1 /*
2  * Hotspot 2.0 AP ANQP processing
3  * Copyright (c) 2009, Atheros Communications, Inc.
4  * Copyright (c) 2011-2013, Qualcomm Atheros, Inc.
5  *
6  * This software may be distributed under the terms of the BSD license.
7  * See README for more details.
8  */
9 
10 #include "includes.h"
11 
12 #include "common.h"
13 #include "common/ieee802_11_defs.h"
14 #include "common/wpa_ctrl.h"
15 #include "hostapd.h"
16 #include "ap_config.h"
17 #include "ap_drv_ops.h"
18 #include "sta_info.h"
19 #include "hs20.h"
20 
21 
hostapd_eid_hs20_indication(struct hostapd_data * hapd,u8 * eid)22 u8 * hostapd_eid_hs20_indication(struct hostapd_data *hapd, u8 *eid)
23 {
24 	u8 conf;
25 	if (!hapd->conf->hs20)
26 		return eid;
27 	*eid++ = WLAN_EID_VENDOR_SPECIFIC;
28 	*eid++ = hapd->conf->hs20_release < 2 ? 5 : 7;
29 	WPA_PUT_BE24(eid, OUI_WFA);
30 	eid += 3;
31 	*eid++ = HS20_INDICATION_OUI_TYPE;
32 	conf = (hapd->conf->hs20_release - 1) << 4; /* Release Number */
33 	if (hapd->conf->hs20_release >= 2)
34 		conf |= HS20_ANQP_DOMAIN_ID_PRESENT;
35 	if (hapd->conf->disable_dgaf)
36 		conf |= HS20_DGAF_DISABLED;
37 	*eid++ = conf;
38 	if (hapd->conf->hs20_release >= 2) {
39 		WPA_PUT_LE16(eid, hapd->conf->anqp_domain_id);
40 		eid += 2;
41 	}
42 
43 	return eid;
44 }
45 
46 
hostapd_eid_osen(struct hostapd_data * hapd,u8 * eid)47 u8 * hostapd_eid_osen(struct hostapd_data *hapd, u8 *eid)
48 {
49 	u8 *len;
50 	u16 capab;
51 
52 	if (!hapd->conf->osen)
53 		return eid;
54 
55 	*eid++ = WLAN_EID_VENDOR_SPECIFIC;
56 	len = eid++; /* to be filled */
57 	WPA_PUT_BE24(eid, OUI_WFA);
58 	eid += 3;
59 	*eid++ = HS20_OSEN_OUI_TYPE;
60 
61 	/* Group Data Cipher Suite */
62 	RSN_SELECTOR_PUT(eid, RSN_CIPHER_SUITE_NO_GROUP_ADDRESSED);
63 	eid += RSN_SELECTOR_LEN;
64 
65 	/* Pairwise Cipher Suite Count and List */
66 	WPA_PUT_LE16(eid, 1);
67 	eid += 2;
68 	RSN_SELECTOR_PUT(eid, RSN_CIPHER_SUITE_CCMP);
69 	eid += RSN_SELECTOR_LEN;
70 
71 	/* AKM Suite Count and List */
72 	WPA_PUT_LE16(eid, 1);
73 	eid += 2;
74 	RSN_SELECTOR_PUT(eid, RSN_AUTH_KEY_MGMT_OSEN);
75 	eid += RSN_SELECTOR_LEN;
76 
77 	/* RSN Capabilities */
78 	capab = 0;
79 	if (hapd->conf->wmm_enabled) {
80 		/* 4 PTKSA replay counters when using WMM */
81 		capab |= (RSN_NUM_REPLAY_COUNTERS_16 << 2);
82 	}
83 	if (hapd->conf->ieee80211w != NO_MGMT_FRAME_PROTECTION) {
84 		capab |= WPA_CAPABILITY_MFPC;
85 		if (hapd->conf->ieee80211w == MGMT_FRAME_PROTECTION_REQUIRED)
86 			capab |= WPA_CAPABILITY_MFPR;
87 	}
88 #ifdef CONFIG_OCV
89 	if (hapd->conf->ocv &&
90 	    (hapd->iface->drv_flags2 &
91 	     (WPA_DRIVER_FLAGS2_AP_SME | WPA_DRIVER_FLAGS2_OCV)))
92 		capab |= WPA_CAPABILITY_OCVC;
93 #endif /* CONFIG_OCV */
94 	WPA_PUT_LE16(eid, capab);
95 	eid += 2;
96 
97 	*len = eid - len - 1;
98 
99 	return eid;
100 }
101 
102 
hs20_send_wnm_notification(struct hostapd_data * hapd,const u8 * addr,u8 osu_method,const char * url)103 int hs20_send_wnm_notification(struct hostapd_data *hapd, const u8 *addr,
104 			       u8 osu_method, const char *url)
105 {
106 	struct wpabuf *buf;
107 	size_t len = 0;
108 	int ret;
109 
110 	/* TODO: should refuse to send notification if the STA is not associated
111 	 * or if the STA did not indicate support for WNM-Notification */
112 
113 	if (url) {
114 		len = 1 + os_strlen(url);
115 		if (5 + len > 255) {
116 			wpa_printf(MSG_INFO, "HS 2.0: Too long URL for "
117 				   "WNM-Notification: '%s'", url);
118 			return -1;
119 		}
120 	}
121 
122 	buf = wpabuf_alloc(4 + 7 + len);
123 	if (buf == NULL)
124 		return -1;
125 
126 	wpabuf_put_u8(buf, WLAN_ACTION_WNM);
127 	wpabuf_put_u8(buf, WNM_NOTIFICATION_REQ);
128 	wpabuf_put_u8(buf, 1); /* Dialog token */
129 	wpabuf_put_u8(buf, 1); /* Type - 1 reserved for WFA */
130 
131 	/* Subscription Remediation subelement */
132 	wpabuf_put_u8(buf, WLAN_EID_VENDOR_SPECIFIC);
133 	wpabuf_put_u8(buf, 5 + len);
134 	wpabuf_put_be24(buf, OUI_WFA);
135 	wpabuf_put_u8(buf, HS20_WNM_SUB_REM_NEEDED);
136 	if (url) {
137 		wpabuf_put_u8(buf, len - 1);
138 		wpabuf_put_data(buf, url, len - 1);
139 		wpabuf_put_u8(buf, osu_method);
140 	} else {
141 		/* Server URL and Server Method fields not included */
142 		wpabuf_put_u8(buf, 0);
143 	}
144 
145 	ret = hostapd_drv_send_action(hapd, hapd->iface->freq, 0, addr,
146 				      wpabuf_head(buf), wpabuf_len(buf));
147 
148 	wpabuf_free(buf);
149 
150 	return ret;
151 }
152 
153 
hs20_send_wnm_notification_deauth_req(struct hostapd_data * hapd,const u8 * addr,const struct wpabuf * payload)154 int hs20_send_wnm_notification_deauth_req(struct hostapd_data *hapd,
155 					  const u8 *addr,
156 					  const struct wpabuf *payload)
157 {
158 	struct wpabuf *buf;
159 	int ret;
160 
161 	/* TODO: should refuse to send notification if the STA is not associated
162 	 * or if the STA did not indicate support for WNM-Notification */
163 
164 	buf = wpabuf_alloc(4 + 6 + wpabuf_len(payload));
165 	if (buf == NULL)
166 		return -1;
167 
168 	wpabuf_put_u8(buf, WLAN_ACTION_WNM);
169 	wpabuf_put_u8(buf, WNM_NOTIFICATION_REQ);
170 	wpabuf_put_u8(buf, 1); /* Dialog token */
171 	wpabuf_put_u8(buf, 1); /* Type - 1 reserved for WFA */
172 
173 	/* Deauthentication Imminent Notice subelement */
174 	wpabuf_put_u8(buf, WLAN_EID_VENDOR_SPECIFIC);
175 	wpabuf_put_u8(buf, 4 + wpabuf_len(payload));
176 	wpabuf_put_be24(buf, OUI_WFA);
177 	wpabuf_put_u8(buf, HS20_WNM_DEAUTH_IMMINENT_NOTICE);
178 	wpabuf_put_buf(buf, payload);
179 
180 	ret = hostapd_drv_send_action(hapd, hapd->iface->freq, 0, addr,
181 				      wpabuf_head(buf), wpabuf_len(buf));
182 
183 	wpabuf_free(buf);
184 
185 	return ret;
186 }
187 
188 
hs20_send_wnm_notification_t_c(struct hostapd_data * hapd,const u8 * addr,const char * url)189 int hs20_send_wnm_notification_t_c(struct hostapd_data *hapd,
190 				   const u8 *addr, const char *url)
191 {
192 	struct wpabuf *buf;
193 	int ret;
194 	size_t url_len;
195 
196 	if (!url) {
197 		wpa_printf(MSG_INFO, "HS 2.0: No T&C Server URL available");
198 		return -1;
199 	}
200 
201 	url_len = os_strlen(url);
202 	if (5 + url_len > 255) {
203 		wpa_printf(MSG_INFO,
204 			   "HS 2.0: Too long T&C Server URL for WNM-Notification: '%s'",
205 			   url);
206 		return -1;
207 	}
208 
209 	buf = wpabuf_alloc(4 + 7 + url_len);
210 	if (!buf)
211 		return -1;
212 
213 	wpabuf_put_u8(buf, WLAN_ACTION_WNM);
214 	wpabuf_put_u8(buf, WNM_NOTIFICATION_REQ);
215 	wpabuf_put_u8(buf, 1); /* Dialog token */
216 	wpabuf_put_u8(buf, 1); /* Type - 1 reserved for WFA */
217 
218 	/* Terms and Conditions Acceptance subelement */
219 	wpabuf_put_u8(buf, WLAN_EID_VENDOR_SPECIFIC);
220 	wpabuf_put_u8(buf, 4 + 1 + url_len);
221 	wpabuf_put_be24(buf, OUI_WFA);
222 	wpabuf_put_u8(buf, HS20_WNM_T_C_ACCEPTANCE);
223 	wpabuf_put_u8(buf, url_len);
224 	wpabuf_put_str(buf, url);
225 
226 	ret = hostapd_drv_send_action(hapd, hapd->iface->freq, 0, addr,
227 				      wpabuf_head(buf), wpabuf_len(buf));
228 
229 	wpabuf_free(buf);
230 
231 	return ret;
232 }
233 
234 
hs20_t_c_filtering(struct hostapd_data * hapd,struct sta_info * sta,int enabled)235 void hs20_t_c_filtering(struct hostapd_data *hapd, struct sta_info *sta,
236 			int enabled)
237 {
238 	if (enabled) {
239 		wpa_printf(MSG_DEBUG,
240 			   "HS 2.0: Terms and Conditions filtering required for "
241 			   MACSTR, MAC2STR(sta->addr));
242 		sta->hs20_t_c_filtering = 1;
243 		/* TODO: Enable firewall filtering for the STA */
244 		wpa_msg(hapd->msg_ctx, MSG_INFO, HS20_T_C_FILTERING_ADD MACSTR,
245 			MAC2STR(sta->addr));
246 	} else {
247 		wpa_printf(MSG_DEBUG,
248 			   "HS 2.0: Terms and Conditions filtering not required for "
249 			   MACSTR, MAC2STR(sta->addr));
250 		sta->hs20_t_c_filtering = 0;
251 		/* TODO: Disable firewall filtering for the STA */
252 		wpa_msg(hapd->msg_ctx, MSG_INFO,
253 			HS20_T_C_FILTERING_REMOVE MACSTR, MAC2STR(sta->addr));
254 	}
255 }
256