last_osu;
 642         size_t hs20_osu_providers_count;
 643         size_t hs20_osu_providers_nai_count;
 644         char **hs20_operator_icon;
 645         size_t hs20_operator_icon_count;
 646         unsigned int hs20_deauth_req_timeout;
 647         char *subscr_remediation_url;
 648         u8 subscr_remediation_method;
 649         char *hs20_sim_provisioning_url;
 650         char *t_c_filename;
 651         u32 t_c_timestamp;
 652         char *t_c_server_url;
 653 #endif /* CONFIG_HS20 */
 654
 655         u8 wps_rf_bands; /* RF bands for WPS (WPS_RF_*) */
 656
 657 #ifdef CONFIG_RADIUS_TEST
 658         char *dump_msk_file;
 659 #endif /* CONFIG_RADIUS_TEST */
 660
 661         struct wpabuf *vendor_elements;
 662         struct wpabuf *assocresp_elements;
 663
 664         unsigned int sae_anti_clogging_threshold;
 665         unsigned int sae_sync;
 666         int sae_require_mfp;
 667         int sae_confirm_immediate;
 668         int sae_pwe;
 669         int *sae_groups;
 670         struct sae_password_entry *sae_passwords;
 671
 672         char *wowlan_triggers; /* Wake-on-WLAN triggers */
 673
 674 #ifdef CONFIG_TESTING_OPTIONS
 675         u8 bss_load_test[5];
 676         u8 bss_load_test_set;
 677         struct wpabuf *own_ie_override;
 678         int sae_reflection_attack;
 679         struct wpabuf *sae_commit_override;
 680         struct wpabuf *rsnxe_override_eapol;
 681         struct wpabuf *gtk_rsc_override;
 682         struct wpabuf *igtk_rsc_override;
 683 #endif /* CONFIG_TESTING_OPTIONS */
 684
 685 #define MESH_ENABLED BIT(0)
 686         int mesh;
 687
 688         u8 radio_measurements[RRM_CAPABILITIES_IE_LEN];
 689
 690         int vendor_vht;
 691         int use_sta_nsts;
 692
 693         char *no_probe_resp_if_seen_on;
 694         char *no_auth_if_seen_on;
 695
 696         int pbss;
 697
 698 #ifdef CONFIG_MBO
 699         int mbo_enabled;
 700         /**
 701          * oce - Enable OCE in AP and/or STA-CFON mode
 702          *  - BIT(0) is Reserved
 703          *  - Set BIT(1) to enable OCE in STA-CFON mode
 704          *  - Set BIT(2) to enable OCE in AP mode
 705          */
 706         unsigned int oce;
 707         int mbo_cell_data_conn_pref;
 708 #endif /* CONFIG_MBO */
 709
 710         int ftm_responder;
 711         int ftm_initiator;
 712
 713 #ifdef CONFIG_FILS
 714         u8 fils_cache_id[FILS_CACHE_ID_LEN];
 715         int fils_cache_id_set;
 716         struct dl_list fils_realms; /* list of struct fils_realm */
 717         int fils_dh_group;
 718         struct hostapd_ip_addr dhcp_server;
 719         int dhcp_rapid_commit_proxy;
 720         unsigned int fils_hlp_wait_time;
 721         u16 dhcp_server_port;
 722         u16 dhcp_relay_port;
 723 #endif /* CONFIG_FILS */
 724
 725         int multicast_to_unicast;
 726
 727         int broadcast_deauth;
 728
 729 #ifdef CONFIG_DPP
 730         char *dpp_name;
 731         char *dpp_mud_url;
 732         char *dpp_connector;
 733         struct wpabuf *dpp_netaccesskey;
 734         unsigned int dpp_netaccesskey_expiry;
 735         struct wpabuf *dpp_csign;
 736 #ifdef CONFIG_DPP2
 737         struct dpp_controller_conf *dpp_controller;
 738 #endif /* CONFIG_DPP2 */
 739 #endif /* CONFIG_DPP */
 740
 741 #ifdef CONFIG_OWE
 742         macaddr owe_transition_bssid;
 743         u8 owe_transition_ssid[SSID_MAX_LEN];
 744         size_t owe_transition_ssid_len;
 745         char owe_transition_ifname[IFNAMSIZ + 1];
 746         int *owe_groups;
 747         int owe_ptk_workaround;
 748 #endif /* CONFIG_OWE */
 749
 750         int coloc_intf_reporting;
 751
 752         u8 send_probe_response;
 753
 754 #define BACKHAUL_BSS 1
 755 #define FRONTHAUL_BSS 2
 756         int multi_ap; /* bitmap of BACKHAUL_BSS, FRONTHAUL_BSS */
 757
 758 #ifdef CONFIG_AIRTIME_POLICY
 759         unsigned int airtime_weight;
 760         int airtime_limit;
 761         struct airtime_sta_weight *airtime_weight_list;
 762 #endif /* CONFIG_AIRTIME_POLICY */
 763
 764 #ifdef CONFIG_MACSEC
 765         /**
 766          * macsec_policy - Determines the policy for MACsec secure session
 767          *
 768          * 0: MACsec not in use (default)
 769          * 1: MACsec enabled - Should secure, accept key server's advice to
 770          *    determine whether to use a secure session or not.
 771          */
 772         int macsec_policy;
 773
 774         /**
 775          * macsec_integ_only - Determines how MACsec are transmitted
 776          *
 777          * This setting applies only when MACsec is in use, i.e.,
 778          *  - macsec_policy is enabled
 779          *  - the key server has decided to enable MACsec
 780          *
 781          * 0: Encrypt traffic (default)
 782          * 1: Integrity only
 783          */
 784         int macsec_integ_only;
 785
 786         /**
 787          * macsec_replay_protect - Enable MACsec replay protection
 788          *
 789          * This setting applies only when MACsec is in use, i.e.,
 790          *  - macsec_policy is enabled
 791          *  - the key server has decided to enable MACsec
 792          *
 793          * 0: Replay protection disabled (default)
 794          * 1: Replay protection enabled
 795          */
 796         int macsec_replay_protect;
 797
 798         /**
 799          * macsec_replay_window - MACsec replay protection window
 800          *
 801          * A window in which replay is tolerated, to allow receipt of frames
 802          * that have been misordered by the network.
 803          *
 804          * This setting applies only when MACsec replay protection active, i.e.,
 805          *  - macsec_replay_protect is enabled
 806          *  - the key server has decided to enable MACsec
 807          *
 808          * 0: No replay window, strict check (default)
 809          * 1..2^32-1: number of packets that could be misordered
 810          */
 811         u32 macsec_replay_window;
 812
 813         /**
 814          * macsec_port - MACsec port (in SCI)
 815          *
 816          * Port component of the SCI.
 817          *
 818          * Range: 1-65534 (default: 1)
 819          */
 820         int macsec_port;
 821
 822         /**
 823          * mka_priority - Priority of MKA Actor
 824          *
 825          * Range: 0-255 (default: 255)
 826          */
 827         int mka_priority;
 828
 829         /**
 830          * mka_ckn - MKA pre-shared CKN
 831          */
 832 #define MACSEC_CKN_MAX_LEN 32
 833         size_t mka_ckn_len;
 834         u8 mka_ckn[MACSEC_CKN_MAX_LEN];
 835
 836         /**
 837          * mka_cak - MKA pre-shared CAK
 838          */
 839 #define MACSEC_CAK_MAX_LEN 32
 840         size_t mka_cak_len;
 841         u8 mka_cak[MACSEC_CAK_MAX_LEN];
 842
 843 #define MKA_PSK_SET_CKN BIT(0)
 844 #define MKA_PSK_SET_CAK BIT(1)
 845 #define MKA_PSK_SET (MKA_PSK_SET_CKN | MKA_PSK_SET_CAK)
 846         /**
 847          * mka_psk_set - Whether mka_ckn and mka_cak are set
 848          */
 849         u8 mka_psk_set;
 850 #endif /* CONFIG_MACSEC */
 851 };
 852
 853 /**
 854  * struct he_phy_capabilities_info - HE PHY capabilities
 855  */
 856 struct he_phy_capabilities_info {
 857         Boolean he_su_beamformer;
 858         Boolean he_su_beamformee;
 859         Boolean he_mu_beamformer;
 860 };
 861
 862 /**
 863  * struct he_operation - HE operation
 864  */
 865 struct he_operation {
 866         u8 he_bss_color;
 867         u8 he_bss_color_disabled;
 868         u8 he_bss_color_partial;
 869         u8 he_default_pe_duration;
 870         u8 he_twt_required;
 871         u16 he_rts_threshold;
 872         u16 he_basic_mcs_nss_set;
 873 };
 874
 875 /**
 876  * struct spatial_reuse - Spatial reuse
 877  */
 878 struct spatial_reuse {
 879         u8 sr_control;
 880         u8 non_srg_obss_pd_max_offset;
 881         u8 srg_obss_pd_min_offset;
 882         u8 srg_obss_pd_max_offset;
 883         u8 srg_obss_color_bitmap;
 884         u8 srg_obss_color_partial_bitmap;
 885 };
 886
 887 /**
 888  * struct hostapd_config - Per-radio interface configuration
 889  */
 890 struct hostapd_config {
 891         struct hostapd_bss_config **bss, *last_bss;
 892         size_t num_bss;
 893
 894         u16 beacon_int;
 895         int rts_threshold;
 896         int fragm_threshold;
 897         u8 op_class;
 898         u8 channel;
 899         int enable_edmg;
 900         u8 edmg_channel;
 901         u8 acs;
 902         struct wpa_freq_range_list acs_ch_list;
 903         struct wpa_freq_range_list acs_freq_list;
 904         u8 acs_freq_list_present;
 905         int acs_exclude_dfs;
 906         enum hostapd_hw_mode hw_mode; /* HOSTAPD_MODE_IEEE80211A, .. */
 907         int acs_exclude_6ghz_non_psc;
 908         enum {
 909                 LONG_PREAMBLE = 0,
 910                 SHORT_PREAMBLE = 1
 911         } preamble;
 912
 913         int *supported_rates;
 914         int *basic_rates;
 915         unsigned int beacon_rate;
 916         enum beacon_rate_type rate_type;
 917
 918         const struct wpa_driver_ops *driver;
 919         char *driver_params;
 920
 921         int ap_table_max_size;
 922         int ap_table_expiration_time;
 923
 924         unsigned int track_sta_max_num;
 925         unsigned int track_sta_max_age;
 926
 927         char country[3]; /* first two octets: country code as described in
 928                           * ISO/IEC 3166-1. Third octet:
 929                           * ' ' (ascii 32): all environments
 930                           * 'O': Outdoor environemnt only
 931                           * 'I': Indoor environment only
 932                           * 'X': Used with noncountry entity ("XXX")
 933                           * 0x00..0x31: identifying IEEE 802.11 standard
 934                           *     Annex E table (0x04 = global table)
 935                           */
 936
 937         int ieee80211d;
 938
 939         int ieee80211h; /* DFS */
 940
 941         /*
 942          * Local power constraint is an octet encoded as an unsigned integer in
 943          * units of decibels. Invalid value -1 indicates that Power Constraint
 944          * element will not be added.
 945          */
 946         int local_pwr_constraint;
 947
 948         /* Control Spectrum Management bit */
 949         int spectrum_mgmt_required;
 950
 951         struct hostapd_tx_queue_params tx_queue[NUM_TX_QUEUES];
 952
 953         /*
 954          * WMM AC parameters, in same order as 802.1D, i.e.
 955          * 0 = BE (best effort)
 956          * 1 = BK (background)
 957          * 2 = VI (video)
 958          * 3 = VO (voice)
 959          */
 960         struct hostapd_wmm_ac_params wmm_ac_params[4];
 961
 962         int ht_op_mode_fixed;
 963         u16 ht_capab;
 964         int ieee80211n;
 965         int secondary_channel;
 966         int no_pri_sec_switch;
 967         int require_ht;
 968         int obss_interval;
 969         u32 vht_capab;
 970         int ieee80211ac;
 971         int require_vht;
 972         u8 vht_oper_chwidth;
 973         u8 vht_oper_centr_freq_seg0_idx;
 974         u8 vht_oper_centr_freq_seg1_idx;
 975         u8 ht40_plus_minus_allowed;
 976
 977         /* Use driver-generated interface addresses when adding multiple BSSs */
 978         u8 use_driver_iface_addr;
 979
 980 #ifdef CONFIG_FST
 981         struct fst_iface_cfg fst_cfg;
 982 #endif /* CONFIG_FST */
 983
 984 #ifdef CONFIG_P2P
 985         u8 p2p_go_ctwindow;
 986 #endif /* CONFIG_P2P */
 987
 988 #ifdef CONFIG_TESTING_OPTIONS
 989         double ignore_probe_probability;
 990         double ignore_auth_probability;
 991         double ignore_assoc_probability;
 992         double ignore_reassoc_probability;
 993         double corrupt_gtk_rekey_mic_probability;
 994         int ecsa_ie_only;
 995 #endif /* CONFIG_TESTING_OPTIONS */
 996
 997 #ifdef CONFIG_ACS
 998         unsigned int acs_num_scans;
 999         struct acs_bias {
1000                 int channel;
1001                 double bias;
1002         } *acs_chan_bias;
1003         unsigned int num_acs_chan_bias;
1004 #endif /* CONFIG_ACS */
1005
1006         struct wpabuf *lci;
1007         struct wpabuf *civic;
1008         int stationary_ap;
1009
1010         int ieee80211ax;
1011 #ifdef CONFIG_IEEE80211AX
1012         struct he_phy_capabilities_info he_phy_capab;
1013         struct he_operation he_op;
1014         struct ieee80211_he_mu_edca_parameter_set he_mu_edca;
1015         struct spatial_reuse spr;
1016         u8 he_oper_chwidth;
1017         u8 he_oper_centr_freq_seg0_idx;
1018         u8 he_oper_centr_freq_seg1_idx;
1019 #endif /* CONFIG_IEEE80211AX */
1020
1021         /* VHT enable/disable config from CHAN_SWITCH */
1022 #define CH_SWITCH_VHT_ENABLED BIT(0)
1023 #define CH_SWITCH_VHT_DISABLED BIT(1)
1024         unsigned int ch_switch_vht_config;
1025
1026         int rssi_reject_assoc_rssi;
1027         int rssi_reject_assoc_timeout;
1028
1029 #ifdef CONFIG_AIRTIME_POLICY
1030         enum {
1031                 AIRTIME_MODE_OFF = 0,
1032                 AIRTIME_MODE_STATIC = 1,
1033                 AIRTIME_MODE_DYNAMIC = 2,
1034                 AIRTIME_MODE_LIMIT = 3,
1035                 __AIRTIME_MODE_MAX,
1036         } airtime_mode;
1037         unsigned int airtime_update_interval;
1038 #define AIRTIME_MODE_MAX (__AIRTIME_MODE_MAX - 1)
1039 #endif /* CONFIG_AIRTIME_POLICY */
1040 };
1041
1042
1043 static inline u8 hostapd_get_oper_chwidth(struct hostapd_config *conf)
1044 {
1045 #ifdef CONFIG_IEEE80211AX
1046         if (conf->ieee80211ax)
1047                 return conf->he_oper_chwidth;
1048 #endif /* CONFIG_IEEE80211AX */
1049         return conf->vht_oper_chwidth;
1050 }
1051
1052 static inline void
1053 hostapd_set_oper_chwidth(struct hostapd_config *conf, u8 oper_chwidth)
1054 {
1055 #ifdef CONFIG_IEEE80211AX
1056         if (conf->ieee80211ax)
1057                 conf->he_oper_chwidth = oper_chwidth;
1058 #endif /* CONFIG_IEEE80211AX */
1059         conf->vht_oper_chwidth = oper_chwidth;
1060 }
1061
1062 static inline u8
1063 hostapd_get_oper_centr_freq_seg0_idx(struct hostapd_config *conf)
1064 {
1065 #ifdef CONFIG_IEEE80211AX
1066         if (conf->ieee80211ax)
1067                 return conf->he_oper_centr_freq_seg0_idx;
1068 #endif /* CONFIG_IEEE80211AX */
1069         return conf->vht_oper_centr_freq_seg0_idx;
1070 }
1071
1072 static inline void
1073 hostapd_set_oper_centr_freq_seg0_idx(struct hostapd_config *conf,
1074                                      u8 oper_centr_freq_seg0_idx)
1075 {
1076 #ifdef CONFIG_IEEE80211AX
1077         if (conf->ieee80211ax)
1078                 conf->he_oper_centr_freq_seg0_idx = oper_centr_freq_seg0_idx;
1079 #endif /* CONFIG_IEEE80211AX */
1080         conf->vht_oper_centr_freq_seg0_idx = oper_centr_freq_seg0_idx;
1081 }
1082
1083 static inline u8
1084 hostapd_get_oper_centr_freq_seg1_idx(struct hostapd_config *conf)
1085 {
1086 #ifdef CONFIG_IEEE80211AX
1087         if (conf->ieee80211ax)
1088                 return conf->he_oper_centr_freq_seg1_idx;
1089 #endif /* CONFIG_IEEE80211AX */
1090         return conf->vht_oper_centr_freq_seg1_idx;
1091 }
1092
1093 static inline void
1094 hostapd_set_oper_centr_freq_seg1_idx(struct hostapd_config *conf,
1095                                      u8 oper_centr_freq_seg1_idx)
1096 {
1097 #ifdef CONFIG_IEEE80211AX
1098         if (conf->ieee80211ax)
1099                 conf->he_oper_centr_freq_seg1_idx = oper_centr_freq_seg1_idx;
1100 #endif /* CONFIG_IEEE80211AX */
1101         conf->vht_oper_centr_freq_seg1_idx = oper_centr_freq_seg1_idx;
1102 }
1103
1104
1105 int hostapd_mac_comp(const void *a, const void *b);
1106 struct hostapd_config * hostapd_config_defaults(void);
1107 void hostapd_config_defaults_bss(struct hostapd_bss_config *bss);
1108 void hostapd_config_free_radius_attr(struct hostapd_radius_attr *attr);
1109 void hostapd_config_free_eap_user(struct hostapd_eap_user *user);
1110 void hostapd_config_free_eap_users(struct hostapd_eap_user *user);
1111 void hostapd_config_clear_wpa_psk(struct hostapd_wpa_psk **p);
1112 void hostapd_config_free_bss(struct hostapd_bss_config *conf);
1113 void hostapd_config_free(struct hostapd_config *conf);
1114 int hostapd_maclist_found(struct mac_acl_entry *list, int num_entries,
1115                           const u8 *addr, struct vlan_description *vlan_id);
1116 int hostapd_rate_found(int *list, int rate);
1117 const u8 * hostapd_get_psk(const struct hostapd_bss_config *conf,
1118                            const u8 *addr, const u8 *p2p_dev_addr,
1119                            const u8 *prev_psk, int *vlan_id);
1120 int hostapd_setup_wpa_psk(struct hostapd_bss_config *conf);
1121 int hostapd_vlan_valid(struct hostapd_vlan *vlan,
1122                        struct vlan_description *vlan_desc);
1123 const char * hostapd_get_vlan_id_ifname(struct hostapd_vlan *vlan,
1124                                         int vlan_id);
1125 struct hostapd_radius_attr *
1126 hostapd_config_get_radius_attr(struct hostapd_radius_attr *attr, u8 type);
1127 struct hostapd_radius_attr * hostapd_parse_radius_attr(const char *value);
1128 int hostapd_config_check(struct hostapd_config *conf, int full_config);
1129 void hostapd_set_security_params(struct hostapd_bss_config *bss,
1130                                  int full_config);
1131 int hostapd_sae_pw_id_in_use(struct hostapd_bss_config *conf);
1132 int hostapd_setup_sae_pt(struct hostapd_bss_config *conf);
1133
1134 #endif /* HOSTAPD_CONFIG_H */