1 /* 2 * WPA Supplicant - Glue code to setup EAPOL and RSN modules 3 * Copyright (c) 2003-2015, Jouni Malinen <j@w1.fi> 4 * 5 * This software may be distributed under the terms of the BSD license. 6 * See README for more details. 7 */ 8 9 #include "includes.h" 10 11 #include "common.h" 12 #include "eapol_supp/eapol_supp_sm.h" 13 #include "eap_peer/eap.h" 14 #include "rsn_supp/wpa.h" 15 #include "eloop.h" 16 #include "config.h" 17 #include "l2_packet/l2_packet.h" 18 #include "common/wpa_common.h" 19 #include "common/ptksa_cache.h" 20 #include "wpa_supplicant_i.h" 21 #include "driver_i.h" 22 #include "rsn_supp/pmksa_cache.h" 23 #include "sme.h" 24 #include "common/ieee802_11_defs.h" 25 #include "common/wpa_ctrl.h" 26 #include "wpas_glue.h" 27 #include "wps_supplicant.h" 28 #include "bss.h" 29 #include "scan.h" 30 #include "notify.h" 31 #include "wpas_kay.h" 32 33 34 #ifndef CONFIG_NO_CONFIG_BLOBS 35 #if defined(IEEE8021X_EAPOL) || !defined(CONFIG_NO_WPA) 36 static void wpa_supplicant_set_config_blob(void *ctx, 37 struct wpa_config_blob *blob) 38 { 39 struct wpa_supplicant *wpa_s = ctx; 40 wpa_config_set_blob(wpa_s->conf, blob); 41 if (wpa_s->conf->update_config) { 42 int ret = wpa_config_write(wpa_s->confname, wpa_s->conf); 43 if (ret) { 44 wpa_printf(MSG_DEBUG, "Failed to update config after " 45 "blob set"); 46 } 47 } 48 } 49 50 51 static const struct wpa_config_blob * 52 wpa_supplicant_get_config_blob(void *ctx, const char *name) 53 { 54 struct wpa_supplicant *wpa_s = ctx; 55 return wpa_config_get_blob(wpa_s->conf, name); 56 } 57 #endif /* defined(IEEE8021X_EAPOL) || !defined(CONFIG_NO_WPA) */ 58 #endif /* CONFIG_NO_CONFIG_BLOBS */ 59 60 61 #if defined(IEEE8021X_EAPOL) || !defined(CONFIG_NO_WPA) 62 static u8 * wpa_alloc_eapol(const struct wpa_supplicant *wpa_s, u8 type, 63 const void *data, u16 data_len, 64 size_t *msg_len, void **data_pos) 65 { 66 struct ieee802_1x_hdr *hdr; 67 68 *msg_len = sizeof(*hdr) + data_len; 69 hdr = os_malloc(*msg_len); 70 if (hdr == NULL) 71 return NULL; 72 73 hdr->version = wpa_s->conf->eapol_version; 74 hdr->type = type; 75 hdr->length = host_to_be16(data_len); 76 77 if (data) 78 os_memcpy(hdr + 1, data, data_len); 79 else 80 os_memset(hdr + 1, 0, data_len); 81 82 if (data_pos) 83 *data_pos = hdr + 1; 84 85 return (u8 *) hdr; 86 } 87 88 89 /** 90 * wpa_ether_send - Send Ethernet frame 91 * @wpa_s: Pointer to wpa_supplicant data 92 * @dest: Destination MAC address 93 * @proto: Ethertype in host byte order 94 * @buf: Frame payload starting from IEEE 802.1X header 95 * @len: Frame payload length 96 * Returns: >=0 on success, <0 on failure 97 */ 98 int wpa_ether_send(struct wpa_supplicant *wpa_s, const u8 *dest, 99 u16 proto, const u8 *buf, size_t len) 100 { 101 #ifdef CONFIG_TESTING_OPTIONS 102 if (wpa_s->ext_eapol_frame_io && proto == ETH_P_EAPOL) { 103 size_t hex_len = 2 * len + 1; 104 char *hex = os_malloc(hex_len); 105 106 if (hex == NULL) 107 return -1; 108 wpa_snprintf_hex(hex, hex_len, buf, len); 109 wpa_msg(wpa_s, MSG_INFO, "EAPOL-TX " MACSTR " %s", 110 MAC2STR(dest), hex); 111 os_free(hex); 112 return 0; 113 } 114 #endif /* CONFIG_TESTING_OPTIONS */ 115 116 if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_CONTROL_PORT) { 117 int encrypt = wpa_s->wpa && 118 wpa_sm_has_ptk_installed(wpa_s->wpa); 119 120 return wpa_drv_tx_control_port(wpa_s, dest, proto, buf, len, 121 !encrypt); 122 } 123 124 if (wpa_s->l2) { 125 return l2_packet_send(wpa_s->l2, dest, proto, buf, len); 126 } 127 128 return -1; 129 } 130 #endif /* IEEE8021X_EAPOL || !CONFIG_NO_WPA */ 131 132 133 #ifdef IEEE8021X_EAPOL 134 135 /** 136 * wpa_supplicant_eapol_send - Send IEEE 802.1X EAPOL packet to Authenticator 137 * @ctx: Pointer to wpa_supplicant data (wpa_s) 138 * @type: IEEE 802.1X packet type (IEEE802_1X_TYPE_*) 139 * @buf: EAPOL payload (after IEEE 802.1X header) 140 * @len: EAPOL payload length 141 * Returns: >=0 on success, <0 on failure 142 * 143 * This function adds Ethernet and IEEE 802.1X header and sends the EAPOL frame 144 * to the current Authenticator. 145 */ 146 static int wpa_supplicant_eapol_send(void *ctx, int type, const u8 *buf, 147 size_t len) 148 { 149 struct wpa_supplicant *wpa_s = ctx; 150 u8 *msg, *dst, bssid[ETH_ALEN]; 151 size_t msglen; 152 int res; 153 154 /* TODO: could add l2_packet_sendmsg that allows fragments to avoid 155 * extra copy here */ 156 157 if (wpa_key_mgmt_wpa_psk(wpa_s->key_mgmt) || 158 wpa_s->key_mgmt == WPA_KEY_MGMT_OWE || 159 wpa_s->key_mgmt == WPA_KEY_MGMT_DPP || 160 wpa_s->key_mgmt == WPA_KEY_MGMT_NONE) { 161 /* Current SSID is not using IEEE 802.1X/EAP, so drop possible 162 * EAPOL frames (mainly, EAPOL-Start) from EAPOL state 163 * machines. */ 164 wpa_printf(MSG_DEBUG, "WPA: drop TX EAPOL in non-IEEE 802.1X " 165 "mode (type=%d len=%lu)", type, 166 (unsigned long) len); 167 return -1; 168 } 169 170 if (pmksa_cache_get_current(wpa_s->wpa) && 171 type == IEEE802_1X_TYPE_EAPOL_START) { 172 /* 173 * We were trying to use PMKSA caching and sending EAPOL-Start 174 * would abort that and trigger full EAPOL authentication. 175 * However, we've already waited for the AP/Authenticator to 176 * start 4-way handshake or EAP authentication, and apparently 177 * it has not done so since the startWhen timer has reached zero 178 * to get the state machine sending EAPOL-Start. This is not 179 * really supposed to happen, but an interoperability issue with 180 * a deployed AP has been identified where the connection fails 181 * due to that AP failing to operate correctly if PMKID is 182 * included in the Association Request frame. To work around 183 * this, assume PMKSA caching failed and try to initiate full 184 * EAP authentication. 185 */ 186 if (!wpa_s->current_ssid || 187 wpa_s->current_ssid->eap_workaround) { 188 wpa_printf(MSG_DEBUG, 189 "RSN: Timeout on waiting for the AP to initiate 4-way handshake for PMKSA caching or EAP authentication - try to force it to start EAP authentication"); 190 } else { 191 wpa_printf(MSG_DEBUG, 192 "RSN: PMKSA caching - do not send EAPOL-Start"); 193 return -1; 194 } 195 } 196 197 if (is_zero_ether_addr(wpa_s->bssid)) { 198 wpa_printf(MSG_DEBUG, "BSSID not set when trying to send an " 199 "EAPOL frame"); 200 if (wpa_drv_get_bssid(wpa_s, bssid) == 0 && 201 !is_zero_ether_addr(bssid)) { 202 dst = bssid; 203 wpa_printf(MSG_DEBUG, "Using current BSSID " MACSTR 204 " from the driver as the EAPOL destination", 205 MAC2STR(dst)); 206 } else { 207 dst = wpa_s->last_eapol_src; 208 wpa_printf(MSG_DEBUG, "Using the source address of the" 209 " last received EAPOL frame " MACSTR " as " 210 "the EAPOL destination", 211 MAC2STR(dst)); 212 } 213 } else { 214 /* BSSID was already set (from (Re)Assoc event, so use it as 215 * the EAPOL destination. */ 216 dst = wpa_s->bssid; 217 } 218 219 msg = wpa_alloc_eapol(wpa_s, type, buf, len, &msglen, NULL); 220 if (msg == NULL) 221 return -1; 222 223 wpa_printf(MSG_DEBUG, "TX EAPOL: dst=" MACSTR, MAC2STR(dst)); 224 wpa_hexdump(MSG_MSGDUMP, "TX EAPOL", msg, msglen); 225 res = wpa_ether_send(wpa_s, dst, ETH_P_EAPOL, msg, msglen); 226 os_free(msg); 227 return res; 228 } 229 230 231 #ifdef CONFIG_WEP 232 /** 233 * wpa_eapol_set_wep_key - set WEP key for the driver 234 * @ctx: Pointer to wpa_supplicant data (wpa_s) 235 * @unicast: 1 = individual unicast key, 0 = broadcast key 236 * @keyidx: WEP key index (0..3) 237 * @key: Pointer to key data 238 * @keylen: Key length in bytes 239 * Returns: 0 on success or < 0 on error. 240 */ 241 static int wpa_eapol_set_wep_key(void *ctx, int unicast, int keyidx, 242 const u8 *key, size_t keylen) 243 { 244 struct wpa_supplicant *wpa_s = ctx; 245 if (wpa_s->key_mgmt == WPA_KEY_MGMT_IEEE8021X_NO_WPA) { 246 int cipher = (keylen == 5) ? WPA_CIPHER_WEP40 : 247 WPA_CIPHER_WEP104; 248 if (unicast) 249 wpa_s->pairwise_cipher = cipher; 250 else 251 wpa_s->group_cipher = cipher; 252 } 253 return wpa_drv_set_key(wpa_s, WPA_ALG_WEP, 254 unicast ? wpa_s->bssid : NULL, 255 keyidx, unicast, NULL, 0, key, keylen, 256 unicast ? KEY_FLAG_PAIRWISE_RX_TX : 257 KEY_FLAG_GROUP_RX_TX_DEFAULT); 258 } 259 #endif /* CONFIG_WEP */ 260 261 262 static void wpa_supplicant_aborted_cached(void *ctx) 263 { 264 struct wpa_supplicant *wpa_s = ctx; 265 wpa_sm_aborted_cached(wpa_s->wpa); 266 } 267 268 269 static const char * result_str(enum eapol_supp_result result) 270 { 271 switch (result) { 272 case EAPOL_SUPP_RESULT_FAILURE: 273 return "FAILURE"; 274 case EAPOL_SUPP_RESULT_SUCCESS: 275 return "SUCCESS"; 276 case EAPOL_SUPP_RESULT_EXPECTED_FAILURE: 277 return "EXPECTED_FAILURE"; 278 } 279 return "?"; 280 } 281 282 283 static void wpa_supplicant_eapol_cb(struct eapol_sm *eapol, 284 enum eapol_supp_result result, 285 void *ctx) 286 { 287 struct wpa_supplicant *wpa_s = ctx; 288 int res, pmk_len; 289 u8 pmk[PMK_LEN]; 290 291 wpa_printf(MSG_DEBUG, "EAPOL authentication completed - result=%s", 292 result_str(result)); 293 294 if (wpas_wps_eapol_cb(wpa_s) > 0) 295 return; 296 297 wpa_s->eap_expected_failure = result == 298 EAPOL_SUPP_RESULT_EXPECTED_FAILURE; 299 300 if (result != EAPOL_SUPP_RESULT_SUCCESS) { 301 /* 302 * Make sure we do not get stuck here waiting for long EAPOL 303 * timeout if the AP does not disconnect in case of 304 * authentication failure. 305 */ 306 wpa_supplicant_req_auth_timeout(wpa_s, 2, 0); 307 } else { 308 ieee802_1x_notify_create_actor(wpa_s, wpa_s->last_eapol_src); 309 } 310 311 if (result != EAPOL_SUPP_RESULT_SUCCESS || 312 !(wpa_s->drv_flags & WPA_DRIVER_FLAGS_4WAY_HANDSHAKE_8021X)) 313 return; 314 315 if (!wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt)) 316 return; 317 318 wpa_printf(MSG_DEBUG, "Configure PMK for driver-based RSN 4-way " 319 "handshake"); 320 321 pmk_len = PMK_LEN; 322 if (wpa_key_mgmt_ft(wpa_s->key_mgmt)) { 323 #ifdef CONFIG_IEEE80211R 324 u8 buf[2 * PMK_LEN]; 325 wpa_printf(MSG_DEBUG, "RSN: Use FT XXKey as PMK for " 326 "driver-based 4-way hs and FT"); 327 res = eapol_sm_get_key(eapol, buf, 2 * PMK_LEN); 328 if (res == 0) { 329 os_memcpy(pmk, buf + PMK_LEN, PMK_LEN); 330 os_memset(buf, 0, sizeof(buf)); 331 } 332 #else /* CONFIG_IEEE80211R */ 333 res = -1; 334 #endif /* CONFIG_IEEE80211R */ 335 } else { 336 res = eapol_sm_get_key(eapol, pmk, PMK_LEN); 337 if (res) { 338 /* 339 * EAP-LEAP is an exception from other EAP methods: it 340 * uses only 16-byte PMK. 341 */ 342 res = eapol_sm_get_key(eapol, pmk, 16); 343 pmk_len = 16; 344 } 345 } 346 347 if (res) { 348 wpa_printf(MSG_DEBUG, "Failed to get PMK from EAPOL state " 349 "machines"); 350 return; 351 } 352 353 wpa_hexdump_key(MSG_DEBUG, "RSN: Configure PMK for driver-based 4-way " 354 "handshake", pmk, pmk_len); 355 356 if (wpa_drv_set_key(wpa_s, 0, NULL, 0, 0, NULL, 0, pmk, 357 pmk_len, KEY_FLAG_PMK)) { 358 wpa_printf(MSG_DEBUG, "Failed to set PMK to the driver"); 359 } 360 361 wpa_supplicant_cancel_scan(wpa_s); 362 wpa_supplicant_cancel_auth_timeout(wpa_s); 363 wpa_supplicant_set_state(wpa_s, WPA_COMPLETED); 364 365 } 366 367 368 static void wpa_supplicant_notify_eapol_done(void *ctx) 369 { 370 struct wpa_supplicant *wpa_s = ctx; 371 wpa_msg(wpa_s, MSG_DEBUG, "WPA: EAPOL processing complete"); 372 if (wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt)) { 373 wpa_supplicant_set_state(wpa_s, WPA_4WAY_HANDSHAKE); 374 } else { 375 wpa_supplicant_cancel_auth_timeout(wpa_s); 376 wpa_supplicant_set_state(wpa_s, WPA_COMPLETED); 377 } 378 } 379 380 #endif /* IEEE8021X_EAPOL */ 381 382 383 #ifndef CONFIG_NO_WPA 384 385 static int wpa_get_beacon_ie(struct wpa_supplicant *wpa_s) 386 { 387 int ret = 0; 388 struct wpa_bss *curr = NULL, *bss; 389 struct wpa_ssid *ssid = wpa_s->current_ssid; 390 const u8 *ie; 391 392 dl_list_for_each(bss, &wpa_s->bss, struct wpa_bss, list) { 393 if (os_memcmp(bss->bssid, wpa_s->bssid, ETH_ALEN) != 0) 394 continue; 395 if (ssid == NULL || 396 ((bss->ssid_len == ssid->ssid_len && 397 os_memcmp(bss->ssid, ssid->ssid, ssid->ssid_len) == 0) || 398 ssid->ssid_len == 0)) { 399 curr = bss; 400 break; 401 } 402 #ifdef CONFIG_OWE 403 if (ssid && (ssid->key_mgmt & WPA_KEY_MGMT_OWE) && 404 (bss->flags & WPA_BSS_OWE_TRANSITION)) { 405 curr = bss; 406 break; 407 } 408 #endif /* CONFIG_OWE */ 409 } 410 411 if (curr) { 412 ie = wpa_bss_get_vendor_ie(curr, WPA_IE_VENDOR_TYPE); 413 if (wpa_sm_set_ap_wpa_ie(wpa_s->wpa, ie, ie ? 2 + ie[1] : 0)) 414 ret = -1; 415 416 ie = wpa_bss_get_ie(curr, WLAN_EID_RSN); 417 if (wpa_sm_set_ap_rsn_ie(wpa_s->wpa, ie, ie ? 2 + ie[1] : 0)) 418 ret = -1; 419 420 ie = wpa_bss_get_ie(curr, WLAN_EID_RSNX); 421 if (wpa_sm_set_ap_rsnxe(wpa_s->wpa, ie, ie ? 2 + ie[1] : 0)) 422 ret = -1; 423 } else { 424 ret = -1; 425 } 426 427 return ret; 428 } 429 430 431 static int wpa_supplicant_get_beacon_ie(void *ctx) 432 { 433 struct wpa_supplicant *wpa_s = ctx; 434 if (wpa_get_beacon_ie(wpa_s) == 0) { 435 return 0; 436 } 437 438 /* No WPA/RSN IE found in the cached scan results. Try to get updated 439 * scan results from the driver. */ 440 if (wpa_supplicant_update_scan_results(wpa_s) < 0) 441 return -1; 442 443 return wpa_get_beacon_ie(wpa_s); 444 } 445 446 447 static u8 * _wpa_alloc_eapol(void *wpa_s, u8 type, 448 const void *data, u16 data_len, 449 size_t *msg_len, void **data_pos) 450 { 451 return wpa_alloc_eapol(wpa_s, type, data, data_len, msg_len, data_pos); 452 } 453 454 455 static int _wpa_ether_send(void *wpa_s, const u8 *dest, u16 proto, 456 const u8 *buf, size_t len) 457 { 458 return wpa_ether_send(wpa_s, dest, proto, buf, len); 459 } 460 461 462 static void _wpa_supplicant_cancel_auth_timeout(void *wpa_s) 463 { 464 wpa_supplicant_cancel_auth_timeout(wpa_s); 465 } 466 467 468 static void _wpa_supplicant_set_state(void *wpa_s, enum wpa_states state) 469 { 470 wpa_supplicant_set_state(wpa_s, state); 471 } 472 473 474 /** 475 * wpa_supplicant_get_state - Get the connection state 476 * @wpa_s: Pointer to wpa_supplicant data 477 * Returns: The current connection state (WPA_*) 478 */ 479 static enum wpa_states wpa_supplicant_get_state(struct wpa_supplicant *wpa_s) 480 { 481 return wpa_s->wpa_state; 482 } 483 484 485 static enum wpa_states _wpa_supplicant_get_state(void *wpa_s) 486 { 487 return wpa_supplicant_get_state(wpa_s); 488 } 489 490 491 static void _wpa_supplicant_deauthenticate(void *wpa_s, u16 reason_code) 492 { 493 wpa_supplicant_deauthenticate(wpa_s, reason_code); 494 /* Schedule a scan to make sure we continue looking for networks */ 495 wpa_supplicant_req_scan(wpa_s, 5, 0); 496 } 497 498 499 static void _wpa_supplicant_reconnect(void *wpa_s) 500 { 501 wpa_supplicant_reconnect(wpa_s); 502 } 503 504 505 static void * wpa_supplicant_get_network_ctx(void *wpa_s) 506 { 507 return wpa_supplicant_get_ssid(wpa_s); 508 } 509 510 511 static int wpa_supplicant_get_bssid(void *ctx, u8 *bssid) 512 { 513 struct wpa_supplicant *wpa_s = ctx; 514 return wpa_drv_get_bssid(wpa_s, bssid); 515 } 516 517 518 static int wpa_supplicant_set_key(void *_wpa_s, enum wpa_alg alg, 519 const u8 *addr, int key_idx, int set_tx, 520 const u8 *seq, size_t seq_len, 521 const u8 *key, size_t key_len, 522 enum key_flag key_flag) 523 { 524 struct wpa_supplicant *wpa_s = _wpa_s; 525 if (alg == WPA_ALG_TKIP && key_idx == 0 && key_len == 32) { 526 /* Clear the MIC error counter when setting a new PTK. */ 527 wpa_s->mic_errors_seen = 0; 528 } 529 #ifdef CONFIG_TESTING_GET_GTK 530 if (key_idx > 0 && addr && is_broadcast_ether_addr(addr) && 531 alg != WPA_ALG_NONE && key_len <= sizeof(wpa_s->last_gtk)) { 532 os_memcpy(wpa_s->last_gtk, key, key_len); 533 wpa_s->last_gtk_len = key_len; 534 } 535 #endif /* CONFIG_TESTING_GET_GTK */ 536 #ifdef CONFIG_TESTING_OPTIONS 537 if (addr && !is_broadcast_ether_addr(addr) && 538 !(key_flag & KEY_FLAG_MODIFY)) { 539 wpa_s->last_tk_alg = alg; 540 os_memcpy(wpa_s->last_tk_addr, addr, ETH_ALEN); 541 wpa_s->last_tk_key_idx = key_idx; 542 if (key) 543 os_memcpy(wpa_s->last_tk, key, key_len); 544 wpa_s->last_tk_len = key_len; 545 } 546 #endif /* CONFIG_TESTING_OPTIONS */ 547 return wpa_drv_set_key(wpa_s, alg, addr, key_idx, set_tx, seq, seq_len, 548 key, key_len, key_flag); 549 } 550 551 552 static int wpa_supplicant_mlme_setprotection(void *wpa_s, const u8 *addr, 553 int protection_type, 554 int key_type) 555 { 556 return wpa_drv_mlme_setprotection(wpa_s, addr, protection_type, 557 key_type); 558 } 559 560 561 static struct wpa_ssid * wpas_get_network_ctx(struct wpa_supplicant *wpa_s, 562 void *network_ctx) 563 { 564 struct wpa_ssid *ssid; 565 566 for (ssid = wpa_s->conf->ssid; ssid; ssid = ssid->next) { 567 if (network_ctx == ssid) 568 return ssid; 569 } 570 571 return NULL; 572 } 573 574 575 static int wpa_supplicant_add_pmkid(void *_wpa_s, void *network_ctx, 576 const u8 *bssid, const u8 *pmkid, 577 const u8 *fils_cache_id, 578 const u8 *pmk, size_t pmk_len, 579 u32 pmk_lifetime, u8 pmk_reauth_threshold, 580 int akmp) 581 { 582 struct wpa_supplicant *wpa_s = _wpa_s; 583 struct wpa_ssid *ssid; 584 struct wpa_pmkid_params params; 585 586 os_memset(¶ms, 0, sizeof(params)); 587 ssid = wpas_get_network_ctx(wpa_s, network_ctx); 588 if (ssid) { 589 wpa_msg(wpa_s, MSG_INFO, PMKSA_CACHE_ADDED MACSTR " %d", 590 MAC2STR(bssid), ssid->id); 591 if ((akmp == WPA_KEY_MGMT_FT_IEEE8021X || 592 akmp == WPA_KEY_MGMT_FT_IEEE8021X_SHA384) && 593 !ssid->ft_eap_pmksa_caching) { 594 /* Since we will not be using PMKSA caching for FT-EAP 595 * within wpa_supplicant to avoid known interop issues 596 * with APs, do not add this PMKID to the driver either 597 * so that we won't be hitting those interop issues 598 * with driver-based RSNE generation. */ 599 wpa_printf(MSG_DEBUG, 600 "FT: Do not add PMKID entry to the driver since FT-EAP PMKSA caching is not enabled in configuration"); 601 return 0; 602 } 603 } 604 if (ssid && fils_cache_id) { 605 params.ssid = ssid->ssid; 606 params.ssid_len = ssid->ssid_len; 607 params.fils_cache_id = fils_cache_id; 608 } else { 609 params.bssid = bssid; 610 } 611 612 params.pmkid = pmkid; 613 params.pmk = pmk; 614 params.pmk_len = pmk_len; 615 params.pmk_lifetime = pmk_lifetime; 616 params.pmk_reauth_threshold = pmk_reauth_threshold; 617 618 return wpa_drv_add_pmkid(wpa_s, ¶ms); 619 } 620 621 622 static int wpa_supplicant_remove_pmkid(void *_wpa_s, void *network_ctx, 623 const u8 *bssid, const u8 *pmkid, 624 const u8 *fils_cache_id) 625 { 626 struct wpa_supplicant *wpa_s = _wpa_s; 627 struct wpa_ssid *ssid; 628 struct wpa_pmkid_params params; 629 630 os_memset(¶ms, 0, sizeof(params)); 631 ssid = wpas_get_network_ctx(wpa_s, network_ctx); 632 if (ssid) 633 wpa_msg(wpa_s, MSG_INFO, PMKSA_CACHE_REMOVED MACSTR " %d", 634 MAC2STR(bssid), ssid->id); 635 if (ssid && fils_cache_id) { 636 params.ssid = ssid->ssid; 637 params.ssid_len = ssid->ssid_len; 638 params.fils_cache_id = fils_cache_id; 639 } else { 640 params.bssid = bssid; 641 } 642 643 params.pmkid = pmkid; 644 645 return wpa_drv_remove_pmkid(wpa_s, ¶ms); 646 } 647 648 649 #ifdef CONFIG_IEEE80211R 650 static int wpa_supplicant_update_ft_ies(void *ctx, const u8 *md, 651 const u8 *ies, size_t ies_len) 652 { 653 struct wpa_supplicant *wpa_s = ctx; 654 if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_SME) 655 return sme_update_ft_ies(wpa_s, md, ies, ies_len); 656 return wpa_drv_update_ft_ies(wpa_s, md, ies, ies_len); 657 } 658 659 660 static int wpa_supplicant_send_ft_action(void *ctx, u8 action, 661 const u8 *target_ap, 662 const u8 *ies, size_t ies_len) 663 { 664 struct wpa_supplicant *wpa_s = ctx; 665 int ret; 666 u8 *data, *pos; 667 size_t data_len; 668 669 if (action != 1) { 670 wpa_printf(MSG_ERROR, "Unsupported send_ft_action action %d", 671 action); 672 return -1; 673 } 674 675 /* 676 * Action frame payload: 677 * Category[1] = 6 (Fast BSS Transition) 678 * Action[1] = 1 (Fast BSS Transition Request) 679 * STA Address 680 * Target AP Address 681 * FT IEs 682 */ 683 684 data_len = 2 + 2 * ETH_ALEN + ies_len; 685 data = os_malloc(data_len); 686 if (data == NULL) 687 return -1; 688 pos = data; 689 *pos++ = 0x06; /* FT Action category */ 690 *pos++ = action; 691 os_memcpy(pos, wpa_s->own_addr, ETH_ALEN); 692 pos += ETH_ALEN; 693 os_memcpy(pos, target_ap, ETH_ALEN); 694 pos += ETH_ALEN; 695 os_memcpy(pos, ies, ies_len); 696 697 ret = wpa_drv_send_action(wpa_s, wpa_s->assoc_freq, 0, 698 wpa_s->bssid, wpa_s->own_addr, wpa_s->bssid, 699 data, data_len, 0); 700 os_free(data); 701 702 return ret; 703 } 704 705 706 static int wpa_supplicant_mark_authenticated(void *ctx, const u8 *target_ap) 707 { 708 struct wpa_supplicant *wpa_s = ctx; 709 struct wpa_driver_auth_params params; 710 struct wpa_bss *bss; 711 712 bss = wpa_bss_get_bssid(wpa_s, target_ap); 713 if (bss == NULL) 714 return -1; 715 716 os_memset(¶ms, 0, sizeof(params)); 717 params.bssid = target_ap; 718 params.freq = bss->freq; 719 params.ssid = bss->ssid; 720 params.ssid_len = bss->ssid_len; 721 params.auth_alg = WPA_AUTH_ALG_FT; 722 params.local_state_change = 1; 723 return wpa_drv_authenticate(wpa_s, ¶ms); 724 } 725 #endif /* CONFIG_IEEE80211R */ 726 727 728 #ifdef CONFIG_TDLS 729 730 static int wpa_supplicant_tdls_get_capa(void *ctx, int *tdls_supported, 731 int *tdls_ext_setup, 732 int *tdls_chan_switch) 733 { 734 struct wpa_supplicant *wpa_s = ctx; 735 736 *tdls_supported = 0; 737 *tdls_ext_setup = 0; 738 *tdls_chan_switch = 0; 739 740 if (!wpa_s->drv_capa_known) 741 return -1; 742 743 if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_TDLS_SUPPORT) 744 *tdls_supported = 1; 745 746 if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_TDLS_EXTERNAL_SETUP) 747 *tdls_ext_setup = 1; 748 749 if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_TDLS_CHANNEL_SWITCH) 750 *tdls_chan_switch = 1; 751 752 return 0; 753 } 754 755 756 static int wpa_supplicant_send_tdls_mgmt(void *ctx, const u8 *dst, 757 u8 action_code, u8 dialog_token, 758 u16 status_code, u32 peer_capab, 759 int initiator, const u8 *buf, 760 size_t len) 761 { 762 struct wpa_supplicant *wpa_s = ctx; 763 return wpa_drv_send_tdls_mgmt(wpa_s, dst, action_code, dialog_token, 764 status_code, peer_capab, initiator, buf, 765 len); 766 } 767 768 769 static int wpa_supplicant_tdls_oper(void *ctx, int oper, const u8 *peer) 770 { 771 struct wpa_supplicant *wpa_s = ctx; 772 return wpa_drv_tdls_oper(wpa_s, oper, peer); 773 } 774 775 776 static int wpa_supplicant_tdls_peer_addset( 777 void *ctx, const u8 *peer, int add, u16 aid, u16 capability, 778 const u8 *supp_rates, size_t supp_rates_len, 779 const struct ieee80211_ht_capabilities *ht_capab, 780 const struct ieee80211_vht_capabilities *vht_capab, 781 const struct ieee80211_he_capabilities *he_capab, 782 size_t he_capab_len, 783 u8 qosinfo, int wmm, const u8 *ext_capab, size_t ext_capab_len, 784 const u8 *supp_channels, size_t supp_channels_len, 785 const u8 *supp_oper_classes, size_t supp_oper_classes_len) 786 { 787 struct wpa_supplicant *wpa_s = ctx; 788 struct hostapd_sta_add_params params; 789 790 os_memset(¶ms, 0, sizeof(params)); 791 792 params.addr = peer; 793 params.aid = aid; 794 params.capability = capability; 795 params.flags = WPA_STA_TDLS_PEER | WPA_STA_AUTHORIZED; 796 797 /* 798 * Don't rely only on qosinfo for WMM capability. It may be 0 even when 799 * present. Allow the WMM IE to also indicate QoS support. 800 */ 801 if (wmm || qosinfo) 802 params.flags |= WPA_STA_WMM; 803 804 params.ht_capabilities = ht_capab; 805 params.vht_capabilities = vht_capab; 806 params.he_capab = he_capab; 807 params.he_capab_len = he_capab_len; 808 params.qosinfo = qosinfo; 809 params.listen_interval = 0; 810 params.supp_rates = supp_rates; 811 params.supp_rates_len = supp_rates_len; 812 params.set = !add; 813 params.ext_capab = ext_capab; 814 params.ext_capab_len = ext_capab_len; 815 params.supp_channels = supp_channels; 816 params.supp_channels_len = supp_channels_len; 817 params.supp_oper_classes = supp_oper_classes; 818 params.supp_oper_classes_len = supp_oper_classes_len; 819 820 return wpa_drv_sta_add(wpa_s, ¶ms); 821 } 822 823 824 static int wpa_supplicant_tdls_enable_channel_switch( 825 void *ctx, const u8 *addr, u8 oper_class, 826 const struct hostapd_freq_params *params) 827 { 828 struct wpa_supplicant *wpa_s = ctx; 829 830 return wpa_drv_tdls_enable_channel_switch(wpa_s, addr, oper_class, 831 params); 832 } 833 834 835 static int wpa_supplicant_tdls_disable_channel_switch(void *ctx, const u8 *addr) 836 { 837 struct wpa_supplicant *wpa_s = ctx; 838 839 return wpa_drv_tdls_disable_channel_switch(wpa_s, addr); 840 } 841 842 #endif /* CONFIG_TDLS */ 843 844 #endif /* CONFIG_NO_WPA */ 845 846 847 enum wpa_ctrl_req_type wpa_supplicant_ctrl_req_from_string(const char *field) 848 { 849 if (os_strcmp(field, "IDENTITY") == 0) 850 return WPA_CTRL_REQ_EAP_IDENTITY; 851 else if (os_strcmp(field, "PASSWORD") == 0) 852 return WPA_CTRL_REQ_EAP_PASSWORD; 853 else if (os_strcmp(field, "NEW_PASSWORD") == 0) 854 return WPA_CTRL_REQ_EAP_NEW_PASSWORD; 855 else if (os_strcmp(field, "PIN") == 0) 856 return WPA_CTRL_REQ_EAP_PIN; 857 else if (os_strcmp(field, "OTP") == 0) 858 return WPA_CTRL_REQ_EAP_OTP; 859 else if (os_strcmp(field, "PASSPHRASE") == 0) 860 return WPA_CTRL_REQ_EAP_PASSPHRASE; 861 else if (os_strcmp(field, "SIM") == 0) 862 return WPA_CTRL_REQ_SIM; 863 else if (os_strcmp(field, "PSK_PASSPHRASE") == 0) 864 return WPA_CTRL_REQ_PSK_PASSPHRASE; 865 else if (os_strcmp(field, "EXT_CERT_CHECK") == 0) 866 return WPA_CTRL_REQ_EXT_CERT_CHECK; 867 return WPA_CTRL_REQ_UNKNOWN; 868 } 869 870 871 const char * wpa_supplicant_ctrl_req_to_string(enum wpa_ctrl_req_type field, 872 const char *default_txt, 873 const char **txt) 874 { 875 const char *ret = NULL; 876 877 *txt = default_txt; 878 879 switch (field) { 880 case WPA_CTRL_REQ_EAP_IDENTITY: 881 *txt = "Identity"; 882 ret = "IDENTITY"; 883 break; 884 case WPA_CTRL_REQ_EAP_PASSWORD: 885 *txt = "Password"; 886 ret = "PASSWORD"; 887 break; 888 case WPA_CTRL_REQ_EAP_NEW_PASSWORD: 889 *txt = "New Password"; 890 ret = "NEW_PASSWORD"; 891 break; 892 case WPA_CTRL_REQ_EAP_PIN: 893 *txt = "PIN"; 894 ret = "PIN"; 895 break; 896 case WPA_CTRL_REQ_EAP_OTP: 897 ret = "OTP"; 898 break; 899 case WPA_CTRL_REQ_EAP_PASSPHRASE: 900 *txt = "Private key passphrase"; 901 ret = "PASSPHRASE"; 902 break; 903 case WPA_CTRL_REQ_SIM: 904 ret = "SIM"; 905 break; 906 case WPA_CTRL_REQ_PSK_PASSPHRASE: 907 *txt = "PSK or passphrase"; 908 ret = "PSK_PASSPHRASE"; 909 break; 910 case WPA_CTRL_REQ_EXT_CERT_CHECK: 911 *txt = "External server certificate validation"; 912 ret = "EXT_CERT_CHECK"; 913 break; 914 default: 915 break; 916 } 917 918 /* txt needs to be something */ 919 if (*txt == NULL) { 920 wpa_printf(MSG_WARNING, "No message for request %d", field); 921 ret = NULL; 922 } 923 924 return ret; 925 } 926 927 928 void wpas_send_ctrl_req(struct wpa_supplicant *wpa_s, struct wpa_ssid *ssid, 929 const char *field_name, const char *txt) 930 { 931 char *buf; 932 size_t buflen; 933 int len; 934 935 buflen = 100 + os_strlen(txt) + ssid->ssid_len; 936 buf = os_malloc(buflen); 937 if (buf == NULL) 938 return; 939 len = os_snprintf(buf, buflen, "%s-%d:%s needed for SSID ", 940 field_name, ssid->id, txt); 941 if (os_snprintf_error(buflen, len)) { 942 os_free(buf); 943 return; 944 } 945 if (ssid->ssid && buflen > len + ssid->ssid_len) { 946 os_memcpy(buf + len, ssid->ssid, ssid->ssid_len); 947 len += ssid->ssid_len; 948 buf[len] = '\0'; 949 } 950 buf[buflen - 1] = '\0'; 951 wpa_msg(wpa_s, MSG_INFO, WPA_CTRL_REQ "%s", buf); 952 os_free(buf); 953 } 954 955 956 #ifdef IEEE8021X_EAPOL 957 #if defined(CONFIG_CTRL_IFACE) || !defined(CONFIG_NO_STDOUT_DEBUG) 958 static void wpa_supplicant_eap_param_needed(void *ctx, 959 enum wpa_ctrl_req_type field, 960 const char *default_txt) 961 { 962 struct wpa_supplicant *wpa_s = ctx; 963 struct wpa_ssid *ssid = wpa_s->current_ssid; 964 const char *field_name, *txt = NULL; 965 966 if (ssid == NULL) 967 return; 968 969 if (field == WPA_CTRL_REQ_EXT_CERT_CHECK) 970 ssid->eap.pending_ext_cert_check = PENDING_CHECK; 971 wpas_notify_network_request(wpa_s, ssid, field, default_txt); 972 973 field_name = wpa_supplicant_ctrl_req_to_string(field, default_txt, 974 &txt); 975 if (field_name == NULL) { 976 wpa_printf(MSG_WARNING, "Unhandled EAP param %d needed", 977 field); 978 return; 979 } 980 981 wpas_notify_eap_status(wpa_s, "eap parameter needed", field_name); 982 983 wpas_send_ctrl_req(wpa_s, ssid, field_name, txt); 984 } 985 #else /* CONFIG_CTRL_IFACE || !CONFIG_NO_STDOUT_DEBUG */ 986 #define wpa_supplicant_eap_param_needed NULL 987 #endif /* CONFIG_CTRL_IFACE || !CONFIG_NO_STDOUT_DEBUG */ 988 989 990 #ifdef CONFIG_EAP_PROXY 991 992 static void wpa_supplicant_eap_proxy_cb(void *ctx) 993 { 994 struct wpa_supplicant *wpa_s = ctx; 995 size_t len; 996 997 wpa_s->mnc_len = eapol_sm_get_eap_proxy_imsi(wpa_s->eapol, -1, 998 wpa_s->imsi, &len); 999 if (wpa_s->mnc_len > 0) { 1000 wpa_s->imsi[len] = '\0'; 1001 wpa_printf(MSG_DEBUG, "eap_proxy: IMSI %s (MNC length %d)", 1002 wpa_s->imsi, wpa_s->mnc_len); 1003 } else { 1004 wpa_printf(MSG_DEBUG, "eap_proxy: IMSI not available"); 1005 } 1006 } 1007 1008 1009 static void wpa_sm_sim_state_error_handler(struct wpa_supplicant *wpa_s) 1010 { 1011 int i; 1012 struct wpa_ssid *ssid; 1013 const struct eap_method_type *eap_methods; 1014 1015 if (!wpa_s->conf) 1016 return; 1017 1018 for (ssid = wpa_s->conf->ssid; ssid; ssid = ssid->next) { 1019 eap_methods = ssid->eap.eap_methods; 1020 if (!eap_methods) 1021 continue; 1022 1023 for (i = 0; eap_methods[i].method != EAP_TYPE_NONE; i++) { 1024 if (eap_methods[i].vendor == EAP_VENDOR_IETF && 1025 (eap_methods[i].method == EAP_TYPE_SIM || 1026 eap_methods[i].method == EAP_TYPE_AKA || 1027 eap_methods[i].method == EAP_TYPE_AKA_PRIME)) { 1028 wpa_sm_pmksa_cache_flush(wpa_s->wpa, ssid); 1029 break; 1030 } 1031 } 1032 } 1033 } 1034 1035 1036 static void 1037 wpa_supplicant_eap_proxy_notify_sim_status(void *ctx, 1038 enum eap_proxy_sim_state sim_state) 1039 { 1040 struct wpa_supplicant *wpa_s = ctx; 1041 1042 wpa_printf(MSG_DEBUG, "eap_proxy: SIM card status %u", sim_state); 1043 switch (sim_state) { 1044 case SIM_STATE_ERROR: 1045 wpa_sm_sim_state_error_handler(wpa_s); 1046 break; 1047 default: 1048 wpa_printf(MSG_DEBUG, "eap_proxy: SIM card status unknown"); 1049 break; 1050 } 1051 } 1052 1053 #endif /* CONFIG_EAP_PROXY */ 1054 1055 1056 static void wpa_supplicant_port_cb(void *ctx, int authorized) 1057 { 1058 struct wpa_supplicant *wpa_s = ctx; 1059 #ifdef CONFIG_AP 1060 if (wpa_s->ap_iface) { 1061 wpa_printf(MSG_DEBUG, "AP mode active - skip EAPOL Supplicant " 1062 "port status: %s", 1063 authorized ? "Authorized" : "Unauthorized"); 1064 return; 1065 } 1066 #endif /* CONFIG_AP */ 1067 wpa_printf(MSG_DEBUG, "EAPOL: Supplicant port status: %s", 1068 authorized ? "Authorized" : "Unauthorized"); 1069 wpa_drv_set_supp_port(wpa_s, authorized); 1070 } 1071 1072 1073 static void wpa_supplicant_cert_cb(void *ctx, struct tls_cert_data *cert, 1074 const char *cert_hash) 1075 { 1076 struct wpa_supplicant *wpa_s = ctx; 1077 1078 wpas_notify_certification(wpa_s, cert, cert_hash); 1079 } 1080 1081 1082 static void wpa_supplicant_status_cb(void *ctx, const char *status, 1083 const char *parameter) 1084 { 1085 struct wpa_supplicant *wpa_s = ctx; 1086 1087 wpas_notify_eap_status(wpa_s, status, parameter); 1088 } 1089 1090 1091 static void wpa_supplicant_eap_error_cb(void *ctx, int error_code) 1092 { 1093 struct wpa_supplicant *wpa_s = ctx; 1094 1095 wpas_notify_eap_error(wpa_s, error_code); 1096 } 1097 1098 1099 static int wpa_supplicant_eap_auth_start_cb(void *ctx) 1100 { 1101 struct wpa_supplicant *wpa_s = ctx; 1102 1103 if (!wpa_s->new_connection && wpa_s->deny_ptk0_rekey && 1104 !wpa_sm_ext_key_id_active(wpa_s->wpa)) { 1105 wpa_msg(wpa_s, MSG_INFO, 1106 "WPA: PTK0 rekey not allowed, reconnecting"); 1107 wpa_supplicant_reconnect(wpa_s); 1108 return -1; 1109 } 1110 return 0; 1111 } 1112 1113 1114 static void wpa_supplicant_set_anon_id(void *ctx, const u8 *id, size_t len) 1115 { 1116 struct wpa_supplicant *wpa_s = ctx; 1117 char *str; 1118 int res; 1119 1120 wpa_hexdump_ascii(MSG_DEBUG, "EAP method updated anonymous_identity", 1121 id, len); 1122 1123 if (wpa_s->current_ssid == NULL) 1124 return; 1125 1126 if (id == NULL) { 1127 if (wpa_config_set(wpa_s->current_ssid, "anonymous_identity", 1128 "NULL", 0) < 0) 1129 return; 1130 } else { 1131 str = os_malloc(len * 2 + 1); 1132 if (str == NULL) 1133 return; 1134 wpa_snprintf_hex(str, len * 2 + 1, id, len); 1135 res = wpa_config_set(wpa_s->current_ssid, "anonymous_identity", 1136 str, 0); 1137 os_free(str); 1138 if (res < 0) 1139 return; 1140 } 1141 1142 if (wpa_s->conf->update_config) { 1143 res = wpa_config_write(wpa_s->confname, wpa_s->conf); 1144 if (res) { 1145 wpa_printf(MSG_DEBUG, "Failed to update config after " 1146 "anonymous_id update"); 1147 } 1148 } 1149 } 1150 #endif /* IEEE8021X_EAPOL */ 1151 1152 1153 int wpa_supplicant_init_eapol(struct wpa_supplicant *wpa_s) 1154 { 1155 #ifdef IEEE8021X_EAPOL 1156 struct eapol_ctx *ctx; 1157 ctx = os_zalloc(sizeof(*ctx)); 1158 if (ctx == NULL) { 1159 wpa_printf(MSG_ERROR, "Failed to allocate EAPOL context."); 1160 return -1; 1161 } 1162 1163 ctx->ctx = wpa_s; 1164 ctx->msg_ctx = wpa_s; 1165 ctx->eapol_send_ctx = wpa_s; 1166 ctx->preauth = 0; 1167 ctx->eapol_done_cb = wpa_supplicant_notify_eapol_done; 1168 ctx->eapol_send = wpa_supplicant_eapol_send; 1169 #ifdef CONFIG_WEP 1170 ctx->set_wep_key = wpa_eapol_set_wep_key; 1171 #endif /* CONFIG_WEP */ 1172 #ifndef CONFIG_NO_CONFIG_BLOBS 1173 ctx->set_config_blob = wpa_supplicant_set_config_blob; 1174 ctx->get_config_blob = wpa_supplicant_get_config_blob; 1175 #endif /* CONFIG_NO_CONFIG_BLOBS */ 1176 ctx->aborted_cached = wpa_supplicant_aborted_cached; 1177 ctx->opensc_engine_path = wpa_s->conf->opensc_engine_path; 1178 ctx->pkcs11_engine_path = wpa_s->conf->pkcs11_engine_path; 1179 ctx->pkcs11_module_path = wpa_s->conf->pkcs11_module_path; 1180 ctx->openssl_ciphers = wpa_s->conf->openssl_ciphers; 1181 ctx->wps = wpa_s->wps; 1182 ctx->eap_param_needed = wpa_supplicant_eap_param_needed; 1183 #ifdef CONFIG_EAP_PROXY 1184 ctx->eap_proxy_cb = wpa_supplicant_eap_proxy_cb; 1185 ctx->eap_proxy_notify_sim_status = 1186 wpa_supplicant_eap_proxy_notify_sim_status; 1187 #endif /* CONFIG_EAP_PROXY */ 1188 ctx->port_cb = wpa_supplicant_port_cb; 1189 ctx->cb = wpa_supplicant_eapol_cb; 1190 ctx->cert_cb = wpa_supplicant_cert_cb; 1191 ctx->cert_in_cb = wpa_s->conf->cert_in_cb; 1192 ctx->status_cb = wpa_supplicant_status_cb; 1193 ctx->eap_error_cb = wpa_supplicant_eap_error_cb; 1194 ctx->confirm_auth_cb = wpa_supplicant_eap_auth_start_cb; 1195 ctx->set_anon_id = wpa_supplicant_set_anon_id; 1196 ctx->cb_ctx = wpa_s; 1197 wpa_s->eapol = eapol_sm_init(ctx); 1198 if (wpa_s->eapol == NULL) { 1199 os_free(ctx); 1200 wpa_printf(MSG_ERROR, "Failed to initialize EAPOL state " 1201 "machines."); 1202 return -1; 1203 } 1204 #endif /* IEEE8021X_EAPOL */ 1205 1206 return 0; 1207 } 1208 1209 1210 #ifndef CONFIG_NO_WPA 1211 1212 static void wpa_supplicant_set_rekey_offload(void *ctx, 1213 const u8 *kek, size_t kek_len, 1214 const u8 *kck, size_t kck_len, 1215 const u8 *replay_ctr) 1216 { 1217 struct wpa_supplicant *wpa_s = ctx; 1218 1219 wpa_drv_set_rekey_info(wpa_s, kek, kek_len, kck, kck_len, replay_ctr); 1220 } 1221 1222 1223 static int wpa_supplicant_key_mgmt_set_pmk(void *ctx, const u8 *pmk, 1224 size_t pmk_len) 1225 { 1226 struct wpa_supplicant *wpa_s = ctx; 1227 1228 if (wpa_s->conf->key_mgmt_offload && 1229 (wpa_s->drv_flags & WPA_DRIVER_FLAGS_KEY_MGMT_OFFLOAD)) 1230 return wpa_drv_set_key(wpa_s, 0, NULL, 0, 0, 1231 NULL, 0, pmk, pmk_len, KEY_FLAG_PMK); 1232 else 1233 return 0; 1234 } 1235 1236 1237 static void wpa_supplicant_fils_hlp_rx(void *ctx, const u8 *dst, const u8 *src, 1238 const u8 *pkt, size_t pkt_len) 1239 { 1240 struct wpa_supplicant *wpa_s = ctx; 1241 char *hex; 1242 size_t hexlen; 1243 1244 hexlen = pkt_len * 2 + 1; 1245 hex = os_malloc(hexlen); 1246 if (!hex) 1247 return; 1248 wpa_snprintf_hex(hex, hexlen, pkt, pkt_len); 1249 wpa_msg(wpa_s, MSG_INFO, FILS_HLP_RX "dst=" MACSTR " src=" MACSTR 1250 " frame=%s", MAC2STR(dst), MAC2STR(src), hex); 1251 os_free(hex); 1252 } 1253 1254 1255 static int wpa_supplicant_channel_info(void *_wpa_s, 1256 struct wpa_channel_info *ci) 1257 { 1258 struct wpa_supplicant *wpa_s = _wpa_s; 1259 1260 return wpa_drv_channel_info(wpa_s, ci); 1261 } 1262 1263 1264 static void disable_wpa_wpa2(struct wpa_ssid *ssid) 1265 { 1266 ssid->proto &= ~WPA_PROTO_WPA; 1267 ssid->proto |= WPA_PROTO_RSN; 1268 ssid->key_mgmt &= ~(WPA_KEY_MGMT_PSK | WPA_KEY_MGMT_FT_PSK | 1269 WPA_KEY_MGMT_PSK_SHA256); 1270 ssid->group_cipher &= ~WPA_CIPHER_TKIP; 1271 if (!(ssid->group_cipher & (WPA_CIPHER_CCMP | WPA_CIPHER_GCMP | 1272 WPA_CIPHER_GCMP_256 | WPA_CIPHER_CCMP_256))) 1273 ssid->group_cipher |= WPA_CIPHER_CCMP; 1274 ssid->ieee80211w = MGMT_FRAME_PROTECTION_REQUIRED; 1275 } 1276 1277 1278 static void wpa_supplicant_transition_disable(void *_wpa_s, u8 bitmap) 1279 { 1280 struct wpa_supplicant *wpa_s = _wpa_s; 1281 struct wpa_ssid *ssid; 1282 int changed = 0; 1283 1284 wpa_msg(wpa_s, MSG_INFO, TRANSITION_DISABLE "%02x", bitmap); 1285 1286 ssid = wpa_s->current_ssid; 1287 if (!ssid) 1288 return; 1289 1290 #ifdef CONFIG_SAE 1291 if ((bitmap & TRANSITION_DISABLE_WPA3_PERSONAL) && 1292 wpa_key_mgmt_sae(wpa_s->key_mgmt) && 1293 (ssid->key_mgmt & (WPA_KEY_MGMT_SAE | WPA_KEY_MGMT_FT_SAE)) && 1294 (ssid->ieee80211w != MGMT_FRAME_PROTECTION_REQUIRED || 1295 (ssid->group_cipher & WPA_CIPHER_TKIP))) { 1296 wpa_printf(MSG_DEBUG, 1297 "WPA3-Personal transition mode disabled based on AP notification"); 1298 disable_wpa_wpa2(ssid); 1299 changed = 1; 1300 } 1301 1302 if ((bitmap & TRANSITION_DISABLE_SAE_PK) && 1303 wpa_key_mgmt_sae(wpa_s->key_mgmt) && 1304 #ifdef CONFIG_SME 1305 wpa_s->sme.sae.state == SAE_ACCEPTED && 1306 wpa_s->sme.sae.pk && 1307 #endif /* CONFIG_SME */ 1308 (ssid->key_mgmt & (WPA_KEY_MGMT_SAE | WPA_KEY_MGMT_FT_SAE)) && 1309 (ssid->sae_pk != SAE_PK_MODE_ONLY || 1310 ssid->ieee80211w != MGMT_FRAME_PROTECTION_REQUIRED || 1311 (ssid->group_cipher & WPA_CIPHER_TKIP))) { 1312 wpa_printf(MSG_DEBUG, 1313 "SAE-PK: SAE authentication without PK disabled based on AP notification"); 1314 disable_wpa_wpa2(ssid); 1315 ssid->sae_pk = SAE_PK_MODE_ONLY; 1316 changed = 1; 1317 } 1318 #endif /* CONFIG_SAE */ 1319 1320 if ((bitmap & TRANSITION_DISABLE_WPA3_ENTERPRISE) && 1321 wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt) && 1322 (ssid->key_mgmt & (WPA_KEY_MGMT_IEEE8021X | 1323 WPA_KEY_MGMT_FT_IEEE8021X | 1324 WPA_KEY_MGMT_IEEE8021X_SHA256)) && 1325 (ssid->ieee80211w != MGMT_FRAME_PROTECTION_REQUIRED || 1326 (ssid->group_cipher & WPA_CIPHER_TKIP))) { 1327 disable_wpa_wpa2(ssid); 1328 changed = 1; 1329 } 1330 1331 if ((bitmap & TRANSITION_DISABLE_ENHANCED_OPEN) && 1332 wpa_s->key_mgmt == WPA_KEY_MGMT_OWE && 1333 (ssid->key_mgmt & WPA_KEY_MGMT_OWE) && 1334 !ssid->owe_only) { 1335 ssid->owe_only = 1; 1336 changed = 1; 1337 } 1338 1339 if (!changed) 1340 return; 1341 1342 #ifndef CONFIG_NO_CONFIG_WRITE 1343 if (wpa_s->conf->update_config && 1344 wpa_config_write(wpa_s->confname, wpa_s->conf)) 1345 wpa_printf(MSG_DEBUG, "Failed to update configuration"); 1346 #endif /* CONFIG_NO_CONFIG_WRITE */ 1347 } 1348 1349 1350 static void wpa_supplicant_store_ptk(void *ctx, u8 *addr, int cipher, 1351 u32 life_time, const struct wpa_ptk *ptk) 1352 { 1353 struct wpa_supplicant *wpa_s = ctx; 1354 1355 ptksa_cache_add(wpa_s->ptksa, addr, cipher, life_time, ptk); 1356 } 1357 1358 #endif /* CONFIG_NO_WPA */ 1359 1360 1361 int wpa_supplicant_init_wpa(struct wpa_supplicant *wpa_s) 1362 { 1363 #ifndef CONFIG_NO_WPA 1364 struct wpa_sm_ctx *ctx; 1365 1366 wpa_s->ptksa = ptksa_cache_init(); 1367 if (!wpa_s->ptksa) { 1368 wpa_printf(MSG_ERROR, "Failed to allocate PTKSA"); 1369 return -1; 1370 } 1371 1372 ctx = os_zalloc(sizeof(*ctx)); 1373 if (ctx == NULL) { 1374 wpa_printf(MSG_ERROR, "Failed to allocate WPA context."); 1375 1376 ptksa_cache_deinit(wpa_s->ptksa); 1377 wpa_s->ptksa = NULL; 1378 1379 return -1; 1380 } 1381 1382 ctx->ctx = wpa_s; 1383 ctx->msg_ctx = wpa_s; 1384 ctx->set_state = _wpa_supplicant_set_state; 1385 ctx->get_state = _wpa_supplicant_get_state; 1386 ctx->deauthenticate = _wpa_supplicant_deauthenticate; 1387 ctx->reconnect = _wpa_supplicant_reconnect; 1388 ctx->set_key = wpa_supplicant_set_key; 1389 ctx->get_network_ctx = wpa_supplicant_get_network_ctx; 1390 ctx->get_bssid = wpa_supplicant_get_bssid; 1391 ctx->ether_send = _wpa_ether_send; 1392 ctx->get_beacon_ie = wpa_supplicant_get_beacon_ie; 1393 ctx->alloc_eapol = _wpa_alloc_eapol; 1394 ctx->cancel_auth_timeout = _wpa_supplicant_cancel_auth_timeout; 1395 ctx->add_pmkid = wpa_supplicant_add_pmkid; 1396 ctx->remove_pmkid = wpa_supplicant_remove_pmkid; 1397 #ifndef CONFIG_NO_CONFIG_BLOBS 1398 ctx->set_config_blob = wpa_supplicant_set_config_blob; 1399 ctx->get_config_blob = wpa_supplicant_get_config_blob; 1400 #endif /* CONFIG_NO_CONFIG_BLOBS */ 1401 ctx->mlme_setprotection = wpa_supplicant_mlme_setprotection; 1402 #ifdef CONFIG_IEEE80211R 1403 ctx->update_ft_ies = wpa_supplicant_update_ft_ies; 1404 ctx->send_ft_action = wpa_supplicant_send_ft_action; 1405 ctx->mark_authenticated = wpa_supplicant_mark_authenticated; 1406 #endif /* CONFIG_IEEE80211R */ 1407 #ifdef CONFIG_TDLS 1408 ctx->tdls_get_capa = wpa_supplicant_tdls_get_capa; 1409 ctx->send_tdls_mgmt = wpa_supplicant_send_tdls_mgmt; 1410 ctx->tdls_oper = wpa_supplicant_tdls_oper; 1411 ctx->tdls_peer_addset = wpa_supplicant_tdls_peer_addset; 1412 ctx->tdls_enable_channel_switch = 1413 wpa_supplicant_tdls_enable_channel_switch; 1414 ctx->tdls_disable_channel_switch = 1415 wpa_supplicant_tdls_disable_channel_switch; 1416 #endif /* CONFIG_TDLS */ 1417 ctx->set_rekey_offload = wpa_supplicant_set_rekey_offload; 1418 ctx->key_mgmt_set_pmk = wpa_supplicant_key_mgmt_set_pmk; 1419 ctx->fils_hlp_rx = wpa_supplicant_fils_hlp_rx; 1420 ctx->channel_info = wpa_supplicant_channel_info; 1421 ctx->transition_disable = wpa_supplicant_transition_disable; 1422 ctx->store_ptk = wpa_supplicant_store_ptk; 1423 1424 wpa_s->wpa = wpa_sm_init(ctx); 1425 if (wpa_s->wpa == NULL) { 1426 wpa_printf(MSG_ERROR, 1427 "Failed to initialize WPA state machine"); 1428 os_free(ctx); 1429 ptksa_cache_deinit(wpa_s->ptksa); 1430 wpa_s->ptksa = NULL; 1431 return -1; 1432 } 1433 #endif /* CONFIG_NO_WPA */ 1434 1435 return 0; 1436 } 1437 1438 1439 void wpa_supplicant_rsn_supp_set_config(struct wpa_supplicant *wpa_s, 1440 struct wpa_ssid *ssid) 1441 { 1442 struct rsn_supp_config conf; 1443 if (ssid) { 1444 os_memset(&conf, 0, sizeof(conf)); 1445 conf.network_ctx = ssid; 1446 conf.allowed_pairwise_cipher = ssid->pairwise_cipher; 1447 #ifdef IEEE8021X_EAPOL 1448 conf.proactive_key_caching = ssid->proactive_key_caching < 0 ? 1449 wpa_s->conf->okc : ssid->proactive_key_caching; 1450 conf.eap_workaround = ssid->eap_workaround; 1451 conf.eap_conf_ctx = &ssid->eap; 1452 #endif /* IEEE8021X_EAPOL */ 1453 conf.ssid = ssid->ssid; 1454 conf.ssid_len = ssid->ssid_len; 1455 conf.wpa_ptk_rekey = ssid->wpa_ptk_rekey; 1456 conf.wpa_deny_ptk0_rekey = ssid->wpa_deny_ptk0_rekey; 1457 conf.owe_ptk_workaround = ssid->owe_ptk_workaround; 1458 #ifdef CONFIG_P2P 1459 if (ssid->p2p_group && wpa_s->current_bss && 1460 !wpa_s->p2p_disable_ip_addr_req) { 1461 struct wpabuf *p2p; 1462 p2p = wpa_bss_get_vendor_ie_multi(wpa_s->current_bss, 1463 P2P_IE_VENDOR_TYPE); 1464 if (p2p) { 1465 u8 group_capab; 1466 group_capab = p2p_get_group_capab(p2p); 1467 if (group_capab & 1468 P2P_GROUP_CAPAB_IP_ADDR_ALLOCATION) 1469 conf.p2p = 1; 1470 wpabuf_free(p2p); 1471 } 1472 } 1473 #endif /* CONFIG_P2P */ 1474 conf.wpa_rsc_relaxation = wpa_s->conf->wpa_rsc_relaxation; 1475 #ifdef CONFIG_FILS 1476 if (wpa_key_mgmt_fils(wpa_s->key_mgmt)) 1477 conf.fils_cache_id = 1478 wpa_bss_get_fils_cache_id(wpa_s->current_bss); 1479 #endif /* CONFIG_FILS */ 1480 if ((wpa_s->drv_flags & WPA_DRIVER_FLAGS_BEACON_PROTECTION) || 1481 (wpa_s->drv_flags2 & 1482 WPA_DRIVER_FLAGS2_BEACON_PROTECTION_CLIENT)) 1483 conf.beacon_prot = ssid->beacon_prot; 1484 1485 #ifdef CONFIG_PASN 1486 #ifdef CONFIG_TESTING_OPTIONS 1487 conf.force_kdk_derivation = wpa_s->conf->force_kdk_derivation; 1488 #endif /* CONFIG_TESTING_OPTIONS */ 1489 #endif /* CONFIG_PASN */ 1490 } 1491 wpa_sm_set_config(wpa_s->wpa, ssid ? &conf : NULL); 1492 } 1493