1 /* 2 * WPA Supplicant - Glue code to setup EAPOL and RSN modules 3 * Copyright (c) 2003-2015, Jouni Malinen <j@w1.fi> 4 * 5 * This software may be distributed under the terms of the BSD license. 6 * See README for more details. 7 */ 8 9 #include "includes.h" 10 11 #include "common.h" 12 #include "eapol_supp/eapol_supp_sm.h" 13 #include "eap_peer/eap.h" 14 #include "rsn_supp/wpa.h" 15 #include "eloop.h" 16 #include "config.h" 17 #include "l2_packet/l2_packet.h" 18 #include "common/wpa_common.h" 19 #include "common/ptksa_cache.h" 20 #include "wpa_supplicant_i.h" 21 #include "driver_i.h" 22 #include "rsn_supp/pmksa_cache.h" 23 #include "sme.h" 24 #include "common/ieee802_11_defs.h" 25 #include "common/wpa_ctrl.h" 26 #include "wpas_glue.h" 27 #include "wps_supplicant.h" 28 #include "bss.h" 29 #include "scan.h" 30 #include "notify.h" 31 #include "wpas_kay.h" 32 33 34 #ifndef CONFIG_NO_CONFIG_BLOBS 35 #if defined(IEEE8021X_EAPOL) || !defined(CONFIG_NO_WPA) 36 static void wpa_supplicant_set_config_blob(void *ctx, 37 struct wpa_config_blob *blob) 38 { 39 struct wpa_supplicant *wpa_s = ctx; 40 wpa_config_set_blob(wpa_s->conf, blob); 41 if (wpa_s->conf->update_config) { 42 int ret = wpa_config_write(wpa_s->confname, wpa_s->conf); 43 if (ret) { 44 wpa_printf(MSG_DEBUG, "Failed to update config after " 45 "blob set"); 46 } 47 } 48 } 49 50 51 static const struct wpa_config_blob * 52 wpa_supplicant_get_config_blob(void *ctx, const char *name) 53 { 54 struct wpa_supplicant *wpa_s = ctx; 55 return wpa_config_get_blob(wpa_s->conf, name); 56 } 57 #endif /* defined(IEEE8021X_EAPOL) || !defined(CONFIG_NO_WPA) */ 58 #endif /* CONFIG_NO_CONFIG_BLOBS */ 59 60 61 #if defined(IEEE8021X_EAPOL) || !defined(CONFIG_NO_WPA) 62 static u8 * wpa_alloc_eapol(const struct wpa_supplicant *wpa_s, u8 type, 63 const void *data, u16 data_len, 64 size_t *msg_len, void **data_pos) 65 { 66 struct ieee802_1x_hdr *hdr; 67 68 *msg_len = sizeof(*hdr) + data_len; 69 hdr = os_malloc(*msg_len); 70 if (hdr == NULL) 71 return NULL; 72 73 hdr->version = wpa_s->conf->eapol_version; 74 hdr->type = type; 75 hdr->length = host_to_be16(data_len); 76 77 if (data) 78 os_memcpy(hdr + 1, data, data_len); 79 else 80 os_memset(hdr + 1, 0, data_len); 81 82 if (data_pos) 83 *data_pos = hdr + 1; 84 85 return (u8 *) hdr; 86 } 87 88 89 /** 90 * wpa_ether_send - Send Ethernet frame 91 * @wpa_s: Pointer to wpa_supplicant data 92 * @dest: Destination MAC address 93 * @proto: Ethertype in host byte order 94 * @buf: Frame payload starting from IEEE 802.1X header 95 * @len: Frame payload length 96 * Returns: >=0 on success, <0 on failure 97 */ 98 int wpa_ether_send(struct wpa_supplicant *wpa_s, const u8 *dest, 99 u16 proto, const u8 *buf, size_t len) 100 { 101 #ifdef CONFIG_TESTING_OPTIONS 102 if (wpa_s->ext_eapol_frame_io && proto == ETH_P_EAPOL) { 103 size_t hex_len = 2 * len + 1; 104 char *hex = os_malloc(hex_len); 105 106 if (hex == NULL) 107 return -1; 108 wpa_snprintf_hex(hex, hex_len, buf, len); 109 wpa_msg(wpa_s, MSG_INFO, "EAPOL-TX " MACSTR " %s", 110 MAC2STR(dest), hex); 111 os_free(hex); 112 return 0; 113 } 114 #endif /* CONFIG_TESTING_OPTIONS */ 115 116 if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_CONTROL_PORT) { 117 int encrypt = wpa_s->wpa && 118 wpa_sm_has_ptk_installed(wpa_s->wpa); 119 120 return wpa_drv_tx_control_port(wpa_s, dest, proto, buf, len, 121 !encrypt); 122 } 123 124 if (wpa_s->l2) { 125 return l2_packet_send(wpa_s->l2, dest, proto, buf, len); 126 } 127 128 return -1; 129 } 130 #endif /* IEEE8021X_EAPOL || !CONFIG_NO_WPA */ 131 132 133 #ifdef IEEE8021X_EAPOL 134 135 /** 136 * wpa_supplicant_eapol_send - Send IEEE 802.1X EAPOL packet to Authenticator 137 * @ctx: Pointer to wpa_supplicant data (wpa_s) 138 * @type: IEEE 802.1X packet type (IEEE802_1X_TYPE_*) 139 * @buf: EAPOL payload (after IEEE 802.1X header) 140 * @len: EAPOL payload length 141 * Returns: >=0 on success, <0 on failure 142 * 143 * This function adds Ethernet and IEEE 802.1X header and sends the EAPOL frame 144 * to the current Authenticator. 145 */ 146 static int wpa_supplicant_eapol_send(void *ctx, int type, const u8 *buf, 147 size_t len) 148 { 149 struct wpa_supplicant *wpa_s = ctx; 150 u8 *msg, *dst, bssid[ETH_ALEN]; 151 size_t msglen; 152 int res; 153 154 /* TODO: could add l2_packet_sendmsg that allows fragments to avoid 155 * extra copy here */ 156 157 if (wpa_key_mgmt_wpa_psk(wpa_s->key_mgmt) || 158 wpa_s->key_mgmt == WPA_KEY_MGMT_OWE || 159 wpa_s->key_mgmt == WPA_KEY_MGMT_DPP || 160 wpa_s->key_mgmt == WPA_KEY_MGMT_NONE) { 161 /* Current SSID is not using IEEE 802.1X/EAP, so drop possible 162 * EAPOL frames (mainly, EAPOL-Start) from EAPOL state 163 * machines. */ 164 wpa_printf(MSG_DEBUG, "WPA: drop TX EAPOL in non-IEEE 802.1X " 165 "mode (type=%d len=%lu)", type, 166 (unsigned long) len); 167 return -1; 168 } 169 170 if (pmksa_cache_get_current(wpa_s->wpa) && 171 type == IEEE802_1X_TYPE_EAPOL_START) { 172 /* 173 * We were trying to use PMKSA caching and sending EAPOL-Start 174 * would abort that and trigger full EAPOL authentication. 175 * However, we've already waited for the AP/Authenticator to 176 * start 4-way handshake or EAP authentication, and apparently 177 * it has not done so since the startWhen timer has reached zero 178 * to get the state machine sending EAPOL-Start. This is not 179 * really supposed to happen, but an interoperability issue with 180 * a deployed AP has been identified where the connection fails 181 * due to that AP failing to operate correctly if PMKID is 182 * included in the Association Request frame. To work around 183 * this, assume PMKSA caching failed and try to initiate full 184 * EAP authentication. 185 */ 186 if (!wpa_s->current_ssid || 187 wpa_s->current_ssid->eap_workaround) { 188 wpa_printf(MSG_DEBUG, 189 "RSN: Timeout on waiting for the AP to initiate 4-way handshake for PMKSA caching or EAP authentication - try to force it to start EAP authentication"); 190 } else { 191 wpa_printf(MSG_DEBUG, 192 "RSN: PMKSA caching - do not send EAPOL-Start"); 193 return -1; 194 } 195 } 196 197 if (is_zero_ether_addr(wpa_s->bssid)) { 198 wpa_printf(MSG_DEBUG, "BSSID not set when trying to send an " 199 "EAPOL frame"); 200 if (wpa_drv_get_bssid(wpa_s, bssid) == 0 && 201 !is_zero_ether_addr(bssid)) { 202 dst = bssid; 203 wpa_printf(MSG_DEBUG, "Using current BSSID " MACSTR 204 " from the driver as the EAPOL destination", 205 MAC2STR(dst)); 206 } else { 207 dst = wpa_s->last_eapol_src; 208 wpa_printf(MSG_DEBUG, "Using the source address of the" 209 " last received EAPOL frame " MACSTR " as " 210 "the EAPOL destination", 211 MAC2STR(dst)); 212 } 213 } else { 214 /* BSSID was already set (from (Re)Assoc event, so use it as 215 * the EAPOL destination. */ 216 dst = wpa_s->bssid; 217 } 218 219 msg = wpa_alloc_eapol(wpa_s, type, buf, len, &msglen, NULL); 220 if (msg == NULL) 221 return -1; 222 223 wpa_printf(MSG_DEBUG, "TX EAPOL: dst=" MACSTR, MAC2STR(dst)); 224 wpa_hexdump(MSG_MSGDUMP, "TX EAPOL", msg, msglen); 225 res = wpa_ether_send(wpa_s, dst, ETH_P_EAPOL, msg, msglen); 226 os_free(msg); 227 return res; 228 } 229 230 231 #ifdef CONFIG_WEP 232 /** 233 * wpa_eapol_set_wep_key - set WEP key for the driver 234 * @ctx: Pointer to wpa_supplicant data (wpa_s) 235 * @unicast: 1 = individual unicast key, 0 = broadcast key 236 * @keyidx: WEP key index (0..3) 237 * @key: Pointer to key data 238 * @keylen: Key length in bytes 239 * Returns: 0 on success or < 0 on error. 240 */ 241 static int wpa_eapol_set_wep_key(void *ctx, int unicast, int keyidx, 242 const u8 *key, size_t keylen) 243 { 244 struct wpa_supplicant *wpa_s = ctx; 245 if (wpa_s->key_mgmt == WPA_KEY_MGMT_IEEE8021X_NO_WPA) { 246 int cipher = (keylen == 5) ? WPA_CIPHER_WEP40 : 247 WPA_CIPHER_WEP104; 248 if (unicast) 249 wpa_s->pairwise_cipher = cipher; 250 else 251 wpa_s->group_cipher = cipher; 252 } 253 return wpa_drv_set_key(wpa_s, WPA_ALG_WEP, 254 unicast ? wpa_s->bssid : NULL, 255 keyidx, unicast, NULL, 0, key, keylen, 256 unicast ? KEY_FLAG_PAIRWISE_RX_TX : 257 KEY_FLAG_GROUP_RX_TX_DEFAULT); 258 } 259 #endif /* CONFIG_WEP */ 260 261 262 static void wpa_supplicant_aborted_cached(void *ctx) 263 { 264 struct wpa_supplicant *wpa_s = ctx; 265 wpa_sm_aborted_cached(wpa_s->wpa); 266 } 267 268 269 static const char * result_str(enum eapol_supp_result result) 270 { 271 switch (result) { 272 case EAPOL_SUPP_RESULT_FAILURE: 273 return "FAILURE"; 274 case EAPOL_SUPP_RESULT_SUCCESS: 275 return "SUCCESS"; 276 case EAPOL_SUPP_RESULT_EXPECTED_FAILURE: 277 return "EXPECTED_FAILURE"; 278 } 279 return "?"; 280 } 281 282 283 static void wpa_supplicant_eapol_cb(struct eapol_sm *eapol, 284 enum eapol_supp_result result, 285 void *ctx) 286 { 287 struct wpa_supplicant *wpa_s = ctx; 288 int res, pmk_len; 289 u8 pmk[PMK_LEN]; 290 291 wpa_printf(MSG_DEBUG, "EAPOL authentication completed - result=%s", 292 result_str(result)); 293 294 if (wpas_wps_eapol_cb(wpa_s) > 0) 295 return; 296 297 wpa_s->eap_expected_failure = result == 298 EAPOL_SUPP_RESULT_EXPECTED_FAILURE; 299 300 if (result != EAPOL_SUPP_RESULT_SUCCESS) { 301 /* 302 * Make sure we do not get stuck here waiting for long EAPOL 303 * timeout if the AP does not disconnect in case of 304 * authentication failure. 305 */ 306 wpa_supplicant_req_auth_timeout(wpa_s, 2, 0); 307 } else { 308 ieee802_1x_notify_create_actor(wpa_s, wpa_s->last_eapol_src); 309 } 310 311 if (result != EAPOL_SUPP_RESULT_SUCCESS || 312 !(wpa_s->drv_flags & WPA_DRIVER_FLAGS_4WAY_HANDSHAKE_8021X)) 313 return; 314 315 if (!wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt)) 316 return; 317 318 wpa_printf(MSG_DEBUG, "Configure PMK for driver-based RSN 4-way " 319 "handshake"); 320 321 pmk_len = PMK_LEN; 322 if (wpa_key_mgmt_ft(wpa_s->key_mgmt)) { 323 #ifdef CONFIG_IEEE80211R 324 u8 buf[2 * PMK_LEN]; 325 wpa_printf(MSG_DEBUG, "RSN: Use FT XXKey as PMK for " 326 "driver-based 4-way hs and FT"); 327 res = eapol_sm_get_key(eapol, buf, 2 * PMK_LEN); 328 if (res == 0) { 329 os_memcpy(pmk, buf + PMK_LEN, PMK_LEN); 330 os_memset(buf, 0, sizeof(buf)); 331 } 332 #else /* CONFIG_IEEE80211R */ 333 res = -1; 334 #endif /* CONFIG_IEEE80211R */ 335 } else { 336 res = eapol_sm_get_key(eapol, pmk, PMK_LEN); 337 if (res) { 338 /* 339 * EAP-LEAP is an exception from other EAP methods: it 340 * uses only 16-byte PMK. 341 */ 342 res = eapol_sm_get_key(eapol, pmk, 16); 343 pmk_len = 16; 344 } 345 } 346 347 if (res) { 348 wpa_printf(MSG_DEBUG, "Failed to get PMK from EAPOL state " 349 "machines"); 350 return; 351 } 352 353 wpa_hexdump_key(MSG_DEBUG, "RSN: Configure PMK for driver-based 4-way " 354 "handshake", pmk, pmk_len); 355 356 if (wpa_drv_set_key(wpa_s, 0, NULL, 0, 0, NULL, 0, pmk, 357 pmk_len, KEY_FLAG_PMK)) { 358 wpa_printf(MSG_DEBUG, "Failed to set PMK to the driver"); 359 } 360 361 wpa_supplicant_cancel_scan(wpa_s); 362 wpa_supplicant_cancel_auth_timeout(wpa_s); 363 wpa_supplicant_set_state(wpa_s, WPA_COMPLETED); 364 365 } 366 367 368 static void wpa_supplicant_notify_eapol_done(void *ctx) 369 { 370 struct wpa_supplicant *wpa_s = ctx; 371 wpa_msg(wpa_s, MSG_DEBUG, "WPA: EAPOL processing complete"); 372 if (wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt)) { 373 wpa_supplicant_set_state(wpa_s, WPA_4WAY_HANDSHAKE); 374 } else { 375 wpa_supplicant_cancel_auth_timeout(wpa_s); 376 wpa_supplicant_set_state(wpa_s, WPA_COMPLETED); 377 } 378 } 379 380 #endif /* IEEE8021X_EAPOL */ 381 382 383 #ifndef CONFIG_NO_WPA 384 385 static int wpa_get_beacon_ie(struct wpa_supplicant *wpa_s) 386 { 387 int ret = 0; 388 struct wpa_bss *curr = NULL, *bss; 389 struct wpa_ssid *ssid = wpa_s->current_ssid; 390 const u8 *ie; 391 392 dl_list_for_each(bss, &wpa_s->bss, struct wpa_bss, list) { 393 if (os_memcmp(bss->bssid, wpa_s->bssid, ETH_ALEN) != 0) 394 continue; 395 if (ssid == NULL || 396 ((bss->ssid_len == ssid->ssid_len && 397 os_memcmp(bss->ssid, ssid->ssid, ssid->ssid_len) == 0) || 398 ssid->ssid_len == 0)) { 399 curr = bss; 400 break; 401 } 402 #ifdef CONFIG_OWE 403 if (ssid && (ssid->key_mgmt & WPA_KEY_MGMT_OWE) && 404 (bss->flags & WPA_BSS_OWE_TRANSITION)) { 405 curr = bss; 406 break; 407 } 408 #endif /* CONFIG_OWE */ 409 } 410 411 if (curr) { 412 ie = wpa_bss_get_vendor_ie(curr, WPA_IE_VENDOR_TYPE); 413 if (wpa_sm_set_ap_wpa_ie(wpa_s->wpa, ie, ie ? 2 + ie[1] : 0)) 414 ret = -1; 415 416 ie = wpa_bss_get_ie(curr, WLAN_EID_RSN); 417 if (wpa_sm_set_ap_rsn_ie(wpa_s->wpa, ie, ie ? 2 + ie[1] : 0)) 418 ret = -1; 419 420 ie = wpa_bss_get_ie(curr, WLAN_EID_RSNX); 421 if (wpa_sm_set_ap_rsnxe(wpa_s->wpa, ie, ie ? 2 + ie[1] : 0)) 422 ret = -1; 423 } else { 424 ret = -1; 425 } 426 427 return ret; 428 } 429 430 431 static int wpa_supplicant_get_beacon_ie(void *ctx) 432 { 433 struct wpa_supplicant *wpa_s = ctx; 434 if (wpa_get_beacon_ie(wpa_s) == 0) { 435 return 0; 436 } 437 438 /* No WPA/RSN IE found in the cached scan results. Try to get updated 439 * scan results from the driver. */ 440 if (wpa_supplicant_update_scan_results(wpa_s) < 0) 441 return -1; 442 443 return wpa_get_beacon_ie(wpa_s); 444 } 445 446 447 static u8 * _wpa_alloc_eapol(void *wpa_s, u8 type, 448 const void *data, u16 data_len, 449 size_t *msg_len, void **data_pos) 450 { 451 return wpa_alloc_eapol(wpa_s, type, data, data_len, msg_len, data_pos); 452 } 453 454 455 static int _wpa_ether_send(void *wpa_s, const u8 *dest, u16 proto, 456 const u8 *buf, size_t len) 457 { 458 return wpa_ether_send(wpa_s, dest, proto, buf, len); 459 } 460 461 462 static void _wpa_supplicant_cancel_auth_timeout(void *wpa_s) 463 { 464 wpa_supplicant_cancel_auth_timeout(wpa_s); 465 } 466 467 468 static void _wpa_supplicant_set_state(void *wpa_s, enum wpa_states state) 469 { 470 wpa_supplicant_set_state(wpa_s, state); 471 } 472 473 474 /** 475 * wpa_supplicant_get_state - Get the connection state 476 * @wpa_s: Pointer to wpa_supplicant data 477 * Returns: The current connection state (WPA_*) 478 */ 479 static enum wpa_states wpa_supplicant_get_state(struct wpa_supplicant *wpa_s) 480 { 481 return wpa_s->wpa_state; 482 } 483 484 485 static enum wpa_states _wpa_supplicant_get_state(void *wpa_s) 486 { 487 return wpa_supplicant_get_state(wpa_s); 488 } 489 490 491 static void _wpa_supplicant_deauthenticate(void *wpa_s, u16 reason_code) 492 { 493 wpa_supplicant_deauthenticate(wpa_s, reason_code); 494 /* Schedule a scan to make sure we continue looking for networks */ 495 wpa_supplicant_req_scan(wpa_s, 5, 0); 496 } 497 498 499 static void _wpa_supplicant_reconnect(void *wpa_s) 500 { 501 wpa_supplicant_reconnect(wpa_s); 502 } 503 504 505 static void * wpa_supplicant_get_network_ctx(void *wpa_s) 506 { 507 return wpa_supplicant_get_ssid(wpa_s); 508 } 509 510 511 static int wpa_supplicant_get_bssid(void *ctx, u8 *bssid) 512 { 513 struct wpa_supplicant *wpa_s = ctx; 514 return wpa_drv_get_bssid(wpa_s, bssid); 515 } 516 517 518 static int wpa_supplicant_set_key(void *_wpa_s, enum wpa_alg alg, 519 const u8 *addr, int key_idx, int set_tx, 520 const u8 *seq, size_t seq_len, 521 const u8 *key, size_t key_len, 522 enum key_flag key_flag) 523 { 524 struct wpa_supplicant *wpa_s = _wpa_s; 525 if (alg == WPA_ALG_TKIP && key_idx == 0 && key_len == 32) { 526 /* Clear the MIC error counter when setting a new PTK. */ 527 wpa_s->mic_errors_seen = 0; 528 } 529 #ifdef CONFIG_TESTING_GET_GTK 530 if (key_idx > 0 && addr && is_broadcast_ether_addr(addr) && 531 alg != WPA_ALG_NONE && key_len <= sizeof(wpa_s->last_gtk)) { 532 os_memcpy(wpa_s->last_gtk, key, key_len); 533 wpa_s->last_gtk_len = key_len; 534 } 535 #endif /* CONFIG_TESTING_GET_GTK */ 536 #ifdef CONFIG_TESTING_OPTIONS 537 if (addr && !is_broadcast_ether_addr(addr) && 538 !(key_flag & KEY_FLAG_MODIFY)) { 539 wpa_s->last_tk_alg = alg; 540 os_memcpy(wpa_s->last_tk_addr, addr, ETH_ALEN); 541 wpa_s->last_tk_key_idx = key_idx; 542 if (key) 543 os_memcpy(wpa_s->last_tk, key, key_len); 544 wpa_s->last_tk_len = key_len; 545 } 546 #endif /* CONFIG_TESTING_OPTIONS */ 547 return wpa_drv_set_key(wpa_s, alg, addr, key_idx, set_tx, seq, seq_len, 548 key, key_len, key_flag); 549 } 550 551 552 static int wpa_supplicant_mlme_setprotection(void *wpa_s, const u8 *addr, 553 int protection_type, 554 int key_type) 555 { 556 return wpa_drv_mlme_setprotection(wpa_s, addr, protection_type, 557 key_type); 558 } 559 560 561 static struct wpa_ssid * wpas_get_network_ctx(struct wpa_supplicant *wpa_s, 562 void *network_ctx) 563 { 564 struct wpa_ssid *ssid; 565 566 for (ssid = wpa_s->conf->ssid; ssid; ssid = ssid->next) { 567 if (network_ctx == ssid) 568 return ssid; 569 } 570 571 return NULL; 572 } 573 574 575 static int wpa_supplicant_add_pmkid(void *_wpa_s, void *network_ctx, 576 const u8 *bssid, const u8 *pmkid, 577 const u8 *fils_cache_id, 578 const u8 *pmk, size_t pmk_len, 579 u32 pmk_lifetime, u8 pmk_reauth_threshold, 580 int akmp) 581 { 582 struct wpa_supplicant *wpa_s = _wpa_s; 583 struct wpa_ssid *ssid; 584 struct wpa_pmkid_params params; 585 586 os_memset(¶ms, 0, sizeof(params)); 587 ssid = wpas_get_network_ctx(wpa_s, network_ctx); 588 if (ssid) { 589 wpa_msg(wpa_s, MSG_INFO, PMKSA_CACHE_ADDED MACSTR " %d", 590 MAC2STR(bssid), ssid->id); 591 if ((akmp == WPA_KEY_MGMT_FT_IEEE8021X || 592 akmp == WPA_KEY_MGMT_FT_IEEE8021X_SHA384) && 593 !ssid->ft_eap_pmksa_caching) { 594 /* Since we will not be using PMKSA caching for FT-EAP 595 * within wpa_supplicant to avoid known interop issues 596 * with APs, do not add this PMKID to the driver either 597 * so that we won't be hitting those interop issues 598 * with driver-based RSNE generation. */ 599 wpa_printf(MSG_DEBUG, 600 "FT: Do not add PMKID entry to the driver since FT-EAP PMKSA caching is not enabled in configuration"); 601 return 0; 602 } 603 } 604 if (ssid && fils_cache_id) { 605 params.ssid = ssid->ssid; 606 params.ssid_len = ssid->ssid_len; 607 params.fils_cache_id = fils_cache_id; 608 } else { 609 params.bssid = bssid; 610 } 611 612 params.pmkid = pmkid; 613 params.pmk = pmk; 614 params.pmk_len = pmk_len; 615 params.pmk_lifetime = pmk_lifetime; 616 params.pmk_reauth_threshold = pmk_reauth_threshold; 617 618 return wpa_drv_add_pmkid(wpa_s, ¶ms); 619 } 620 621 622 static int wpa_supplicant_remove_pmkid(void *_wpa_s, void *network_ctx, 623 const u8 *bssid, const u8 *pmkid, 624 const u8 *fils_cache_id) 625 { 626 struct wpa_supplicant *wpa_s = _wpa_s; 627 struct wpa_ssid *ssid; 628 struct wpa_pmkid_params params; 629 630 os_memset(¶ms, 0, sizeof(params)); 631 ssid = wpas_get_network_ctx(wpa_s, network_ctx); 632 if (ssid) 633 wpa_msg(wpa_s, MSG_INFO, PMKSA_CACHE_REMOVED MACSTR " %d", 634 MAC2STR(bssid), ssid->id); 635 if (ssid && fils_cache_id) { 636 params.ssid = ssid->ssid; 637 params.ssid_len = ssid->ssid_len; 638 params.fils_cache_id = fils_cache_id; 639 } else { 640 params.bssid = bssid; 641 } 642 643 params.pmkid = pmkid; 644 645 return wpa_drv_remove_pmkid(wpa_s, ¶ms); 646 } 647 648 649 #ifdef CONFIG_IEEE80211R 650 static int wpa_supplicant_update_ft_ies(void *ctx, const u8 *md, 651 const u8 *ies, size_t ies_len) 652 { 653 struct wpa_supplicant *wpa_s = ctx; 654 if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_SME) 655 return sme_update_ft_ies(wpa_s, md, ies, ies_len); 656 return wpa_drv_update_ft_ies(wpa_s, md, ies, ies_len); 657 } 658 659 660 static int wpa_supplicant_send_ft_action(void *ctx, u8 action, 661 const u8 *target_ap, 662 const u8 *ies, size_t ies_len) 663 { 664 struct wpa_supplicant *wpa_s = ctx; 665 int ret; 666 u8 *data, *pos; 667 size_t data_len; 668 669 if (action != 1) { 670 wpa_printf(MSG_ERROR, "Unsupported send_ft_action action %d", 671 action); 672 return -1; 673 } 674 675 /* 676 * Action frame payload: 677 * Category[1] = 6 (Fast BSS Transition) 678 * Action[1] = 1 (Fast BSS Transition Request) 679 * STA Address 680 * Target AP Address 681 * FT IEs 682 */ 683 684 data_len = 2 + 2 * ETH_ALEN + ies_len; 685 data = os_malloc(data_len); 686 if (data == NULL) 687 return -1; 688 pos = data; 689 *pos++ = 0x06; /* FT Action category */ 690 *pos++ = action; 691 os_memcpy(pos, wpa_s->own_addr, ETH_ALEN); 692 pos += ETH_ALEN; 693 os_memcpy(pos, target_ap, ETH_ALEN); 694 pos += ETH_ALEN; 695 os_memcpy(pos, ies, ies_len); 696 697 ret = wpa_drv_send_action(wpa_s, wpa_s->assoc_freq, 0, 698 wpa_s->bssid, wpa_s->own_addr, wpa_s->bssid, 699 data, data_len, 0); 700 os_free(data); 701 702 return ret; 703 } 704 705 706 static int wpa_supplicant_mark_authenticated(void *ctx, const u8 *target_ap) 707 { 708 struct wpa_supplicant *wpa_s = ctx; 709 struct wpa_driver_auth_params params; 710 struct wpa_bss *bss; 711 712 bss = wpa_bss_get_bssid(wpa_s, target_ap); 713 if (bss == NULL) 714 return -1; 715 716 os_memset(¶ms, 0, sizeof(params)); 717 params.bssid = target_ap; 718 params.freq = bss->freq; 719 params.ssid = bss->ssid; 720 params.ssid_len = bss->ssid_len; 721 params.auth_alg = WPA_AUTH_ALG_FT; 722 params.local_state_change = 1; 723 return wpa_drv_authenticate(wpa_s, ¶ms); 724 } 725 #endif /* CONFIG_IEEE80211R */ 726 727 728 #ifdef CONFIG_TDLS 729 730 static int wpa_supplicant_tdls_get_capa(void *ctx, int *tdls_supported, 731 int *tdls_ext_setup, 732 int *tdls_chan_switch) 733 { 734 struct wpa_supplicant *wpa_s = ctx; 735 736 *tdls_supported = 0; 737 *tdls_ext_setup = 0; 738 *tdls_chan_switch = 0; 739 740 if (!wpa_s->drv_capa_known) 741 return -1; 742 743 if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_TDLS_SUPPORT) 744 *tdls_supported = 1; 745 746 if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_TDLS_EXTERNAL_SETUP) 747 *tdls_ext_setup = 1; 748 749 if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_TDLS_CHANNEL_SWITCH) 750 *tdls_chan_switch = 1; 751 752 return 0; 753 } 754 755 756 static int wpa_supplicant_send_tdls_mgmt(void *ctx, const u8 *dst, 757 u8 action_code, u8 dialog_token, 758 u16 status_code, u32 peer_capab, 759 int initiator, const u8 *buf, 760 size_t len) 761 { 762 struct wpa_supplicant *wpa_s = ctx; 763 return wpa_drv_send_tdls_mgmt(wpa_s, dst, action_code, dialog_token, 764 status_code, peer_capab, initiator, buf, 765 len); 766 } 767 768 769 static int wpa_supplicant_tdls_oper(void *ctx, int oper, const u8 *peer) 770 { 771 struct wpa_supplicant *wpa_s = ctx; 772 return wpa_drv_tdls_oper(wpa_s, oper, peer); 773 } 774 775 776 static int wpa_supplicant_tdls_peer_addset( 777 void *ctx, const u8 *peer, int add, u16 aid, u16 capability, 778 const u8 *supp_rates, size_t supp_rates_len, 779 const struct ieee80211_ht_capabilities *ht_capab, 780 const struct ieee80211_vht_capabilities *vht_capab, 781 const struct ieee80211_he_capabilities *he_capab, 782 size_t he_capab_len, 783 const struct ieee80211_he_6ghz_band_cap *he_6ghz_he_capab, 784 u8 qosinfo, int wmm, const u8 *ext_capab, size_t ext_capab_len, 785 const u8 *supp_channels, size_t supp_channels_len, 786 const u8 *supp_oper_classes, size_t supp_oper_classes_len) 787 { 788 struct wpa_supplicant *wpa_s = ctx; 789 struct hostapd_sta_add_params params; 790 791 os_memset(¶ms, 0, sizeof(params)); 792 793 params.addr = peer; 794 params.aid = aid; 795 params.capability = capability; 796 params.flags = WPA_STA_TDLS_PEER | WPA_STA_AUTHORIZED; 797 798 /* 799 * Don't rely only on qosinfo for WMM capability. It may be 0 even when 800 * present. Allow the WMM IE to also indicate QoS support. 801 */ 802 if (wmm || qosinfo) 803 params.flags |= WPA_STA_WMM; 804 805 params.ht_capabilities = ht_capab; 806 params.vht_capabilities = vht_capab; 807 params.he_capab = he_capab; 808 params.he_capab_len = he_capab_len; 809 params.he_6ghz_capab = he_6ghz_he_capab; 810 params.qosinfo = qosinfo; 811 params.listen_interval = 0; 812 params.supp_rates = supp_rates; 813 params.supp_rates_len = supp_rates_len; 814 params.set = !add; 815 params.ext_capab = ext_capab; 816 params.ext_capab_len = ext_capab_len; 817 params.supp_channels = supp_channels; 818 params.supp_channels_len = supp_channels_len; 819 params.supp_oper_classes = supp_oper_classes; 820 params.supp_oper_classes_len = supp_oper_classes_len; 821 822 return wpa_drv_sta_add(wpa_s, ¶ms); 823 } 824 825 826 static int wpa_supplicant_tdls_enable_channel_switch( 827 void *ctx, const u8 *addr, u8 oper_class, 828 const struct hostapd_freq_params *params) 829 { 830 struct wpa_supplicant *wpa_s = ctx; 831 832 return wpa_drv_tdls_enable_channel_switch(wpa_s, addr, oper_class, 833 params); 834 } 835 836 837 static int wpa_supplicant_tdls_disable_channel_switch(void *ctx, const u8 *addr) 838 { 839 struct wpa_supplicant *wpa_s = ctx; 840 841 return wpa_drv_tdls_disable_channel_switch(wpa_s, addr); 842 } 843 844 #endif /* CONFIG_TDLS */ 845 846 #endif /* CONFIG_NO_WPA */ 847 848 849 enum wpa_ctrl_req_type wpa_supplicant_ctrl_req_from_string(const char *field) 850 { 851 if (os_strcmp(field, "IDENTITY") == 0) 852 return WPA_CTRL_REQ_EAP_IDENTITY; 853 else if (os_strcmp(field, "PASSWORD") == 0) 854 return WPA_CTRL_REQ_EAP_PASSWORD; 855 else if (os_strcmp(field, "NEW_PASSWORD") == 0) 856 return WPA_CTRL_REQ_EAP_NEW_PASSWORD; 857 else if (os_strcmp(field, "PIN") == 0) 858 return WPA_CTRL_REQ_EAP_PIN; 859 else if (os_strcmp(field, "OTP") == 0) 860 return WPA_CTRL_REQ_EAP_OTP; 861 else if (os_strcmp(field, "PASSPHRASE") == 0) 862 return WPA_CTRL_REQ_EAP_PASSPHRASE; 863 else if (os_strcmp(field, "SIM") == 0) 864 return WPA_CTRL_REQ_SIM; 865 else if (os_strcmp(field, "PSK_PASSPHRASE") == 0) 866 return WPA_CTRL_REQ_PSK_PASSPHRASE; 867 else if (os_strcmp(field, "EXT_CERT_CHECK") == 0) 868 return WPA_CTRL_REQ_EXT_CERT_CHECK; 869 return WPA_CTRL_REQ_UNKNOWN; 870 } 871 872 873 const char * wpa_supplicant_ctrl_req_to_string(enum wpa_ctrl_req_type field, 874 const char *default_txt, 875 const char **txt) 876 { 877 const char *ret = NULL; 878 879 *txt = default_txt; 880 881 switch (field) { 882 case WPA_CTRL_REQ_EAP_IDENTITY: 883 *txt = "Identity"; 884 ret = "IDENTITY"; 885 break; 886 case WPA_CTRL_REQ_EAP_PASSWORD: 887 *txt = "Password"; 888 ret = "PASSWORD"; 889 break; 890 case WPA_CTRL_REQ_EAP_NEW_PASSWORD: 891 *txt = "New Password"; 892 ret = "NEW_PASSWORD"; 893 break; 894 case WPA_CTRL_REQ_EAP_PIN: 895 *txt = "PIN"; 896 ret = "PIN"; 897 break; 898 case WPA_CTRL_REQ_EAP_OTP: 899 ret = "OTP"; 900 break; 901 case WPA_CTRL_REQ_EAP_PASSPHRASE: 902 *txt = "Private key passphrase"; 903 ret = "PASSPHRASE"; 904 break; 905 case WPA_CTRL_REQ_SIM: 906 ret = "SIM"; 907 break; 908 case WPA_CTRL_REQ_PSK_PASSPHRASE: 909 *txt = "PSK or passphrase"; 910 ret = "PSK_PASSPHRASE"; 911 break; 912 case WPA_CTRL_REQ_EXT_CERT_CHECK: 913 *txt = "External server certificate validation"; 914 ret = "EXT_CERT_CHECK"; 915 break; 916 default: 917 break; 918 } 919 920 /* txt needs to be something */ 921 if (*txt == NULL) { 922 wpa_printf(MSG_WARNING, "No message for request %d", field); 923 ret = NULL; 924 } 925 926 return ret; 927 } 928 929 930 void wpas_send_ctrl_req(struct wpa_supplicant *wpa_s, struct wpa_ssid *ssid, 931 const char *field_name, const char *txt) 932 { 933 char *buf; 934 size_t buflen; 935 int len; 936 937 buflen = 100 + os_strlen(txt) + ssid->ssid_len; 938 buf = os_malloc(buflen); 939 if (buf == NULL) 940 return; 941 len = os_snprintf(buf, buflen, "%s-%d:%s needed for SSID ", 942 field_name, ssid->id, txt); 943 if (os_snprintf_error(buflen, len)) { 944 os_free(buf); 945 return; 946 } 947 if (ssid->ssid && buflen > len + ssid->ssid_len) { 948 os_memcpy(buf + len, ssid->ssid, ssid->ssid_len); 949 len += ssid->ssid_len; 950 buf[len] = '\0'; 951 } 952 buf[buflen - 1] = '\0'; 953 wpa_msg(wpa_s, MSG_INFO, WPA_CTRL_REQ "%s", buf); 954 os_free(buf); 955 } 956 957 958 #ifdef IEEE8021X_EAPOL 959 #if defined(CONFIG_CTRL_IFACE) || !defined(CONFIG_NO_STDOUT_DEBUG) 960 static void wpa_supplicant_eap_param_needed(void *ctx, 961 enum wpa_ctrl_req_type field, 962 const char *default_txt) 963 { 964 struct wpa_supplicant *wpa_s = ctx; 965 struct wpa_ssid *ssid = wpa_s->current_ssid; 966 const char *field_name, *txt = NULL; 967 968 if (ssid == NULL) 969 return; 970 971 if (field == WPA_CTRL_REQ_EXT_CERT_CHECK) 972 ssid->eap.pending_ext_cert_check = PENDING_CHECK; 973 wpas_notify_network_request(wpa_s, ssid, field, default_txt); 974 975 field_name = wpa_supplicant_ctrl_req_to_string(field, default_txt, 976 &txt); 977 if (field_name == NULL) { 978 wpa_printf(MSG_WARNING, "Unhandled EAP param %d needed", 979 field); 980 return; 981 } 982 983 wpas_notify_eap_status(wpa_s, "eap parameter needed", field_name); 984 985 wpas_send_ctrl_req(wpa_s, ssid, field_name, txt); 986 } 987 #else /* CONFIG_CTRL_IFACE || !CONFIG_NO_STDOUT_DEBUG */ 988 #define wpa_supplicant_eap_param_needed NULL 989 #endif /* CONFIG_CTRL_IFACE || !CONFIG_NO_STDOUT_DEBUG */ 990 991 992 #ifdef CONFIG_EAP_PROXY 993 994 static void wpa_supplicant_eap_proxy_cb(void *ctx) 995 { 996 struct wpa_supplicant *wpa_s = ctx; 997 size_t len; 998 999 wpa_s->mnc_len = eapol_sm_get_eap_proxy_imsi(wpa_s->eapol, -1, 1000 wpa_s->imsi, &len); 1001 if (wpa_s->mnc_len > 0) { 1002 wpa_s->imsi[len] = '\0'; 1003 wpa_printf(MSG_DEBUG, "eap_proxy: IMSI %s (MNC length %d)", 1004 wpa_s->imsi, wpa_s->mnc_len); 1005 } else { 1006 wpa_printf(MSG_DEBUG, "eap_proxy: IMSI not available"); 1007 } 1008 } 1009 1010 1011 static void wpa_sm_sim_state_error_handler(struct wpa_supplicant *wpa_s) 1012 { 1013 int i; 1014 struct wpa_ssid *ssid; 1015 const struct eap_method_type *eap_methods; 1016 1017 if (!wpa_s->conf) 1018 return; 1019 1020 for (ssid = wpa_s->conf->ssid; ssid; ssid = ssid->next) { 1021 eap_methods = ssid->eap.eap_methods; 1022 if (!eap_methods) 1023 continue; 1024 1025 for (i = 0; eap_methods[i].method != EAP_TYPE_NONE; i++) { 1026 if (eap_methods[i].vendor == EAP_VENDOR_IETF && 1027 (eap_methods[i].method == EAP_TYPE_SIM || 1028 eap_methods[i].method == EAP_TYPE_AKA || 1029 eap_methods[i].method == EAP_TYPE_AKA_PRIME)) { 1030 wpa_sm_pmksa_cache_flush(wpa_s->wpa, ssid); 1031 break; 1032 } 1033 } 1034 } 1035 } 1036 1037 1038 static void 1039 wpa_supplicant_eap_proxy_notify_sim_status(void *ctx, 1040 enum eap_proxy_sim_state sim_state) 1041 { 1042 struct wpa_supplicant *wpa_s = ctx; 1043 1044 wpa_printf(MSG_DEBUG, "eap_proxy: SIM card status %u", sim_state); 1045 switch (sim_state) { 1046 case SIM_STATE_ERROR: 1047 wpa_sm_sim_state_error_handler(wpa_s); 1048 break; 1049 default: 1050 wpa_printf(MSG_DEBUG, "eap_proxy: SIM card status unknown"); 1051 break; 1052 } 1053 } 1054 1055 #endif /* CONFIG_EAP_PROXY */ 1056 1057 1058 static void wpa_supplicant_port_cb(void *ctx, int authorized) 1059 { 1060 struct wpa_supplicant *wpa_s = ctx; 1061 #ifdef CONFIG_AP 1062 if (wpa_s->ap_iface) { 1063 wpa_printf(MSG_DEBUG, "AP mode active - skip EAPOL Supplicant " 1064 "port status: %s", 1065 authorized ? "Authorized" : "Unauthorized"); 1066 return; 1067 } 1068 #endif /* CONFIG_AP */ 1069 wpa_printf(MSG_DEBUG, "EAPOL: Supplicant port status: %s", 1070 authorized ? "Authorized" : "Unauthorized"); 1071 wpa_drv_set_supp_port(wpa_s, authorized); 1072 } 1073 1074 1075 static void wpa_supplicant_cert_cb(void *ctx, struct tls_cert_data *cert, 1076 const char *cert_hash) 1077 { 1078 struct wpa_supplicant *wpa_s = ctx; 1079 1080 wpas_notify_certification(wpa_s, cert, cert_hash); 1081 } 1082 1083 1084 static void wpa_supplicant_status_cb(void *ctx, const char *status, 1085 const char *parameter) 1086 { 1087 struct wpa_supplicant *wpa_s = ctx; 1088 1089 wpas_notify_eap_status(wpa_s, status, parameter); 1090 } 1091 1092 1093 static void wpa_supplicant_eap_error_cb(void *ctx, int error_code) 1094 { 1095 struct wpa_supplicant *wpa_s = ctx; 1096 1097 wpas_notify_eap_error(wpa_s, error_code); 1098 } 1099 1100 1101 static int wpa_supplicant_eap_auth_start_cb(void *ctx) 1102 { 1103 struct wpa_supplicant *wpa_s = ctx; 1104 1105 if (!wpa_s->new_connection && wpa_s->deny_ptk0_rekey && 1106 !wpa_sm_ext_key_id_active(wpa_s->wpa)) { 1107 wpa_msg(wpa_s, MSG_INFO, 1108 "WPA: PTK0 rekey not allowed, reconnecting"); 1109 wpa_supplicant_reconnect(wpa_s); 1110 return -1; 1111 } 1112 return 0; 1113 } 1114 1115 1116 static void wpa_supplicant_set_anon_id(void *ctx, const u8 *id, size_t len) 1117 { 1118 struct wpa_supplicant *wpa_s = ctx; 1119 char *str; 1120 int res; 1121 1122 wpa_hexdump_ascii(MSG_DEBUG, "EAP method updated anonymous_identity", 1123 id, len); 1124 1125 if (wpa_s->current_ssid == NULL) 1126 return; 1127 1128 if (id == NULL) { 1129 if (wpa_config_set(wpa_s->current_ssid, "anonymous_identity", 1130 "NULL", 0) < 0) 1131 return; 1132 } else { 1133 str = os_malloc(len * 2 + 1); 1134 if (str == NULL) 1135 return; 1136 wpa_snprintf_hex(str, len * 2 + 1, id, len); 1137 res = wpa_config_set(wpa_s->current_ssid, "anonymous_identity", 1138 str, 0); 1139 os_free(str); 1140 if (res < 0) 1141 return; 1142 } 1143 1144 if (wpa_s->conf->update_config) { 1145 res = wpa_config_write(wpa_s->confname, wpa_s->conf); 1146 if (res) { 1147 wpa_printf(MSG_DEBUG, "Failed to update config after " 1148 "anonymous_id update"); 1149 } 1150 } 1151 } 1152 #endif /* IEEE8021X_EAPOL */ 1153 1154 1155 int wpa_supplicant_init_eapol(struct wpa_supplicant *wpa_s) 1156 { 1157 #ifdef IEEE8021X_EAPOL 1158 struct eapol_ctx *ctx; 1159 ctx = os_zalloc(sizeof(*ctx)); 1160 if (ctx == NULL) { 1161 wpa_printf(MSG_ERROR, "Failed to allocate EAPOL context."); 1162 return -1; 1163 } 1164 1165 ctx->ctx = wpa_s; 1166 ctx->msg_ctx = wpa_s; 1167 ctx->eapol_send_ctx = wpa_s; 1168 ctx->preauth = 0; 1169 ctx->eapol_done_cb = wpa_supplicant_notify_eapol_done; 1170 ctx->eapol_send = wpa_supplicant_eapol_send; 1171 #ifdef CONFIG_WEP 1172 ctx->set_wep_key = wpa_eapol_set_wep_key; 1173 #endif /* CONFIG_WEP */ 1174 #ifndef CONFIG_NO_CONFIG_BLOBS 1175 ctx->set_config_blob = wpa_supplicant_set_config_blob; 1176 ctx->get_config_blob = wpa_supplicant_get_config_blob; 1177 #endif /* CONFIG_NO_CONFIG_BLOBS */ 1178 ctx->aborted_cached = wpa_supplicant_aborted_cached; 1179 ctx->opensc_engine_path = wpa_s->conf->opensc_engine_path; 1180 ctx->pkcs11_engine_path = wpa_s->conf->pkcs11_engine_path; 1181 ctx->pkcs11_module_path = wpa_s->conf->pkcs11_module_path; 1182 ctx->openssl_ciphers = wpa_s->conf->openssl_ciphers; 1183 ctx->wps = wpa_s->wps; 1184 ctx->eap_param_needed = wpa_supplicant_eap_param_needed; 1185 #ifdef CONFIG_EAP_PROXY 1186 ctx->eap_proxy_cb = wpa_supplicant_eap_proxy_cb; 1187 ctx->eap_proxy_notify_sim_status = 1188 wpa_supplicant_eap_proxy_notify_sim_status; 1189 #endif /* CONFIG_EAP_PROXY */ 1190 ctx->port_cb = wpa_supplicant_port_cb; 1191 ctx->cb = wpa_supplicant_eapol_cb; 1192 ctx->cert_cb = wpa_supplicant_cert_cb; 1193 ctx->cert_in_cb = wpa_s->conf->cert_in_cb; 1194 ctx->status_cb = wpa_supplicant_status_cb; 1195 ctx->eap_error_cb = wpa_supplicant_eap_error_cb; 1196 ctx->confirm_auth_cb = wpa_supplicant_eap_auth_start_cb; 1197 ctx->set_anon_id = wpa_supplicant_set_anon_id; 1198 ctx->cb_ctx = wpa_s; 1199 wpa_s->eapol = eapol_sm_init(ctx); 1200 if (wpa_s->eapol == NULL) { 1201 os_free(ctx); 1202 wpa_printf(MSG_ERROR, "Failed to initialize EAPOL state " 1203 "machines."); 1204 return -1; 1205 } 1206 #endif /* IEEE8021X_EAPOL */ 1207 1208 return 0; 1209 } 1210 1211 1212 #ifndef CONFIG_NO_WPA 1213 1214 static void wpa_supplicant_set_rekey_offload(void *ctx, 1215 const u8 *kek, size_t kek_len, 1216 const u8 *kck, size_t kck_len, 1217 const u8 *replay_ctr) 1218 { 1219 struct wpa_supplicant *wpa_s = ctx; 1220 1221 wpa_drv_set_rekey_info(wpa_s, kek, kek_len, kck, kck_len, replay_ctr); 1222 } 1223 1224 1225 static int wpa_supplicant_key_mgmt_set_pmk(void *ctx, const u8 *pmk, 1226 size_t pmk_len) 1227 { 1228 struct wpa_supplicant *wpa_s = ctx; 1229 1230 if (wpa_s->conf->key_mgmt_offload && 1231 (wpa_s->drv_flags & WPA_DRIVER_FLAGS_KEY_MGMT_OFFLOAD)) 1232 return wpa_drv_set_key(wpa_s, 0, NULL, 0, 0, 1233 NULL, 0, pmk, pmk_len, KEY_FLAG_PMK); 1234 else 1235 return 0; 1236 } 1237 1238 1239 static void wpa_supplicant_fils_hlp_rx(void *ctx, const u8 *dst, const u8 *src, 1240 const u8 *pkt, size_t pkt_len) 1241 { 1242 struct wpa_supplicant *wpa_s = ctx; 1243 char *hex; 1244 size_t hexlen; 1245 1246 hexlen = pkt_len * 2 + 1; 1247 hex = os_malloc(hexlen); 1248 if (!hex) 1249 return; 1250 wpa_snprintf_hex(hex, hexlen, pkt, pkt_len); 1251 wpa_msg(wpa_s, MSG_INFO, FILS_HLP_RX "dst=" MACSTR " src=" MACSTR 1252 " frame=%s", MAC2STR(dst), MAC2STR(src), hex); 1253 os_free(hex); 1254 } 1255 1256 1257 static int wpa_supplicant_channel_info(void *_wpa_s, 1258 struct wpa_channel_info *ci) 1259 { 1260 struct wpa_supplicant *wpa_s = _wpa_s; 1261 1262 return wpa_drv_channel_info(wpa_s, ci); 1263 } 1264 1265 1266 static void disable_wpa_wpa2(struct wpa_ssid *ssid) 1267 { 1268 ssid->proto &= ~WPA_PROTO_WPA; 1269 ssid->proto |= WPA_PROTO_RSN; 1270 ssid->key_mgmt &= ~(WPA_KEY_MGMT_PSK | WPA_KEY_MGMT_FT_PSK | 1271 WPA_KEY_MGMT_PSK_SHA256); 1272 ssid->group_cipher &= ~WPA_CIPHER_TKIP; 1273 if (!(ssid->group_cipher & (WPA_CIPHER_CCMP | WPA_CIPHER_GCMP | 1274 WPA_CIPHER_GCMP_256 | WPA_CIPHER_CCMP_256))) 1275 ssid->group_cipher |= WPA_CIPHER_CCMP; 1276 ssid->ieee80211w = MGMT_FRAME_PROTECTION_REQUIRED; 1277 } 1278 1279 1280 static void wpa_supplicant_transition_disable(void *_wpa_s, u8 bitmap) 1281 { 1282 struct wpa_supplicant *wpa_s = _wpa_s; 1283 struct wpa_ssid *ssid; 1284 int changed = 0; 1285 1286 wpa_msg(wpa_s, MSG_INFO, TRANSITION_DISABLE "%02x", bitmap); 1287 1288 ssid = wpa_s->current_ssid; 1289 if (!ssid) 1290 return; 1291 1292 #ifdef CONFIG_SAE 1293 if ((bitmap & TRANSITION_DISABLE_WPA3_PERSONAL) && 1294 wpa_key_mgmt_sae(wpa_s->key_mgmt) && 1295 (ssid->key_mgmt & (WPA_KEY_MGMT_SAE | WPA_KEY_MGMT_FT_SAE)) && 1296 (ssid->ieee80211w != MGMT_FRAME_PROTECTION_REQUIRED || 1297 (ssid->group_cipher & WPA_CIPHER_TKIP))) { 1298 wpa_printf(MSG_DEBUG, 1299 "WPA3-Personal transition mode disabled based on AP notification"); 1300 disable_wpa_wpa2(ssid); 1301 changed = 1; 1302 } 1303 1304 if ((bitmap & TRANSITION_DISABLE_SAE_PK) && 1305 wpa_key_mgmt_sae(wpa_s->key_mgmt) && 1306 #ifdef CONFIG_SME 1307 wpa_s->sme.sae.state == SAE_ACCEPTED && 1308 wpa_s->sme.sae.pk && 1309 #endif /* CONFIG_SME */ 1310 (ssid->key_mgmt & (WPA_KEY_MGMT_SAE | WPA_KEY_MGMT_FT_SAE)) && 1311 (ssid->sae_pk != SAE_PK_MODE_ONLY || 1312 ssid->ieee80211w != MGMT_FRAME_PROTECTION_REQUIRED || 1313 (ssid->group_cipher & WPA_CIPHER_TKIP))) { 1314 wpa_printf(MSG_DEBUG, 1315 "SAE-PK: SAE authentication without PK disabled based on AP notification"); 1316 disable_wpa_wpa2(ssid); 1317 ssid->sae_pk = SAE_PK_MODE_ONLY; 1318 changed = 1; 1319 } 1320 #endif /* CONFIG_SAE */ 1321 1322 if ((bitmap & TRANSITION_DISABLE_WPA3_ENTERPRISE) && 1323 wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt) && 1324 (ssid->key_mgmt & (WPA_KEY_MGMT_IEEE8021X | 1325 WPA_KEY_MGMT_FT_IEEE8021X | 1326 WPA_KEY_MGMT_IEEE8021X_SHA256)) && 1327 (ssid->ieee80211w != MGMT_FRAME_PROTECTION_REQUIRED || 1328 (ssid->group_cipher & WPA_CIPHER_TKIP))) { 1329 disable_wpa_wpa2(ssid); 1330 changed = 1; 1331 } 1332 1333 if ((bitmap & TRANSITION_DISABLE_ENHANCED_OPEN) && 1334 wpa_s->key_mgmt == WPA_KEY_MGMT_OWE && 1335 (ssid->key_mgmt & WPA_KEY_MGMT_OWE) && 1336 !ssid->owe_only) { 1337 ssid->owe_only = 1; 1338 changed = 1; 1339 } 1340 1341 if (!changed) 1342 return; 1343 1344 #ifndef CONFIG_NO_CONFIG_WRITE 1345 if (wpa_s->conf->update_config && 1346 wpa_config_write(wpa_s->confname, wpa_s->conf)) 1347 wpa_printf(MSG_DEBUG, "Failed to update configuration"); 1348 #endif /* CONFIG_NO_CONFIG_WRITE */ 1349 } 1350 1351 1352 static void wpa_supplicant_store_ptk(void *ctx, u8 *addr, int cipher, 1353 u32 life_time, const struct wpa_ptk *ptk) 1354 { 1355 struct wpa_supplicant *wpa_s = ctx; 1356 1357 ptksa_cache_add(wpa_s->ptksa, addr, cipher, life_time, ptk); 1358 } 1359 1360 #endif /* CONFIG_NO_WPA */ 1361 1362 1363 int wpa_supplicant_init_wpa(struct wpa_supplicant *wpa_s) 1364 { 1365 #ifndef CONFIG_NO_WPA 1366 struct wpa_sm_ctx *ctx; 1367 1368 wpa_s->ptksa = ptksa_cache_init(); 1369 if (!wpa_s->ptksa) { 1370 wpa_printf(MSG_ERROR, "Failed to allocate PTKSA"); 1371 return -1; 1372 } 1373 1374 ctx = os_zalloc(sizeof(*ctx)); 1375 if (ctx == NULL) { 1376 wpa_printf(MSG_ERROR, "Failed to allocate WPA context."); 1377 1378 ptksa_cache_deinit(wpa_s->ptksa); 1379 wpa_s->ptksa = NULL; 1380 1381 return -1; 1382 } 1383 1384 ctx->ctx = wpa_s; 1385 ctx->msg_ctx = wpa_s; 1386 ctx->set_state = _wpa_supplicant_set_state; 1387 ctx->get_state = _wpa_supplicant_get_state; 1388 ctx->deauthenticate = _wpa_supplicant_deauthenticate; 1389 ctx->reconnect = _wpa_supplicant_reconnect; 1390 ctx->set_key = wpa_supplicant_set_key; 1391 ctx->get_network_ctx = wpa_supplicant_get_network_ctx; 1392 ctx->get_bssid = wpa_supplicant_get_bssid; 1393 ctx->ether_send = _wpa_ether_send; 1394 ctx->get_beacon_ie = wpa_supplicant_get_beacon_ie; 1395 ctx->alloc_eapol = _wpa_alloc_eapol; 1396 ctx->cancel_auth_timeout = _wpa_supplicant_cancel_auth_timeout; 1397 ctx->add_pmkid = wpa_supplicant_add_pmkid; 1398 ctx->remove_pmkid = wpa_supplicant_remove_pmkid; 1399 #ifndef CONFIG_NO_CONFIG_BLOBS 1400 ctx->set_config_blob = wpa_supplicant_set_config_blob; 1401 ctx->get_config_blob = wpa_supplicant_get_config_blob; 1402 #endif /* CONFIG_NO_CONFIG_BLOBS */ 1403 ctx->mlme_setprotection = wpa_supplicant_mlme_setprotection; 1404 #ifdef CONFIG_IEEE80211R 1405 ctx->update_ft_ies = wpa_supplicant_update_ft_ies; 1406 ctx->send_ft_action = wpa_supplicant_send_ft_action; 1407 ctx->mark_authenticated = wpa_supplicant_mark_authenticated; 1408 #endif /* CONFIG_IEEE80211R */ 1409 #ifdef CONFIG_TDLS 1410 ctx->tdls_get_capa = wpa_supplicant_tdls_get_capa; 1411 ctx->send_tdls_mgmt = wpa_supplicant_send_tdls_mgmt; 1412 ctx->tdls_oper = wpa_supplicant_tdls_oper; 1413 ctx->tdls_peer_addset = wpa_supplicant_tdls_peer_addset; 1414 ctx->tdls_enable_channel_switch = 1415 wpa_supplicant_tdls_enable_channel_switch; 1416 ctx->tdls_disable_channel_switch = 1417 wpa_supplicant_tdls_disable_channel_switch; 1418 #endif /* CONFIG_TDLS */ 1419 ctx->set_rekey_offload = wpa_supplicant_set_rekey_offload; 1420 ctx->key_mgmt_set_pmk = wpa_supplicant_key_mgmt_set_pmk; 1421 ctx->fils_hlp_rx = wpa_supplicant_fils_hlp_rx; 1422 ctx->channel_info = wpa_supplicant_channel_info; 1423 ctx->transition_disable = wpa_supplicant_transition_disable; 1424 ctx->store_ptk = wpa_supplicant_store_ptk; 1425 1426 wpa_s->wpa = wpa_sm_init(ctx); 1427 if (wpa_s->wpa == NULL) { 1428 wpa_printf(MSG_ERROR, 1429 "Failed to initialize WPA state machine"); 1430 os_free(ctx); 1431 ptksa_cache_deinit(wpa_s->ptksa); 1432 wpa_s->ptksa = NULL; 1433 return -1; 1434 } 1435 #endif /* CONFIG_NO_WPA */ 1436 1437 return 0; 1438 } 1439 1440 1441 void wpa_supplicant_rsn_supp_set_config(struct wpa_supplicant *wpa_s, 1442 struct wpa_ssid *ssid) 1443 { 1444 struct rsn_supp_config conf; 1445 if (ssid) { 1446 os_memset(&conf, 0, sizeof(conf)); 1447 conf.network_ctx = ssid; 1448 conf.allowed_pairwise_cipher = ssid->pairwise_cipher; 1449 #ifdef IEEE8021X_EAPOL 1450 conf.proactive_key_caching = ssid->proactive_key_caching < 0 ? 1451 wpa_s->conf->okc : ssid->proactive_key_caching; 1452 conf.eap_workaround = ssid->eap_workaround; 1453 conf.eap_conf_ctx = &ssid->eap; 1454 #endif /* IEEE8021X_EAPOL */ 1455 conf.ssid = ssid->ssid; 1456 conf.ssid_len = ssid->ssid_len; 1457 conf.wpa_ptk_rekey = ssid->wpa_ptk_rekey; 1458 conf.wpa_deny_ptk0_rekey = ssid->wpa_deny_ptk0_rekey; 1459 conf.owe_ptk_workaround = ssid->owe_ptk_workaround; 1460 #ifdef CONFIG_P2P 1461 if (ssid->p2p_group && wpa_s->current_bss && 1462 !wpa_s->p2p_disable_ip_addr_req) { 1463 struct wpabuf *p2p; 1464 p2p = wpa_bss_get_vendor_ie_multi(wpa_s->current_bss, 1465 P2P_IE_VENDOR_TYPE); 1466 if (p2p) { 1467 u8 group_capab; 1468 group_capab = p2p_get_group_capab(p2p); 1469 if (group_capab & 1470 P2P_GROUP_CAPAB_IP_ADDR_ALLOCATION) 1471 conf.p2p = 1; 1472 wpabuf_free(p2p); 1473 } 1474 } 1475 #endif /* CONFIG_P2P */ 1476 conf.wpa_rsc_relaxation = wpa_s->conf->wpa_rsc_relaxation; 1477 #ifdef CONFIG_FILS 1478 if (wpa_key_mgmt_fils(wpa_s->key_mgmt)) 1479 conf.fils_cache_id = 1480 wpa_bss_get_fils_cache_id(wpa_s->current_bss); 1481 #endif /* CONFIG_FILS */ 1482 if ((wpa_s->drv_flags & WPA_DRIVER_FLAGS_BEACON_PROTECTION) || 1483 (wpa_s->drv_flags2 & 1484 WPA_DRIVER_FLAGS2_BEACON_PROTECTION_CLIENT)) 1485 conf.beacon_prot = ssid->beacon_prot; 1486 1487 #ifdef CONFIG_PASN 1488 #ifdef CONFIG_TESTING_OPTIONS 1489 conf.force_kdk_derivation = wpa_s->conf->force_kdk_derivation; 1490 #endif /* CONFIG_TESTING_OPTIONS */ 1491 #endif /* CONFIG_PASN */ 1492 } 1493 wpa_sm_set_config(wpa_s->wpa, ssid ? &conf : NULL); 1494 } 1495