]> git.ipfire.org Git - thirdparty/hostap.git/blob - src/wps/wps.h
WPS ER: Add command for configuring an AP
[thirdparty/hostap.git] / src / wps / wps.h
1 /*
2 * Wi-Fi Protected Setup
3 * Copyright (c) 2007-2009, Jouni Malinen <j@w1.fi>
4 *
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
8 *
9 * Alternatively, this software may be distributed under the terms of BSD
10 * license.
11 *
12 * See README and COPYING for more details.
13 */
14
15 #ifndef WPS_H
16 #define WPS_H
17
18 #include "wps_defs.h"
19
20 /**
21 * enum wsc_op_code - EAP-WSC OP-Code values
22 */
23 enum wsc_op_code {
24 WSC_UPnP = 0 /* No OP Code in UPnP transport */,
25 WSC_Start = 0x01,
26 WSC_ACK = 0x02,
27 WSC_NACK = 0x03,
28 WSC_MSG = 0x04,
29 WSC_Done = 0x05,
30 WSC_FRAG_ACK = 0x06
31 };
32
33 struct wps_registrar;
34 struct upnp_wps_device_sm;
35 struct wps_er;
36
37 /**
38 * struct wps_credential - WPS Credential
39 * @ssid: SSID
40 * @ssid_len: Length of SSID
41 * @auth_type: Authentication Type (WPS_AUTH_OPEN, .. flags)
42 * @encr_type: Encryption Type (WPS_ENCR_NONE, .. flags)
43 * @key_idx: Key index
44 * @key: Key
45 * @key_len: Key length in octets
46 * @mac_addr: MAC address of the Credential receiver
47 * @cred_attr: Unparsed Credential attribute data (used only in cred_cb());
48 * this may be %NULL, if not used
49 * @cred_attr_len: Length of cred_attr in octets
50 */
51 struct wps_credential {
52 u8 ssid[32];
53 size_t ssid_len;
54 u16 auth_type;
55 u16 encr_type;
56 u8 key_idx;
57 u8 key[64];
58 size_t key_len;
59 u8 mac_addr[ETH_ALEN];
60 const u8 *cred_attr;
61 size_t cred_attr_len;
62 };
63
64 #define WPS_DEV_TYPE_LEN 8
65 #define WPS_DEV_TYPE_BUFSIZE 21
66
67 /**
68 * struct wps_device_data - WPS Device Data
69 * @mac_addr: Device MAC address
70 * @device_name: Device Name (0..32 octets encoded in UTF-8)
71 * @manufacturer: Manufacturer (0..64 octets encoded in UTF-8)
72 * @model_name: Model Name (0..32 octets encoded in UTF-8)
73 * @model_number: Model Number (0..32 octets encoded in UTF-8)
74 * @serial_number: Serial Number (0..32 octets encoded in UTF-8)
75 * @pri_dev_type: Primary Device Type
76 * @os_version: OS Version
77 * @rf_bands: RF bands (WPS_RF_24GHZ, WPS_RF_50GHZ flags)
78 */
79 struct wps_device_data {
80 u8 mac_addr[ETH_ALEN];
81 char *device_name;
82 char *manufacturer;
83 char *model_name;
84 char *model_number;
85 char *serial_number;
86 u8 pri_dev_type[WPS_DEV_TYPE_LEN];
87 u32 os_version;
88 u8 rf_bands;
89 };
90
91 struct oob_conf_data {
92 enum {
93 OOB_METHOD_UNKNOWN = 0,
94 OOB_METHOD_DEV_PWD_E,
95 OOB_METHOD_DEV_PWD_R,
96 OOB_METHOD_CRED,
97 } oob_method;
98 struct wpabuf *dev_password;
99 struct wpabuf *pubkey_hash;
100 };
101
102 /**
103 * struct wps_config - WPS configuration for a single registration protocol run
104 */
105 struct wps_config {
106 /**
107 * wps - Pointer to long term WPS context
108 */
109 struct wps_context *wps;
110
111 /**
112 * registrar - Whether this end is a Registrar
113 */
114 int registrar;
115
116 /**
117 * pin - Enrollee Device Password (%NULL for Registrar or PBC)
118 */
119 const u8 *pin;
120
121 /**
122 * pin_len - Length on pin in octets
123 */
124 size_t pin_len;
125
126 /**
127 * pbc - Whether this is protocol run uses PBC
128 */
129 int pbc;
130
131 /**
132 * assoc_wps_ie: (Re)AssocReq WPS IE (in AP; %NULL if not AP)
133 */
134 const struct wpabuf *assoc_wps_ie;
135
136 /**
137 * new_ap_settings - New AP settings (%NULL if not used)
138 *
139 * This parameter provides new AP settings when using a wireless
140 * stations as a Registrar to configure the AP. %NULL means that AP
141 * will not be reconfigured, i.e., the station will only learn the
142 * current AP settings by using AP PIN.
143 */
144 const struct wps_credential *new_ap_settings;
145
146 /**
147 * peer_addr: MAC address of the peer in AP; %NULL if not AP
148 */
149 const u8 *peer_addr;
150
151 /**
152 * use_psk_key - Use PSK format key in Credential
153 *
154 * Force PSK format to be used instead of ASCII passphrase when
155 * building Credential for an Enrollee. The PSK value is set in
156 * struct wpa_context::psk.
157 */
158 int use_psk_key;
159 };
160
161 struct wps_data * wps_init(const struct wps_config *cfg);
162
163 void wps_deinit(struct wps_data *data);
164
165 /**
166 * enum wps_process_res - WPS message processing result
167 */
168 enum wps_process_res {
169 /**
170 * WPS_DONE - Processing done
171 */
172 WPS_DONE,
173
174 /**
175 * WPS_CONTINUE - Processing continues
176 */
177 WPS_CONTINUE,
178
179 /**
180 * WPS_FAILURE - Processing failed
181 */
182 WPS_FAILURE,
183
184 /**
185 * WPS_PENDING - Processing continues, but waiting for an external
186 * event (e.g., UPnP message from an external Registrar)
187 */
188 WPS_PENDING
189 };
190 enum wps_process_res wps_process_msg(struct wps_data *wps,
191 enum wsc_op_code op_code,
192 const struct wpabuf *msg);
193
194 struct wpabuf * wps_get_msg(struct wps_data *wps, enum wsc_op_code *op_code);
195
196 int wps_is_selected_pbc_registrar(const struct wpabuf *msg);
197 int wps_is_selected_pin_registrar(const struct wpabuf *msg);
198 const u8 * wps_get_uuid_e(const struct wpabuf *msg);
199
200 struct wpabuf * wps_build_assoc_req_ie(enum wps_request_type req_type);
201 struct wpabuf * wps_build_assoc_resp_ie(void);
202 struct wpabuf * wps_build_probe_req_ie(int pbc, struct wps_device_data *dev,
203 const u8 *uuid,
204 enum wps_request_type req_type);
205
206
207 /**
208 * struct wps_registrar_config - WPS Registrar configuration
209 */
210 struct wps_registrar_config {
211 /**
212 * new_psk_cb - Callback for new PSK
213 * @ctx: Higher layer context data (cb_ctx)
214 * @mac_addr: MAC address of the Enrollee
215 * @psk: The new PSK
216 * @psk_len: The length of psk in octets
217 * Returns: 0 on success, -1 on failure
218 *
219 * This callback is called when a new per-device PSK is provisioned.
220 */
221 int (*new_psk_cb)(void *ctx, const u8 *mac_addr, const u8 *psk,
222 size_t psk_len);
223
224 /**
225 * set_ie_cb - Callback for WPS IE changes
226 * @ctx: Higher layer context data (cb_ctx)
227 * @beacon_ie: WPS IE for Beacon
228 * @probe_resp_ie: WPS IE for Probe Response
229 * Returns: 0 on success, -1 on failure
230 *
231 * This callback is called whenever the WPS IE in Beacon or Probe
232 * Response frames needs to be changed (AP only). Callee is responsible
233 * for freeing the buffers.
234 */
235 int (*set_ie_cb)(void *ctx, struct wpabuf *beacon_ie,
236 struct wpabuf *probe_resp_ie);
237
238 /**
239 * pin_needed_cb - Callback for requesting a PIN
240 * @ctx: Higher layer context data (cb_ctx)
241 * @uuid_e: UUID-E of the unknown Enrollee
242 * @dev: Device Data from the unknown Enrollee
243 *
244 * This callback is called whenever an unknown Enrollee requests to use
245 * PIN method and a matching PIN (Device Password) is not found in
246 * Registrar data.
247 */
248 void (*pin_needed_cb)(void *ctx, const u8 *uuid_e,
249 const struct wps_device_data *dev);
250
251 /**
252 * reg_success_cb - Callback for reporting successful registration
253 * @ctx: Higher layer context data (cb_ctx)
254 * @mac_addr: MAC address of the Enrollee
255 * @uuid_e: UUID-E of the Enrollee
256 *
257 * This callback is called whenever an Enrollee completes registration
258 * successfully.
259 */
260 void (*reg_success_cb)(void *ctx, const u8 *mac_addr,
261 const u8 *uuid_e);
262
263 /**
264 * set_sel_reg_cb - Callback for reporting selected registrar changes
265 * @ctx: Higher layer context data (cb_ctx)
266 * @sel_reg: Whether the Registrar is selected
267 * @dev_passwd_id: Device Password ID to indicate with method or
268 * specific password the Registrar intends to use
269 * @sel_reg_config_methods: Bit field of active config methods
270 *
271 * This callback is called whenever the Selected Registrar state
272 * changes (e.g., a new PIN becomes available or PBC is invoked). This
273 * callback is only used by External Registrar implementation;
274 * set_ie_cb() is used by AP implementation in similar caes, but it
275 * provides the full WPS IE data instead of just the minimal Registrar
276 * state information.
277 */
278 void (*set_sel_reg_cb)(void *ctx, int sel_reg, u16 dev_passwd_id,
279 u16 sel_reg_config_methods);
280
281 /**
282 * enrollee_seen_cb - Callback for reporting Enrollee based on ProbeReq
283 * @ctx: Higher layer context data (cb_ctx)
284 * @addr: MAC address of the Enrollee
285 * @uuid_e: UUID of the Enrollee
286 * @pri_dev_type: Primary device type
287 * @config_methods: Config Methods
288 * @dev_password_id: Device Password ID
289 * @request_type: Request Type
290 * @dev_name: Device Name (if available)
291 */
292 void (*enrollee_seen_cb)(void *ctx, const u8 *addr, const u8 *uuid_e,
293 const u8 *pri_dev_type, u16 config_methods,
294 u16 dev_password_id, u8 request_type,
295 const char *dev_name);
296
297 /**
298 * cb_ctx: Higher layer context data for Registrar callbacks
299 */
300 void *cb_ctx;
301
302 /**
303 * skip_cred_build: Do not build credential
304 *
305 * This option can be used to disable internal code that builds
306 * Credential attribute into M8 based on the current network
307 * configuration and Enrollee capabilities. The extra_cred data will
308 * then be used as the Credential(s).
309 */
310 int skip_cred_build;
311
312 /**
313 * extra_cred: Additional Credential attribute(s)
314 *
315 * This optional data (set to %NULL to disable) can be used to add
316 * Credential attribute(s) for other networks into M8. If
317 * skip_cred_build is set, this will also override the automatically
318 * generated Credential attribute.
319 */
320 const u8 *extra_cred;
321
322 /**
323 * extra_cred_len: Length of extra_cred in octets
324 */
325 size_t extra_cred_len;
326
327 /**
328 * disable_auto_conf - Disable auto-configuration on first registration
329 *
330 * By default, the AP that is started in not configured state will
331 * generate a random PSK and move to configured state when the first
332 * registration protocol run is completed successfully. This option can
333 * be used to disable this functionality and leave it up to an external
334 * program to take care of configuration. This requires the extra_cred
335 * to be set with a suitable Credential and skip_cred_build being used.
336 */
337 int disable_auto_conf;
338
339 /**
340 * static_wep_only - Whether the BSS supports only static WEP
341 */
342 int static_wep_only;
343 };
344
345
346 /**
347 * enum wps_event - WPS event types
348 */
349 enum wps_event {
350 /**
351 * WPS_EV_M2D - M2D received (Registrar did not know us)
352 */
353 WPS_EV_M2D,
354
355 /**
356 * WPS_EV_FAIL - Registration failed
357 */
358 WPS_EV_FAIL,
359
360 /**
361 * WPS_EV_SUCCESS - Registration succeeded
362 */
363 WPS_EV_SUCCESS,
364
365 /**
366 * WPS_EV_PWD_AUTH_FAIL - Password authentication failed
367 */
368 WPS_EV_PWD_AUTH_FAIL,
369
370 /**
371 * WPS_EV_PBC_OVERLAP - PBC session overlap detected
372 */
373 WPS_EV_PBC_OVERLAP,
374
375 /**
376 * WPS_EV_PBC_TIMEOUT - PBC walktime expired before protocol run start
377 */
378 WPS_EV_PBC_TIMEOUT,
379
380 /**
381 * WPS_EV_ER_AP_ADD - ER: AP added
382 */
383 WPS_EV_ER_AP_ADD,
384
385 /**
386 * WPS_EV_ER_AP_REMOVE - ER: AP removed
387 */
388 WPS_EV_ER_AP_REMOVE,
389
390 /**
391 * WPS_EV_ER_ENROLLEE_ADD - ER: Enrollee added
392 */
393 WPS_EV_ER_ENROLLEE_ADD,
394
395 /**
396 * WPS_EV_ER_ENROLLEE_REMOVE - ER: Enrollee removed
397 */
398 WPS_EV_ER_ENROLLEE_REMOVE,
399
400 /**
401 * WPS_EV_ER_AP_SETTINGS - ER: AP Settings learned
402 */
403 WPS_EV_ER_AP_SETTINGS
404 };
405
406 /**
407 * union wps_event_data - WPS event data
408 */
409 union wps_event_data {
410 /**
411 * struct wps_event_m2d - M2D event data
412 */
413 struct wps_event_m2d {
414 u16 config_methods;
415 const u8 *manufacturer;
416 size_t manufacturer_len;
417 const u8 *model_name;
418 size_t model_name_len;
419 const u8 *model_number;
420 size_t model_number_len;
421 const u8 *serial_number;
422 size_t serial_number_len;
423 const u8 *dev_name;
424 size_t dev_name_len;
425 const u8 *primary_dev_type; /* 8 octets */
426 u16 config_error;
427 u16 dev_password_id;
428 } m2d;
429
430 /**
431 * struct wps_event_fail - Registration failure information
432 * @msg: enum wps_msg_type
433 */
434 struct wps_event_fail {
435 int msg;
436 } fail;
437
438 struct wps_event_pwd_auth_fail {
439 int enrollee;
440 int part;
441 } pwd_auth_fail;
442
443 struct wps_event_er_ap {
444 const u8 *uuid;
445 const u8 *mac_addr;
446 const char *friendly_name;
447 const char *manufacturer;
448 const char *manufacturer_url;
449 const char *model_description;
450 const char *model_name;
451 const char *model_number;
452 const char *model_url;
453 const char *serial_number;
454 const char *upc;
455 const u8 *pri_dev_type;
456 u8 wps_state;
457 } ap;
458
459 struct wps_event_er_enrollee {
460 const u8 *uuid;
461 const u8 *mac_addr;
462 int m1_received;
463 u16 config_methods;
464 u16 dev_passwd_id;
465 const u8 *pri_dev_type;
466 const char *dev_name;
467 const char *manufacturer;
468 const char *model_name;
469 const char *model_number;
470 const char *serial_number;
471 } enrollee;
472
473 struct wps_event_er_ap_settings {
474 const u8 *uuid;
475 const struct wps_credential *cred;
476 } ap_settings;
477 };
478
479 /**
480 * struct upnp_pending_message - Pending PutWLANResponse messages
481 * @next: Pointer to next pending message or %NULL
482 * @addr: NewWLANEventMAC
483 * @msg: NewMessage
484 * @type: Message Type
485 */
486 struct upnp_pending_message {
487 struct upnp_pending_message *next;
488 u8 addr[ETH_ALEN];
489 struct wpabuf *msg;
490 enum wps_msg_type type;
491 };
492
493 /**
494 * struct wps_context - Long term WPS context data
495 *
496 * This data is stored at the higher layer Authenticator or Supplicant data
497 * structures and it is maintained over multiple registration protocol runs.
498 */
499 struct wps_context {
500 /**
501 * ap - Whether the local end is an access point
502 */
503 int ap;
504
505 /**
506 * registrar - Pointer to WPS registrar data from wps_registrar_init()
507 */
508 struct wps_registrar *registrar;
509
510 /**
511 * wps_state - Current WPS state
512 */
513 enum wps_state wps_state;
514
515 /**
516 * ap_setup_locked - Whether AP setup is locked (only used at AP)
517 */
518 int ap_setup_locked;
519
520 /**
521 * uuid - Own UUID
522 */
523 u8 uuid[16];
524
525 /**
526 * ssid - SSID
527 *
528 * This SSID is used by the Registrar to fill in information for
529 * Credentials. In addition, AP uses it when acting as an Enrollee to
530 * notify Registrar of the current configuration.
531 */
532 u8 ssid[32];
533
534 /**
535 * ssid_len - Length of ssid in octets
536 */
537 size_t ssid_len;
538
539 /**
540 * dev - Own WPS device data
541 */
542 struct wps_device_data dev;
543
544 /**
545 * oob_conf - OOB Config data
546 */
547 struct oob_conf_data oob_conf;
548
549 /**
550 * oob_dev_pw_id - OOB Device password id
551 */
552 u16 oob_dev_pw_id;
553
554 /**
555 * dh_ctx - Context data for Diffie-Hellman operation
556 */
557 void *dh_ctx;
558
559 /**
560 * dh_privkey - Diffie-Hellman private key
561 */
562 struct wpabuf *dh_privkey;
563
564 /**
565 * dh_pubkey_oob - Diffie-Hellman public key
566 */
567 struct wpabuf *dh_pubkey;
568
569 /**
570 * config_methods - Enabled configuration methods
571 *
572 * Bit field of WPS_CONFIG_*
573 */
574 u16 config_methods;
575
576 /**
577 * encr_types - Enabled encryption types (bit field of WPS_ENCR_*)
578 */
579 u16 encr_types;
580
581 /**
582 * auth_types - Authentication types (bit field of WPS_AUTH_*)
583 */
584 u16 auth_types;
585
586 /**
587 * network_key - The current Network Key (PSK) or %NULL to generate new
588 *
589 * If %NULL, Registrar will generate per-device PSK. In addition, AP
590 * uses this when acting as an Enrollee to notify Registrar of the
591 * current configuration.
592 *
593 * When using WPA/WPA2-Person, this key can be either the ASCII
594 * passphrase (8..63 characters) or the 32-octet PSK (64 hex
595 * characters). When this is set to the ASCII passphrase, the PSK can
596 * be provided in the psk buffer and used per-Enrollee to control which
597 * key type is included in the Credential (e.g., to reduce calculation
598 * need on low-powered devices by provisioning PSK while still allowing
599 * other devices to get the passphrase).
600 */
601 u8 *network_key;
602
603 /**
604 * network_key_len - Length of network_key in octets
605 */
606 size_t network_key_len;
607
608 /**
609 * psk - The current network PSK
610 *
611 * This optional value can be used to provide the current PSK if
612 * network_key is set to the ASCII passphrase.
613 */
614 u8 psk[32];
615
616 /**
617 * psk_set - Whether psk value is set
618 */
619 int psk_set;
620
621 /**
622 * ap_settings - AP Settings override for M7 (only used at AP)
623 *
624 * If %NULL, AP Settings attributes will be generated based on the
625 * current network configuration.
626 */
627 u8 *ap_settings;
628
629 /**
630 * ap_settings_len - Length of ap_settings in octets
631 */
632 size_t ap_settings_len;
633
634 /**
635 * friendly_name - Friendly Name (required for UPnP)
636 */
637 char *friendly_name;
638
639 /**
640 * manufacturer_url - Manufacturer URL (optional for UPnP)
641 */
642 char *manufacturer_url;
643
644 /**
645 * model_description - Model Description (recommended for UPnP)
646 */
647 char *model_description;
648
649 /**
650 * model_url - Model URL (optional for UPnP)
651 */
652 char *model_url;
653
654 /**
655 * upc - Universal Product Code (optional for UPnP)
656 */
657 char *upc;
658
659 /**
660 * cred_cb - Callback to notify that new Credentials were received
661 * @ctx: Higher layer context data (cb_ctx)
662 * @cred: The received Credential
663 * Return: 0 on success, -1 on failure
664 */
665 int (*cred_cb)(void *ctx, const struct wps_credential *cred);
666
667 /**
668 * event_cb - Event callback (state information about progress)
669 * @ctx: Higher layer context data (cb_ctx)
670 * @event: Event type
671 * @data: Event data
672 */
673 void (*event_cb)(void *ctx, enum wps_event event,
674 union wps_event_data *data);
675
676 /**
677 * cb_ctx: Higher layer context data for callbacks
678 */
679 void *cb_ctx;
680
681 struct upnp_wps_device_sm *wps_upnp;
682
683 /* Pending messages from UPnP PutWLANResponse */
684 struct upnp_pending_message *upnp_msgs;
685 };
686
687 struct oob_device_data {
688 char *device_name;
689 char *device_path;
690 void * (*init_func)(struct wps_context *, struct oob_device_data *,
691 int);
692 struct wpabuf * (*read_func)(void *);
693 int (*write_func)(void *, struct wpabuf *);
694 void (*deinit_func)(void *);
695 };
696
697 struct oob_nfc_device_data {
698 int (*init_func)(char *);
699 void * (*read_func)(size_t *);
700 int (*write_func)(void *, size_t);
701 void (*deinit_func)(void);
702 };
703
704 struct wps_registrar *
705 wps_registrar_init(struct wps_context *wps,
706 const struct wps_registrar_config *cfg);
707 void wps_registrar_deinit(struct wps_registrar *reg);
708 int wps_registrar_add_pin(struct wps_registrar *reg, const u8 *uuid,
709 const u8 *pin, size_t pin_len, int timeout);
710 int wps_registrar_invalidate_pin(struct wps_registrar *reg, const u8 *uuid);
711 int wps_registrar_unlock_pin(struct wps_registrar *reg, const u8 *uuid);
712 int wps_registrar_button_pushed(struct wps_registrar *reg);
713 void wps_registrar_probe_req_rx(struct wps_registrar *reg, const u8 *addr,
714 const struct wpabuf *wps_data);
715 int wps_registrar_update_ie(struct wps_registrar *reg);
716 int wps_registrar_get_info(struct wps_registrar *reg, const u8 *addr,
717 char *buf, size_t buflen);
718
719 unsigned int wps_pin_checksum(unsigned int pin);
720 unsigned int wps_pin_valid(unsigned int pin);
721 unsigned int wps_generate_pin(void);
722 void wps_free_pending_msgs(struct upnp_pending_message *msgs);
723
724 struct oob_device_data * wps_get_oob_device(char *device_type);
725 struct oob_nfc_device_data * wps_get_oob_nfc_device(char *device_name);
726 int wps_get_oob_method(char *method);
727 int wps_process_oob(struct wps_context *wps, struct oob_device_data *oob_dev,
728 int registrar);
729 int wps_attr_text(struct wpabuf *data, char *buf, char *end);
730
731 struct wps_er * wps_er_init(struct wps_context *wps, const char *ifname,
732 const char *filter);
733 void wps_er_refresh(struct wps_er *er);
734 void wps_er_deinit(struct wps_er *er, void (*cb)(void *ctx), void *ctx);
735 void wps_er_set_sel_reg(struct wps_er *er, int sel_reg, u16 dev_passwd_id,
736 u16 sel_reg_config_methods);
737 int wps_er_pbc(struct wps_er *er, const u8 *uuid);
738 int wps_er_learn(struct wps_er *er, const u8 *uuid, const u8 *pin,
739 size_t pin_len);
740 int wps_er_config(struct wps_er *er, const u8 *uuid, const u8 *pin,
741 size_t pin_len, const struct wps_credential *cred);
742
743 int wps_dev_type_str2bin(const char *str, u8 dev_type[WPS_DEV_TYPE_LEN]);
744 char * wps_dev_type_bin2str(const u8 dev_type[WPS_DEV_TYPE_LEN], char *buf,
745 size_t buf_len);
746 void uuid_gen_mac_addr(const u8 *mac_addr, u8 *uuid);
747 u16 wps_config_methods_str2bin(const char *str);
748
749 #endif /* WPS_H */