Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 1 | /* |
| 2 | * wpa_supplicant - IBSS RSN |
| 3 | * Copyright (c) 2009, Jouni Malinen <j@w1.fi> |
| 4 | * |
Dmitry Shmidt | c5ec7f5 | 2012-03-06 16:33:24 -0800 | [diff] [blame] | 5 | * This software may be distributed under the terms of the BSD license. |
| 6 | * See README for more details. |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 7 | */ |
| 8 | |
| 9 | #include "includes.h" |
| 10 | |
| 11 | #include "common.h" |
| 12 | #include "l2_packet/l2_packet.h" |
| 13 | #include "rsn_supp/wpa.h" |
| 14 | #include "rsn_supp/wpa_ie.h" |
| 15 | #include "ap/wpa_auth.h" |
| 16 | #include "wpa_supplicant_i.h" |
| 17 | #include "driver_i.h" |
| 18 | #include "ibss_rsn.h" |
| 19 | |
| 20 | |
Dmitry Shmidt | c5ec7f5 | 2012-03-06 16:33:24 -0800 | [diff] [blame] | 21 | static struct ibss_rsn_peer * ibss_rsn_get_peer(struct ibss_rsn *ibss_rsn, |
| 22 | const u8 *addr) |
| 23 | { |
| 24 | struct ibss_rsn_peer *peer; |
| 25 | |
| 26 | for (peer = ibss_rsn->peers; peer; peer = peer->next) |
| 27 | if (os_memcmp(addr, peer->addr, ETH_ALEN) == 0) |
| 28 | break; |
| 29 | return peer; |
| 30 | } |
| 31 | |
| 32 | |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 33 | static void ibss_rsn_free(struct ibss_rsn_peer *peer) |
| 34 | { |
| 35 | wpa_auth_sta_deinit(peer->auth); |
| 36 | wpa_sm_deinit(peer->supp); |
| 37 | os_free(peer); |
| 38 | } |
| 39 | |
| 40 | |
| 41 | static void supp_set_state(void *ctx, enum wpa_states state) |
| 42 | { |
| 43 | struct ibss_rsn_peer *peer = ctx; |
| 44 | peer->supp_state = state; |
| 45 | } |
| 46 | |
| 47 | |
| 48 | static enum wpa_states supp_get_state(void *ctx) |
| 49 | { |
| 50 | struct ibss_rsn_peer *peer = ctx; |
| 51 | return peer->supp_state; |
| 52 | } |
| 53 | |
| 54 | |
| 55 | static int supp_ether_send(void *ctx, const u8 *dest, u16 proto, const u8 *buf, |
| 56 | size_t len) |
| 57 | { |
| 58 | struct ibss_rsn_peer *peer = ctx; |
| 59 | struct wpa_supplicant *wpa_s = peer->ibss_rsn->wpa_s; |
| 60 | |
| 61 | wpa_printf(MSG_DEBUG, "SUPP: %s(dest=" MACSTR " proto=0x%04x " |
| 62 | "len=%lu)", |
| 63 | __func__, MAC2STR(dest), proto, (unsigned long) len); |
| 64 | |
| 65 | if (wpa_s->l2) |
| 66 | return l2_packet_send(wpa_s->l2, dest, proto, buf, len); |
| 67 | |
| 68 | return wpa_drv_send_eapol(wpa_s, dest, proto, buf, len); |
| 69 | } |
| 70 | |
| 71 | |
| 72 | static u8 * supp_alloc_eapol(void *ctx, u8 type, const void *data, |
| 73 | u16 data_len, size_t *msg_len, void **data_pos) |
| 74 | { |
| 75 | struct ieee802_1x_hdr *hdr; |
| 76 | |
| 77 | wpa_printf(MSG_DEBUG, "SUPP: %s(type=%d data_len=%d)", |
| 78 | __func__, type, data_len); |
| 79 | |
| 80 | *msg_len = sizeof(*hdr) + data_len; |
| 81 | hdr = os_malloc(*msg_len); |
| 82 | if (hdr == NULL) |
| 83 | return NULL; |
| 84 | |
| 85 | hdr->version = 2; |
| 86 | hdr->type = type; |
| 87 | hdr->length = host_to_be16(data_len); |
| 88 | |
| 89 | if (data) |
| 90 | os_memcpy(hdr + 1, data, data_len); |
| 91 | else |
| 92 | os_memset(hdr + 1, 0, data_len); |
| 93 | |
| 94 | if (data_pos) |
| 95 | *data_pos = hdr + 1; |
| 96 | |
| 97 | return (u8 *) hdr; |
| 98 | } |
| 99 | |
| 100 | |
| 101 | static int supp_get_beacon_ie(void *ctx) |
| 102 | { |
| 103 | struct ibss_rsn_peer *peer = ctx; |
| 104 | |
| 105 | wpa_printf(MSG_DEBUG, "SUPP: %s", __func__); |
| 106 | /* TODO: get correct RSN IE */ |
| 107 | return wpa_sm_set_ap_rsn_ie(peer->supp, |
| 108 | (u8 *) "\x30\x14\x01\x00" |
| 109 | "\x00\x0f\xac\x04" |
| 110 | "\x01\x00\x00\x0f\xac\x04" |
| 111 | "\x01\x00\x00\x0f\xac\x02" |
| 112 | "\x00\x00", 22); |
| 113 | } |
| 114 | |
| 115 | |
| 116 | static int supp_set_key(void *ctx, enum wpa_alg alg, |
| 117 | const u8 *addr, int key_idx, int set_tx, |
| 118 | const u8 *seq, size_t seq_len, |
| 119 | const u8 *key, size_t key_len) |
| 120 | { |
| 121 | struct ibss_rsn_peer *peer = ctx; |
| 122 | |
| 123 | wpa_printf(MSG_DEBUG, "SUPP: %s(alg=%d addr=" MACSTR " key_idx=%d " |
| 124 | "set_tx=%d)", |
| 125 | __func__, alg, MAC2STR(addr), key_idx, set_tx); |
| 126 | wpa_hexdump(MSG_DEBUG, "SUPP: set_key - seq", seq, seq_len); |
| 127 | wpa_hexdump_key(MSG_DEBUG, "SUPP: set_key - key", key, key_len); |
| 128 | |
| 129 | if (key_idx == 0) { |
| 130 | /* |
| 131 | * In IBSS RSN, the pairwise key from the 4-way handshake |
| 132 | * initiated by the peer with highest MAC address is used. |
| 133 | */ |
| 134 | if (os_memcmp(peer->ibss_rsn->wpa_s->own_addr, peer->addr, |
| 135 | ETH_ALEN) > 0) { |
| 136 | wpa_printf(MSG_DEBUG, "SUPP: Do not use this PTK"); |
| 137 | return 0; |
| 138 | } |
| 139 | } |
| 140 | |
| 141 | if (is_broadcast_ether_addr(addr)) |
| 142 | addr = peer->addr; |
| 143 | return wpa_drv_set_key(peer->ibss_rsn->wpa_s, alg, addr, key_idx, |
| 144 | set_tx, seq, seq_len, key, key_len); |
| 145 | } |
| 146 | |
| 147 | |
| 148 | static void * supp_get_network_ctx(void *ctx) |
| 149 | { |
| 150 | struct ibss_rsn_peer *peer = ctx; |
| 151 | return wpa_supplicant_get_ssid(peer->ibss_rsn->wpa_s); |
| 152 | } |
| 153 | |
| 154 | |
| 155 | static int supp_mlme_setprotection(void *ctx, const u8 *addr, |
| 156 | int protection_type, int key_type) |
| 157 | { |
| 158 | wpa_printf(MSG_DEBUG, "SUPP: %s(addr=" MACSTR " protection_type=%d " |
| 159 | "key_type=%d)", |
| 160 | __func__, MAC2STR(addr), protection_type, key_type); |
| 161 | return 0; |
| 162 | } |
| 163 | |
| 164 | |
| 165 | static void supp_cancel_auth_timeout(void *ctx) |
| 166 | { |
| 167 | wpa_printf(MSG_DEBUG, "SUPP: %s", __func__); |
| 168 | } |
| 169 | |
| 170 | |
| 171 | static void supp_deauthenticate(void * ctx, int reason_code) |
| 172 | { |
| 173 | wpa_printf(MSG_DEBUG, "SUPP: %s (TODO)", __func__); |
| 174 | } |
| 175 | |
| 176 | |
Dmitry Shmidt | 1f69aa5 | 2012-01-24 16:10:04 -0800 | [diff] [blame] | 177 | static int ibss_rsn_supp_init(struct ibss_rsn_peer *peer, const u8 *own_addr, |
| 178 | const u8 *psk) |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 179 | { |
| 180 | struct wpa_sm_ctx *ctx = os_zalloc(sizeof(*ctx)); |
| 181 | if (ctx == NULL) |
| 182 | return -1; |
| 183 | |
| 184 | ctx->ctx = peer; |
| 185 | ctx->msg_ctx = peer->ibss_rsn->wpa_s; |
| 186 | ctx->set_state = supp_set_state; |
| 187 | ctx->get_state = supp_get_state; |
| 188 | ctx->ether_send = supp_ether_send; |
| 189 | ctx->get_beacon_ie = supp_get_beacon_ie; |
| 190 | ctx->alloc_eapol = supp_alloc_eapol; |
| 191 | ctx->set_key = supp_set_key; |
| 192 | ctx->get_network_ctx = supp_get_network_ctx; |
| 193 | ctx->mlme_setprotection = supp_mlme_setprotection; |
| 194 | ctx->cancel_auth_timeout = supp_cancel_auth_timeout; |
| 195 | ctx->deauthenticate = supp_deauthenticate; |
| 196 | peer->supp = wpa_sm_init(ctx); |
| 197 | if (peer->supp == NULL) { |
| 198 | wpa_printf(MSG_DEBUG, "SUPP: wpa_sm_init() failed"); |
| 199 | return -1; |
| 200 | } |
| 201 | |
| 202 | wpa_sm_set_own_addr(peer->supp, own_addr); |
| 203 | wpa_sm_set_param(peer->supp, WPA_PARAM_RSN_ENABLED, 1); |
| 204 | wpa_sm_set_param(peer->supp, WPA_PARAM_PROTO, WPA_PROTO_RSN); |
| 205 | wpa_sm_set_param(peer->supp, WPA_PARAM_PAIRWISE, WPA_CIPHER_CCMP); |
| 206 | wpa_sm_set_param(peer->supp, WPA_PARAM_GROUP, WPA_CIPHER_CCMP); |
| 207 | wpa_sm_set_param(peer->supp, WPA_PARAM_KEY_MGMT, WPA_KEY_MGMT_PSK); |
| 208 | wpa_sm_set_pmk(peer->supp, psk, PMK_LEN); |
| 209 | |
| 210 | peer->supp_ie_len = sizeof(peer->supp_ie); |
| 211 | if (wpa_sm_set_assoc_wpa_ie_default(peer->supp, peer->supp_ie, |
| 212 | &peer->supp_ie_len) < 0) { |
| 213 | wpa_printf(MSG_DEBUG, "SUPP: wpa_sm_set_assoc_wpa_ie_default()" |
| 214 | " failed"); |
| 215 | return -1; |
| 216 | } |
| 217 | |
| 218 | wpa_sm_notify_assoc(peer->supp, peer->addr); |
| 219 | |
| 220 | return 0; |
| 221 | } |
| 222 | |
| 223 | |
| 224 | static void auth_logger(void *ctx, const u8 *addr, logger_level level, |
| 225 | const char *txt) |
| 226 | { |
| 227 | if (addr) |
| 228 | wpa_printf(MSG_DEBUG, "AUTH: " MACSTR " - %s", |
| 229 | MAC2STR(addr), txt); |
| 230 | else |
| 231 | wpa_printf(MSG_DEBUG, "AUTH: %s", txt); |
| 232 | } |
| 233 | |
| 234 | |
| 235 | static const u8 * auth_get_psk(void *ctx, const u8 *addr, const u8 *prev_psk) |
| 236 | { |
| 237 | struct ibss_rsn *ibss_rsn = ctx; |
| 238 | wpa_printf(MSG_DEBUG, "AUTH: %s (addr=" MACSTR " prev_psk=%p)", |
| 239 | __func__, MAC2STR(addr), prev_psk); |
| 240 | if (prev_psk) |
| 241 | return NULL; |
| 242 | return ibss_rsn->psk; |
| 243 | } |
| 244 | |
| 245 | |
| 246 | static int auth_send_eapol(void *ctx, const u8 *addr, const u8 *data, |
| 247 | size_t data_len, int encrypt) |
| 248 | { |
| 249 | struct ibss_rsn *ibss_rsn = ctx; |
| 250 | struct wpa_supplicant *wpa_s = ibss_rsn->wpa_s; |
| 251 | |
| 252 | wpa_printf(MSG_DEBUG, "AUTH: %s(addr=" MACSTR " data_len=%lu " |
| 253 | "encrypt=%d)", |
| 254 | __func__, MAC2STR(addr), (unsigned long) data_len, encrypt); |
| 255 | |
| 256 | if (wpa_s->l2) |
| 257 | return l2_packet_send(wpa_s->l2, addr, ETH_P_EAPOL, data, |
| 258 | data_len); |
| 259 | |
| 260 | return wpa_drv_send_eapol(wpa_s, addr, ETH_P_EAPOL, data, data_len); |
| 261 | } |
| 262 | |
| 263 | |
| 264 | static int auth_set_key(void *ctx, int vlan_id, enum wpa_alg alg, |
| 265 | const u8 *addr, int idx, u8 *key, size_t key_len) |
| 266 | { |
| 267 | struct ibss_rsn *ibss_rsn = ctx; |
| 268 | u8 seq[6]; |
| 269 | |
| 270 | os_memset(seq, 0, sizeof(seq)); |
| 271 | |
| 272 | if (addr) { |
| 273 | wpa_printf(MSG_DEBUG, "AUTH: %s(alg=%d addr=" MACSTR |
| 274 | " key_idx=%d)", |
| 275 | __func__, alg, MAC2STR(addr), idx); |
| 276 | } else { |
| 277 | wpa_printf(MSG_DEBUG, "AUTH: %s(alg=%d key_idx=%d)", |
| 278 | __func__, alg, idx); |
| 279 | } |
| 280 | wpa_hexdump_key(MSG_DEBUG, "AUTH: set_key - key", key, key_len); |
| 281 | |
| 282 | if (idx == 0) { |
| 283 | /* |
| 284 | * In IBSS RSN, the pairwise key from the 4-way handshake |
| 285 | * initiated by the peer with highest MAC address is used. |
| 286 | */ |
| 287 | if (addr == NULL || |
| 288 | os_memcmp(ibss_rsn->wpa_s->own_addr, addr, ETH_ALEN) < 0) { |
| 289 | wpa_printf(MSG_DEBUG, "AUTH: Do not use this PTK"); |
| 290 | return 0; |
| 291 | } |
| 292 | } |
| 293 | |
| 294 | return wpa_drv_set_key(ibss_rsn->wpa_s, alg, addr, idx, |
| 295 | 1, seq, 6, key, key_len); |
| 296 | } |
| 297 | |
| 298 | |
Dmitry Shmidt | 34af306 | 2013-07-11 10:46:32 -0700 | [diff] [blame^] | 299 | static void ibss_rsn_disconnect(void *ctx, const u8 *addr, u16 reason) |
| 300 | { |
| 301 | struct ibss_rsn *ibss_rsn = ctx; |
| 302 | wpa_drv_sta_deauth(ibss_rsn->wpa_s, addr, reason); |
| 303 | } |
| 304 | |
| 305 | |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 306 | static int auth_for_each_sta(void *ctx, int (*cb)(struct wpa_state_machine *sm, |
| 307 | void *ctx), |
| 308 | void *cb_ctx) |
| 309 | { |
| 310 | struct ibss_rsn *ibss_rsn = ctx; |
| 311 | struct ibss_rsn_peer *peer; |
| 312 | |
| 313 | wpa_printf(MSG_DEBUG, "AUTH: for_each_sta"); |
| 314 | |
| 315 | for (peer = ibss_rsn->peers; peer; peer = peer->next) { |
| 316 | if (peer->auth && cb(peer->auth, cb_ctx)) |
| 317 | return 1; |
| 318 | } |
| 319 | |
| 320 | return 0; |
| 321 | } |
| 322 | |
| 323 | |
Dmitry Shmidt | c5ec7f5 | 2012-03-06 16:33:24 -0800 | [diff] [blame] | 324 | static void ibss_set_sta_authorized(struct ibss_rsn *ibss_rsn, |
| 325 | struct ibss_rsn_peer *peer, int authorized) |
| 326 | { |
| 327 | int res; |
| 328 | |
| 329 | if (authorized) { |
| 330 | res = wpa_drv_sta_set_flags(ibss_rsn->wpa_s, peer->addr, |
| 331 | WPA_STA_AUTHORIZED, |
| 332 | WPA_STA_AUTHORIZED, ~0); |
| 333 | wpa_printf(MSG_DEBUG, "AUTH: " MACSTR " authorizing port", |
| 334 | MAC2STR(peer->addr)); |
| 335 | } else { |
| 336 | res = wpa_drv_sta_set_flags(ibss_rsn->wpa_s, peer->addr, |
| 337 | 0, 0, ~WPA_STA_AUTHORIZED); |
| 338 | wpa_printf(MSG_DEBUG, "AUTH: " MACSTR " unauthorizing port", |
| 339 | MAC2STR(peer->addr)); |
| 340 | } |
| 341 | |
| 342 | if (res && errno != ENOENT) { |
| 343 | wpa_printf(MSG_DEBUG, "Could not set station " MACSTR " flags " |
| 344 | "for kernel driver (errno=%d)", |
| 345 | MAC2STR(peer->addr), errno); |
| 346 | } |
| 347 | } |
| 348 | |
| 349 | |
| 350 | static void auth_set_eapol(void *ctx, const u8 *addr, |
| 351 | wpa_eapol_variable var, int value) |
| 352 | { |
| 353 | struct ibss_rsn *ibss_rsn = ctx; |
| 354 | struct ibss_rsn_peer *peer = ibss_rsn_get_peer(ibss_rsn, addr); |
| 355 | |
| 356 | if (peer == NULL) |
| 357 | return; |
| 358 | |
| 359 | switch (var) { |
| 360 | case WPA_EAPOL_authorized: |
| 361 | ibss_set_sta_authorized(ibss_rsn, peer, value); |
| 362 | break; |
| 363 | default: |
| 364 | /* do not handle any other event */ |
| 365 | wpa_printf(MSG_DEBUG, "AUTH: eapol event not handled %d", var); |
| 366 | break; |
| 367 | } |
| 368 | } |
| 369 | |
| 370 | |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 371 | static int ibss_rsn_auth_init_group(struct ibss_rsn *ibss_rsn, |
| 372 | const u8 *own_addr) |
| 373 | { |
| 374 | struct wpa_auth_config conf; |
| 375 | struct wpa_auth_callbacks cb; |
| 376 | |
| 377 | wpa_printf(MSG_DEBUG, "AUTH: Initializing group state machine"); |
| 378 | |
| 379 | os_memset(&conf, 0, sizeof(conf)); |
| 380 | conf.wpa = 2; |
| 381 | conf.wpa_key_mgmt = WPA_KEY_MGMT_PSK; |
| 382 | conf.wpa_pairwise = WPA_CIPHER_CCMP; |
| 383 | conf.rsn_pairwise = WPA_CIPHER_CCMP; |
| 384 | conf.wpa_group = WPA_CIPHER_CCMP; |
| 385 | conf.eapol_version = 2; |
| 386 | conf.wpa_group_rekey = 600; |
| 387 | |
| 388 | os_memset(&cb, 0, sizeof(cb)); |
| 389 | cb.ctx = ibss_rsn; |
| 390 | cb.logger = auth_logger; |
Dmitry Shmidt | c5ec7f5 | 2012-03-06 16:33:24 -0800 | [diff] [blame] | 391 | cb.set_eapol = auth_set_eapol; |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 392 | cb.send_eapol = auth_send_eapol; |
| 393 | cb.get_psk = auth_get_psk; |
| 394 | cb.set_key = auth_set_key; |
| 395 | cb.for_each_sta = auth_for_each_sta; |
Dmitry Shmidt | 34af306 | 2013-07-11 10:46:32 -0700 | [diff] [blame^] | 396 | cb.disconnect = ibss_rsn_disconnect; |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 397 | |
| 398 | ibss_rsn->auth_group = wpa_init(own_addr, &conf, &cb); |
| 399 | if (ibss_rsn->auth_group == NULL) { |
| 400 | wpa_printf(MSG_DEBUG, "AUTH: wpa_init() failed"); |
| 401 | return -1; |
| 402 | } |
| 403 | |
Dmitry Shmidt | 1f69aa5 | 2012-01-24 16:10:04 -0800 | [diff] [blame] | 404 | wpa_init_keys(ibss_rsn->auth_group); |
| 405 | |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 406 | return 0; |
| 407 | } |
| 408 | |
| 409 | |
| 410 | static int ibss_rsn_auth_init(struct ibss_rsn *ibss_rsn, |
| 411 | struct ibss_rsn_peer *peer) |
| 412 | { |
| 413 | peer->auth = wpa_auth_sta_init(ibss_rsn->auth_group, peer->addr); |
| 414 | if (peer->auth == NULL) { |
| 415 | wpa_printf(MSG_DEBUG, "AUTH: wpa_auth_sta_init() failed"); |
| 416 | return -1; |
| 417 | } |
| 418 | |
| 419 | /* TODO: get peer RSN IE with Probe Request */ |
| 420 | if (wpa_validate_wpa_ie(ibss_rsn->auth_group, peer->auth, |
| 421 | (u8 *) "\x30\x14\x01\x00" |
| 422 | "\x00\x0f\xac\x04" |
| 423 | "\x01\x00\x00\x0f\xac\x04" |
| 424 | "\x01\x00\x00\x0f\xac\x02" |
| 425 | "\x00\x00", 22, NULL, 0) != |
| 426 | WPA_IE_OK) { |
| 427 | wpa_printf(MSG_DEBUG, "AUTH: wpa_validate_wpa_ie() failed"); |
| 428 | return -1; |
| 429 | } |
| 430 | |
| 431 | if (wpa_auth_sm_event(peer->auth, WPA_ASSOC)) |
| 432 | return -1; |
| 433 | |
| 434 | if (wpa_auth_sta_associated(ibss_rsn->auth_group, peer->auth)) |
| 435 | return -1; |
| 436 | |
| 437 | return 0; |
| 438 | } |
| 439 | |
| 440 | |
| 441 | int ibss_rsn_start(struct ibss_rsn *ibss_rsn, const u8 *addr) |
| 442 | { |
| 443 | struct ibss_rsn_peer *peer; |
| 444 | |
| 445 | if (ibss_rsn == NULL) |
| 446 | return -1; |
| 447 | |
Dmitry Shmidt | c5ec7f5 | 2012-03-06 16:33:24 -0800 | [diff] [blame] | 448 | if (ibss_rsn_get_peer(ibss_rsn, addr)) { |
| 449 | wpa_printf(MSG_DEBUG, "RSN: IBSS Authenticator and Supplicant " |
| 450 | "for peer " MACSTR " already running", |
| 451 | MAC2STR(addr)); |
| 452 | return 0; |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 453 | } |
| 454 | |
| 455 | wpa_printf(MSG_DEBUG, "RSN: Starting IBSS Authenticator and " |
| 456 | "Supplicant for peer " MACSTR, MAC2STR(addr)); |
| 457 | |
| 458 | peer = os_zalloc(sizeof(*peer)); |
| 459 | if (peer == NULL) |
| 460 | return -1; |
| 461 | |
| 462 | peer->ibss_rsn = ibss_rsn; |
| 463 | os_memcpy(peer->addr, addr, ETH_ALEN); |
| 464 | |
| 465 | if (ibss_rsn_supp_init(peer, ibss_rsn->wpa_s->own_addr, ibss_rsn->psk) |
| 466 | < 0) { |
| 467 | ibss_rsn_free(peer); |
| 468 | return -1; |
| 469 | } |
| 470 | |
| 471 | if (ibss_rsn_auth_init(ibss_rsn, peer) < 0) { |
| 472 | ibss_rsn_free(peer); |
| 473 | return -1; |
| 474 | } |
| 475 | |
| 476 | peer->next = ibss_rsn->peers; |
| 477 | ibss_rsn->peers = peer; |
| 478 | |
| 479 | return 0; |
| 480 | } |
| 481 | |
| 482 | |
| 483 | void ibss_rsn_stop(struct ibss_rsn *ibss_rsn, const u8 *peermac) |
| 484 | { |
| 485 | struct ibss_rsn_peer *peer, *prev; |
| 486 | |
| 487 | if (ibss_rsn == NULL) |
| 488 | return; |
| 489 | |
| 490 | if (peermac == NULL) { |
| 491 | /* remove all peers */ |
| 492 | wpa_printf(MSG_DEBUG, "%s: Remove all peers", __func__); |
| 493 | peer = ibss_rsn->peers; |
| 494 | while (peer) { |
| 495 | prev = peer; |
| 496 | peer = peer->next; |
| 497 | ibss_rsn_free(prev); |
| 498 | ibss_rsn->peers = peer; |
| 499 | } |
| 500 | } else { |
| 501 | /* remove specific peer */ |
| 502 | wpa_printf(MSG_DEBUG, "%s: Remove specific peer " MACSTR, |
| 503 | __func__, MAC2STR(peermac)); |
| 504 | |
| 505 | for (prev = NULL, peer = ibss_rsn->peers; peer != NULL; |
| 506 | prev = peer, peer = peer->next) { |
| 507 | if (os_memcmp(peermac, peer->addr, ETH_ALEN) == 0) { |
| 508 | if (prev == NULL) |
| 509 | ibss_rsn->peers = peer->next; |
| 510 | else |
| 511 | prev->next = peer->next; |
| 512 | ibss_rsn_free(peer); |
| 513 | wpa_printf(MSG_DEBUG, "%s: Successfully " |
| 514 | "removed a specific peer", |
| 515 | __func__); |
| 516 | break; |
| 517 | } |
| 518 | } |
| 519 | } |
| 520 | } |
| 521 | |
| 522 | |
| 523 | struct ibss_rsn * ibss_rsn_init(struct wpa_supplicant *wpa_s) |
| 524 | { |
| 525 | struct ibss_rsn *ibss_rsn; |
| 526 | |
| 527 | ibss_rsn = os_zalloc(sizeof(*ibss_rsn)); |
| 528 | if (ibss_rsn == NULL) |
| 529 | return NULL; |
| 530 | ibss_rsn->wpa_s = wpa_s; |
| 531 | |
| 532 | if (ibss_rsn_auth_init_group(ibss_rsn, wpa_s->own_addr) < 0) { |
| 533 | ibss_rsn_deinit(ibss_rsn); |
| 534 | return NULL; |
| 535 | } |
| 536 | |
| 537 | return ibss_rsn; |
| 538 | } |
| 539 | |
| 540 | |
| 541 | void ibss_rsn_deinit(struct ibss_rsn *ibss_rsn) |
| 542 | { |
| 543 | struct ibss_rsn_peer *peer, *prev; |
| 544 | |
| 545 | if (ibss_rsn == NULL) |
| 546 | return; |
| 547 | |
| 548 | peer = ibss_rsn->peers; |
| 549 | while (peer) { |
| 550 | prev = peer; |
| 551 | peer = peer->next; |
| 552 | ibss_rsn_free(prev); |
| 553 | } |
| 554 | |
| 555 | wpa_deinit(ibss_rsn->auth_group); |
| 556 | os_free(ibss_rsn); |
| 557 | |
| 558 | } |
| 559 | |
| 560 | |
| 561 | static int ibss_rsn_eapol_dst_supp(const u8 *buf, size_t len) |
| 562 | { |
| 563 | const struct ieee802_1x_hdr *hdr; |
| 564 | const struct wpa_eapol_key *key; |
| 565 | u16 key_info; |
| 566 | size_t plen; |
| 567 | |
| 568 | /* TODO: Support other EAPOL packets than just EAPOL-Key */ |
| 569 | |
| 570 | if (len < sizeof(*hdr) + sizeof(*key)) |
| 571 | return -1; |
| 572 | |
| 573 | hdr = (const struct ieee802_1x_hdr *) buf; |
| 574 | key = (const struct wpa_eapol_key *) (hdr + 1); |
| 575 | plen = be_to_host16(hdr->length); |
| 576 | |
| 577 | if (hdr->version < EAPOL_VERSION) { |
| 578 | /* TODO: backwards compatibility */ |
| 579 | } |
| 580 | if (hdr->type != IEEE802_1X_TYPE_EAPOL_KEY) { |
| 581 | wpa_printf(MSG_DEBUG, "RSN: EAPOL frame (type %u) discarded, " |
| 582 | "not a Key frame", hdr->type); |
| 583 | return -1; |
| 584 | } |
| 585 | if (plen > len - sizeof(*hdr) || plen < sizeof(*key)) { |
| 586 | wpa_printf(MSG_DEBUG, "RSN: EAPOL frame payload size %lu " |
| 587 | "invalid (frame size %lu)", |
| 588 | (unsigned long) plen, (unsigned long) len); |
| 589 | return -1; |
| 590 | } |
| 591 | |
| 592 | if (key->type != EAPOL_KEY_TYPE_RSN) { |
| 593 | wpa_printf(MSG_DEBUG, "RSN: EAPOL-Key type (%d) unknown, " |
| 594 | "discarded", key->type); |
| 595 | return -1; |
| 596 | } |
| 597 | |
| 598 | key_info = WPA_GET_BE16(key->key_info); |
| 599 | |
| 600 | return !!(key_info & WPA_KEY_INFO_ACK); |
| 601 | } |
| 602 | |
| 603 | |
| 604 | static int ibss_rsn_process_rx_eapol(struct ibss_rsn *ibss_rsn, |
| 605 | struct ibss_rsn_peer *peer, |
| 606 | const u8 *buf, size_t len) |
| 607 | { |
| 608 | int supp; |
| 609 | u8 *tmp; |
| 610 | |
| 611 | supp = ibss_rsn_eapol_dst_supp(buf, len); |
| 612 | if (supp < 0) |
| 613 | return -1; |
| 614 | |
| 615 | tmp = os_malloc(len); |
| 616 | if (tmp == NULL) |
| 617 | return -1; |
| 618 | os_memcpy(tmp, buf, len); |
| 619 | if (supp) { |
| 620 | wpa_printf(MSG_DEBUG, "RSN: IBSS RX EAPOL for Supplicant"); |
| 621 | wpa_sm_rx_eapol(peer->supp, peer->addr, tmp, len); |
| 622 | } else { |
| 623 | wpa_printf(MSG_DEBUG, "RSN: IBSS RX EAPOL for Authenticator"); |
| 624 | wpa_receive(ibss_rsn->auth_group, peer->auth, tmp, len); |
| 625 | } |
| 626 | os_free(tmp); |
| 627 | |
| 628 | return 1; |
| 629 | } |
| 630 | |
| 631 | |
| 632 | int ibss_rsn_rx_eapol(struct ibss_rsn *ibss_rsn, const u8 *src_addr, |
| 633 | const u8 *buf, size_t len) |
| 634 | { |
| 635 | struct ibss_rsn_peer *peer; |
| 636 | |
| 637 | if (ibss_rsn == NULL) |
| 638 | return -1; |
| 639 | |
Dmitry Shmidt | c5ec7f5 | 2012-03-06 16:33:24 -0800 | [diff] [blame] | 640 | peer = ibss_rsn_get_peer(ibss_rsn, src_addr); |
| 641 | if (peer) |
| 642 | return ibss_rsn_process_rx_eapol(ibss_rsn, peer, buf, len); |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 643 | |
| 644 | if (ibss_rsn_eapol_dst_supp(buf, len) > 0) { |
| 645 | /* |
| 646 | * Create new IBSS peer based on an EAPOL message from the peer |
| 647 | * Authenticator. |
| 648 | */ |
| 649 | if (ibss_rsn_start(ibss_rsn, src_addr) < 0) |
| 650 | return -1; |
| 651 | return ibss_rsn_process_rx_eapol(ibss_rsn, ibss_rsn->peers, |
| 652 | buf, len); |
| 653 | } |
| 654 | |
| 655 | return 0; |
| 656 | } |
| 657 | |
| 658 | |
| 659 | void ibss_rsn_set_psk(struct ibss_rsn *ibss_rsn, const u8 *psk) |
| 660 | { |
| 661 | if (ibss_rsn == NULL) |
| 662 | return; |
| 663 | os_memcpy(ibss_rsn->psk, psk, PMK_LEN); |
| 664 | } |