2 * WPA Supplicant - Basic AP mode support routines
3 * Copyright (c) 2003-2009, Jouni Malinen <j@w1.fi>
4 * Copyright (c) 2009, Atheros Communications
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2 as
8 * published by the Free Software Foundation.
10 * Alternatively, this software may be distributed under the terms of BSD
13 * See README and COPYING for more details.
16 #include "utils/includes.h"
18 #include "utils/common.h"
19 #include "utils/eloop.h"
20 #include "utils/uuid.h"
21 #include "common/ieee802_11_defs.h"
22 #include "common/wpa_ctrl.h"
23 #include "ap/hostapd.h"
24 #include "ap/ap_config.h"
25 #include "ap/ap_drv_ops.h"
27 #include "ap/ieee802_11.h"
28 #endif /* NEED_AP_MLME */
29 #include "ap/beacon.h"
30 #include "ap/ieee802_1x.h"
31 #include "ap/wps_hostapd.h"
32 #include "ap/ctrl_iface_ap.h"
33 #include "eap_common/eap_defs.h"
34 #include "eap_server/eap_methods.h"
35 #include "eap_common/eap_wsc_common.h"
37 #include "common/ieee802_11_defs.h"
38 #include "config_ssid.h"
40 #include "wpa_supplicant_i.h"
42 #include "p2p_supplicant.h"
44 #include "ap/sta_info.h"
49 static void wpas_wps_ap_pin_timeout(void *eloop_data
, void *user_ctx
);
50 #endif /* CONFIG_WPS */
53 static int wpa_supplicant_conf_ap(struct wpa_supplicant
*wpa_s
,
54 struct wpa_ssid
*ssid
,
55 struct hostapd_config
*conf
)
57 struct hostapd_bss_config
*bss
= &conf
->bss
[0];
60 conf
->driver
= wpa_s
->driver
;
62 os_strlcpy(bss
->iface
, wpa_s
->ifname
, sizeof(bss
->iface
));
64 if (ssid
->frequency
== 0) {
65 /* default channel 11 */
66 conf
->hw_mode
= HOSTAPD_MODE_IEEE80211G
;
68 } else if (ssid
->frequency
>= 2412 && ssid
->frequency
<= 2472) {
69 conf
->hw_mode
= HOSTAPD_MODE_IEEE80211G
;
70 conf
->channel
= (ssid
->frequency
- 2407) / 5;
71 } else if ((ssid
->frequency
>= 5180 && ssid
->frequency
<= 5240) ||
72 (ssid
->frequency
>= 5745 && ssid
->frequency
<= 5825)) {
73 conf
->hw_mode
= HOSTAPD_MODE_IEEE80211A
;
74 conf
->channel
= (ssid
->frequency
- 5000) / 5;
76 wpa_printf(MSG_ERROR
, "Unsupported AP mode frequency: %d MHz",
81 /* TODO: enable HT if driver supports it;
82 * drop to 11b if driver does not support 11g */
85 if (conf
->hw_mode
== HOSTAPD_MODE_IEEE80211G
) {
86 /* Remove 802.11b rates from supported and basic rate sets */
87 int *list
= os_malloc(4 * sizeof(int));
94 conf
->basic_rates
= list
;
96 list
= os_malloc(9 * sizeof(int));
108 conf
->supported_rates
= list
;
110 #endif /* CONFIG_P2P */
112 if (ssid
->ssid_len
== 0) {
113 wpa_printf(MSG_ERROR
, "No SSID configured for AP mode");
116 os_memcpy(bss
->ssid
.ssid
, ssid
->ssid
, ssid
->ssid_len
);
117 bss
->ssid
.ssid
[ssid
->ssid_len
] = '\0';
118 bss
->ssid
.ssid_len
= ssid
->ssid_len
;
119 bss
->ssid
.ssid_set
= 1;
121 if (wpa_key_mgmt_wpa_psk(ssid
->key_mgmt
))
122 bss
->wpa
= ssid
->proto
;
123 bss
->wpa_key_mgmt
= ssid
->key_mgmt
;
124 bss
->wpa_pairwise
= ssid
->pairwise_cipher
;
125 if (ssid
->passphrase
) {
126 bss
->ssid
.wpa_passphrase
= os_strdup(ssid
->passphrase
);
127 } else if (ssid
->psk_set
) {
128 os_free(bss
->ssid
.wpa_psk
);
129 bss
->ssid
.wpa_psk
= os_zalloc(sizeof(struct hostapd_wpa_psk
));
130 if (bss
->ssid
.wpa_psk
== NULL
)
132 os_memcpy(bss
->ssid
.wpa_psk
->psk
, ssid
->psk
, PMK_LEN
);
133 bss
->ssid
.wpa_psk
->group
= 1;
136 /* Select group cipher based on the enabled pairwise cipher suites */
139 pairwise
|= bss
->wpa_pairwise
;
141 if (bss
->rsn_pairwise
== 0)
142 bss
->rsn_pairwise
= bss
->wpa_pairwise
;
143 pairwise
|= bss
->rsn_pairwise
;
145 if (pairwise
& WPA_CIPHER_TKIP
)
146 bss
->wpa_group
= WPA_CIPHER_TKIP
;
148 bss
->wpa_group
= WPA_CIPHER_CCMP
;
150 if (bss
->wpa
&& bss
->ieee802_1x
)
151 bss
->ssid
.security_policy
= SECURITY_WPA
;
153 bss
->ssid
.security_policy
= SECURITY_WPA_PSK
;
154 else if (bss
->ieee802_1x
) {
155 bss
->ssid
.security_policy
= SECURITY_IEEE_802_1X
;
156 bss
->ssid
.wep
.default_len
= bss
->default_wep_key_len
;
157 } else if (bss
->ssid
.wep
.keys_set
)
158 bss
->ssid
.security_policy
= SECURITY_STATIC_WEP
;
160 bss
->ssid
.security_policy
= SECURITY_PLAINTEXT
;
164 * Enable WPS by default, but require user interaction to actually use
165 * it. Only the internal Registrar is supported.
169 bss
->ap_setup_locked
= 2;
170 if (wpa_s
->conf
->config_methods
)
171 bss
->config_methods
= os_strdup(wpa_s
->conf
->config_methods
);
172 os_memcpy(bss
->device_type
, wpa_s
->conf
->device_type
,
174 if (wpa_s
->conf
->device_name
) {
175 bss
->device_name
= os_strdup(wpa_s
->conf
->device_name
);
176 bss
->friendly_name
= os_strdup(wpa_s
->conf
->device_name
);
178 if (wpa_s
->conf
->manufacturer
)
179 bss
->manufacturer
= os_strdup(wpa_s
->conf
->manufacturer
);
180 if (wpa_s
->conf
->model_name
)
181 bss
->model_name
= os_strdup(wpa_s
->conf
->model_name
);
182 if (wpa_s
->conf
->model_number
)
183 bss
->model_number
= os_strdup(wpa_s
->conf
->model_number
);
184 if (wpa_s
->conf
->serial_number
)
185 bss
->serial_number
= os_strdup(wpa_s
->conf
->serial_number
);
186 if (is_nil_uuid(wpa_s
->conf
->uuid
))
187 os_memcpy(bss
->uuid
, wpa_s
->wps
->uuid
, WPS_UUID_LEN
);
189 os_memcpy(bss
->uuid
, wpa_s
->conf
->uuid
, WPS_UUID_LEN
);
190 os_memcpy(bss
->os_version
, wpa_s
->conf
->os_version
, 4);
191 #endif /* CONFIG_WPS */
193 if (wpa_s
->max_stations
&&
194 wpa_s
->max_stations
< wpa_s
->conf
->max_num_sta
)
195 bss
->max_num_sta
= wpa_s
->max_stations
;
197 bss
->max_num_sta
= wpa_s
->conf
->max_num_sta
;
199 bss
->disassoc_low_ack
= wpa_s
->conf
->disassoc_low_ack
;
205 static void ap_public_action_rx(void *ctx
, const u8
*buf
, size_t len
, int freq
)
208 struct wpa_supplicant
*wpa_s
= ctx
;
209 const struct ieee80211_mgmt
*mgmt
;
212 mgmt
= (const struct ieee80211_mgmt
*) buf
;
213 hdr_len
= (const u8
*) &mgmt
->u
.action
.u
.vs_public_action
.action
- buf
;
216 wpas_p2p_rx_action(wpa_s
, mgmt
->da
, mgmt
->sa
, mgmt
->bssid
,
217 mgmt
->u
.action
.category
,
218 &mgmt
->u
.action
.u
.vs_public_action
.action
,
219 len
- hdr_len
, freq
);
220 #endif /* CONFIG_P2P */
224 static void ap_wps_event_cb(void *ctx
, enum wps_event event
,
225 union wps_event_data
*data
)
228 struct wpa_supplicant
*wpa_s
= ctx
;
230 if (event
== WPS_EV_FAIL
) {
231 struct wps_event_fail
*fail
= &data
->fail
;
233 if (wpa_s
->parent
&& wpa_s
->parent
!= wpa_s
&&
234 wpa_s
== wpa_s
->global
->p2p_group_formation
) {
236 * src/ap/wps_hostapd.c has already sent this on the
237 * main interface, so only send on the parent interface
240 wpa_msg(wpa_s
->parent
, MSG_INFO
, WPS_EVENT_FAIL
241 "msg=%d config_error=%d",
242 fail
->msg
, fail
->config_error
);
244 wpas_p2p_wps_failed(wpa_s
, fail
);
246 #endif /* CONFIG_P2P */
250 static void ap_sta_authorized_cb(void *ctx
, const u8
*mac_addr
,
253 wpas_notify_sta_authorized(ctx
, mac_addr
, authorized
);
257 static int ap_vendor_action_rx(void *ctx
, const u8
*buf
, size_t len
, int freq
)
260 struct wpa_supplicant
*wpa_s
= ctx
;
261 const struct ieee80211_mgmt
*mgmt
;
264 mgmt
= (const struct ieee80211_mgmt
*) buf
;
265 hdr_len
= (const u8
*) &mgmt
->u
.action
.u
.vs_public_action
.action
- buf
;
268 wpas_p2p_rx_action(wpa_s
, mgmt
->da
, mgmt
->sa
, mgmt
->bssid
,
269 mgmt
->u
.action
.category
,
270 &mgmt
->u
.action
.u
.vs_public_action
.action
,
271 len
- hdr_len
, freq
);
272 #endif /* CONFIG_P2P */
277 static int ap_probe_req_rx(void *ctx
, const u8
*addr
, const u8
*ie
,
281 struct wpa_supplicant
*wpa_s
= ctx
;
282 return wpas_p2p_probe_req_rx(wpa_s
, addr
, ie
, ie_len
);
283 #else /* CONFIG_P2P */
285 #endif /* CONFIG_P2P */
289 static void ap_wps_reg_success_cb(void *ctx
, const u8
*mac_addr
,
293 struct wpa_supplicant
*wpa_s
= ctx
;
294 wpas_p2p_wps_success(wpa_s
, mac_addr
, 1);
295 #endif /* CONFIG_P2P */
299 static void wpas_ap_configured_cb(void *ctx
)
301 struct wpa_supplicant
*wpa_s
= ctx
;
303 wpa_supplicant_set_state(wpa_s
, WPA_COMPLETED
);
305 if (wpa_s
->ap_configured_cb
)
306 wpa_s
->ap_configured_cb(wpa_s
->ap_configured_cb_ctx
,
307 wpa_s
->ap_configured_cb_data
);
311 int wpa_supplicant_create_ap(struct wpa_supplicant
*wpa_s
,
312 struct wpa_ssid
*ssid
)
314 struct wpa_driver_associate_params params
;
315 struct hostapd_iface
*hapd_iface
;
316 struct hostapd_config
*conf
;
319 if (ssid
->ssid
== NULL
|| ssid
->ssid_len
== 0) {
320 wpa_printf(MSG_ERROR
, "No SSID configured for AP mode");
324 wpa_supplicant_ap_deinit(wpa_s
);
326 wpa_printf(MSG_DEBUG
, "Setting up AP (SSID='%s')",
327 wpa_ssid_txt(ssid
->ssid
, ssid
->ssid_len
));
329 os_memset(¶ms
, 0, sizeof(params
));
330 params
.ssid
= ssid
->ssid
;
331 params
.ssid_len
= ssid
->ssid_len
;
332 switch (ssid
->mode
) {
333 case WPAS_MODE_INFRA
:
334 params
.mode
= IEEE80211_MODE_INFRA
;
337 params
.mode
= IEEE80211_MODE_IBSS
;
340 case WPAS_MODE_P2P_GO
:
341 case WPAS_MODE_P2P_GROUP_FORMATION
:
342 params
.mode
= IEEE80211_MODE_AP
;
345 params
.freq
= ssid
->frequency
;
347 if (ssid
->key_mgmt
& WPA_KEY_MGMT_PSK
)
348 wpa_s
->key_mgmt
= WPA_KEY_MGMT_PSK
;
350 wpa_s
->key_mgmt
= WPA_KEY_MGMT_NONE
;
351 params
.key_mgmt_suite
= key_mgmt2driver(wpa_s
->key_mgmt
);
353 if (ssid
->pairwise_cipher
& WPA_CIPHER_CCMP
)
354 wpa_s
->pairwise_cipher
= WPA_CIPHER_CCMP
;
355 else if (ssid
->pairwise_cipher
& WPA_CIPHER_TKIP
)
356 wpa_s
->pairwise_cipher
= WPA_CIPHER_TKIP
;
357 else if (ssid
->pairwise_cipher
& WPA_CIPHER_NONE
)
358 wpa_s
->pairwise_cipher
= WPA_CIPHER_NONE
;
360 wpa_printf(MSG_WARNING
, "WPA: Failed to select pairwise "
364 params
.pairwise_suite
= cipher_suite2driver(wpa_s
->pairwise_cipher
);
365 params
.group_suite
= params
.pairwise_suite
;
368 if (ssid
->mode
== WPAS_MODE_P2P_GO
||
369 ssid
->mode
== WPAS_MODE_P2P_GROUP_FORMATION
)
371 wpa_drv_set_intra_bss(wpa_s
, wpa_s
->conf
->p2p_intra_bss
);
372 #endif /* CONFIG_P2P */
374 if (wpa_s
->parent
->set_ap_uapsd
)
375 params
.uapsd
= wpa_s
->parent
->ap_uapsd
;
379 if (wpa_drv_associate(wpa_s
, ¶ms
) < 0) {
380 wpa_msg(wpa_s
, MSG_INFO
, "Failed to start AP functionality");
384 wpa_s
->ap_iface
= hapd_iface
= os_zalloc(sizeof(*wpa_s
->ap_iface
));
385 if (hapd_iface
== NULL
)
387 hapd_iface
->owner
= wpa_s
;
389 wpa_s
->ap_iface
->conf
= conf
= hostapd_config_defaults();
391 wpa_supplicant_ap_deinit(wpa_s
);
395 if (wpa_supplicant_conf_ap(wpa_s
, ssid
, conf
)) {
396 wpa_printf(MSG_ERROR
, "Failed to create AP configuration");
397 wpa_supplicant_ap_deinit(wpa_s
);
402 if (ssid
->mode
== WPAS_MODE_P2P_GO
)
403 conf
->bss
[0].p2p
= P2P_ENABLED
| P2P_GROUP_OWNER
;
404 else if (ssid
->mode
== WPAS_MODE_P2P_GROUP_FORMATION
)
405 conf
->bss
[0].p2p
= P2P_ENABLED
| P2P_GROUP_OWNER
|
407 #endif /* CONFIG_P2P */
409 hapd_iface
->num_bss
= conf
->num_bss
;
410 hapd_iface
->bss
= os_zalloc(conf
->num_bss
*
411 sizeof(struct hostapd_data
*));
412 if (hapd_iface
->bss
== NULL
) {
413 wpa_supplicant_ap_deinit(wpa_s
);
417 for (i
= 0; i
< conf
->num_bss
; i
++) {
419 hostapd_alloc_bss_data(hapd_iface
, conf
,
421 if (hapd_iface
->bss
[i
] == NULL
) {
422 wpa_supplicant_ap_deinit(wpa_s
);
426 hapd_iface
->bss
[i
]->msg_ctx
= wpa_s
;
427 hapd_iface
->bss
[i
]->public_action_cb
= ap_public_action_rx
;
428 hapd_iface
->bss
[i
]->public_action_cb_ctx
= wpa_s
;
429 hapd_iface
->bss
[i
]->vendor_action_cb
= ap_vendor_action_rx
;
430 hapd_iface
->bss
[i
]->vendor_action_cb_ctx
= wpa_s
;
431 hostapd_register_probereq_cb(hapd_iface
->bss
[i
],
432 ap_probe_req_rx
, wpa_s
);
433 hapd_iface
->bss
[i
]->wps_reg_success_cb
= ap_wps_reg_success_cb
;
434 hapd_iface
->bss
[i
]->wps_reg_success_cb_ctx
= wpa_s
;
435 hapd_iface
->bss
[i
]->wps_event_cb
= ap_wps_event_cb
;
436 hapd_iface
->bss
[i
]->wps_event_cb_ctx
= wpa_s
;
437 hapd_iface
->bss
[i
]->sta_authorized_cb
= ap_sta_authorized_cb
;
438 hapd_iface
->bss
[i
]->sta_authorized_cb_ctx
= wpa_s
;
440 hapd_iface
->bss
[i
]->p2p
= wpa_s
->global
->p2p
;
441 hapd_iface
->bss
[i
]->p2p_group
= wpas_p2p_group_init(
442 wpa_s
, ssid
->p2p_persistent_group
,
443 ssid
->mode
== WPAS_MODE_P2P_GROUP_FORMATION
);
444 #endif /* CONFIG_P2P */
445 hapd_iface
->bss
[i
]->setup_complete_cb
= wpas_ap_configured_cb
;
446 hapd_iface
->bss
[i
]->setup_complete_cb_ctx
= wpa_s
;
449 os_memcpy(hapd_iface
->bss
[0]->own_addr
, wpa_s
->own_addr
, ETH_ALEN
);
450 hapd_iface
->bss
[0]->driver
= wpa_s
->driver
;
451 hapd_iface
->bss
[0]->drv_priv
= wpa_s
->drv_priv
;
453 wpa_s
->current_ssid
= ssid
;
454 os_memcpy(wpa_s
->bssid
, wpa_s
->own_addr
, ETH_ALEN
);
455 wpa_s
->assoc_freq
= ssid
->frequency
;
457 if (hostapd_setup_interface(wpa_s
->ap_iface
)) {
458 wpa_printf(MSG_ERROR
, "Failed to initialize AP interface");
459 wpa_supplicant_ap_deinit(wpa_s
);
467 void wpa_supplicant_ap_deinit(struct wpa_supplicant
*wpa_s
)
470 eloop_cancel_timeout(wpas_wps_ap_pin_timeout
, wpa_s
, NULL
);
471 #endif /* CONFIG_WPS */
473 if (wpa_s
->ap_iface
== NULL
)
476 wpa_s
->current_ssid
= NULL
;
477 wpa_s
->assoc_freq
= 0;
478 wpa_s
->reassociated_connection
= 0;
480 if (wpa_s
->ap_iface
->bss
)
481 wpa_s
->ap_iface
->bss
[0]->p2p_group
= NULL
;
482 wpas_p2p_group_deinit(wpa_s
);
483 #endif /* CONFIG_P2P */
484 hostapd_interface_deinit(wpa_s
->ap_iface
);
485 hostapd_interface_free(wpa_s
->ap_iface
);
486 wpa_s
->ap_iface
= NULL
;
487 wpa_drv_deinit_ap(wpa_s
);
491 void ap_tx_status(void *ctx
, const u8
*addr
,
492 const u8
*buf
, size_t len
, int ack
)
495 struct wpa_supplicant
*wpa_s
= ctx
;
496 hostapd_tx_status(wpa_s
->ap_iface
->bss
[0], addr
, buf
, len
, ack
);
497 #endif /* NEED_AP_MLME */
501 void ap_rx_from_unknown_sta(void *ctx
, const u8
*frame
, size_t len
)
504 struct wpa_supplicant
*wpa_s
= ctx
;
505 const struct ieee80211_hdr
*hdr
=
506 (const struct ieee80211_hdr
*) frame
;
507 u16 fc
= le_to_host16(hdr
->frame_control
);
508 ieee802_11_rx_from_unknown(wpa_s
->ap_iface
->bss
[0], hdr
->addr2
,
509 (fc
& (WLAN_FC_TODS
| WLAN_FC_FROMDS
)) ==
510 (WLAN_FC_TODS
| WLAN_FC_FROMDS
));
511 #endif /* NEED_AP_MLME */
515 void ap_mgmt_rx(void *ctx
, struct rx_mgmt
*rx_mgmt
)
518 struct wpa_supplicant
*wpa_s
= ctx
;
519 struct hostapd_frame_info fi
;
520 os_memset(&fi
, 0, sizeof(fi
));
521 fi
.datarate
= rx_mgmt
->datarate
;
522 fi
.ssi_signal
= rx_mgmt
->ssi_signal
;
523 ieee802_11_mgmt(wpa_s
->ap_iface
->bss
[0], rx_mgmt
->frame
,
524 rx_mgmt
->frame_len
, &fi
);
525 #endif /* NEED_AP_MLME */
529 void ap_mgmt_tx_cb(void *ctx
, const u8
*buf
, size_t len
, u16 stype
, int ok
)
532 struct wpa_supplicant
*wpa_s
= ctx
;
533 ieee802_11_mgmt_cb(wpa_s
->ap_iface
->bss
[0], buf
, len
, stype
, ok
);
534 #endif /* NEED_AP_MLME */
538 void wpa_supplicant_ap_rx_eapol(struct wpa_supplicant
*wpa_s
,
539 const u8
*src_addr
, const u8
*buf
, size_t len
)
541 ieee802_1x_receive(wpa_s
->ap_iface
->bss
[0], src_addr
, buf
, len
);
547 int wpa_supplicant_ap_wps_pbc(struct wpa_supplicant
*wpa_s
, const u8
*bssid
,
548 const u8
*p2p_dev_addr
)
550 if (!wpa_s
->ap_iface
)
552 return hostapd_wps_button_pushed(wpa_s
->ap_iface
->bss
[0],
557 static int wpa_supplicant_ap_wps_sta_cancel(struct hostapd_data
*hapd
,
558 struct sta_info
*sta
, void *ctx
)
560 if (sta
&& (sta
->flags
& WLAN_STA_WPS
)) {
561 ap_sta_deauthenticate(hapd
, sta
,
562 WLAN_REASON_PREV_AUTH_NOT_VALID
);
563 wpa_printf(MSG_DEBUG
, "WPS: %s: Deauth sta=" MACSTR
,
564 __func__
, MAC2STR(sta
->addr
));
572 int wpa_supplicant_ap_wps_cancel(struct wpa_supplicant
*wpa_s
)
574 struct wps_registrar
*reg
;
575 int reg_sel
= 0, wps_sta
= 0;
577 if (!wpa_s
->ap_iface
|| !wpa_s
->ap_iface
->bss
[0]->wps
)
580 reg
= wpa_s
->ap_iface
->bss
[0]->wps
->registrar
;
581 reg_sel
= wps_registrar_wps_cancel(reg
);
582 wps_sta
= ap_for_each_sta(wpa_s
->ap_iface
->bss
[0],
583 wpa_supplicant_ap_wps_sta_cancel
, NULL
);
585 if (!reg_sel
&& !wps_sta
) {
586 wpa_printf(MSG_DEBUG
, "No WPS operation in progress at this "
592 * There are 2 cases to return wps cancel as success:
593 * 1. When wps cancel was initiated but no connection has been
594 * established with client yet.
595 * 2. Client is in the middle of exchanging WPS messages.
602 int wpa_supplicant_ap_wps_pin(struct wpa_supplicant
*wpa_s
, const u8
*bssid
,
603 const char *pin
, char *buf
, size_t buflen
)
605 int ret
, ret_len
= 0;
607 if (!wpa_s
->ap_iface
)
611 unsigned int rpin
= wps_generate_pin();
612 ret_len
= os_snprintf(buf
, buflen
, "%d", rpin
);
615 ret_len
= os_snprintf(buf
, buflen
, "%s", pin
);
617 ret
= hostapd_wps_add_pin(wpa_s
->ap_iface
->bss
[0], bssid
, "any", pin
,
625 static void wpas_wps_ap_pin_timeout(void *eloop_data
, void *user_ctx
)
627 struct wpa_supplicant
*wpa_s
= eloop_data
;
628 wpa_printf(MSG_DEBUG
, "WPS: AP PIN timed out");
629 wpas_wps_ap_pin_disable(wpa_s
);
633 static void wpas_wps_ap_pin_enable(struct wpa_supplicant
*wpa_s
, int timeout
)
635 struct hostapd_data
*hapd
;
637 if (wpa_s
->ap_iface
== NULL
)
639 hapd
= wpa_s
->ap_iface
->bss
[0];
640 wpa_printf(MSG_DEBUG
, "WPS: Enabling AP PIN (timeout=%d)", timeout
);
641 hapd
->ap_pin_failures
= 0;
642 eloop_cancel_timeout(wpas_wps_ap_pin_timeout
, wpa_s
, NULL
);
644 eloop_register_timeout(timeout
, 0,
645 wpas_wps_ap_pin_timeout
, wpa_s
, NULL
);
649 void wpas_wps_ap_pin_disable(struct wpa_supplicant
*wpa_s
)
651 struct hostapd_data
*hapd
;
653 if (wpa_s
->ap_iface
== NULL
)
655 wpa_printf(MSG_DEBUG
, "WPS: Disabling AP PIN");
656 hapd
= wpa_s
->ap_iface
->bss
[0];
657 os_free(hapd
->conf
->ap_pin
);
658 hapd
->conf
->ap_pin
= NULL
;
659 eloop_cancel_timeout(wpas_wps_ap_pin_timeout
, wpa_s
, NULL
);
663 const char * wpas_wps_ap_pin_random(struct wpa_supplicant
*wpa_s
, int timeout
)
665 struct hostapd_data
*hapd
;
669 if (wpa_s
->ap_iface
== NULL
)
671 hapd
= wpa_s
->ap_iface
->bss
[0];
672 pin
= wps_generate_pin();
673 os_snprintf(pin_txt
, sizeof(pin_txt
), "%u", pin
);
674 os_free(hapd
->conf
->ap_pin
);
675 hapd
->conf
->ap_pin
= os_strdup(pin_txt
);
676 if (hapd
->conf
->ap_pin
== NULL
)
678 wpas_wps_ap_pin_enable(wpa_s
, timeout
);
680 return hapd
->conf
->ap_pin
;
684 const char * wpas_wps_ap_pin_get(struct wpa_supplicant
*wpa_s
)
686 struct hostapd_data
*hapd
;
687 if (wpa_s
->ap_iface
== NULL
)
689 hapd
= wpa_s
->ap_iface
->bss
[0];
690 return hapd
->conf
->ap_pin
;
694 int wpas_wps_ap_pin_set(struct wpa_supplicant
*wpa_s
, const char *pin
,
697 struct hostapd_data
*hapd
;
701 if (wpa_s
->ap_iface
== NULL
)
703 hapd
= wpa_s
->ap_iface
->bss
[0];
704 ret
= os_snprintf(pin_txt
, sizeof(pin_txt
), "%s", pin
);
705 if (ret
< 0 || ret
>= (int) sizeof(pin_txt
))
707 os_free(hapd
->conf
->ap_pin
);
708 hapd
->conf
->ap_pin
= os_strdup(pin_txt
);
709 if (hapd
->conf
->ap_pin
== NULL
)
711 wpas_wps_ap_pin_enable(wpa_s
, timeout
);
717 void wpa_supplicant_ap_pwd_auth_fail(struct wpa_supplicant
*wpa_s
)
719 struct hostapd_data
*hapd
;
721 if (wpa_s
->ap_iface
== NULL
)
723 hapd
= wpa_s
->ap_iface
->bss
[0];
726 * Registrar failed to prove its knowledge of the AP PIN. Disable AP
727 * PIN if this happens multiple times to slow down brute force attacks.
729 hapd
->ap_pin_failures
++;
730 wpa_printf(MSG_DEBUG
, "WPS: AP PIN authentication failure number %u",
731 hapd
->ap_pin_failures
);
732 if (hapd
->ap_pin_failures
< 3)
735 wpa_printf(MSG_DEBUG
, "WPS: Disable AP PIN");
736 hapd
->ap_pin_failures
= 0;
737 os_free(hapd
->conf
->ap_pin
);
738 hapd
->conf
->ap_pin
= NULL
;
741 #endif /* CONFIG_WPS */
744 #ifdef CONFIG_CTRL_IFACE
746 int ap_ctrl_iface_sta_first(struct wpa_supplicant
*wpa_s
,
747 char *buf
, size_t buflen
)
749 if (wpa_s
->ap_iface
== NULL
)
751 return hostapd_ctrl_iface_sta_first(wpa_s
->ap_iface
->bss
[0],
756 int ap_ctrl_iface_sta(struct wpa_supplicant
*wpa_s
, const char *txtaddr
,
757 char *buf
, size_t buflen
)
759 if (wpa_s
->ap_iface
== NULL
)
761 return hostapd_ctrl_iface_sta(wpa_s
->ap_iface
->bss
[0], txtaddr
,
766 int ap_ctrl_iface_sta_next(struct wpa_supplicant
*wpa_s
, const char *txtaddr
,
767 char *buf
, size_t buflen
)
769 if (wpa_s
->ap_iface
== NULL
)
771 return hostapd_ctrl_iface_sta_next(wpa_s
->ap_iface
->bss
[0], txtaddr
,
776 int ap_ctrl_iface_wpa_get_status(struct wpa_supplicant
*wpa_s
, char *buf
,
777 size_t buflen
, int verbose
)
779 char *pos
= buf
, *end
= buf
+ buflen
;
781 struct hostapd_bss_config
*conf
;
783 if (wpa_s
->ap_iface
== NULL
)
786 conf
= wpa_s
->ap_iface
->bss
[0]->conf
;
790 ret
= os_snprintf(pos
, end
- pos
,
791 "pairwise_cipher=%s\n"
794 wpa_cipher_txt(conf
->rsn_pairwise
),
795 wpa_cipher_txt(conf
->wpa_group
),
796 wpa_key_mgmt_txt(conf
->wpa_key_mgmt
,
798 if (ret
< 0 || ret
>= end
- pos
)
804 #endif /* CONFIG_CTRL_IFACE */
807 int wpa_supplicant_ap_update_beacon(struct wpa_supplicant
*wpa_s
)
809 struct hostapd_iface
*iface
= wpa_s
->ap_iface
;
810 struct wpa_ssid
*ssid
= wpa_s
->current_ssid
;
811 struct hostapd_data
*hapd
;
813 if (ssid
== NULL
|| wpa_s
->ap_iface
== NULL
)
817 if (ssid
->mode
== WPAS_MODE_P2P_GO
)
818 iface
->conf
->bss
[0].p2p
= P2P_ENABLED
| P2P_GROUP_OWNER
;
819 else if (ssid
->mode
== WPAS_MODE_P2P_GROUP_FORMATION
)
820 iface
->conf
->bss
[0].p2p
= P2P_ENABLED
| P2P_GROUP_OWNER
|
822 #endif /* CONFIG_P2P */
824 ieee802_11_set_beacons(iface
);
825 hapd
= iface
->bss
[0];
826 hostapd_set_ap_wps_ie(hapd
);
832 int wpa_supplicant_ap_mac_addr_filter(struct wpa_supplicant
*wpa_s
,
835 struct hostapd_data
*hapd
;
836 struct hostapd_bss_config
*conf
;
838 if (!wpa_s
->ap_iface
)
842 wpa_printf(MSG_DEBUG
, "AP: Set MAC address filter: " MACSTR
,
845 wpa_printf(MSG_DEBUG
, "AP: Clear MAC address filter");
847 hapd
= wpa_s
->ap_iface
->bss
[0];
850 os_free(conf
->accept_mac
);
851 conf
->accept_mac
= NULL
;
852 conf
->num_accept_mac
= 0;
853 os_free(conf
->deny_mac
);
854 conf
->deny_mac
= NULL
;
855 conf
->num_deny_mac
= 0;
858 conf
->macaddr_acl
= ACCEPT_UNLESS_DENIED
;
862 conf
->macaddr_acl
= DENY_UNLESS_ACCEPTED
;
863 conf
->accept_mac
= os_zalloc(sizeof(struct mac_acl_entry
));
864 if (conf
->accept_mac
== NULL
)
866 os_memcpy(conf
->accept_mac
[0].addr
, addr
, ETH_ALEN
);
867 conf
->num_accept_mac
= 1;