]>
Commit | Line | Data |
---|---|---|
f1a48710 JM |
1 | /* |
2 | * WPA Supplicant - Basic AP mode support routines | |
3 | * Copyright (c) 2003-2009, Jouni Malinen <j@w1.fi> | |
4 | * Copyright (c) 2009, Atheros Communications | |
5 | * | |
0f3d578e JM |
6 | * This software may be distributed under the terms of the BSD license. |
7 | * See README for more details. | |
f1a48710 JM |
8 | */ |
9 | ||
6226e38d | 10 | #include "utils/includes.h" |
f1a48710 | 11 | |
6226e38d | 12 | #include "utils/common.h" |
70d84f11 | 13 | #include "utils/eloop.h" |
ab45223b | 14 | #include "utils/uuid.h" |
58c26600 | 15 | #include "common/ieee802_11_defs.h" |
a0dee797 | 16 | #include "common/wpa_ctrl.h" |
25a8f9e3 | 17 | #include "eapol_supp/eapol_supp_sm.h" |
db6ae69e | 18 | #include "crypto/dh_group5.h" |
1057d78e | 19 | #include "ap/hostapd.h" |
6226e38d | 20 | #include "ap/ap_config.h" |
fe99fb74 | 21 | #include "ap/ap_drv_ops.h" |
fe6bdb77 | 22 | #ifdef NEED_AP_MLME |
1057d78e | 23 | #include "ap/ieee802_11.h" |
fe6bdb77 | 24 | #endif /* NEED_AP_MLME */ |
b22128ef | 25 | #include "ap/beacon.h" |
a8e0505b | 26 | #include "ap/ieee802_1x.h" |
363b9e60 | 27 | #include "ap/wps_hostapd.h" |
0e2d35c6 | 28 | #include "ap/ctrl_iface_ap.h" |
3ec97afe | 29 | #include "wps/wps.h" |
e44f8bf2 | 30 | #include "common/ieee802_11_defs.h" |
1f1b62a0 | 31 | #include "config_ssid.h" |
094393b1 | 32 | #include "config.h" |
1f1b62a0 | 33 | #include "wpa_supplicant_i.h" |
2d5b792d | 34 | #include "driver_i.h" |
e44f8bf2 | 35 | #include "p2p_supplicant.h" |
2d5b792d | 36 | #include "ap.h" |
2f9929ff | 37 | #include "ap/sta_info.h" |
d8a43924 | 38 | #include "notify.h" |
f1a48710 JM |
39 | |
40 | ||
0fe620de | 41 | #ifdef CONFIG_WPS |
70d84f11 | 42 | static void wpas_wps_ap_pin_timeout(void *eloop_data, void *user_ctx); |
0fe620de | 43 | #endif /* CONFIG_WPS */ |
70d84f11 JM |
44 | |
45 | ||
c20bc9d4 | 46 | #ifdef CONFIG_IEEE80211N |
ca9bc5b5 EP |
47 | static void wpas_conf_ap_vht(struct wpa_supplicant *wpa_s, |
48 | struct hostapd_config *conf, | |
49 | struct hostapd_hw_modes *mode) | |
50 | { | |
f8b10c17 | 51 | #ifdef CONFIG_P2P |
ca9bc5b5 EP |
52 | u8 center_chan = 0; |
53 | u8 channel = conf->channel; | |
54 | ||
55 | if (!conf->secondary_channel) | |
56 | goto no_vht; | |
57 | ||
58 | center_chan = wpas_p2p_get_vht80_center(wpa_s, mode, channel); | |
59 | if (!center_chan) | |
60 | goto no_vht; | |
61 | ||
62 | /* Use 80 MHz channel */ | |
63 | conf->vht_oper_chwidth = 1; | |
64 | conf->vht_oper_centr_freq_seg0_idx = center_chan; | |
65 | return; | |
66 | ||
67 | no_vht: | |
68 | conf->vht_oper_centr_freq_seg0_idx = | |
69 | channel + conf->secondary_channel * 2; | |
f8b10c17 JM |
70 | #else /* CONFIG_P2P */ |
71 | conf->vht_oper_centr_freq_seg0_idx = | |
72 | conf->channel + conf->secondary_channel * 2; | |
73 | #endif /* CONFIG_P2P */ | |
ca9bc5b5 | 74 | } |
c20bc9d4 | 75 | #endif /* CONFIG_IEEE80211N */ |
ca9bc5b5 EP |
76 | |
77 | ||
07f117ed JM |
78 | static int wpa_supplicant_conf_ap(struct wpa_supplicant *wpa_s, |
79 | struct wpa_ssid *ssid, | |
80 | struct hostapd_config *conf) | |
81 | { | |
ebd79f07 | 82 | struct hostapd_bss_config *bss = conf->bss[0]; |
c5121837 | 83 | |
a911a6e6 | 84 | conf->driver = wpa_s->driver; |
07f117ed JM |
85 | |
86 | os_strlcpy(bss->iface, wpa_s->ifname, sizeof(bss->iface)); | |
87 | ||
973622cd AS |
88 | conf->hw_mode = ieee80211_freq_to_chan(ssid->frequency, |
89 | &conf->channel); | |
90 | if (conf->hw_mode == NUM_HOSTAPD_MODES) { | |
91 | wpa_printf(MSG_ERROR, "Unsupported AP mode frequency: %d MHz", | |
92 | ssid->frequency); | |
93 | return -1; | |
07f117ed JM |
94 | } |
95 | ||
2db91745 | 96 | /* TODO: enable HT40 if driver supports it; |
07f117ed JM |
97 | * drop to 11b if driver does not support 11g */ |
98 | ||
2db91745 AC |
99 | #ifdef CONFIG_IEEE80211N |
100 | /* | |
79b8c60f AN |
101 | * Enable HT20 if the driver supports it, by setting conf->ieee80211n |
102 | * and a mask of allowed capabilities within conf->ht_capab. | |
2db91745 | 103 | * Using default config settings for: conf->ht_op_mode_fixed, |
79b8c60f | 104 | * conf->secondary_channel, conf->require_ht |
2db91745 | 105 | */ |
6bf731e8 | 106 | if (wpa_s->hw.modes) { |
2db91745 | 107 | struct hostapd_hw_modes *mode = NULL; |
5cbf5fd9 | 108 | int i, no_ht = 0; |
6bf731e8 CL |
109 | for (i = 0; i < wpa_s->hw.num_modes; i++) { |
110 | if (wpa_s->hw.modes[i].mode == conf->hw_mode) { | |
111 | mode = &wpa_s->hw.modes[i]; | |
2db91745 AC |
112 | break; |
113 | } | |
114 | } | |
5cbf5fd9 VT |
115 | |
116 | #ifdef CONFIG_HT_OVERRIDES | |
117 | if (ssid->disable_ht) { | |
118 | conf->ieee80211n = 0; | |
119 | conf->ht_capab = 0; | |
120 | no_ht = 1; | |
121 | } | |
122 | #endif /* CONFIG_HT_OVERRIDES */ | |
123 | ||
124 | if (!no_ht && mode && mode->ht_capab) { | |
2db91745 | 125 | conf->ieee80211n = 1; |
7aeac985 RM |
126 | #ifdef CONFIG_P2P |
127 | if (conf->hw_mode == HOSTAPD_MODE_IEEE80211A && | |
128 | (mode->ht_capab & | |
129 | HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET) && | |
130 | ssid->ht40) | |
131 | conf->secondary_channel = | |
132 | wpas_p2p_get_ht40_mode(wpa_s, mode, | |
133 | conf->channel); | |
134 | if (conf->secondary_channel) | |
135 | conf->ht_capab |= | |
136 | HT_CAP_INFO_SUPP_CHANNEL_WIDTH_SET; | |
137 | #endif /* CONFIG_P2P */ | |
79b8c60f AN |
138 | |
139 | /* | |
140 | * white-list capabilities that won't cause issues | |
141 | * to connecting stations, while leaving the current | |
142 | * capabilities intact (currently disabled SMPS). | |
143 | */ | |
144 | conf->ht_capab |= mode->ht_capab & | |
145 | (HT_CAP_INFO_GREEN_FIELD | | |
146 | HT_CAP_INFO_SHORT_GI20MHZ | | |
147 | HT_CAP_INFO_SHORT_GI40MHZ | | |
148 | HT_CAP_INFO_RX_STBC_MASK | | |
149 | HT_CAP_INFO_MAX_AMSDU_SIZE); | |
ca9bc5b5 EP |
150 | |
151 | if (mode->vht_capab && ssid->vht) { | |
152 | conf->ieee80211ac = 1; | |
153 | wpas_conf_ap_vht(wpa_s, conf, mode); | |
154 | } | |
79b8c60f | 155 | } |
2db91745 AC |
156 | } |
157 | #endif /* CONFIG_IEEE80211N */ | |
158 | ||
4c2c3028 | 159 | #ifdef CONFIG_P2P |
1e0e943e AB |
160 | if (conf->hw_mode == HOSTAPD_MODE_IEEE80211G && |
161 | (ssid->mode == WPAS_MODE_P2P_GO || | |
162 | ssid->mode == WPAS_MODE_P2P_GROUP_FORMATION)) { | |
4c2c3028 JM |
163 | /* Remove 802.11b rates from supported and basic rate sets */ |
164 | int *list = os_malloc(4 * sizeof(int)); | |
165 | if (list) { | |
166 | list[0] = 60; | |
167 | list[1] = 120; | |
168 | list[2] = 240; | |
169 | list[3] = -1; | |
170 | } | |
171 | conf->basic_rates = list; | |
172 | ||
173 | list = os_malloc(9 * sizeof(int)); | |
174 | if (list) { | |
175 | list[0] = 60; | |
176 | list[1] = 90; | |
177 | list[2] = 120; | |
178 | list[3] = 180; | |
179 | list[4] = 240; | |
180 | list[5] = 360; | |
181 | list[6] = 480; | |
182 | list[7] = 540; | |
183 | list[8] = -1; | |
184 | } | |
185 | conf->supported_rates = list; | |
186 | } | |
6cd930cb JB |
187 | |
188 | bss->isolate = !wpa_s->conf->p2p_intra_bss; | |
05766ed8 | 189 | bss->force_per_enrollee_psk = wpa_s->global->p2p_per_sta_psk; |
25ef8529 JM |
190 | |
191 | if (ssid->p2p_group) { | |
192 | os_memcpy(bss->ip_addr_go, wpa_s->parent->conf->ip_addr_go, 4); | |
193 | os_memcpy(bss->ip_addr_mask, wpa_s->parent->conf->ip_addr_mask, | |
194 | 4); | |
195 | os_memcpy(bss->ip_addr_start, | |
196 | wpa_s->parent->conf->ip_addr_start, 4); | |
197 | os_memcpy(bss->ip_addr_end, wpa_s->parent->conf->ip_addr_end, | |
198 | 4); | |
199 | } | |
4c2c3028 JM |
200 | #endif /* CONFIG_P2P */ |
201 | ||
07f117ed JM |
202 | if (ssid->ssid_len == 0) { |
203 | wpa_printf(MSG_ERROR, "No SSID configured for AP mode"); | |
204 | return -1; | |
205 | } | |
206 | os_memcpy(bss->ssid.ssid, ssid->ssid, ssid->ssid_len); | |
07f117ed JM |
207 | bss->ssid.ssid_len = ssid->ssid_len; |
208 | bss->ssid.ssid_set = 1; | |
209 | ||
e62f4ed0 VN |
210 | bss->ignore_broadcast_ssid = ssid->ignore_broadcast_ssid; |
211 | ||
0399f2e4 VT |
212 | if (ssid->auth_alg) |
213 | bss->auth_algs = ssid->auth_alg; | |
214 | ||
07f117ed JM |
215 | if (wpa_key_mgmt_wpa_psk(ssid->key_mgmt)) |
216 | bss->wpa = ssid->proto; | |
217 | bss->wpa_key_mgmt = ssid->key_mgmt; | |
218 | bss->wpa_pairwise = ssid->pairwise_cipher; | |
30c371e8 | 219 | if (ssid->psk_set) { |
07f117ed JM |
220 | os_free(bss->ssid.wpa_psk); |
221 | bss->ssid.wpa_psk = os_zalloc(sizeof(struct hostapd_wpa_psk)); | |
222 | if (bss->ssid.wpa_psk == NULL) | |
223 | return -1; | |
224 | os_memcpy(bss->ssid.wpa_psk->psk, ssid->psk, PMK_LEN); | |
225 | bss->ssid.wpa_psk->group = 1; | |
30c371e8 MH |
226 | } else if (ssid->passphrase) { |
227 | bss->ssid.wpa_passphrase = os_strdup(ssid->passphrase); | |
6bcb1c2b JM |
228 | } else if (ssid->wep_key_len[0] || ssid->wep_key_len[1] || |
229 | ssid->wep_key_len[2] || ssid->wep_key_len[3]) { | |
230 | struct hostapd_wep_keys *wep = &bss->ssid.wep; | |
231 | int i; | |
232 | for (i = 0; i < NUM_WEP_KEYS; i++) { | |
233 | if (ssid->wep_key_len[i] == 0) | |
234 | continue; | |
235 | wep->key[i] = os_malloc(ssid->wep_key_len[i]); | |
236 | if (wep->key[i] == NULL) | |
237 | return -1; | |
238 | os_memcpy(wep->key[i], ssid->wep_key[i], | |
239 | ssid->wep_key_len[i]); | |
240 | wep->len[i] = ssid->wep_key_len[i]; | |
241 | } | |
242 | wep->idx = ssid->wep_tx_keyidx; | |
243 | wep->keys_set = 1; | |
07f117ed JM |
244 | } |
245 | ||
07f53b8c VT |
246 | if (ssid->ap_max_inactivity) |
247 | bss->ap_max_inactivity = ssid->ap_max_inactivity; | |
248 | ||
fdfb1c8b EL |
249 | if (ssid->dtim_period) |
250 | bss->dtim_period = ssid->dtim_period; | |
18206e02 JM |
251 | else if (wpa_s->conf->dtim_period) |
252 | bss->dtim_period = wpa_s->conf->dtim_period; | |
253 | ||
254 | if (ssid->beacon_int) | |
255 | conf->beacon_int = ssid->beacon_int; | |
256 | else if (wpa_s->conf->beacon_int) | |
257 | conf->beacon_int = wpa_s->conf->beacon_int; | |
fdfb1c8b | 258 | |
cf830c1c JM |
259 | if ((bss->wpa & 2) && bss->rsn_pairwise == 0) |
260 | bss->rsn_pairwise = bss->wpa_pairwise; | |
261 | bss->wpa_group = wpa_select_ap_group_cipher(bss->wpa, bss->wpa_pairwise, | |
262 | bss->rsn_pairwise); | |
07d9a552 JM |
263 | |
264 | if (bss->wpa && bss->ieee802_1x) | |
265 | bss->ssid.security_policy = SECURITY_WPA; | |
266 | else if (bss->wpa) | |
267 | bss->ssid.security_policy = SECURITY_WPA_PSK; | |
268 | else if (bss->ieee802_1x) { | |
697cd03f | 269 | int cipher = WPA_CIPHER_NONE; |
07d9a552 JM |
270 | bss->ssid.security_policy = SECURITY_IEEE_802_1X; |
271 | bss->ssid.wep.default_len = bss->default_wep_key_len; | |
697cd03f JM |
272 | if (bss->default_wep_key_len) |
273 | cipher = bss->default_wep_key_len >= 13 ? | |
274 | WPA_CIPHER_WEP104 : WPA_CIPHER_WEP40; | |
275 | bss->wpa_group = cipher; | |
276 | bss->wpa_pairwise = cipher; | |
277 | bss->rsn_pairwise = cipher; | |
278 | } else if (bss->ssid.wep.keys_set) { | |
279 | int cipher = WPA_CIPHER_WEP40; | |
280 | if (bss->ssid.wep.len[0] >= 13) | |
281 | cipher = WPA_CIPHER_WEP104; | |
07d9a552 | 282 | bss->ssid.security_policy = SECURITY_STATIC_WEP; |
697cd03f JM |
283 | bss->wpa_group = cipher; |
284 | bss->wpa_pairwise = cipher; | |
285 | bss->rsn_pairwise = cipher; | |
286 | } else { | |
07d9a552 | 287 | bss->ssid.security_policy = SECURITY_PLAINTEXT; |
697cd03f JM |
288 | bss->wpa_group = WPA_CIPHER_NONE; |
289 | bss->wpa_pairwise = WPA_CIPHER_NONE; | |
290 | bss->rsn_pairwise = WPA_CIPHER_NONE; | |
291 | } | |
07d9a552 | 292 | |
2a07a276 JM |
293 | if (bss->wpa_group_rekey < 86400 && (bss->wpa & 2) && |
294 | (bss->wpa_group == WPA_CIPHER_CCMP || | |
30675c34 JM |
295 | bss->wpa_group == WPA_CIPHER_GCMP || |
296 | bss->wpa_group == WPA_CIPHER_CCMP_256 || | |
297 | bss->wpa_group == WPA_CIPHER_GCMP_256)) { | |
2a07a276 JM |
298 | /* |
299 | * Strong ciphers do not need frequent rekeying, so increase | |
300 | * the default GTK rekeying period to 24 hours. | |
301 | */ | |
302 | bss->wpa_group_rekey = 86400; | |
303 | } | |
304 | ||
9a1a538f JM |
305 | #ifdef CONFIG_IEEE80211W |
306 | if (ssid->ieee80211w != MGMT_FRAME_PROTECTION_DEFAULT) | |
307 | bss->ieee80211w = ssid->ieee80211w; | |
308 | #endif /* CONFIG_IEEE80211W */ | |
309 | ||
3ec97afe JM |
310 | #ifdef CONFIG_WPS |
311 | /* | |
04ed4e98 JM |
312 | * Enable WPS by default for open and WPA/WPA2-Personal network, but |
313 | * require user interaction to actually use it. Only the internal | |
314 | * Registrar is supported. | |
3ec97afe | 315 | */ |
04ed4e98 JM |
316 | if (bss->ssid.security_policy != SECURITY_WPA_PSK && |
317 | bss->ssid.security_policy != SECURITY_PLAINTEXT) | |
318 | goto no_wps; | |
c0f83f31 | 319 | if (bss->ssid.security_policy == SECURITY_WPA_PSK && |
cf830c1c | 320 | (!(bss->rsn_pairwise & WPA_CIPHER_CCMP) || !(bss->wpa & 2))) |
c0f83f31 JM |
321 | goto no_wps; /* WPS2 does not allow WPA/TKIP-only |
322 | * configuration */ | |
3ec97afe | 323 | bss->eap_server = 1; |
e62f4ed0 VN |
324 | |
325 | if (!ssid->ignore_broadcast_ssid) | |
326 | bss->wps_state = 2; | |
327 | ||
9dd7d6b0 | 328 | bss->ap_setup_locked = 2; |
094393b1 JM |
329 | if (wpa_s->conf->config_methods) |
330 | bss->config_methods = os_strdup(wpa_s->conf->config_methods); | |
2f646b6e JB |
331 | os_memcpy(bss->device_type, wpa_s->conf->device_type, |
332 | WPS_DEV_TYPE_LEN); | |
e44f8bf2 JM |
333 | if (wpa_s->conf->device_name) { |
334 | bss->device_name = os_strdup(wpa_s->conf->device_name); | |
335 | bss->friendly_name = os_strdup(wpa_s->conf->device_name); | |
336 | } | |
56815b2b JM |
337 | if (wpa_s->conf->manufacturer) |
338 | bss->manufacturer = os_strdup(wpa_s->conf->manufacturer); | |
339 | if (wpa_s->conf->model_name) | |
340 | bss->model_name = os_strdup(wpa_s->conf->model_name); | |
341 | if (wpa_s->conf->model_number) | |
342 | bss->model_number = os_strdup(wpa_s->conf->model_number); | |
343 | if (wpa_s->conf->serial_number) | |
344 | bss->serial_number = os_strdup(wpa_s->conf->serial_number); | |
ab45223b JM |
345 | if (is_nil_uuid(wpa_s->conf->uuid)) |
346 | os_memcpy(bss->uuid, wpa_s->wps->uuid, WPS_UUID_LEN); | |
347 | else | |
348 | os_memcpy(bss->uuid, wpa_s->conf->uuid, WPS_UUID_LEN); | |
56815b2b | 349 | os_memcpy(bss->os_version, wpa_s->conf->os_version, 4); |
1298c145 | 350 | bss->pbc_in_m1 = wpa_s->conf->pbc_in_m1; |
04ed4e98 | 351 | no_wps: |
56815b2b | 352 | #endif /* CONFIG_WPS */ |
e44f8bf2 | 353 | |
de979d8f JM |
354 | if (wpa_s->max_stations && |
355 | wpa_s->max_stations < wpa_s->conf->max_num_sta) | |
356 | bss->max_num_sta = wpa_s->max_stations; | |
357 | else | |
358 | bss->max_num_sta = wpa_s->conf->max_num_sta; | |
dae608d5 | 359 | |
0d7e5a3a JB |
360 | bss->disassoc_low_ack = wpa_s->conf->disassoc_low_ack; |
361 | ||
18a2eaab JM |
362 | if (wpa_s->conf->ap_vendor_elements) { |
363 | bss->vendor_elements = | |
364 | wpabuf_dup(wpa_s->conf->ap_vendor_elements); | |
365 | } | |
366 | ||
07f117ed JM |
367 | return 0; |
368 | } | |
369 | ||
370 | ||
c706d5aa JM |
371 | static void ap_public_action_rx(void *ctx, const u8 *buf, size_t len, int freq) |
372 | { | |
e44f8bf2 JM |
373 | #ifdef CONFIG_P2P |
374 | struct wpa_supplicant *wpa_s = ctx; | |
375 | const struct ieee80211_mgmt *mgmt; | |
376 | size_t hdr_len; | |
377 | ||
378 | mgmt = (const struct ieee80211_mgmt *) buf; | |
379 | hdr_len = (const u8 *) &mgmt->u.action.u.vs_public_action.action - buf; | |
380 | if (hdr_len > len) | |
381 | return; | |
5ce00d09 JM |
382 | if (mgmt->u.action.category != WLAN_ACTION_PUBLIC) |
383 | return; | |
e44f8bf2 JM |
384 | wpas_p2p_rx_action(wpa_s, mgmt->da, mgmt->sa, mgmt->bssid, |
385 | mgmt->u.action.category, | |
386 | &mgmt->u.action.u.vs_public_action.action, | |
387 | len - hdr_len, freq); | |
388 | #endif /* CONFIG_P2P */ | |
389 | } | |
390 | ||
391 | ||
a0dee797 AGS |
392 | static void ap_wps_event_cb(void *ctx, enum wps_event event, |
393 | union wps_event_data *data) | |
394 | { | |
ca806fb5 | 395 | #ifdef CONFIG_P2P |
a0dee797 | 396 | struct wpa_supplicant *wpa_s = ctx; |
8be6450c JMB |
397 | |
398 | if (event == WPS_EV_FAIL) { | |
399 | struct wps_event_fail *fail = &data->fail; | |
400 | ||
401 | if (wpa_s->parent && wpa_s->parent != wpa_s && | |
402 | wpa_s == wpa_s->global->p2p_group_formation) { | |
403 | /* | |
404 | * src/ap/wps_hostapd.c has already sent this on the | |
405 | * main interface, so only send on the parent interface | |
406 | * here if needed. | |
407 | */ | |
408 | wpa_msg(wpa_s->parent, MSG_INFO, WPS_EVENT_FAIL | |
409 | "msg=%d config_error=%d", | |
410 | fail->msg, fail->config_error); | |
411 | } | |
412 | wpas_p2p_wps_failed(wpa_s, fail); | |
a0dee797 | 413 | } |
ca806fb5 | 414 | #endif /* CONFIG_P2P */ |
a0dee797 AGS |
415 | } |
416 | ||
417 | ||
d8a43924 | 418 | static void ap_sta_authorized_cb(void *ctx, const u8 *mac_addr, |
fbdcfd57 | 419 | int authorized, const u8 *p2p_dev_addr) |
d8a43924 | 420 | { |
fbdcfd57 | 421 | wpas_notify_sta_authorized(ctx, mac_addr, authorized, p2p_dev_addr); |
d8a43924 JB |
422 | } |
423 | ||
424 | ||
01a57fe4 JM |
425 | #ifdef CONFIG_P2P |
426 | static void ap_new_psk_cb(void *ctx, const u8 *mac_addr, const u8 *p2p_dev_addr, | |
427 | const u8 *psk, size_t psk_len) | |
428 | { | |
429 | ||
430 | struct wpa_supplicant *wpa_s = ctx; | |
431 | if (wpa_s->ap_iface == NULL || wpa_s->current_ssid == NULL) | |
432 | return; | |
433 | wpas_p2p_new_psk_cb(wpa_s, mac_addr, p2p_dev_addr, psk, psk_len); | |
434 | } | |
435 | #endif /* CONFIG_P2P */ | |
436 | ||
437 | ||
e44f8bf2 JM |
438 | static int ap_vendor_action_rx(void *ctx, const u8 *buf, size_t len, int freq) |
439 | { | |
440 | #ifdef CONFIG_P2P | |
441 | struct wpa_supplicant *wpa_s = ctx; | |
442 | const struct ieee80211_mgmt *mgmt; | |
443 | size_t hdr_len; | |
444 | ||
445 | mgmt = (const struct ieee80211_mgmt *) buf; | |
446 | hdr_len = (const u8 *) &mgmt->u.action.u.vs_public_action.action - buf; | |
447 | if (hdr_len > len) | |
448 | return -1; | |
449 | wpas_p2p_rx_action(wpa_s, mgmt->da, mgmt->sa, mgmt->bssid, | |
450 | mgmt->u.action.category, | |
451 | &mgmt->u.action.u.vs_public_action.action, | |
452 | len - hdr_len, freq); | |
453 | #endif /* CONFIG_P2P */ | |
454 | return 0; | |
c706d5aa JM |
455 | } |
456 | ||
457 | ||
04a85e44 | 458 | static int ap_probe_req_rx(void *ctx, const u8 *sa, const u8 *da, |
baf513d6 JB |
459 | const u8 *bssid, const u8 *ie, size_t ie_len, |
460 | int ssi_signal) | |
c706d5aa | 461 | { |
e44f8bf2 JM |
462 | #ifdef CONFIG_P2P |
463 | struct wpa_supplicant *wpa_s = ctx; | |
baf513d6 JB |
464 | return wpas_p2p_probe_req_rx(wpa_s, sa, da, bssid, ie, ie_len, |
465 | ssi_signal); | |
e44f8bf2 | 466 | #else /* CONFIG_P2P */ |
c706d5aa | 467 | return 0; |
e44f8bf2 | 468 | #endif /* CONFIG_P2P */ |
c706d5aa JM |
469 | } |
470 | ||
471 | ||
472 | static void ap_wps_reg_success_cb(void *ctx, const u8 *mac_addr, | |
473 | const u8 *uuid_e) | |
474 | { | |
e44f8bf2 JM |
475 | #ifdef CONFIG_P2P |
476 | struct wpa_supplicant *wpa_s = ctx; | |
477 | wpas_p2p_wps_success(wpa_s, mac_addr, 1); | |
478 | #endif /* CONFIG_P2P */ | |
c706d5aa JM |
479 | } |
480 | ||
481 | ||
c76e5d7f JB |
482 | static void wpas_ap_configured_cb(void *ctx) |
483 | { | |
484 | struct wpa_supplicant *wpa_s = ctx; | |
485 | ||
486 | wpa_supplicant_set_state(wpa_s, WPA_COMPLETED); | |
487 | ||
488 | if (wpa_s->ap_configured_cb) | |
489 | wpa_s->ap_configured_cb(wpa_s->ap_configured_cb_ctx, | |
490 | wpa_s->ap_configured_cb_data); | |
491 | } | |
492 | ||
493 | ||
2d5b792d JM |
494 | int wpa_supplicant_create_ap(struct wpa_supplicant *wpa_s, |
495 | struct wpa_ssid *ssid) | |
496 | { | |
497 | struct wpa_driver_associate_params params; | |
498 | struct hostapd_iface *hapd_iface; | |
499 | struct hostapd_config *conf; | |
500 | size_t i; | |
f1a48710 | 501 | |
2d5b792d JM |
502 | if (ssid->ssid == NULL || ssid->ssid_len == 0) { |
503 | wpa_printf(MSG_ERROR, "No SSID configured for AP mode"); | |
504 | return -1; | |
f1a48710 JM |
505 | } |
506 | ||
2d5b792d | 507 | wpa_supplicant_ap_deinit(wpa_s); |
d2440ba0 JM |
508 | |
509 | wpa_printf(MSG_DEBUG, "Setting up AP (SSID='%s')", | |
510 | wpa_ssid_txt(ssid->ssid, ssid->ssid_len)); | |
511 | ||
512 | os_memset(¶ms, 0, sizeof(params)); | |
513 | params.ssid = ssid->ssid; | |
514 | params.ssid_len = ssid->ssid_len; | |
d7dcba70 | 515 | switch (ssid->mode) { |
d7dcba70 | 516 | case WPAS_MODE_AP: |
2c5d725c JM |
517 | case WPAS_MODE_P2P_GO: |
518 | case WPAS_MODE_P2P_GROUP_FORMATION: | |
d7dcba70 JM |
519 | params.mode = IEEE80211_MODE_AP; |
520 | break; | |
94ff22ea JM |
521 | default: |
522 | return -1; | |
d7dcba70 | 523 | } |
973622cd AS |
524 | if (ssid->frequency == 0) |
525 | ssid->frequency = 2462; /* default channel 11 */ | |
d2440ba0 JM |
526 | params.freq = ssid->frequency; |
527 | ||
64fa840a | 528 | params.wpa_proto = ssid->proto; |
508545f3 JM |
529 | if (ssid->key_mgmt & WPA_KEY_MGMT_PSK) |
530 | wpa_s->key_mgmt = WPA_KEY_MGMT_PSK; | |
531 | else | |
532 | wpa_s->key_mgmt = WPA_KEY_MGMT_NONE; | |
4848a38d | 533 | params.key_mgmt_suite = wpa_s->key_mgmt; |
508545f3 | 534 | |
edbd2a19 JM |
535 | wpa_s->pairwise_cipher = wpa_pick_pairwise_cipher(ssid->pairwise_cipher, |
536 | 1); | |
537 | if (wpa_s->pairwise_cipher < 0) { | |
508545f3 JM |
538 | wpa_printf(MSG_WARNING, "WPA: Failed to select pairwise " |
539 | "cipher."); | |
540 | return -1; | |
541 | } | |
4848a38d | 542 | params.pairwise_suite = wpa_s->pairwise_cipher; |
508545f3 JM |
543 | params.group_suite = params.pairwise_suite; |
544 | ||
6e3f4b89 JM |
545 | #ifdef CONFIG_P2P |
546 | if (ssid->mode == WPAS_MODE_P2P_GO || | |
547 | ssid->mode == WPAS_MODE_P2P_GROUP_FORMATION) | |
548 | params.p2p = 1; | |
549 | #endif /* CONFIG_P2P */ | |
550 | ||
eea2fd9e JM |
551 | if (wpa_s->parent->set_ap_uapsd) |
552 | params.uapsd = wpa_s->parent->ap_uapsd; | |
94a3df50 JM |
553 | else if (params.p2p && (wpa_s->drv_flags & WPA_DRIVER_FLAGS_AP_UAPSD)) |
554 | params.uapsd = 1; /* mandatory for P2P GO */ | |
eea2fd9e JM |
555 | else |
556 | params.uapsd = -1; | |
557 | ||
d2440ba0 JM |
558 | if (wpa_drv_associate(wpa_s, ¶ms) < 0) { |
559 | wpa_msg(wpa_s, MSG_INFO, "Failed to start AP functionality"); | |
560 | return -1; | |
561 | } | |
562 | ||
2d5b792d JM |
563 | wpa_s->ap_iface = hapd_iface = os_zalloc(sizeof(*wpa_s->ap_iface)); |
564 | if (hapd_iface == NULL) | |
565 | return -1; | |
0f2b2c19 | 566 | hapd_iface->owner = wpa_s; |
a57db49c | 567 | hapd_iface->drv_flags = wpa_s->drv_flags; |
4f73d88a | 568 | hapd_iface->probe_resp_offloads = wpa_s->probe_resp_offloads; |
8cd6b7bc JB |
569 | hapd_iface->extended_capa = wpa_s->extended_capa; |
570 | hapd_iface->extended_capa_mask = wpa_s->extended_capa_mask; | |
571 | hapd_iface->extended_capa_len = wpa_s->extended_capa_len; | |
1f1b62a0 | 572 | |
2d5b792d JM |
573 | wpa_s->ap_iface->conf = conf = hostapd_config_defaults(); |
574 | if (conf == NULL) { | |
575 | wpa_supplicant_ap_deinit(wpa_s); | |
576 | return -1; | |
577 | } | |
1f1b62a0 | 578 | |
c26effe1 YD |
579 | os_memcpy(wpa_s->ap_iface->conf->wmm_ac_params, |
580 | wpa_s->conf->wmm_ac_params, | |
581 | sizeof(wpa_s->conf->wmm_ac_params)); | |
582 | ||
d26e45a4 | 583 | if (params.uapsd > 0) { |
ebd79f07 JM |
584 | conf->bss[0]->wmm_enabled = 1; |
585 | conf->bss[0]->wmm_uapsd = 1; | |
d26e45a4 EP |
586 | } |
587 | ||
07f117ed JM |
588 | if (wpa_supplicant_conf_ap(wpa_s, ssid, conf)) { |
589 | wpa_printf(MSG_ERROR, "Failed to create AP configuration"); | |
590 | wpa_supplicant_ap_deinit(wpa_s); | |
591 | return -1; | |
592 | } | |
593 | ||
e44f8bf2 JM |
594 | #ifdef CONFIG_P2P |
595 | if (ssid->mode == WPAS_MODE_P2P_GO) | |
ebd79f07 | 596 | conf->bss[0]->p2p = P2P_ENABLED | P2P_GROUP_OWNER; |
e44f8bf2 | 597 | else if (ssid->mode == WPAS_MODE_P2P_GROUP_FORMATION) |
ebd79f07 | 598 | conf->bss[0]->p2p = P2P_ENABLED | P2P_GROUP_OWNER | |
e44f8bf2 JM |
599 | P2P_GROUP_FORMATION; |
600 | #endif /* CONFIG_P2P */ | |
601 | ||
2d5b792d | 602 | hapd_iface->num_bss = conf->num_bss; |
f9884c09 | 603 | hapd_iface->bss = os_calloc(conf->num_bss, |
2d5b792d JM |
604 | sizeof(struct hostapd_data *)); |
605 | if (hapd_iface->bss == NULL) { | |
606 | wpa_supplicant_ap_deinit(wpa_s); | |
607 | return -1; | |
608 | } | |
1f1b62a0 | 609 | |
2d5b792d JM |
610 | for (i = 0; i < conf->num_bss; i++) { |
611 | hapd_iface->bss[i] = | |
612 | hostapd_alloc_bss_data(hapd_iface, conf, | |
ebd79f07 | 613 | conf->bss[i]); |
2d5b792d JM |
614 | if (hapd_iface->bss[i] == NULL) { |
615 | wpa_supplicant_ap_deinit(wpa_s); | |
616 | return -1; | |
617 | } | |
4f760fcc JM |
618 | |
619 | hapd_iface->bss[i]->msg_ctx = wpa_s; | |
8a5e75f6 | 620 | hapd_iface->bss[i]->msg_ctx_parent = wpa_s->parent; |
c706d5aa JM |
621 | hapd_iface->bss[i]->public_action_cb = ap_public_action_rx; |
622 | hapd_iface->bss[i]->public_action_cb_ctx = wpa_s; | |
e44f8bf2 JM |
623 | hapd_iface->bss[i]->vendor_action_cb = ap_vendor_action_rx; |
624 | hapd_iface->bss[i]->vendor_action_cb_ctx = wpa_s; | |
c706d5aa JM |
625 | hostapd_register_probereq_cb(hapd_iface->bss[i], |
626 | ap_probe_req_rx, wpa_s); | |
627 | hapd_iface->bss[i]->wps_reg_success_cb = ap_wps_reg_success_cb; | |
628 | hapd_iface->bss[i]->wps_reg_success_cb_ctx = wpa_s; | |
a0dee797 AGS |
629 | hapd_iface->bss[i]->wps_event_cb = ap_wps_event_cb; |
630 | hapd_iface->bss[i]->wps_event_cb_ctx = wpa_s; | |
d8a43924 JB |
631 | hapd_iface->bss[i]->sta_authorized_cb = ap_sta_authorized_cb; |
632 | hapd_iface->bss[i]->sta_authorized_cb_ctx = wpa_s; | |
e44f8bf2 | 633 | #ifdef CONFIG_P2P |
01a57fe4 JM |
634 | hapd_iface->bss[i]->new_psk_cb = ap_new_psk_cb; |
635 | hapd_iface->bss[i]->new_psk_cb_ctx = wpa_s; | |
e44f8bf2 | 636 | hapd_iface->bss[i]->p2p = wpa_s->global->p2p; |
6f251b6b JM |
637 | hapd_iface->bss[i]->p2p_group = wpas_p2p_group_init(wpa_s, |
638 | ssid); | |
e44f8bf2 | 639 | #endif /* CONFIG_P2P */ |
c76e5d7f JB |
640 | hapd_iface->bss[i]->setup_complete_cb = wpas_ap_configured_cb; |
641 | hapd_iface->bss[i]->setup_complete_cb_ctx = wpa_s; | |
2d5b792d JM |
642 | } |
643 | ||
a911a6e6 JM |
644 | os_memcpy(hapd_iface->bss[0]->own_addr, wpa_s->own_addr, ETH_ALEN); |
645 | hapd_iface->bss[0]->driver = wpa_s->driver; | |
646 | hapd_iface->bss[0]->drv_priv = wpa_s->drv_priv; | |
647 | ||
e73edcaa | 648 | wpa_s->current_ssid = ssid; |
25a8f9e3 | 649 | eapol_sm_notify_config(wpa_s->eapol, NULL, NULL); |
e73edcaa JM |
650 | os_memcpy(wpa_s->bssid, wpa_s->own_addr, ETH_ALEN); |
651 | wpa_s->assoc_freq = ssid->frequency; | |
652 | ||
a911a6e6 | 653 | if (hostapd_setup_interface(wpa_s->ap_iface)) { |
2d5b792d JM |
654 | wpa_printf(MSG_ERROR, "Failed to initialize AP interface"); |
655 | wpa_supplicant_ap_deinit(wpa_s); | |
656 | return -1; | |
1f1b62a0 JM |
657 | } |
658 | ||
2d5b792d JM |
659 | return 0; |
660 | } | |
661 | ||
662 | ||
663 | void wpa_supplicant_ap_deinit(struct wpa_supplicant *wpa_s) | |
664 | { | |
0fe620de | 665 | #ifdef CONFIG_WPS |
70d84f11 | 666 | eloop_cancel_timeout(wpas_wps_ap_pin_timeout, wpa_s, NULL); |
0fe620de | 667 | #endif /* CONFIG_WPS */ |
70d84f11 | 668 | |
2d5b792d JM |
669 | if (wpa_s->ap_iface == NULL) |
670 | return; | |
671 | ||
7a649c7d | 672 | wpa_s->current_ssid = NULL; |
25a8f9e3 | 673 | eapol_sm_notify_config(wpa_s->eapol, NULL, NULL); |
3c85f144 | 674 | wpa_s->assoc_freq = 0; |
e44f8bf2 | 675 | #ifdef CONFIG_P2P |
0e14267a JM |
676 | if (wpa_s->ap_iface->bss) |
677 | wpa_s->ap_iface->bss[0]->p2p_group = NULL; | |
e44f8bf2 JM |
678 | wpas_p2p_group_deinit(wpa_s); |
679 | #endif /* CONFIG_P2P */ | |
354c903f MB |
680 | wpa_s->ap_iface->driver_ap_teardown = |
681 | !!(wpa_s->drv_flags & WPA_DRIVER_FLAGS_AP_TEARDOWN_SUPPORT); | |
682 | ||
2d5b792d | 683 | hostapd_interface_deinit(wpa_s->ap_iface); |
f7c47833 | 684 | hostapd_interface_free(wpa_s->ap_iface); |
2d5b792d | 685 | wpa_s->ap_iface = NULL; |
7a649c7d | 686 | wpa_drv_deinit_ap(wpa_s); |
1f1b62a0 | 687 | } |
0915d02c JM |
688 | |
689 | ||
690 | void ap_tx_status(void *ctx, const u8 *addr, | |
691 | const u8 *buf, size_t len, int ack) | |
692 | { | |
f8b1f695 | 693 | #ifdef NEED_AP_MLME |
0915d02c JM |
694 | struct wpa_supplicant *wpa_s = ctx; |
695 | hostapd_tx_status(wpa_s->ap_iface->bss[0], addr, buf, len, ack); | |
f8b1f695 | 696 | #endif /* NEED_AP_MLME */ |
0915d02c JM |
697 | } |
698 | ||
699 | ||
dd840f79 JB |
700 | void ap_eapol_tx_status(void *ctx, const u8 *dst, |
701 | const u8 *data, size_t len, int ack) | |
702 | { | |
703 | #ifdef NEED_AP_MLME | |
704 | struct wpa_supplicant *wpa_s = ctx; | |
6fc61e18 JM |
705 | if (!wpa_s->ap_iface) |
706 | return; | |
dd840f79 JB |
707 | hostapd_tx_status(wpa_s->ap_iface->bss[0], dst, data, len, ack); |
708 | #endif /* NEED_AP_MLME */ | |
709 | } | |
710 | ||
711 | ||
bcf24348 JB |
712 | void ap_client_poll_ok(void *ctx, const u8 *addr) |
713 | { | |
714 | #ifdef NEED_AP_MLME | |
715 | struct wpa_supplicant *wpa_s = ctx; | |
716 | if (wpa_s->ap_iface) | |
717 | hostapd_client_poll_ok(wpa_s->ap_iface->bss[0], addr); | |
718 | #endif /* NEED_AP_MLME */ | |
719 | } | |
720 | ||
721 | ||
9b90955e | 722 | void ap_rx_from_unknown_sta(void *ctx, const u8 *addr, int wds) |
0915d02c | 723 | { |
f8b1f695 | 724 | #ifdef NEED_AP_MLME |
0915d02c | 725 | struct wpa_supplicant *wpa_s = ctx; |
9b90955e | 726 | ieee802_11_rx_from_unknown(wpa_s->ap_iface->bss[0], addr, wds); |
f8b1f695 | 727 | #endif /* NEED_AP_MLME */ |
0915d02c JM |
728 | } |
729 | ||
730 | ||
2a8b7416 | 731 | void ap_mgmt_rx(void *ctx, struct rx_mgmt *rx_mgmt) |
0915d02c | 732 | { |
f8b1f695 | 733 | #ifdef NEED_AP_MLME |
0915d02c | 734 | struct wpa_supplicant *wpa_s = ctx; |
2a8b7416 JM |
735 | struct hostapd_frame_info fi; |
736 | os_memset(&fi, 0, sizeof(fi)); | |
737 | fi.datarate = rx_mgmt->datarate; | |
738 | fi.ssi_signal = rx_mgmt->ssi_signal; | |
739 | ieee802_11_mgmt(wpa_s->ap_iface->bss[0], rx_mgmt->frame, | |
740 | rx_mgmt->frame_len, &fi); | |
f8b1f695 | 741 | #endif /* NEED_AP_MLME */ |
0915d02c JM |
742 | } |
743 | ||
744 | ||
f8b1f695 | 745 | void ap_mgmt_tx_cb(void *ctx, const u8 *buf, size_t len, u16 stype, int ok) |
0915d02c | 746 | { |
f8b1f695 | 747 | #ifdef NEED_AP_MLME |
0915d02c JM |
748 | struct wpa_supplicant *wpa_s = ctx; |
749 | ieee802_11_mgmt_cb(wpa_s->ap_iface->bss[0], buf, len, stype, ok); | |
fe6bdb77 | 750 | #endif /* NEED_AP_MLME */ |
f8b1f695 | 751 | } |
db149ac9 JM |
752 | |
753 | ||
754 | void wpa_supplicant_ap_rx_eapol(struct wpa_supplicant *wpa_s, | |
755 | const u8 *src_addr, const u8 *buf, size_t len) | |
756 | { | |
a8e0505b | 757 | ieee802_1x_receive(wpa_s->ap_iface->bss[0], src_addr, buf, len); |
db149ac9 | 758 | } |
3ec97afe JM |
759 | |
760 | ||
761 | #ifdef CONFIG_WPS | |
762 | ||
d601247c JM |
763 | int wpa_supplicant_ap_wps_pbc(struct wpa_supplicant *wpa_s, const u8 *bssid, |
764 | const u8 *p2p_dev_addr) | |
3ec97afe | 765 | { |
48b357a9 JM |
766 | if (!wpa_s->ap_iface) |
767 | return -1; | |
d601247c JM |
768 | return hostapd_wps_button_pushed(wpa_s->ap_iface->bss[0], |
769 | p2p_dev_addr); | |
3ec97afe JM |
770 | } |
771 | ||
772 | ||
2f9929ff AC |
773 | int wpa_supplicant_ap_wps_cancel(struct wpa_supplicant *wpa_s) |
774 | { | |
775 | struct wps_registrar *reg; | |
776 | int reg_sel = 0, wps_sta = 0; | |
777 | ||
778 | if (!wpa_s->ap_iface || !wpa_s->ap_iface->bss[0]->wps) | |
779 | return -1; | |
780 | ||
781 | reg = wpa_s->ap_iface->bss[0]->wps->registrar; | |
782 | reg_sel = wps_registrar_wps_cancel(reg); | |
783 | wps_sta = ap_for_each_sta(wpa_s->ap_iface->bss[0], | |
4c374cde | 784 | ap_sta_wps_cancel, NULL); |
2f9929ff AC |
785 | |
786 | if (!reg_sel && !wps_sta) { | |
787 | wpa_printf(MSG_DEBUG, "No WPS operation in progress at this " | |
788 | "time"); | |
789 | return -1; | |
790 | } | |
791 | ||
792 | /* | |
793 | * There are 2 cases to return wps cancel as success: | |
794 | * 1. When wps cancel was initiated but no connection has been | |
795 | * established with client yet. | |
796 | * 2. Client is in the middle of exchanging WPS messages. | |
797 | */ | |
798 | ||
799 | return 0; | |
800 | } | |
801 | ||
802 | ||
3ec97afe | 803 | int wpa_supplicant_ap_wps_pin(struct wpa_supplicant *wpa_s, const u8 *bssid, |
c423708f JM |
804 | const char *pin, char *buf, size_t buflen, |
805 | int timeout) | |
3ec97afe JM |
806 | { |
807 | int ret, ret_len = 0; | |
808 | ||
48b357a9 JM |
809 | if (!wpa_s->ap_iface) |
810 | return -1; | |
811 | ||
3ec97afe JM |
812 | if (pin == NULL) { |
813 | unsigned int rpin = wps_generate_pin(); | |
9337e876 | 814 | ret_len = os_snprintf(buf, buflen, "%08d", rpin); |
3ec97afe | 815 | pin = buf; |
f80a2237 JM |
816 | } else |
817 | ret_len = os_snprintf(buf, buflen, "%s", pin); | |
3ec97afe | 818 | |
31fcea93 | 819 | ret = hostapd_wps_add_pin(wpa_s->ap_iface->bss[0], bssid, "any", pin, |
c423708f | 820 | timeout); |
3ec97afe JM |
821 | if (ret) |
822 | return -1; | |
823 | return ret_len; | |
824 | } | |
825 | ||
70d84f11 JM |
826 | |
827 | static void wpas_wps_ap_pin_timeout(void *eloop_data, void *user_ctx) | |
828 | { | |
829 | struct wpa_supplicant *wpa_s = eloop_data; | |
830 | wpa_printf(MSG_DEBUG, "WPS: AP PIN timed out"); | |
831 | wpas_wps_ap_pin_disable(wpa_s); | |
832 | } | |
833 | ||
834 | ||
835 | static void wpas_wps_ap_pin_enable(struct wpa_supplicant *wpa_s, int timeout) | |
836 | { | |
837 | struct hostapd_data *hapd; | |
838 | ||
839 | if (wpa_s->ap_iface == NULL) | |
840 | return; | |
841 | hapd = wpa_s->ap_iface->bss[0]; | |
842 | wpa_printf(MSG_DEBUG, "WPS: Enabling AP PIN (timeout=%d)", timeout); | |
843 | hapd->ap_pin_failures = 0; | |
844 | eloop_cancel_timeout(wpas_wps_ap_pin_timeout, wpa_s, NULL); | |
845 | if (timeout > 0) | |
846 | eloop_register_timeout(timeout, 0, | |
847 | wpas_wps_ap_pin_timeout, wpa_s, NULL); | |
848 | } | |
849 | ||
850 | ||
851 | void wpas_wps_ap_pin_disable(struct wpa_supplicant *wpa_s) | |
852 | { | |
853 | struct hostapd_data *hapd; | |
854 | ||
855 | if (wpa_s->ap_iface == NULL) | |
856 | return; | |
857 | wpa_printf(MSG_DEBUG, "WPS: Disabling AP PIN"); | |
858 | hapd = wpa_s->ap_iface->bss[0]; | |
859 | os_free(hapd->conf->ap_pin); | |
860 | hapd->conf->ap_pin = NULL; | |
861 | eloop_cancel_timeout(wpas_wps_ap_pin_timeout, wpa_s, NULL); | |
862 | } | |
863 | ||
864 | ||
865 | const char * wpas_wps_ap_pin_random(struct wpa_supplicant *wpa_s, int timeout) | |
866 | { | |
867 | struct hostapd_data *hapd; | |
868 | unsigned int pin; | |
869 | char pin_txt[9]; | |
870 | ||
871 | if (wpa_s->ap_iface == NULL) | |
872 | return NULL; | |
873 | hapd = wpa_s->ap_iface->bss[0]; | |
874 | pin = wps_generate_pin(); | |
9337e876 | 875 | os_snprintf(pin_txt, sizeof(pin_txt), "%08u", pin); |
70d84f11 JM |
876 | os_free(hapd->conf->ap_pin); |
877 | hapd->conf->ap_pin = os_strdup(pin_txt); | |
878 | if (hapd->conf->ap_pin == NULL) | |
879 | return NULL; | |
880 | wpas_wps_ap_pin_enable(wpa_s, timeout); | |
881 | ||
882 | return hapd->conf->ap_pin; | |
883 | } | |
884 | ||
885 | ||
886 | const char * wpas_wps_ap_pin_get(struct wpa_supplicant *wpa_s) | |
887 | { | |
888 | struct hostapd_data *hapd; | |
889 | if (wpa_s->ap_iface == NULL) | |
890 | return NULL; | |
891 | hapd = wpa_s->ap_iface->bss[0]; | |
892 | return hapd->conf->ap_pin; | |
893 | } | |
894 | ||
895 | ||
896 | int wpas_wps_ap_pin_set(struct wpa_supplicant *wpa_s, const char *pin, | |
897 | int timeout) | |
898 | { | |
899 | struct hostapd_data *hapd; | |
900 | char pin_txt[9]; | |
901 | int ret; | |
902 | ||
903 | if (wpa_s->ap_iface == NULL) | |
904 | return -1; | |
905 | hapd = wpa_s->ap_iface->bss[0]; | |
906 | ret = os_snprintf(pin_txt, sizeof(pin_txt), "%s", pin); | |
907 | if (ret < 0 || ret >= (int) sizeof(pin_txt)) | |
908 | return -1; | |
909 | os_free(hapd->conf->ap_pin); | |
910 | hapd->conf->ap_pin = os_strdup(pin_txt); | |
911 | if (hapd->conf->ap_pin == NULL) | |
912 | return -1; | |
913 | wpas_wps_ap_pin_enable(wpa_s, timeout); | |
914 | ||
915 | return 0; | |
916 | } | |
917 | ||
918 | ||
919 | void wpa_supplicant_ap_pwd_auth_fail(struct wpa_supplicant *wpa_s) | |
920 | { | |
921 | struct hostapd_data *hapd; | |
922 | ||
923 | if (wpa_s->ap_iface == NULL) | |
924 | return; | |
925 | hapd = wpa_s->ap_iface->bss[0]; | |
926 | ||
927 | /* | |
928 | * Registrar failed to prove its knowledge of the AP PIN. Disable AP | |
929 | * PIN if this happens multiple times to slow down brute force attacks. | |
930 | */ | |
931 | hapd->ap_pin_failures++; | |
932 | wpa_printf(MSG_DEBUG, "WPS: AP PIN authentication failure number %u", | |
933 | hapd->ap_pin_failures); | |
934 | if (hapd->ap_pin_failures < 3) | |
935 | return; | |
936 | ||
937 | wpa_printf(MSG_DEBUG, "WPS: Disable AP PIN"); | |
938 | hapd->ap_pin_failures = 0; | |
939 | os_free(hapd->conf->ap_pin); | |
940 | hapd->conf->ap_pin = NULL; | |
941 | } | |
942 | ||
bbf41865 | 943 | |
87470ea2 JM |
944 | #ifdef CONFIG_WPS_NFC |
945 | ||
bbf41865 JM |
946 | struct wpabuf * wpas_ap_wps_nfc_config_token(struct wpa_supplicant *wpa_s, |
947 | int ndef) | |
948 | { | |
949 | struct hostapd_data *hapd; | |
950 | ||
951 | if (wpa_s->ap_iface == NULL) | |
952 | return NULL; | |
953 | hapd = wpa_s->ap_iface->bss[0]; | |
954 | return hostapd_wps_nfc_config_token(hapd, ndef); | |
955 | } | |
956 | ||
5ab9a6a5 JM |
957 | |
958 | struct wpabuf * wpas_ap_wps_nfc_handover_sel(struct wpa_supplicant *wpa_s, | |
959 | int ndef) | |
960 | { | |
961 | struct hostapd_data *hapd; | |
962 | ||
963 | if (wpa_s->ap_iface == NULL) | |
964 | return NULL; | |
965 | hapd = wpa_s->ap_iface->bss[0]; | |
966 | return hostapd_wps_nfc_hs_cr(hapd, ndef); | |
967 | } | |
968 | ||
d9507936 JM |
969 | |
970 | int wpas_ap_wps_nfc_report_handover(struct wpa_supplicant *wpa_s, | |
971 | const struct wpabuf *req, | |
972 | const struct wpabuf *sel) | |
973 | { | |
974 | struct hostapd_data *hapd; | |
975 | ||
976 | if (wpa_s->ap_iface == NULL) | |
977 | return -1; | |
978 | hapd = wpa_s->ap_iface->bss[0]; | |
979 | return hostapd_wps_nfc_report_handover(hapd, req, sel); | |
980 | } | |
981 | ||
87470ea2 JM |
982 | #endif /* CONFIG_WPS_NFC */ |
983 | ||
3ec97afe | 984 | #endif /* CONFIG_WPS */ |
e653b622 JM |
985 | |
986 | ||
35deb646 JM |
987 | #ifdef CONFIG_CTRL_IFACE |
988 | ||
e653b622 JM |
989 | int ap_ctrl_iface_sta_first(struct wpa_supplicant *wpa_s, |
990 | char *buf, size_t buflen) | |
991 | { | |
992 | if (wpa_s->ap_iface == NULL) | |
993 | return -1; | |
994 | return hostapd_ctrl_iface_sta_first(wpa_s->ap_iface->bss[0], | |
995 | buf, buflen); | |
996 | } | |
997 | ||
998 | ||
999 | int ap_ctrl_iface_sta(struct wpa_supplicant *wpa_s, const char *txtaddr, | |
1000 | char *buf, size_t buflen) | |
1001 | { | |
1002 | if (wpa_s->ap_iface == NULL) | |
1003 | return -1; | |
1004 | return hostapd_ctrl_iface_sta(wpa_s->ap_iface->bss[0], txtaddr, | |
1005 | buf, buflen); | |
1006 | } | |
1007 | ||
1008 | ||
1009 | int ap_ctrl_iface_sta_next(struct wpa_supplicant *wpa_s, const char *txtaddr, | |
1010 | char *buf, size_t buflen) | |
1011 | { | |
1012 | if (wpa_s->ap_iface == NULL) | |
1013 | return -1; | |
1014 | return hostapd_ctrl_iface_sta_next(wpa_s->ap_iface->bss[0], txtaddr, | |
1015 | buf, buflen); | |
1016 | } | |
35deb646 | 1017 | |
43fb5297 | 1018 | |
e60b2951 JJ |
1019 | int ap_ctrl_iface_sta_disassociate(struct wpa_supplicant *wpa_s, |
1020 | const char *txtaddr) | |
1021 | { | |
1022 | if (wpa_s->ap_iface == NULL) | |
1023 | return -1; | |
1024 | return hostapd_ctrl_iface_disassociate(wpa_s->ap_iface->bss[0], | |
1025 | txtaddr); | |
1026 | } | |
1027 | ||
1028 | ||
1029 | int ap_ctrl_iface_sta_deauthenticate(struct wpa_supplicant *wpa_s, | |
1030 | const char *txtaddr) | |
1031 | { | |
1032 | if (wpa_s->ap_iface == NULL) | |
1033 | return -1; | |
1034 | return hostapd_ctrl_iface_deauthenticate(wpa_s->ap_iface->bss[0], | |
1035 | txtaddr); | |
1036 | } | |
1037 | ||
1038 | ||
43fb5297 JM |
1039 | int ap_ctrl_iface_wpa_get_status(struct wpa_supplicant *wpa_s, char *buf, |
1040 | size_t buflen, int verbose) | |
1041 | { | |
1042 | char *pos = buf, *end = buf + buflen; | |
1043 | int ret; | |
1044 | struct hostapd_bss_config *conf; | |
1045 | ||
1046 | if (wpa_s->ap_iface == NULL) | |
1047 | return -1; | |
1048 | ||
1049 | conf = wpa_s->ap_iface->bss[0]->conf; | |
1050 | if (conf->wpa == 0) | |
1051 | return 0; | |
1052 | ||
1053 | ret = os_snprintf(pos, end - pos, | |
1054 | "pairwise_cipher=%s\n" | |
1055 | "group_cipher=%s\n" | |
1056 | "key_mgmt=%s\n", | |
1057 | wpa_cipher_txt(conf->rsn_pairwise), | |
1058 | wpa_cipher_txt(conf->wpa_group), | |
1059 | wpa_key_mgmt_txt(conf->wpa_key_mgmt, | |
1060 | conf->wpa)); | |
1061 | if (ret < 0 || ret >= end - pos) | |
1062 | return pos - buf; | |
1063 | pos += ret; | |
1064 | return pos - buf; | |
1065 | } | |
1066 | ||
35deb646 | 1067 | #endif /* CONFIG_CTRL_IFACE */ |
f90ceeaa JM |
1068 | |
1069 | ||
b22128ef JM |
1070 | int wpa_supplicant_ap_update_beacon(struct wpa_supplicant *wpa_s) |
1071 | { | |
1072 | struct hostapd_iface *iface = wpa_s->ap_iface; | |
1073 | struct wpa_ssid *ssid = wpa_s->current_ssid; | |
1074 | struct hostapd_data *hapd; | |
1075 | ||
72d48a80 JM |
1076 | if (ssid == NULL || wpa_s->ap_iface == NULL || |
1077 | ssid->mode == WPAS_MODE_INFRA || | |
1078 | ssid->mode == WPAS_MODE_IBSS) | |
b22128ef JM |
1079 | return -1; |
1080 | ||
e44f8bf2 JM |
1081 | #ifdef CONFIG_P2P |
1082 | if (ssid->mode == WPAS_MODE_P2P_GO) | |
ebd79f07 | 1083 | iface->conf->bss[0]->p2p = P2P_ENABLED | P2P_GROUP_OWNER; |
e44f8bf2 | 1084 | else if (ssid->mode == WPAS_MODE_P2P_GROUP_FORMATION) |
ebd79f07 | 1085 | iface->conf->bss[0]->p2p = P2P_ENABLED | P2P_GROUP_OWNER | |
e44f8bf2 JM |
1086 | P2P_GROUP_FORMATION; |
1087 | #endif /* CONFIG_P2P */ | |
1088 | ||
b22128ef | 1089 | hapd = iface->bss[0]; |
72d48a80 JM |
1090 | if (hapd->drv_priv == NULL) |
1091 | return -1; | |
1092 | ieee802_11_set_beacons(iface); | |
fe99fb74 | 1093 | hostapd_set_ap_wps_ie(hapd); |
b22128ef JM |
1094 | |
1095 | return 0; | |
1096 | } | |
1097 | ||
1098 | ||
bf281c12 AO |
1099 | int ap_switch_channel(struct wpa_supplicant *wpa_s, |
1100 | struct csa_settings *settings) | |
1101 | { | |
1102 | #ifdef NEED_AP_MLME | |
1103 | if (!wpa_s->ap_iface || !wpa_s->ap_iface->bss[0]) | |
1104 | return -1; | |
1105 | ||
1106 | return hostapd_switch_channel(wpa_s->ap_iface->bss[0], settings); | |
1107 | #else /* NEED_AP_MLME */ | |
1108 | return -1; | |
1109 | #endif /* NEED_AP_MLME */ | |
1110 | } | |
1111 | ||
1112 | ||
334bf36a AO |
1113 | int ap_ctrl_iface_chanswitch(struct wpa_supplicant *wpa_s, const char *pos) |
1114 | { | |
1115 | struct csa_settings settings; | |
1116 | int ret = hostapd_parse_csa_settings(pos, &settings); | |
1117 | ||
1118 | if (ret) | |
1119 | return ret; | |
1120 | ||
1121 | return ap_switch_channel(wpa_s, &settings); | |
1122 | } | |
1123 | ||
1124 | ||
1b487b8b | 1125 | void wpas_ap_ch_switch(struct wpa_supplicant *wpa_s, int freq, int ht, |
8d1fdde7 | 1126 | int offset, int width, int cf1, int cf2) |
1b487b8b TP |
1127 | { |
1128 | if (!wpa_s->ap_iface) | |
1129 | return; | |
1130 | ||
1131 | wpa_s->assoc_freq = freq; | |
8d1fdde7 | 1132 | hostapd_event_ch_switch(wpa_s->ap_iface->bss[0], freq, ht, offset, width, cf1, cf1); |
1b487b8b TP |
1133 | } |
1134 | ||
1135 | ||
f90ceeaa JM |
1136 | int wpa_supplicant_ap_mac_addr_filter(struct wpa_supplicant *wpa_s, |
1137 | const u8 *addr) | |
1138 | { | |
1139 | struct hostapd_data *hapd; | |
1140 | struct hostapd_bss_config *conf; | |
1141 | ||
1142 | if (!wpa_s->ap_iface) | |
1143 | return -1; | |
1144 | ||
1145 | if (addr) | |
1146 | wpa_printf(MSG_DEBUG, "AP: Set MAC address filter: " MACSTR, | |
1147 | MAC2STR(addr)); | |
1148 | else | |
1149 | wpa_printf(MSG_DEBUG, "AP: Clear MAC address filter"); | |
1150 | ||
1151 | hapd = wpa_s->ap_iface->bss[0]; | |
1152 | conf = hapd->conf; | |
1153 | ||
1154 | os_free(conf->accept_mac); | |
1155 | conf->accept_mac = NULL; | |
1156 | conf->num_accept_mac = 0; | |
1157 | os_free(conf->deny_mac); | |
1158 | conf->deny_mac = NULL; | |
1159 | conf->num_deny_mac = 0; | |
1160 | ||
1161 | if (addr == NULL) { | |
1162 | conf->macaddr_acl = ACCEPT_UNLESS_DENIED; | |
1163 | return 0; | |
1164 | } | |
1165 | ||
1166 | conf->macaddr_acl = DENY_UNLESS_ACCEPTED; | |
1167 | conf->accept_mac = os_zalloc(sizeof(struct mac_acl_entry)); | |
1168 | if (conf->accept_mac == NULL) | |
1169 | return -1; | |
1170 | os_memcpy(conf->accept_mac[0].addr, addr, ETH_ALEN); | |
1171 | conf->num_accept_mac = 1; | |
1172 | ||
1173 | return 0; | |
1174 | } | |
db6ae69e JM |
1175 | |
1176 | ||
1177 | #ifdef CONFIG_WPS_NFC | |
1178 | int wpas_ap_wps_add_nfc_pw(struct wpa_supplicant *wpa_s, u16 pw_id, | |
1179 | const struct wpabuf *pw, const u8 *pubkey_hash) | |
1180 | { | |
1181 | struct hostapd_data *hapd; | |
1182 | struct wps_context *wps; | |
1183 | ||
1184 | if (!wpa_s->ap_iface) | |
1185 | return -1; | |
1186 | hapd = wpa_s->ap_iface->bss[0]; | |
1187 | wps = hapd->wps; | |
1188 | ||
1189 | if (wpa_s->parent->conf->wps_nfc_dh_pubkey == NULL || | |
1190 | wpa_s->parent->conf->wps_nfc_dh_privkey == NULL) { | |
1191 | wpa_printf(MSG_DEBUG, "P2P: No NFC DH key known"); | |
1192 | return -1; | |
1193 | } | |
1194 | ||
1195 | dh5_free(wps->dh_ctx); | |
1196 | wpabuf_free(wps->dh_pubkey); | |
1197 | wpabuf_free(wps->dh_privkey); | |
1198 | wps->dh_privkey = wpabuf_dup( | |
1199 | wpa_s->parent->conf->wps_nfc_dh_privkey); | |
1200 | wps->dh_pubkey = wpabuf_dup( | |
1201 | wpa_s->parent->conf->wps_nfc_dh_pubkey); | |
1202 | if (wps->dh_privkey == NULL || wps->dh_pubkey == NULL) { | |
1203 | wps->dh_ctx = NULL; | |
1204 | wpabuf_free(wps->dh_pubkey); | |
1205 | wps->dh_pubkey = NULL; | |
1206 | wpabuf_free(wps->dh_privkey); | |
1207 | wps->dh_privkey = NULL; | |
1208 | return -1; | |
1209 | } | |
1210 | wps->dh_ctx = dh5_init_fixed(wps->dh_privkey, wps->dh_pubkey); | |
1211 | if (wps->dh_ctx == NULL) | |
1212 | return -1; | |
1213 | ||
1214 | return wps_registrar_add_nfc_pw_token(hapd->wps->registrar, pubkey_hash, | |
1215 | pw_id, | |
1216 | pw ? wpabuf_head(pw) : NULL, | |
1217 | pw ? wpabuf_len(pw) : 0, 1); | |
1218 | } | |
1219 | #endif /* CONFIG_WPS_NFC */ |