2 * WPA Supplicant - Basic AP mode support routines
3 * Copyright (c) 2003-2009, Jouni Malinen <j@w1.fi>
4 * Copyright (c) 2009, Atheros Communications
6 * This software may be distributed under the terms of the BSD license.
7 * See README for more details.
10 #include "utils/includes.h"
12 #include "utils/common.h"
13 #include "utils/eloop.h"
14 #include "utils/uuid.h"
15 #include "common/ieee802_11_defs.h"
16 #include "common/wpa_ctrl.h"
17 #include "eapol_supp/eapol_supp_sm.h"
18 #include "crypto/dh_group5.h"
19 #include "ap/hostapd.h"
20 #include "ap/ap_config.h"
21 #include "ap/ap_drv_ops.h"
23 #include "ap/ieee802_11.h"
24 #endif /* NEED_AP_MLME */
25 #include "ap/beacon.h"
26 #include "ap/ieee802_1x.h"
27 #include "ap/wps_hostapd.h"
28 #include "ap/ctrl_iface_ap.h"
31 #include "common/ieee802_11_defs.h"
32 #include "config_ssid.h"
34 #include "wpa_supplicant_i.h"
36 #include "p2p_supplicant.h"
38 #include "ap/sta_info.h"
43 static void wpas_wps_ap_pin_timeout(void *eloop_data
, void *user_ctx
);
44 #endif /* CONFIG_WPS */
47 static void wpas_conf_ap_vht(struct wpa_supplicant
*wpa_s
,
48 struct wpa_ssid
*ssid
,
49 struct hostapd_config
*conf
,
50 struct hostapd_hw_modes
*mode
)
54 u8 channel
= conf
->channel
;
55 #endif /* CONFIG_P2P */
57 if (!conf
->secondary_channel
)
60 /* Use the maximum oper channel width if it's given. */
61 if (ssid
->max_oper_chwidth
)
62 conf
->vht_oper_chwidth
= ssid
->max_oper_chwidth
;
64 ieee80211_freq_to_chan(ssid
->vht_center_freq2
,
65 &conf
->vht_oper_centr_freq_seg1_idx
);
67 if (!ssid
->p2p_group
) {
68 if (!ssid
->vht_center_freq1
||
69 conf
->vht_oper_chwidth
== CHANWIDTH_USE_HT
)
71 ieee80211_freq_to_chan(ssid
->vht_center_freq1
,
72 &conf
->vht_oper_centr_freq_seg0_idx
);
73 wpa_printf(MSG_DEBUG
, "VHT seg0 index %d for AP",
74 conf
->vht_oper_centr_freq_seg0_idx
);
79 switch (conf
->vht_oper_chwidth
) {
81 case CHANWIDTH_80P80MHZ
:
82 center_chan
= wpas_p2p_get_vht80_center(wpa_s
, mode
, channel
);
84 "VHT center channel %u for 80 or 80+80 MHz bandwidth",
87 case CHANWIDTH_160MHZ
:
88 center_chan
= wpas_p2p_get_vht160_center(wpa_s
, mode
, channel
);
90 "VHT center channel %u for 160 MHz bandwidth",
95 * conf->vht_oper_chwidth might not be set for non-P2P GO cases,
96 * try oper_cwidth 160 MHz first then VHT 80 MHz, if 160 MHz is
99 conf
->vht_oper_chwidth
= CHANWIDTH_160MHZ
;
100 center_chan
= wpas_p2p_get_vht160_center(wpa_s
, mode
, channel
);
102 wpa_printf(MSG_DEBUG
,
103 "VHT center channel %u for auto-selected 160 MHz bandwidth",
106 conf
->vht_oper_chwidth
= CHANWIDTH_80MHZ
;
107 center_chan
= wpas_p2p_get_vht80_center(wpa_s
, mode
,
109 wpa_printf(MSG_DEBUG
,
110 "VHT center channel %u for auto-selected 80 MHz bandwidth",
118 conf
->vht_oper_centr_freq_seg0_idx
= center_chan
;
119 wpa_printf(MSG_DEBUG
, "VHT seg0 index %d for P2P GO",
120 conf
->vht_oper_centr_freq_seg0_idx
);
122 #endif /* CONFIG_P2P */
125 wpa_printf(MSG_DEBUG
,
126 "No VHT higher bandwidth support for the selected channel %d",
128 conf
->vht_oper_centr_freq_seg0_idx
=
129 conf
->channel
+ conf
->secondary_channel
* 2;
130 conf
->vht_oper_chwidth
= CHANWIDTH_USE_HT
;
134 int wpa_supplicant_conf_ap_ht(struct wpa_supplicant
*wpa_s
,
135 struct wpa_ssid
*ssid
,
136 struct hostapd_config
*conf
)
138 conf
->hw_mode
= ieee80211_freq_to_chan(ssid
->frequency
,
141 if (conf
->hw_mode
== NUM_HOSTAPD_MODES
) {
142 wpa_printf(MSG_ERROR
, "Unsupported AP mode frequency: %d MHz",
147 /* TODO: enable HT40 if driver supports it;
148 * drop to 11b if driver does not support 11g */
151 * Enable HT20 if the driver supports it, by setting conf->ieee80211n
152 * and a mask of allowed capabilities within conf->ht_capab.
153 * Using default config settings for: conf->ht_op_mode_fixed,
154 * conf->secondary_channel, conf->require_ht
156 if (wpa_s
->hw
.modes
) {
157 struct hostapd_hw_modes
*mode
= NULL
;
160 wpa_printf(MSG_DEBUG
,
161 "Determining HT/VHT options based on driver capabilities (freq=%u chan=%u)",
162 ssid
->frequency
, conf
->channel
);
164 for (i
= 0; i
< wpa_s
->hw
.num_modes
; i
++) {
165 if (wpa_s
->hw
.modes
[i
].mode
== conf
->hw_mode
) {
166 mode
= &wpa_s
->hw
.modes
[i
];
171 #ifdef CONFIG_HT_OVERRIDES
172 if (ssid
->disable_ht
)
174 #endif /* CONFIG_HT_OVERRIDES */
177 wpa_printf(MSG_DEBUG
,
178 "HT not enabled in network profile");
179 conf
->ieee80211n
= 0;
184 if (!no_ht
&& mode
&& mode
->ht_capab
) {
185 wpa_printf(MSG_DEBUG
,
186 "Enable HT support (p2p_group=%d 11a=%d ht40_hw_capab=%d ssid->ht40=%d)",
188 conf
->hw_mode
== HOSTAPD_MODE_IEEE80211A
,
190 HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET
),
192 conf
->ieee80211n
= 1;
194 if (ssid
->p2p_group
&&
195 conf
->hw_mode
== HOSTAPD_MODE_IEEE80211A
&&
197 HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET
) &&
199 conf
->secondary_channel
=
200 wpas_p2p_get_ht40_mode(wpa_s
, mode
,
202 wpa_printf(MSG_DEBUG
,
203 "HT secondary channel offset %d for P2P group",
204 conf
->secondary_channel
);
206 #endif /* CONFIG_P2P */
208 if (!ssid
->p2p_group
&&
210 HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET
)) {
211 conf
->secondary_channel
= ssid
->ht40
;
212 wpa_printf(MSG_DEBUG
,
213 "HT secondary channel offset %d for AP",
214 conf
->secondary_channel
);
217 if (conf
->secondary_channel
)
219 HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET
;
222 * white-list capabilities that won't cause issues
223 * to connecting stations, while leaving the current
224 * capabilities intact (currently disabled SMPS).
226 conf
->ht_capab
|= mode
->ht_capab
&
227 (HT_CAP_INFO_GREEN_FIELD
|
228 HT_CAP_INFO_SHORT_GI20MHZ
|
229 HT_CAP_INFO_SHORT_GI40MHZ
|
230 HT_CAP_INFO_RX_STBC_MASK
|
231 HT_CAP_INFO_TX_STBC
|
232 HT_CAP_INFO_MAX_AMSDU_SIZE
);
234 if (mode
->vht_capab
&& ssid
->vht
) {
235 conf
->ieee80211ac
= 1;
236 conf
->vht_capab
|= mode
->vht_capab
;
237 wpas_conf_ap_vht(wpa_s
, ssid
, conf
, mode
);
240 if (mode
->he_capab
[wpas_mode_to_ieee80211_mode(
241 ssid
->mode
)].he_supported
&&
243 conf
->ieee80211ax
= 1;
247 if (conf
->secondary_channel
) {
248 struct wpa_supplicant
*iface
;
250 for (iface
= wpa_s
->global
->ifaces
; iface
; iface
= iface
->next
)
252 if (iface
== wpa_s
||
253 iface
->wpa_state
< WPA_AUTHENTICATING
||
254 (int) iface
->assoc_freq
!= ssid
->frequency
)
258 * Do not allow 40 MHz co-ex PRI/SEC switch to force us
259 * to change our PRI channel since we have an existing,
260 * concurrent connection on that channel and doing
261 * multi-channel concurrency is likely to cause more
262 * harm than using different PRI/SEC selection in
263 * environment with multiple BSSes on these two channels
264 * with mixed 20 MHz or PRI channel selection.
266 conf
->no_pri_sec_switch
= 1;
274 static int wpa_supplicant_conf_ap(struct wpa_supplicant
*wpa_s
,
275 struct wpa_ssid
*ssid
,
276 struct hostapd_config
*conf
)
278 struct hostapd_bss_config
*bss
= conf
->bss
[0];
280 conf
->driver
= wpa_s
->driver
;
282 os_strlcpy(bss
->iface
, wpa_s
->ifname
, sizeof(bss
->iface
));
284 if (wpa_supplicant_conf_ap_ht(wpa_s
, ssid
, conf
))
287 if (ssid
->pbss
> 1) {
288 wpa_printf(MSG_ERROR
, "Invalid pbss value(%d) for AP mode",
292 bss
->pbss
= ssid
->pbss
;
296 /* Setting channel to 0 in order to enable ACS */
298 wpa_printf(MSG_DEBUG
, "Use automatic channel selection");
300 #endif /* CONFIG_ACS */
302 if (ieee80211_is_dfs(ssid
->frequency
, wpa_s
->hw
.modes
,
303 wpa_s
->hw
.num_modes
) && wpa_s
->conf
->country
[0]) {
304 conf
->ieee80211h
= 1;
305 conf
->ieee80211d
= 1;
306 conf
->country
[0] = wpa_s
->conf
->country
[0];
307 conf
->country
[1] = wpa_s
->conf
->country
[1];
308 conf
->country
[2] = ' ';
312 if (conf
->hw_mode
== HOSTAPD_MODE_IEEE80211G
&&
313 (ssid
->mode
== WPAS_MODE_P2P_GO
||
314 ssid
->mode
== WPAS_MODE_P2P_GROUP_FORMATION
)) {
315 /* Remove 802.11b rates from supported and basic rate sets */
316 int *list
= os_malloc(4 * sizeof(int));
323 conf
->basic_rates
= list
;
325 list
= os_malloc(9 * sizeof(int));
337 conf
->supported_rates
= list
;
340 #ifdef CONFIG_IEEE80211AX
341 if (ssid
->mode
== WPAS_MODE_P2P_GO
||
342 ssid
->mode
== WPAS_MODE_P2P_GROUP_FORMATION
)
343 conf
->ieee80211ax
= ssid
->he
;
344 #endif /* CONFIG_IEEE80211AX */
346 bss
->isolate
= !wpa_s
->conf
->p2p_intra_bss
;
347 bss
->extended_key_id
= wpa_s
->conf
->extended_key_id
;
348 bss
->force_per_enrollee_psk
= wpa_s
->global
->p2p_per_sta_psk
;
349 bss
->wpa_deny_ptk0_rekey
= ssid
->wpa_deny_ptk0_rekey
;
351 if (ssid
->p2p_group
) {
352 os_memcpy(bss
->ip_addr_go
, wpa_s
->p2pdev
->conf
->ip_addr_go
, 4);
353 os_memcpy(bss
->ip_addr_mask
, wpa_s
->p2pdev
->conf
->ip_addr_mask
,
355 os_memcpy(bss
->ip_addr_start
,
356 wpa_s
->p2pdev
->conf
->ip_addr_start
, 4);
357 os_memcpy(bss
->ip_addr_end
, wpa_s
->p2pdev
->conf
->ip_addr_end
,
360 #endif /* CONFIG_P2P */
362 if (ssid
->ssid_len
== 0) {
363 wpa_printf(MSG_ERROR
, "No SSID configured for AP mode");
366 os_memcpy(bss
->ssid
.ssid
, ssid
->ssid
, ssid
->ssid_len
);
367 bss
->ssid
.ssid_len
= ssid
->ssid_len
;
368 bss
->ssid
.ssid_set
= 1;
370 bss
->ignore_broadcast_ssid
= ssid
->ignore_broadcast_ssid
;
373 bss
->auth_algs
= ssid
->auth_alg
;
375 if (wpa_key_mgmt_wpa_psk(ssid
->key_mgmt
))
376 bss
->wpa
= ssid
->proto
;
377 if (ssid
->key_mgmt
== DEFAULT_KEY_MGMT
)
378 bss
->wpa_key_mgmt
= WPA_KEY_MGMT_PSK
;
380 bss
->wpa_key_mgmt
= ssid
->key_mgmt
;
381 bss
->wpa_pairwise
= ssid
->pairwise_cipher
;
382 if (wpa_key_mgmt_sae(bss
->wpa_key_mgmt
) && ssid
->passphrase
) {
383 bss
->ssid
.wpa_passphrase
= os_strdup(ssid
->passphrase
);
384 } else if (ssid
->psk_set
) {
385 bin_clear_free(bss
->ssid
.wpa_psk
, sizeof(*bss
->ssid
.wpa_psk
));
386 bss
->ssid
.wpa_psk
= os_zalloc(sizeof(struct hostapd_wpa_psk
));
387 if (bss
->ssid
.wpa_psk
== NULL
)
389 os_memcpy(bss
->ssid
.wpa_psk
->psk
, ssid
->psk
, PMK_LEN
);
390 bss
->ssid
.wpa_psk
->group
= 1;
391 bss
->ssid
.wpa_psk_set
= 1;
392 } else if (ssid
->passphrase
) {
393 bss
->ssid
.wpa_passphrase
= os_strdup(ssid
->passphrase
);
395 } else if (ssid
->wep_key_len
[0] || ssid
->wep_key_len
[1] ||
396 ssid
->wep_key_len
[2] || ssid
->wep_key_len
[3]) {
397 struct hostapd_wep_keys
*wep
= &bss
->ssid
.wep
;
399 for (i
= 0; i
< NUM_WEP_KEYS
; i
++) {
400 if (ssid
->wep_key_len
[i
] == 0)
402 wep
->key
[i
] = os_memdup(ssid
->wep_key
[i
],
403 ssid
->wep_key_len
[i
]);
404 if (wep
->key
[i
] == NULL
)
406 wep
->len
[i
] = ssid
->wep_key_len
[i
];
408 wep
->idx
= ssid
->wep_tx_keyidx
;
410 #endif /* CONFIG_WEP */
413 if (ssid
->sae_password
) {
414 struct sae_password_entry
*pw
;
416 pw
= os_zalloc(sizeof(*pw
));
419 os_memset(pw
->peer_addr
, 0xff, ETH_ALEN
);
420 pw
->password
= os_strdup(ssid
->sae_password
);
425 if (ssid
->sae_password_id
) {
426 pw
->identifier
= os_strdup(ssid
->sae_password_id
);
427 if (!pw
->identifier
) {
428 str_clear_free(pw
->password
);
434 pw
->next
= bss
->sae_passwords
;
435 bss
->sae_passwords
= pw
;
438 bss
->sae_pwe
= wpa_s
->conf
->sae_pwe
;
439 #endif /* CONFIG_SAE */
441 if (wpa_s
->conf
->go_interworking
) {
442 wpa_printf(MSG_DEBUG
,
443 "P2P: Enable Interworking with access_network_type: %d",
444 wpa_s
->conf
->go_access_network_type
);
445 bss
->interworking
= wpa_s
->conf
->go_interworking
;
446 bss
->access_network_type
= wpa_s
->conf
->go_access_network_type
;
447 bss
->internet
= wpa_s
->conf
->go_internet
;
448 if (wpa_s
->conf
->go_venue_group
) {
449 wpa_printf(MSG_DEBUG
,
450 "P2P: Venue group: %d Venue type: %d",
451 wpa_s
->conf
->go_venue_group
,
452 wpa_s
->conf
->go_venue_type
);
453 bss
->venue_group
= wpa_s
->conf
->go_venue_group
;
454 bss
->venue_type
= wpa_s
->conf
->go_venue_type
;
455 bss
->venue_info_set
= 1;
459 if (ssid
->ap_max_inactivity
)
460 bss
->ap_max_inactivity
= ssid
->ap_max_inactivity
;
462 if (ssid
->dtim_period
)
463 bss
->dtim_period
= ssid
->dtim_period
;
464 else if (wpa_s
->conf
->dtim_period
)
465 bss
->dtim_period
= wpa_s
->conf
->dtim_period
;
467 if (ssid
->beacon_int
)
468 conf
->beacon_int
= ssid
->beacon_int
;
469 else if (wpa_s
->conf
->beacon_int
)
470 conf
->beacon_int
= wpa_s
->conf
->beacon_int
;
473 if (ssid
->mode
== WPAS_MODE_P2P_GO
||
474 ssid
->mode
== WPAS_MODE_P2P_GROUP_FORMATION
) {
475 if (wpa_s
->conf
->p2p_go_ctwindow
> conf
->beacon_int
) {
477 "CTWindow (%d) is bigger than beacon interval (%d) - avoid configuring it",
478 wpa_s
->conf
->p2p_go_ctwindow
,
480 conf
->p2p_go_ctwindow
= 0;
482 conf
->p2p_go_ctwindow
= wpa_s
->conf
->p2p_go_ctwindow
;
485 #endif /* CONFIG_P2P */
487 if ((bss
->wpa
& 2) && bss
->rsn_pairwise
== 0)
488 bss
->rsn_pairwise
= bss
->wpa_pairwise
;
489 bss
->wpa_group
= wpa_select_ap_group_cipher(bss
->wpa
, bss
->wpa_pairwise
,
492 if (bss
->wpa
&& bss
->ieee802_1x
) {
493 bss
->ssid
.security_policy
= SECURITY_WPA
;
494 } else if (bss
->wpa
) {
495 bss
->ssid
.security_policy
= SECURITY_WPA_PSK
;
497 } else if (bss
->ieee802_1x
) {
498 int cipher
= WPA_CIPHER_NONE
;
499 bss
->ssid
.security_policy
= SECURITY_IEEE_802_1X
;
500 bss
->ssid
.wep
.default_len
= bss
->default_wep_key_len
;
501 if (bss
->default_wep_key_len
)
502 cipher
= bss
->default_wep_key_len
>= 13 ?
503 WPA_CIPHER_WEP104
: WPA_CIPHER_WEP40
;
504 bss
->wpa_group
= cipher
;
505 bss
->wpa_pairwise
= cipher
;
506 bss
->rsn_pairwise
= cipher
;
507 } else if (bss
->ssid
.wep
.keys_set
) {
508 int cipher
= WPA_CIPHER_WEP40
;
509 if (bss
->ssid
.wep
.len
[0] >= 13)
510 cipher
= WPA_CIPHER_WEP104
;
511 bss
->ssid
.security_policy
= SECURITY_STATIC_WEP
;
512 bss
->wpa_group
= cipher
;
513 bss
->wpa_pairwise
= cipher
;
514 bss
->rsn_pairwise
= cipher
;
515 #endif /* CONFIG_WEP */
517 bss
->ssid
.security_policy
= SECURITY_PLAINTEXT
;
518 bss
->wpa_group
= WPA_CIPHER_NONE
;
519 bss
->wpa_pairwise
= WPA_CIPHER_NONE
;
520 bss
->rsn_pairwise
= WPA_CIPHER_NONE
;
523 if (bss
->wpa_group_rekey
< 86400 && (bss
->wpa
& 2) &&
524 (bss
->wpa_group
== WPA_CIPHER_CCMP
||
525 bss
->wpa_group
== WPA_CIPHER_GCMP
||
526 bss
->wpa_group
== WPA_CIPHER_CCMP_256
||
527 bss
->wpa_group
== WPA_CIPHER_GCMP_256
)) {
529 * Strong ciphers do not need frequent rekeying, so increase
530 * the default GTK rekeying period to 24 hours.
532 bss
->wpa_group_rekey
= 86400;
535 if (ssid
->ieee80211w
!= MGMT_FRAME_PROTECTION_DEFAULT
)
536 bss
->ieee80211w
= ssid
->ieee80211w
;
539 bss
->ocv
= ssid
->ocv
;
540 #endif /* CONFIG_OCV */
544 * Enable WPS by default for open and WPA/WPA2-Personal network, but
545 * require user interaction to actually use it. Only the internal
546 * Registrar is supported.
548 if (bss
->ssid
.security_policy
!= SECURITY_WPA_PSK
&&
549 bss
->ssid
.security_policy
!= SECURITY_PLAINTEXT
)
551 if (bss
->ssid
.security_policy
== SECURITY_WPA_PSK
&&
552 (!(bss
->rsn_pairwise
& (WPA_CIPHER_CCMP
| WPA_CIPHER_GCMP
)) ||
554 goto no_wps
; /* WPS2 does not allow WPA/TKIP-only
556 if (ssid
->wps_disabled
)
560 if (!ssid
->ignore_broadcast_ssid
)
563 bss
->ap_setup_locked
= 2;
564 if (wpa_s
->conf
->config_methods
)
565 bss
->config_methods
= os_strdup(wpa_s
->conf
->config_methods
);
566 os_memcpy(bss
->device_type
, wpa_s
->conf
->device_type
,
568 if (wpa_s
->conf
->device_name
) {
569 bss
->device_name
= os_strdup(wpa_s
->conf
->device_name
);
570 bss
->friendly_name
= os_strdup(wpa_s
->conf
->device_name
);
572 if (wpa_s
->conf
->manufacturer
)
573 bss
->manufacturer
= os_strdup(wpa_s
->conf
->manufacturer
);
574 if (wpa_s
->conf
->model_name
)
575 bss
->model_name
= os_strdup(wpa_s
->conf
->model_name
);
576 if (wpa_s
->conf
->model_number
)
577 bss
->model_number
= os_strdup(wpa_s
->conf
->model_number
);
578 if (wpa_s
->conf
->serial_number
)
579 bss
->serial_number
= os_strdup(wpa_s
->conf
->serial_number
);
580 if (is_nil_uuid(wpa_s
->conf
->uuid
))
581 os_memcpy(bss
->uuid
, wpa_s
->wps
->uuid
, WPS_UUID_LEN
);
583 os_memcpy(bss
->uuid
, wpa_s
->conf
->uuid
, WPS_UUID_LEN
);
584 os_memcpy(bss
->os_version
, wpa_s
->conf
->os_version
, 4);
585 bss
->pbc_in_m1
= wpa_s
->conf
->pbc_in_m1
;
586 if (ssid
->eap
.fragment_size
!= DEFAULT_FRAGMENT_SIZE
)
587 bss
->fragment_size
= ssid
->eap
.fragment_size
;
589 #endif /* CONFIG_WPS */
591 if (wpa_s
->max_stations
&&
592 wpa_s
->max_stations
< wpa_s
->conf
->max_num_sta
)
593 bss
->max_num_sta
= wpa_s
->max_stations
;
595 bss
->max_num_sta
= wpa_s
->conf
->max_num_sta
;
598 bss
->isolate
= wpa_s
->conf
->ap_isolate
;
600 bss
->disassoc_low_ack
= wpa_s
->conf
->disassoc_low_ack
;
602 if (wpa_s
->conf
->ap_vendor_elements
) {
603 bss
->vendor_elements
=
604 wpabuf_dup(wpa_s
->conf
->ap_vendor_elements
);
607 bss
->ftm_responder
= wpa_s
->conf
->ftm_responder
;
608 bss
->ftm_initiator
= wpa_s
->conf
->ftm_initiator
;
610 bss
->transition_disable
= ssid
->transition_disable
;
616 static void ap_public_action_rx(void *ctx
, const u8
*buf
, size_t len
, int freq
)
619 struct wpa_supplicant
*wpa_s
= ctx
;
620 const struct ieee80211_mgmt
*mgmt
;
622 mgmt
= (const struct ieee80211_mgmt
*) buf
;
623 if (len
< IEEE80211_HDRLEN
+ 1)
625 if (mgmt
->u
.action
.category
!= WLAN_ACTION_PUBLIC
)
627 wpas_p2p_rx_action(wpa_s
, mgmt
->da
, mgmt
->sa
, mgmt
->bssid
,
628 mgmt
->u
.action
.category
,
629 buf
+ IEEE80211_HDRLEN
+ 1,
630 len
- IEEE80211_HDRLEN
- 1, freq
);
631 #endif /* CONFIG_P2P */
635 static void ap_wps_event_cb(void *ctx
, enum wps_event event
,
636 union wps_event_data
*data
)
639 struct wpa_supplicant
*wpa_s
= ctx
;
641 if (event
== WPS_EV_FAIL
) {
642 struct wps_event_fail
*fail
= &data
->fail
;
644 if (wpa_s
->p2pdev
&& wpa_s
->p2pdev
!= wpa_s
&&
645 wpa_s
== wpa_s
->global
->p2p_group_formation
) {
647 * src/ap/wps_hostapd.c has already sent this on the
648 * main interface, so only send on the parent interface
651 wpa_msg(wpa_s
->p2pdev
, MSG_INFO
, WPS_EVENT_FAIL
652 "msg=%d config_error=%d",
653 fail
->msg
, fail
->config_error
);
655 wpas_p2p_wps_failed(wpa_s
, fail
);
657 #endif /* CONFIG_P2P */
661 static void ap_sta_authorized_cb(void *ctx
, const u8
*mac_addr
,
662 int authorized
, const u8
*p2p_dev_addr
)
664 wpas_notify_sta_authorized(ctx
, mac_addr
, authorized
, p2p_dev_addr
);
669 static void ap_new_psk_cb(void *ctx
, const u8
*mac_addr
, const u8
*p2p_dev_addr
,
670 const u8
*psk
, size_t psk_len
)
673 struct wpa_supplicant
*wpa_s
= ctx
;
674 if (wpa_s
->ap_iface
== NULL
|| wpa_s
->current_ssid
== NULL
)
676 wpas_p2p_new_psk_cb(wpa_s
, mac_addr
, p2p_dev_addr
, psk
, psk_len
);
678 #endif /* CONFIG_P2P */
681 static int ap_vendor_action_rx(void *ctx
, const u8
*buf
, size_t len
, int freq
)
684 struct wpa_supplicant
*wpa_s
= ctx
;
685 const struct ieee80211_mgmt
*mgmt
;
687 mgmt
= (const struct ieee80211_mgmt
*) buf
;
688 if (len
< IEEE80211_HDRLEN
+ 1)
690 wpas_p2p_rx_action(wpa_s
, mgmt
->da
, mgmt
->sa
, mgmt
->bssid
,
691 mgmt
->u
.action
.category
,
692 buf
+ IEEE80211_HDRLEN
+ 1,
693 len
- IEEE80211_HDRLEN
- 1, freq
);
694 #endif /* CONFIG_P2P */
699 static int ap_probe_req_rx(void *ctx
, const u8
*sa
, const u8
*da
,
700 const u8
*bssid
, const u8
*ie
, size_t ie_len
,
703 struct wpa_supplicant
*wpa_s
= ctx
;
704 unsigned int freq
= 0;
707 freq
= wpa_s
->ap_iface
->freq
;
709 return wpas_p2p_probe_req_rx(wpa_s
, sa
, da
, bssid
, ie
, ie_len
,
714 static void ap_wps_reg_success_cb(void *ctx
, const u8
*mac_addr
,
717 struct wpa_supplicant
*wpa_s
= ctx
;
718 wpas_p2p_wps_success(wpa_s
, mac_addr
, 1);
722 static void wpas_ap_configured_cb(void *ctx
)
724 struct wpa_supplicant
*wpa_s
= ctx
;
726 wpa_printf(MSG_DEBUG
, "AP interface setup completed - state %s",
727 hostapd_state_text(wpa_s
->ap_iface
->state
));
728 if (wpa_s
->ap_iface
->state
== HAPD_IFACE_DISABLED
) {
729 wpa_supplicant_ap_deinit(wpa_s
);
734 if (wpa_s
->current_ssid
&& wpa_s
->current_ssid
->acs
) {
735 wpa_s
->assoc_freq
= wpa_s
->ap_iface
->freq
;
736 wpa_s
->current_ssid
->frequency
= wpa_s
->ap_iface
->freq
;
738 #endif /* CONFIG_ACS */
740 wpa_supplicant_set_state(wpa_s
, WPA_COMPLETED
);
742 if (wpa_s
->ap_configured_cb
)
743 wpa_s
->ap_configured_cb(wpa_s
->ap_configured_cb_ctx
,
744 wpa_s
->ap_configured_cb_data
);
748 int wpa_supplicant_create_ap(struct wpa_supplicant
*wpa_s
,
749 struct wpa_ssid
*ssid
)
751 struct wpa_driver_associate_params params
;
752 struct hostapd_iface
*hapd_iface
;
753 struct hostapd_config
*conf
;
756 if (ssid
->ssid
== NULL
|| ssid
->ssid_len
== 0) {
757 wpa_printf(MSG_ERROR
, "No SSID configured for AP mode");
761 wpa_supplicant_ap_deinit(wpa_s
);
763 wpa_printf(MSG_DEBUG
, "Setting up AP (SSID='%s')",
764 wpa_ssid_txt(ssid
->ssid
, ssid
->ssid_len
));
766 os_memset(¶ms
, 0, sizeof(params
));
767 params
.ssid
= ssid
->ssid
;
768 params
.ssid_len
= ssid
->ssid_len
;
769 switch (ssid
->mode
) {
771 case WPAS_MODE_P2P_GO
:
772 case WPAS_MODE_P2P_GROUP_FORMATION
:
773 params
.mode
= IEEE80211_MODE_AP
;
778 if (ssid
->frequency
== 0)
779 ssid
->frequency
= 2462; /* default channel 11 */
780 params
.freq
.freq
= ssid
->frequency
;
782 if ((ssid
->mode
== WPAS_MODE_AP
|| ssid
->mode
== WPAS_MODE_P2P_GO
) &&
786 if (ieee80211_freq_to_chan(ssid
->frequency
, &primary_channel
) ==
788 wpa_printf(MSG_WARNING
,
789 "EDMG: Failed to get the primary channel");
793 hostapd_encode_edmg_chan(ssid
->enable_edmg
, ssid
->edmg_channel
,
794 primary_channel
, ¶ms
.freq
.edmg
);
797 params
.wpa_proto
= ssid
->proto
;
798 if (ssid
->key_mgmt
& WPA_KEY_MGMT_PSK
)
799 wpa_s
->key_mgmt
= WPA_KEY_MGMT_PSK
;
801 wpa_s
->key_mgmt
= WPA_KEY_MGMT_NONE
;
802 params
.key_mgmt_suite
= wpa_s
->key_mgmt
;
804 wpa_s
->pairwise_cipher
= wpa_pick_pairwise_cipher(ssid
->pairwise_cipher
,
806 if (wpa_s
->pairwise_cipher
< 0) {
807 wpa_printf(MSG_WARNING
, "WPA: Failed to select pairwise "
811 params
.pairwise_suite
= wpa_s
->pairwise_cipher
;
812 params
.group_suite
= params
.pairwise_suite
;
815 if (ssid
->mode
== WPAS_MODE_P2P_GO
||
816 ssid
->mode
== WPAS_MODE_P2P_GROUP_FORMATION
)
818 #endif /* CONFIG_P2P */
820 if (wpa_s
->p2pdev
->set_ap_uapsd
)
821 params
.uapsd
= wpa_s
->p2pdev
->ap_uapsd
;
822 else if (params
.p2p
&& (wpa_s
->drv_flags
& WPA_DRIVER_FLAGS_AP_UAPSD
))
823 params
.uapsd
= 1; /* mandatory for P2P GO */
827 if (ieee80211_is_dfs(params
.freq
.freq
, wpa_s
->hw
.modes
,
828 wpa_s
->hw
.num_modes
))
829 params
.freq
.freq
= 0; /* set channel after CAC */
832 wpa_drv_get_ext_capa(wpa_s
, WPA_IF_P2P_GO
);
834 wpa_drv_get_ext_capa(wpa_s
, WPA_IF_AP_BSS
);
836 if (wpa_drv_associate(wpa_s
, ¶ms
) < 0) {
837 wpa_msg(wpa_s
, MSG_INFO
, "Failed to start AP functionality");
841 wpa_s
->ap_iface
= hapd_iface
= hostapd_alloc_iface();
842 if (hapd_iface
== NULL
)
844 hapd_iface
->owner
= wpa_s
;
845 hapd_iface
->drv_flags
= wpa_s
->drv_flags
;
846 hapd_iface
->probe_resp_offloads
= wpa_s
->probe_resp_offloads
;
847 hapd_iface
->extended_capa
= wpa_s
->extended_capa
;
848 hapd_iface
->extended_capa_mask
= wpa_s
->extended_capa_mask
;
849 hapd_iface
->extended_capa_len
= wpa_s
->extended_capa_len
;
851 wpa_s
->ap_iface
->conf
= conf
= hostapd_config_defaults();
853 wpa_supplicant_ap_deinit(wpa_s
);
857 os_memcpy(wpa_s
->ap_iface
->conf
->wmm_ac_params
,
858 wpa_s
->conf
->wmm_ac_params
,
859 sizeof(wpa_s
->conf
->wmm_ac_params
));
861 if (params
.uapsd
> 0) {
862 conf
->bss
[0]->wmm_enabled
= 1;
863 conf
->bss
[0]->wmm_uapsd
= 1;
866 if (wpa_supplicant_conf_ap(wpa_s
, ssid
, conf
)) {
867 wpa_printf(MSG_ERROR
, "Failed to create AP configuration");
868 wpa_supplicant_ap_deinit(wpa_s
);
873 if (ssid
->mode
== WPAS_MODE_P2P_GO
)
874 conf
->bss
[0]->p2p
= P2P_ENABLED
| P2P_GROUP_OWNER
;
875 else if (ssid
->mode
== WPAS_MODE_P2P_GROUP_FORMATION
)
876 conf
->bss
[0]->p2p
= P2P_ENABLED
| P2P_GROUP_OWNER
|
878 #endif /* CONFIG_P2P */
880 hapd_iface
->num_bss
= conf
->num_bss
;
881 hapd_iface
->bss
= os_calloc(conf
->num_bss
,
882 sizeof(struct hostapd_data
*));
883 if (hapd_iface
->bss
== NULL
) {
884 wpa_supplicant_ap_deinit(wpa_s
);
888 for (i
= 0; i
< conf
->num_bss
; i
++) {
890 hostapd_alloc_bss_data(hapd_iface
, conf
,
892 if (hapd_iface
->bss
[i
] == NULL
) {
893 wpa_supplicant_ap_deinit(wpa_s
);
897 hapd_iface
->bss
[i
]->msg_ctx
= wpa_s
;
898 hapd_iface
->bss
[i
]->msg_ctx_parent
= wpa_s
->p2pdev
;
899 hapd_iface
->bss
[i
]->public_action_cb
= ap_public_action_rx
;
900 hapd_iface
->bss
[i
]->public_action_cb_ctx
= wpa_s
;
901 hapd_iface
->bss
[i
]->vendor_action_cb
= ap_vendor_action_rx
;
902 hapd_iface
->bss
[i
]->vendor_action_cb_ctx
= wpa_s
;
903 hostapd_register_probereq_cb(hapd_iface
->bss
[i
],
904 ap_probe_req_rx
, wpa_s
);
905 hapd_iface
->bss
[i
]->wps_reg_success_cb
= ap_wps_reg_success_cb
;
906 hapd_iface
->bss
[i
]->wps_reg_success_cb_ctx
= wpa_s
;
907 hapd_iface
->bss
[i
]->wps_event_cb
= ap_wps_event_cb
;
908 hapd_iface
->bss
[i
]->wps_event_cb_ctx
= wpa_s
;
909 hapd_iface
->bss
[i
]->sta_authorized_cb
= ap_sta_authorized_cb
;
910 hapd_iface
->bss
[i
]->sta_authorized_cb_ctx
= wpa_s
;
912 hapd_iface
->bss
[i
]->new_psk_cb
= ap_new_psk_cb
;
913 hapd_iface
->bss
[i
]->new_psk_cb_ctx
= wpa_s
;
914 hapd_iface
->bss
[i
]->p2p
= wpa_s
->global
->p2p
;
915 hapd_iface
->bss
[i
]->p2p_group
= wpas_p2p_group_init(wpa_s
,
917 #endif /* CONFIG_P2P */
918 hapd_iface
->bss
[i
]->setup_complete_cb
= wpas_ap_configured_cb
;
919 hapd_iface
->bss
[i
]->setup_complete_cb_ctx
= wpa_s
;
920 #ifdef CONFIG_TESTING_OPTIONS
921 hapd_iface
->bss
[i
]->ext_eapol_frame_io
=
922 wpa_s
->ext_eapol_frame_io
;
923 #endif /* CONFIG_TESTING_OPTIONS */
926 os_memcpy(hapd_iface
->bss
[0]->own_addr
, wpa_s
->own_addr
, ETH_ALEN
);
927 hapd_iface
->bss
[0]->driver
= wpa_s
->driver
;
928 hapd_iface
->bss
[0]->drv_priv
= wpa_s
->drv_priv
;
930 wpa_s
->current_ssid
= ssid
;
931 eapol_sm_notify_config(wpa_s
->eapol
, NULL
, NULL
);
932 os_memcpy(wpa_s
->bssid
, wpa_s
->own_addr
, ETH_ALEN
);
933 wpa_s
->assoc_freq
= ssid
->frequency
;
934 wpa_s
->ap_iface
->conf
->enable_edmg
= ssid
->enable_edmg
;
935 wpa_s
->ap_iface
->conf
->edmg_channel
= ssid
->edmg_channel
;
937 #if defined(CONFIG_P2P) && defined(CONFIG_ACS)
938 if (wpa_s
->p2p_go_do_acs
) {
939 wpa_s
->ap_iface
->conf
->channel
= 0;
940 wpa_s
->ap_iface
->conf
->hw_mode
= wpa_s
->p2p_go_acs_band
;
943 #endif /* CONFIG_P2P && CONFIG_ACS */
945 if (hostapd_setup_interface(wpa_s
->ap_iface
)) {
946 wpa_printf(MSG_ERROR
, "Failed to initialize AP interface");
947 wpa_supplicant_ap_deinit(wpa_s
);
955 void wpa_supplicant_ap_deinit(struct wpa_supplicant
*wpa_s
)
958 eloop_cancel_timeout(wpas_wps_ap_pin_timeout
, wpa_s
, NULL
);
959 #endif /* CONFIG_WPS */
961 if (wpa_s
->ap_iface
== NULL
)
964 wpa_s
->current_ssid
= NULL
;
965 eapol_sm_notify_config(wpa_s
->eapol
, NULL
, NULL
);
966 wpa_s
->assoc_freq
= 0;
967 wpas_p2p_ap_deinit(wpa_s
);
968 wpa_s
->ap_iface
->driver_ap_teardown
=
969 !!(wpa_s
->drv_flags
& WPA_DRIVER_FLAGS_AP_TEARDOWN_SUPPORT
);
971 hostapd_interface_deinit(wpa_s
->ap_iface
);
972 hostapd_interface_free(wpa_s
->ap_iface
);
973 wpa_s
->ap_iface
= NULL
;
974 wpa_drv_deinit_ap(wpa_s
);
975 wpa_msg(wpa_s
, MSG_INFO
, WPA_EVENT_DISCONNECTED
"bssid=" MACSTR
976 " reason=%d locally_generated=1",
977 MAC2STR(wpa_s
->own_addr
), WLAN_REASON_DEAUTH_LEAVING
);
981 void ap_tx_status(void *ctx
, const u8
*addr
,
982 const u8
*buf
, size_t len
, int ack
)
985 struct wpa_supplicant
*wpa_s
= ctx
;
986 hostapd_tx_status(wpa_s
->ap_iface
->bss
[0], addr
, buf
, len
, ack
);
987 #endif /* NEED_AP_MLME */
991 void ap_eapol_tx_status(void *ctx
, const u8
*dst
,
992 const u8
*data
, size_t len
, int ack
)
995 struct wpa_supplicant
*wpa_s
= ctx
;
996 if (!wpa_s
->ap_iface
)
998 hostapd_tx_status(wpa_s
->ap_iface
->bss
[0], dst
, data
, len
, ack
);
999 #endif /* NEED_AP_MLME */
1003 void ap_client_poll_ok(void *ctx
, const u8
*addr
)
1006 struct wpa_supplicant
*wpa_s
= ctx
;
1007 if (wpa_s
->ap_iface
)
1008 hostapd_client_poll_ok(wpa_s
->ap_iface
->bss
[0], addr
);
1009 #endif /* NEED_AP_MLME */
1013 void ap_rx_from_unknown_sta(void *ctx
, const u8
*addr
, int wds
)
1016 struct wpa_supplicant
*wpa_s
= ctx
;
1017 ieee802_11_rx_from_unknown(wpa_s
->ap_iface
->bss
[0], addr
, wds
);
1018 #endif /* NEED_AP_MLME */
1022 void ap_mgmt_rx(void *ctx
, struct rx_mgmt
*rx_mgmt
)
1025 struct wpa_supplicant
*wpa_s
= ctx
;
1026 struct hostapd_frame_info fi
;
1027 os_memset(&fi
, 0, sizeof(fi
));
1028 fi
.datarate
= rx_mgmt
->datarate
;
1029 fi
.ssi_signal
= rx_mgmt
->ssi_signal
;
1030 ieee802_11_mgmt(wpa_s
->ap_iface
->bss
[0], rx_mgmt
->frame
,
1031 rx_mgmt
->frame_len
, &fi
);
1032 #endif /* NEED_AP_MLME */
1036 void ap_mgmt_tx_cb(void *ctx
, const u8
*buf
, size_t len
, u16 stype
, int ok
)
1039 struct wpa_supplicant
*wpa_s
= ctx
;
1040 ieee802_11_mgmt_cb(wpa_s
->ap_iface
->bss
[0], buf
, len
, stype
, ok
);
1041 #endif /* NEED_AP_MLME */
1045 void wpa_supplicant_ap_rx_eapol(struct wpa_supplicant
*wpa_s
,
1046 const u8
*src_addr
, const u8
*buf
, size_t len
)
1048 ieee802_1x_receive(wpa_s
->ap_iface
->bss
[0], src_addr
, buf
, len
);
1054 int wpa_supplicant_ap_wps_pbc(struct wpa_supplicant
*wpa_s
, const u8
*bssid
,
1055 const u8
*p2p_dev_addr
)
1057 if (!wpa_s
->ap_iface
)
1059 return hostapd_wps_button_pushed(wpa_s
->ap_iface
->bss
[0],
1064 int wpa_supplicant_ap_wps_cancel(struct wpa_supplicant
*wpa_s
)
1066 struct wps_registrar
*reg
;
1067 int reg_sel
= 0, wps_sta
= 0;
1069 if (!wpa_s
->ap_iface
|| !wpa_s
->ap_iface
->bss
[0]->wps
)
1072 reg
= wpa_s
->ap_iface
->bss
[0]->wps
->registrar
;
1073 reg_sel
= wps_registrar_wps_cancel(reg
);
1074 wps_sta
= ap_for_each_sta(wpa_s
->ap_iface
->bss
[0],
1075 ap_sta_wps_cancel
, NULL
);
1077 if (!reg_sel
&& !wps_sta
) {
1078 wpa_printf(MSG_DEBUG
, "No WPS operation in progress at this "
1084 * There are 2 cases to return wps cancel as success:
1085 * 1. When wps cancel was initiated but no connection has been
1086 * established with client yet.
1087 * 2. Client is in the middle of exchanging WPS messages.
1094 int wpa_supplicant_ap_wps_pin(struct wpa_supplicant
*wpa_s
, const u8
*bssid
,
1095 const char *pin
, char *buf
, size_t buflen
,
1098 int ret
, ret_len
= 0;
1100 if (!wpa_s
->ap_iface
)
1106 if (wps_generate_pin(&rpin
) < 0)
1108 ret_len
= os_snprintf(buf
, buflen
, "%08d", rpin
);
1109 if (os_snprintf_error(buflen
, ret_len
))
1113 ret_len
= os_snprintf(buf
, buflen
, "%s", pin
);
1114 if (os_snprintf_error(buflen
, ret_len
))
1118 ret
= hostapd_wps_add_pin(wpa_s
->ap_iface
->bss
[0], bssid
, "any", pin
,
1126 static void wpas_wps_ap_pin_timeout(void *eloop_data
, void *user_ctx
)
1128 struct wpa_supplicant
*wpa_s
= eloop_data
;
1129 wpa_printf(MSG_DEBUG
, "WPS: AP PIN timed out");
1130 wpas_wps_ap_pin_disable(wpa_s
);
1134 static void wpas_wps_ap_pin_enable(struct wpa_supplicant
*wpa_s
, int timeout
)
1136 struct hostapd_data
*hapd
;
1138 if (wpa_s
->ap_iface
== NULL
)
1140 hapd
= wpa_s
->ap_iface
->bss
[0];
1141 wpa_printf(MSG_DEBUG
, "WPS: Enabling AP PIN (timeout=%d)", timeout
);
1142 hapd
->ap_pin_failures
= 0;
1143 eloop_cancel_timeout(wpas_wps_ap_pin_timeout
, wpa_s
, NULL
);
1145 eloop_register_timeout(timeout
, 0,
1146 wpas_wps_ap_pin_timeout
, wpa_s
, NULL
);
1150 void wpas_wps_ap_pin_disable(struct wpa_supplicant
*wpa_s
)
1152 struct hostapd_data
*hapd
;
1154 if (wpa_s
->ap_iface
== NULL
)
1156 wpa_printf(MSG_DEBUG
, "WPS: Disabling AP PIN");
1157 hapd
= wpa_s
->ap_iface
->bss
[0];
1158 os_free(hapd
->conf
->ap_pin
);
1159 hapd
->conf
->ap_pin
= NULL
;
1160 eloop_cancel_timeout(wpas_wps_ap_pin_timeout
, wpa_s
, NULL
);
1164 const char * wpas_wps_ap_pin_random(struct wpa_supplicant
*wpa_s
, int timeout
)
1166 struct hostapd_data
*hapd
;
1170 if (wpa_s
->ap_iface
== NULL
)
1172 hapd
= wpa_s
->ap_iface
->bss
[0];
1173 if (wps_generate_pin(&pin
) < 0)
1175 os_snprintf(pin_txt
, sizeof(pin_txt
), "%08u", pin
);
1176 os_free(hapd
->conf
->ap_pin
);
1177 hapd
->conf
->ap_pin
= os_strdup(pin_txt
);
1178 if (hapd
->conf
->ap_pin
== NULL
)
1180 wpas_wps_ap_pin_enable(wpa_s
, timeout
);
1182 return hapd
->conf
->ap_pin
;
1186 const char * wpas_wps_ap_pin_get(struct wpa_supplicant
*wpa_s
)
1188 struct hostapd_data
*hapd
;
1189 if (wpa_s
->ap_iface
== NULL
)
1191 hapd
= wpa_s
->ap_iface
->bss
[0];
1192 return hapd
->conf
->ap_pin
;
1196 int wpas_wps_ap_pin_set(struct wpa_supplicant
*wpa_s
, const char *pin
,
1199 struct hostapd_data
*hapd
;
1203 if (wpa_s
->ap_iface
== NULL
)
1205 hapd
= wpa_s
->ap_iface
->bss
[0];
1206 ret
= os_snprintf(pin_txt
, sizeof(pin_txt
), "%s", pin
);
1207 if (os_snprintf_error(sizeof(pin_txt
), ret
))
1209 os_free(hapd
->conf
->ap_pin
);
1210 hapd
->conf
->ap_pin
= os_strdup(pin_txt
);
1211 if (hapd
->conf
->ap_pin
== NULL
)
1213 wpas_wps_ap_pin_enable(wpa_s
, timeout
);
1219 void wpa_supplicant_ap_pwd_auth_fail(struct wpa_supplicant
*wpa_s
)
1221 struct hostapd_data
*hapd
;
1223 if (wpa_s
->ap_iface
== NULL
)
1225 hapd
= wpa_s
->ap_iface
->bss
[0];
1228 * Registrar failed to prove its knowledge of the AP PIN. Disable AP
1229 * PIN if this happens multiple times to slow down brute force attacks.
1231 hapd
->ap_pin_failures
++;
1232 wpa_printf(MSG_DEBUG
, "WPS: AP PIN authentication failure number %u",
1233 hapd
->ap_pin_failures
);
1234 if (hapd
->ap_pin_failures
< 3)
1237 wpa_printf(MSG_DEBUG
, "WPS: Disable AP PIN");
1238 hapd
->ap_pin_failures
= 0;
1239 os_free(hapd
->conf
->ap_pin
);
1240 hapd
->conf
->ap_pin
= NULL
;
1244 #ifdef CONFIG_WPS_NFC
1246 struct wpabuf
* wpas_ap_wps_nfc_config_token(struct wpa_supplicant
*wpa_s
,
1249 struct hostapd_data
*hapd
;
1251 if (wpa_s
->ap_iface
== NULL
)
1253 hapd
= wpa_s
->ap_iface
->bss
[0];
1254 return hostapd_wps_nfc_config_token(hapd
, ndef
);
1258 struct wpabuf
* wpas_ap_wps_nfc_handover_sel(struct wpa_supplicant
*wpa_s
,
1261 struct hostapd_data
*hapd
;
1263 if (wpa_s
->ap_iface
== NULL
)
1265 hapd
= wpa_s
->ap_iface
->bss
[0];
1266 return hostapd_wps_nfc_hs_cr(hapd
, ndef
);
1270 int wpas_ap_wps_nfc_report_handover(struct wpa_supplicant
*wpa_s
,
1271 const struct wpabuf
*req
,
1272 const struct wpabuf
*sel
)
1274 struct hostapd_data
*hapd
;
1276 if (wpa_s
->ap_iface
== NULL
)
1278 hapd
= wpa_s
->ap_iface
->bss
[0];
1279 return hostapd_wps_nfc_report_handover(hapd
, req
, sel
);
1282 #endif /* CONFIG_WPS_NFC */
1284 #endif /* CONFIG_WPS */
1287 #ifdef CONFIG_CTRL_IFACE
1289 int ap_ctrl_iface_sta_first(struct wpa_supplicant
*wpa_s
,
1290 char *buf
, size_t buflen
)
1292 struct hostapd_data
*hapd
;
1294 if (wpa_s
->ap_iface
)
1295 hapd
= wpa_s
->ap_iface
->bss
[0];
1296 else if (wpa_s
->ifmsh
)
1297 hapd
= wpa_s
->ifmsh
->bss
[0];
1300 return hostapd_ctrl_iface_sta_first(hapd
, buf
, buflen
);
1304 int ap_ctrl_iface_sta(struct wpa_supplicant
*wpa_s
, const char *txtaddr
,
1305 char *buf
, size_t buflen
)
1307 struct hostapd_data
*hapd
;
1309 if (wpa_s
->ap_iface
)
1310 hapd
= wpa_s
->ap_iface
->bss
[0];
1311 else if (wpa_s
->ifmsh
)
1312 hapd
= wpa_s
->ifmsh
->bss
[0];
1315 return hostapd_ctrl_iface_sta(hapd
, txtaddr
, buf
, buflen
);
1319 int ap_ctrl_iface_sta_next(struct wpa_supplicant
*wpa_s
, const char *txtaddr
,
1320 char *buf
, size_t buflen
)
1322 struct hostapd_data
*hapd
;
1324 if (wpa_s
->ap_iface
)
1325 hapd
= wpa_s
->ap_iface
->bss
[0];
1326 else if (wpa_s
->ifmsh
)
1327 hapd
= wpa_s
->ifmsh
->bss
[0];
1330 return hostapd_ctrl_iface_sta_next(hapd
, txtaddr
, buf
, buflen
);
1334 int ap_ctrl_iface_sta_disassociate(struct wpa_supplicant
*wpa_s
,
1335 const char *txtaddr
)
1337 if (wpa_s
->ap_iface
== NULL
)
1339 return hostapd_ctrl_iface_disassociate(wpa_s
->ap_iface
->bss
[0],
1344 int ap_ctrl_iface_sta_deauthenticate(struct wpa_supplicant
*wpa_s
,
1345 const char *txtaddr
)
1347 if (wpa_s
->ap_iface
== NULL
)
1349 return hostapd_ctrl_iface_deauthenticate(wpa_s
->ap_iface
->bss
[0],
1354 int ap_ctrl_iface_wpa_get_status(struct wpa_supplicant
*wpa_s
, char *buf
,
1355 size_t buflen
, int verbose
)
1357 char *pos
= buf
, *end
= buf
+ buflen
;
1359 struct hostapd_bss_config
*conf
;
1361 if (wpa_s
->ap_iface
== NULL
)
1364 conf
= wpa_s
->ap_iface
->bss
[0]->conf
;
1368 ret
= os_snprintf(pos
, end
- pos
,
1369 "pairwise_cipher=%s\n"
1372 wpa_cipher_txt(conf
->rsn_pairwise
),
1373 wpa_cipher_txt(conf
->wpa_group
),
1374 wpa_key_mgmt_txt(conf
->wpa_key_mgmt
,
1376 if (os_snprintf_error(end
- pos
, ret
))
1382 #endif /* CONFIG_CTRL_IFACE */
1385 int wpa_supplicant_ap_update_beacon(struct wpa_supplicant
*wpa_s
)
1387 struct hostapd_iface
*iface
= wpa_s
->ap_iface
;
1388 struct wpa_ssid
*ssid
= wpa_s
->current_ssid
;
1389 struct hostapd_data
*hapd
;
1391 if (ssid
== NULL
|| wpa_s
->ap_iface
== NULL
||
1392 ssid
->mode
== WPAS_MODE_INFRA
||
1393 ssid
->mode
== WPAS_MODE_IBSS
)
1397 if (ssid
->mode
== WPAS_MODE_P2P_GO
)
1398 iface
->conf
->bss
[0]->p2p
= P2P_ENABLED
| P2P_GROUP_OWNER
;
1399 else if (ssid
->mode
== WPAS_MODE_P2P_GROUP_FORMATION
)
1400 iface
->conf
->bss
[0]->p2p
= P2P_ENABLED
| P2P_GROUP_OWNER
|
1401 P2P_GROUP_FORMATION
;
1402 #endif /* CONFIG_P2P */
1404 hapd
= iface
->bss
[0];
1405 if (hapd
->drv_priv
== NULL
)
1407 ieee802_11_set_beacons(iface
);
1408 hostapd_set_ap_wps_ie(hapd
);
1414 int ap_switch_channel(struct wpa_supplicant
*wpa_s
,
1415 struct csa_settings
*settings
)
1418 if (!wpa_s
->ap_iface
|| !wpa_s
->ap_iface
->bss
[0])
1421 return hostapd_switch_channel(wpa_s
->ap_iface
->bss
[0], settings
);
1422 #else /* NEED_AP_MLME */
1424 #endif /* NEED_AP_MLME */
1428 #ifdef CONFIG_CTRL_IFACE
1429 int ap_ctrl_iface_chanswitch(struct wpa_supplicant
*wpa_s
, const char *pos
)
1431 struct csa_settings settings
;
1432 int ret
= hostapd_parse_csa_settings(pos
, &settings
);
1437 return ap_switch_channel(wpa_s
, &settings
);
1439 #endif /* CONFIG_CTRL_IFACE */
1442 void wpas_ap_ch_switch(struct wpa_supplicant
*wpa_s
, int freq
, int ht
,
1443 int offset
, int width
, int cf1
, int cf2
, int finished
)
1445 struct hostapd_iface
*iface
= wpa_s
->ap_iface
;
1448 iface
= wpa_s
->ifmsh
;
1451 wpa_s
->assoc_freq
= freq
;
1452 if (wpa_s
->current_ssid
)
1453 wpa_s
->current_ssid
->frequency
= freq
;
1454 hostapd_event_ch_switch(iface
->bss
[0], freq
, ht
,
1455 offset
, width
, cf1
, cf2
, finished
);
1459 int wpa_supplicant_ap_mac_addr_filter(struct wpa_supplicant
*wpa_s
,
1462 struct hostapd_data
*hapd
;
1463 struct hostapd_bss_config
*conf
;
1465 if (!wpa_s
->ap_iface
)
1469 wpa_printf(MSG_DEBUG
, "AP: Set MAC address filter: " MACSTR
,
1472 wpa_printf(MSG_DEBUG
, "AP: Clear MAC address filter");
1474 hapd
= wpa_s
->ap_iface
->bss
[0];
1477 os_free(conf
->accept_mac
);
1478 conf
->accept_mac
= NULL
;
1479 conf
->num_accept_mac
= 0;
1480 os_free(conf
->deny_mac
);
1481 conf
->deny_mac
= NULL
;
1482 conf
->num_deny_mac
= 0;
1485 conf
->macaddr_acl
= ACCEPT_UNLESS_DENIED
;
1489 conf
->macaddr_acl
= DENY_UNLESS_ACCEPTED
;
1490 conf
->accept_mac
= os_zalloc(sizeof(struct mac_acl_entry
));
1491 if (conf
->accept_mac
== NULL
)
1493 os_memcpy(conf
->accept_mac
[0].addr
, addr
, ETH_ALEN
);
1494 conf
->num_accept_mac
= 1;
1500 #ifdef CONFIG_WPS_NFC
1501 int wpas_ap_wps_add_nfc_pw(struct wpa_supplicant
*wpa_s
, u16 pw_id
,
1502 const struct wpabuf
*pw
, const u8
*pubkey_hash
)
1504 struct hostapd_data
*hapd
;
1505 struct wps_context
*wps
;
1507 if (!wpa_s
->ap_iface
)
1509 hapd
= wpa_s
->ap_iface
->bss
[0];
1512 if (wpa_s
->p2pdev
->conf
->wps_nfc_dh_pubkey
== NULL
||
1513 wpa_s
->p2pdev
->conf
->wps_nfc_dh_privkey
== NULL
) {
1514 wpa_printf(MSG_DEBUG
, "P2P: No NFC DH key known");
1518 dh5_free(wps
->dh_ctx
);
1519 wpabuf_free(wps
->dh_pubkey
);
1520 wpabuf_free(wps
->dh_privkey
);
1521 wps
->dh_privkey
= wpabuf_dup(
1522 wpa_s
->p2pdev
->conf
->wps_nfc_dh_privkey
);
1523 wps
->dh_pubkey
= wpabuf_dup(
1524 wpa_s
->p2pdev
->conf
->wps_nfc_dh_pubkey
);
1525 if (wps
->dh_privkey
== NULL
|| wps
->dh_pubkey
== NULL
) {
1527 wpabuf_free(wps
->dh_pubkey
);
1528 wps
->dh_pubkey
= NULL
;
1529 wpabuf_free(wps
->dh_privkey
);
1530 wps
->dh_privkey
= NULL
;
1533 wps
->dh_ctx
= dh5_init_fixed(wps
->dh_privkey
, wps
->dh_pubkey
);
1534 if (wps
->dh_ctx
== NULL
)
1537 return wps_registrar_add_nfc_pw_token(hapd
->wps
->registrar
, pubkey_hash
,
1539 pw
? wpabuf_head(pw
) : NULL
,
1540 pw
? wpabuf_len(pw
) : 0, 1);
1542 #endif /* CONFIG_WPS_NFC */
1545 #ifdef CONFIG_CTRL_IFACE
1546 int wpas_ap_stop_ap(struct wpa_supplicant
*wpa_s
)
1548 struct hostapd_data
*hapd
;
1550 if (!wpa_s
->ap_iface
)
1552 hapd
= wpa_s
->ap_iface
->bss
[0];
1553 return hostapd_ctrl_iface_stop_ap(hapd
);
1557 int wpas_ap_pmksa_cache_list(struct wpa_supplicant
*wpa_s
, char *buf
,
1560 size_t reply_len
= 0, i
;
1561 char ap_delimiter
[] = "---- AP ----\n";
1562 char mesh_delimiter
[] = "---- mesh ----\n";
1565 if (wpa_s
->ap_iface
) {
1566 dlen
= os_strlen(ap_delimiter
);
1567 if (dlen
> len
- reply_len
)
1569 os_memcpy(&buf
[reply_len
], ap_delimiter
, dlen
);
1572 for (i
= 0; i
< wpa_s
->ap_iface
->num_bss
; i
++) {
1573 reply_len
+= hostapd_ctrl_iface_pmksa_list(
1574 wpa_s
->ap_iface
->bss
[i
],
1575 &buf
[reply_len
], len
- reply_len
);
1580 dlen
= os_strlen(mesh_delimiter
);
1581 if (dlen
> len
- reply_len
)
1583 os_memcpy(&buf
[reply_len
], mesh_delimiter
, dlen
);
1586 reply_len
+= hostapd_ctrl_iface_pmksa_list(
1587 wpa_s
->ifmsh
->bss
[0], &buf
[reply_len
],
1595 void wpas_ap_pmksa_cache_flush(struct wpa_supplicant
*wpa_s
)
1599 if (wpa_s
->ap_iface
) {
1600 for (i
= 0; i
< wpa_s
->ap_iface
->num_bss
; i
++)
1601 hostapd_ctrl_iface_pmksa_flush(wpa_s
->ap_iface
->bss
[i
]);
1605 hostapd_ctrl_iface_pmksa_flush(wpa_s
->ifmsh
->bss
[0]);
1609 #ifdef CONFIG_PMKSA_CACHE_EXTERNAL
1612 int wpas_ap_pmksa_cache_list_mesh(struct wpa_supplicant
*wpa_s
, const u8
*addr
,
1613 char *buf
, size_t len
)
1615 return hostapd_ctrl_iface_pmksa_list_mesh(wpa_s
->ifmsh
->bss
[0], addr
,
1620 int wpas_ap_pmksa_cache_add_external(struct wpa_supplicant
*wpa_s
, char *cmd
)
1622 struct external_pmksa_cache
*entry
;
1625 pmksa_cache
= hostapd_ctrl_iface_pmksa_create_entry(wpa_s
->own_addr
,
1630 entry
= os_zalloc(sizeof(struct external_pmksa_cache
));
1634 entry
->pmksa_cache
= pmksa_cache
;
1636 dl_list_add(&wpa_s
->mesh_external_pmksa_cache
, &entry
->list
);
1641 #endif /* CONFIG_MESH */
1642 #endif /* CONFIG_PMKSA_CACHE_EXTERNAL */
1644 #endif /* CONFIG_CTRL_IFACE */
1648 void wpas_ap_event_dfs_radar_detected(struct wpa_supplicant
*wpa_s
,
1649 struct dfs_event
*radar
)
1651 struct hostapd_iface
*iface
= wpa_s
->ap_iface
;
1654 iface
= wpa_s
->ifmsh
;
1655 if (!iface
|| !iface
->bss
[0])
1657 wpa_printf(MSG_DEBUG
, "DFS radar detected on %d MHz", radar
->freq
);
1658 hostapd_dfs_radar_detected(iface
, radar
->freq
,
1659 radar
->ht_enabled
, radar
->chan_offset
,
1661 radar
->cf1
, radar
->cf2
);
1665 void wpas_ap_event_dfs_cac_started(struct wpa_supplicant
*wpa_s
,
1666 struct dfs_event
*radar
)
1668 struct hostapd_iface
*iface
= wpa_s
->ap_iface
;
1671 iface
= wpa_s
->ifmsh
;
1672 if (!iface
|| !iface
->bss
[0])
1674 wpa_printf(MSG_DEBUG
, "DFS CAC started on %d MHz", radar
->freq
);
1675 hostapd_dfs_start_cac(iface
, radar
->freq
,
1676 radar
->ht_enabled
, radar
->chan_offset
,
1677 radar
->chan_width
, radar
->cf1
, radar
->cf2
);
1681 void wpas_ap_event_dfs_cac_finished(struct wpa_supplicant
*wpa_s
,
1682 struct dfs_event
*radar
)
1684 struct hostapd_iface
*iface
= wpa_s
->ap_iface
;
1687 iface
= wpa_s
->ifmsh
;
1688 if (!iface
|| !iface
->bss
[0])
1690 wpa_printf(MSG_DEBUG
, "DFS CAC finished on %d MHz", radar
->freq
);
1691 hostapd_dfs_complete_cac(iface
, 1, radar
->freq
,
1692 radar
->ht_enabled
, radar
->chan_offset
,
1693 radar
->chan_width
, radar
->cf1
, radar
->cf2
);
1697 void wpas_ap_event_dfs_cac_aborted(struct wpa_supplicant
*wpa_s
,
1698 struct dfs_event
*radar
)
1700 struct hostapd_iface
*iface
= wpa_s
->ap_iface
;
1703 iface
= wpa_s
->ifmsh
;
1704 if (!iface
|| !iface
->bss
[0])
1706 wpa_printf(MSG_DEBUG
, "DFS CAC aborted on %d MHz", radar
->freq
);
1707 hostapd_dfs_complete_cac(iface
, 0, radar
->freq
,
1708 radar
->ht_enabled
, radar
->chan_offset
,
1709 radar
->chan_width
, radar
->cf1
, radar
->cf2
);
1713 void wpas_ap_event_dfs_cac_nop_finished(struct wpa_supplicant
*wpa_s
,
1714 struct dfs_event
*radar
)
1716 struct hostapd_iface
*iface
= wpa_s
->ap_iface
;
1719 iface
= wpa_s
->ifmsh
;
1720 if (!iface
|| !iface
->bss
[0])
1722 wpa_printf(MSG_DEBUG
, "DFS NOP finished on %d MHz", radar
->freq
);
1723 hostapd_dfs_nop_finished(iface
, radar
->freq
,
1724 radar
->ht_enabled
, radar
->chan_offset
,
1725 radar
->chan_width
, radar
->cf1
, radar
->cf2
);
1727 #endif /* NEED_AP_MLME */
1730 void ap_periodic(struct wpa_supplicant
*wpa_s
)
1732 if (wpa_s
->ap_iface
)
1733 hostapd_periodic_iface(wpa_s
->ap_iface
);