blob: 89bf2895eb70525694e55cc3a115cb68d3bd5283 [file] [log] [blame]
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -07001/*
2 * hostapd / Configuration definitions and helpers functions
Dmitry Shmidtd80a4012015-11-05 16:35:40 -08003 * Copyright (c) 2003-2015, Jouni Malinen <j@w1.fi>
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -07004 *
Dmitry Shmidtc5ec7f52012-03-06 16:33:24 -08005 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -07007 */
8
9#ifndef HOSTAPD_CONFIG_H
10#define HOSTAPD_CONFIG_H
11
12#include "common/defs.h"
Dmitry Shmidtd80a4012015-11-05 16:35:40 -080013#include "utils/list.h"
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -070014#include "ip_addr.h"
15#include "common/wpa_common.h"
Dmitry Shmidt9d9e6022015-04-23 10:34:55 -070016#include "common/ieee802_11_defs.h"
Dmitry Shmidt61d9df32012-08-29 16:22:06 -070017#include "common/ieee802_11_common.h"
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -070018#include "wps/wps.h"
Dmitry Shmidtd80a4012015-11-05 16:35:40 -080019#include "fst/fst.h"
Dmitry Shmidt57c2d392016-02-23 13:40:19 -080020#include "vlan.h"
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -070021
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -080022/**
23 * mesh_conf - local MBSS state and settings
24 */
25struct mesh_conf {
26 u8 meshid[32];
27 u8 meshid_len;
28 /* Active Path Selection Protocol Identifier */
29 u8 mesh_pp_id;
30 /* Active Path Selection Metric Identifier */
31 u8 mesh_pm_id;
32 /* Congestion Control Mode Identifier */
33 u8 mesh_cc_id;
34 /* Synchronization Protocol Identifier */
35 u8 mesh_sp_id;
36 /* Authentication Protocol Identifier */
37 u8 mesh_auth_id;
Dmitry Shmidtd80a4012015-11-05 16:35:40 -080038 u8 *rsn_ie;
39 int rsn_ie_len;
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -080040#define MESH_CONF_SEC_NONE BIT(0)
41#define MESH_CONF_SEC_AUTH BIT(1)
42#define MESH_CONF_SEC_AMPE BIT(2)
43 unsigned int security;
Dmitry Shmidtd5ab1b52016-06-21 12:38:41 -070044 enum mfp_options ieee80211w;
45 unsigned int pairwise_cipher;
46 unsigned int group_cipher;
47 unsigned int mgmt_group_cipher;
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -080048 int dot11MeshMaxRetries;
49 int dot11MeshRetryTimeout; /* msec */
50 int dot11MeshConfirmTimeout; /* msec */
51 int dot11MeshHoldingTimeout; /* msec */
52};
53
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -070054#define MAX_STA_COUNT 2007
55#define MAX_VLAN_ID 4094
56
57typedef u8 macaddr[ETH_ALEN];
58
59struct mac_acl_entry {
60 macaddr addr;
Dmitry Shmidt57c2d392016-02-23 13:40:19 -080061 struct vlan_description vlan_id;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -070062};
63
64struct hostapd_radius_servers;
65struct ft_remote_r0kh;
66struct ft_remote_r1kh;
67
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -070068#define NUM_WEP_KEYS 4
69struct hostapd_wep_keys {
70 u8 idx;
71 u8 *key[NUM_WEP_KEYS];
72 size_t len[NUM_WEP_KEYS];
73 int keys_set;
74 size_t default_len; /* key length used for dynamic key generation */
75};
76
77typedef enum hostap_security_policy {
78 SECURITY_PLAINTEXT = 0,
79 SECURITY_STATIC_WEP = 1,
80 SECURITY_IEEE_802_1X = 2,
81 SECURITY_WPA_PSK = 3,
Dmitry Shmidtf21452a2014-02-26 10:55:25 -080082 SECURITY_WPA = 4,
83 SECURITY_OSEN = 5
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -070084} secpolicy;
85
86struct hostapd_ssid {
Dmitry Shmidt9d9e6022015-04-23 10:34:55 -070087 u8 ssid[SSID_MAX_LEN];
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -070088 size_t ssid_len;
Dmitry Shmidta54fa5f2013-01-15 13:53:35 -080089 unsigned int ssid_set:1;
90 unsigned int utf8_ssid:1;
Dmitry Shmidtcce06662013-11-04 18:44:24 -080091 unsigned int wpa_passphrase_set:1;
92 unsigned int wpa_psk_set:1;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -070093
94 char vlan[IFNAMSIZ + 1];
95 secpolicy security_policy;
96
97 struct hostapd_wpa_psk *wpa_psk;
98 char *wpa_passphrase;
99 char *wpa_psk_file;
100
101 struct hostapd_wep_keys wep;
102
103#define DYNAMIC_VLAN_DISABLED 0
104#define DYNAMIC_VLAN_OPTIONAL 1
105#define DYNAMIC_VLAN_REQUIRED 2
106 int dynamic_vlan;
Dmitry Shmidt61d9df32012-08-29 16:22:06 -0700107#define DYNAMIC_VLAN_NAMING_WITHOUT_DEVICE 0
108#define DYNAMIC_VLAN_NAMING_WITH_DEVICE 1
109#define DYNAMIC_VLAN_NAMING_END 2
110 int vlan_naming;
Dmitry Shmidt57c2d392016-02-23 13:40:19 -0800111 int per_sta_vif;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700112#ifdef CONFIG_FULL_DYNAMIC_VLAN
113 char *vlan_tagged_interface;
114#endif /* CONFIG_FULL_DYNAMIC_VLAN */
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700115};
116
117
118#define VLAN_ID_WILDCARD -1
119
120struct hostapd_vlan {
121 struct hostapd_vlan *next;
122 int vlan_id; /* VLAN ID or -1 (VLAN_ID_WILDCARD) for wildcard entry */
Dmitry Shmidt57c2d392016-02-23 13:40:19 -0800123 struct vlan_description vlan_desc;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700124 char ifname[IFNAMSIZ + 1];
Dmitry Shmidt83474442015-04-15 13:47:09 -0700125 int configured;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700126 int dynamic_vlan;
127#ifdef CONFIG_FULL_DYNAMIC_VLAN
128
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700129#define DVLAN_CLEAN_WLAN_PORT 0x8
130 int clean;
131#endif /* CONFIG_FULL_DYNAMIC_VLAN */
132};
133
134#define PMK_LEN 32
Dmitry Shmidt9c175262016-03-03 10:20:07 -0800135#define MIN_PASSPHRASE_LEN 8
136#define MAX_PASSPHRASE_LEN 63
Dmitry Shmidtd5e49232012-12-03 15:08:10 -0800137struct hostapd_sta_wpa_psk_short {
138 struct hostapd_sta_wpa_psk_short *next;
Dmitry Shmidt9c175262016-03-03 10:20:07 -0800139 unsigned int is_passphrase:1;
Dmitry Shmidtd5e49232012-12-03 15:08:10 -0800140 u8 psk[PMK_LEN];
Dmitry Shmidt9c175262016-03-03 10:20:07 -0800141 char passphrase[MAX_PASSPHRASE_LEN + 1];
142 int ref; /* (number of references held) - 1 */
Dmitry Shmidtd5e49232012-12-03 15:08:10 -0800143};
144
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700145struct hostapd_wpa_psk {
146 struct hostapd_wpa_psk *next;
147 int group;
148 u8 psk[PMK_LEN];
149 u8 addr[ETH_ALEN];
Dmitry Shmidt391c59f2013-09-03 12:16:28 -0700150 u8 p2p_dev_addr[ETH_ALEN];
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700151};
152
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700153struct hostapd_eap_user {
154 struct hostapd_eap_user *next;
155 u8 *identity;
156 size_t identity_len;
157 struct {
158 int vendor;
159 u32 method;
Dmitry Shmidt1f69aa52012-01-24 16:10:04 -0800160 } methods[EAP_MAX_METHODS];
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700161 u8 *password;
162 size_t password_len;
163 int phase2;
164 int force_version;
165 unsigned int wildcard_prefix:1;
166 unsigned int password_hash:1; /* whether password is hashed with
167 * nt_password_hash() */
Dmitry Shmidtf21452a2014-02-26 10:55:25 -0800168 unsigned int remediation:1;
Dmitry Shmidtdf5a7e42014-04-02 12:59:59 -0700169 unsigned int macacl:1;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700170 int ttls_auth; /* EAP_TTLS_AUTH_* bitfield */
Dmitry Shmidt818ea482014-03-10 13:15:21 -0700171 struct hostapd_radius_attr *accept_attr;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700172};
173
Dmitry Shmidt04949592012-07-19 12:16:46 -0700174struct hostapd_radius_attr {
175 u8 type;
176 struct wpabuf *val;
177 struct hostapd_radius_attr *next;
178};
179
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700180
181#define NUM_TX_QUEUES 4
182
183struct hostapd_tx_queue_params {
184 int aifs;
185 int cwmin;
186 int cwmax;
187 int burst; /* maximum burst time in 0.1 ms, i.e., 10 = 1 ms */
188};
189
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700190
Dmitry Shmidt1f69aa52012-01-24 16:10:04 -0800191#define MAX_ROAMING_CONSORTIUM_LEN 15
192
193struct hostapd_roaming_consortium {
194 u8 len;
195 u8 oi[MAX_ROAMING_CONSORTIUM_LEN];
196};
197
Dmitry Shmidt61d9df32012-08-29 16:22:06 -0700198struct hostapd_lang_string {
Dmitry Shmidt04949592012-07-19 12:16:46 -0700199 u8 lang[3];
200 u8 name_len;
201 u8 name[252];
202};
203
Dmitry Shmidt61d9df32012-08-29 16:22:06 -0700204#define MAX_NAI_REALMS 10
205#define MAX_NAI_REALMLEN 255
206#define MAX_NAI_EAP_METHODS 5
207#define MAX_NAI_AUTH_TYPES 4
208struct hostapd_nai_realm_data {
209 u8 encoding;
210 char realm_buf[MAX_NAI_REALMLEN + 1];
211 char *realm[MAX_NAI_REALMS];
212 u8 eap_method_count;
213 struct hostapd_nai_realm_eap {
214 u8 eap_method;
215 u8 num_auths;
216 u8 auth_id[MAX_NAI_AUTH_TYPES];
217 u8 auth_val[MAX_NAI_AUTH_TYPES];
218 } eap_method[MAX_NAI_EAP_METHODS];
219};
220
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800221struct anqp_element {
222 struct dl_list list;
223 u16 infoid;
224 struct wpabuf *payload;
225};
226
Dmitry Shmidt29333592017-01-09 12:27:11 -0800227struct fils_realm {
228 struct dl_list list;
229 u8 hash[2];
230 char realm[];
231};
232
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800233
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700234/**
235 * struct hostapd_bss_config - Per-BSS configuration
236 */
237struct hostapd_bss_config {
238 char iface[IFNAMSIZ + 1];
239 char bridge[IFNAMSIZ + 1];
Dmitry Shmidt34af3062013-07-11 10:46:32 -0700240 char vlan_bridge[IFNAMSIZ + 1];
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700241 char wds_bridge[IFNAMSIZ + 1];
242
243 enum hostapd_logger_level logger_syslog_level, logger_stdout_level;
244
245 unsigned int logger_syslog; /* module bitfield */
246 unsigned int logger_stdout; /* module bitfield */
247
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700248 int max_num_sta; /* maximum number of STAs in station table */
249
250 int dtim_period;
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -0800251 int bss_load_update_period;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700252
253 int ieee802_1x; /* use IEEE 802.1X */
254 int eapol_version;
255 int eap_server; /* Use internal EAP server instead of external
256 * RADIUS server */
257 struct hostapd_eap_user *eap_user;
Dmitry Shmidtd5e49232012-12-03 15:08:10 -0800258 char *eap_user_sqlite;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700259 char *eap_sim_db;
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800260 unsigned int eap_sim_db_timeout;
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -0800261 int eap_server_erp; /* Whether ERP is enabled on internal EAP server */
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700262 struct hostapd_ip_addr own_ip_addr;
263 char *nas_identifier;
264 struct hostapd_radius_servers *radius;
265 int acct_interim_interval;
Dmitry Shmidt04949592012-07-19 12:16:46 -0700266 int radius_request_cui;
267 struct hostapd_radius_attr *radius_auth_req_attr;
268 struct hostapd_radius_attr *radius_acct_req_attr;
269 int radius_das_port;
270 unsigned int radius_das_time_window;
271 int radius_das_require_event_timestamp;
Dmitry Shmidt7f2c7532016-08-15 09:48:12 -0700272 int radius_das_require_message_authenticator;
Dmitry Shmidt04949592012-07-19 12:16:46 -0700273 struct hostapd_ip_addr radius_das_client_addr;
274 u8 *radius_das_shared_secret;
275 size_t radius_das_shared_secret_len;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700276
277 struct hostapd_ssid ssid;
278
279 char *eap_req_id_text; /* optional displayable message sent with
280 * EAP Request-Identity */
281 size_t eap_req_id_text_len;
282 int eapol_key_index_workaround;
283
284 size_t default_wep_key_len;
285 int individual_wep_key_len;
286 int wep_rekeying_period;
287 int broadcast_key_idx_min, broadcast_key_idx_max;
288 int eap_reauth_period;
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -0800289 int erp_send_reauth_start;
290 char *erp_domain;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700291
292 int ieee802_11f; /* use IEEE 802.11f (IAPP) */
293 char iapp_iface[IFNAMSIZ + 1]; /* interface used with IAPP broadcast
294 * frames */
295
Dmitry Shmidt29333592017-01-09 12:27:11 -0800296 enum macaddr_acl {
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700297 ACCEPT_UNLESS_DENIED = 0,
298 DENY_UNLESS_ACCEPTED = 1,
299 USE_EXTERNAL_RADIUS_AUTH = 2
300 } macaddr_acl;
301 struct mac_acl_entry *accept_mac;
302 int num_accept_mac;
303 struct mac_acl_entry *deny_mac;
304 int num_deny_mac;
305 int wds_sta;
306 int isolate;
Dmitry Shmidtc2ebb4b2013-07-24 12:57:51 -0700307 int start_disabled;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700308
309 int auth_algs; /* bitfield of allowed IEEE 802.11 authentication
310 * algorithms, WPA_AUTH_ALG_{OPEN,SHARED,LEAP} */
311
312 int wpa; /* bitfield of WPA_PROTO_WPA, WPA_PROTO_RSN */
313 int wpa_key_mgmt;
314#ifdef CONFIG_IEEE80211W
315 enum mfp_options ieee80211w;
Dmitry Shmidtb36ed7c2014-03-17 10:57:26 -0700316 int group_mgmt_cipher;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700317 /* dot11AssociationSAQueryMaximumTimeout (in TUs) */
318 unsigned int assoc_sa_query_max_timeout;
319 /* dot11AssociationSAQueryRetryTimeout (in TUs) */
320 int assoc_sa_query_retry_timeout;
321#endif /* CONFIG_IEEE80211W */
Dmitry Shmidt1f69aa52012-01-24 16:10:04 -0800322 enum {
323 PSK_RADIUS_IGNORED = 0,
324 PSK_RADIUS_ACCEPTED = 1,
325 PSK_RADIUS_REQUIRED = 2
326 } wpa_psk_radius;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700327 int wpa_pairwise;
328 int wpa_group;
329 int wpa_group_rekey;
Dmitry Shmidtd2986c22017-10-23 14:22:09 -0700330 int wpa_group_rekey_set;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700331 int wpa_strict_rekey;
332 int wpa_gmk_rekey;
333 int wpa_ptk_rekey;
Dmitry Shmidtebd93af2017-02-21 13:40:44 -0800334 u32 wpa_group_update_count;
335 u32 wpa_pairwise_update_count;
Dmitry Shmidtd2986c22017-10-23 14:22:09 -0700336 int wpa_disable_eapol_key_retries;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700337 int rsn_pairwise;
338 int rsn_preauth;
339 char *rsn_preauth_interfaces;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700340
Dmitry Shmidt9839ecd2016-11-07 11:05:47 -0800341#ifdef CONFIG_IEEE80211R_AP
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700342 /* IEEE 802.11r - Fast BSS Transition */
343 u8 mobility_domain[MOBILITY_DOMAIN_ID_LEN];
344 u8 r1_key_holder[FT_R1KH_ID_LEN];
345 u32 r0_key_lifetime;
Dmitry Shmidtd2986c22017-10-23 14:22:09 -0700346 int rkh_pos_timeout;
347 int rkh_neg_timeout;
348 int rkh_pull_timeout; /* ms */
349 int rkh_pull_retries;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700350 u32 reassociation_deadline;
351 struct ft_remote_r0kh *r0kh_list;
352 struct ft_remote_r1kh *r1kh_list;
353 int pmk_r1_push;
354 int ft_over_ds;
Dmitry Shmidt9839ecd2016-11-07 11:05:47 -0800355 int ft_psk_generate_local;
356#endif /* CONFIG_IEEE80211R_AP */
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700357
358 char *ctrl_interface; /* directory for UNIX domain sockets */
359#ifndef CONFIG_NATIVE_WINDOWS
360 gid_t ctrl_interface_gid;
361#endif /* CONFIG_NATIVE_WINDOWS */
362 int ctrl_interface_gid_set;
363
364 char *ca_cert;
365 char *server_cert;
366 char *private_key;
367 char *private_key_passwd;
368 int check_crl;
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800369 unsigned int tls_session_lifetime;
Dmitry Shmidtd2986c22017-10-23 14:22:09 -0700370 unsigned int tls_flags;
Dmitry Shmidt34af3062013-07-11 10:46:32 -0700371 char *ocsp_stapling_response;
Dmitry Shmidt014a3ff2015-12-28 13:27:49 -0800372 char *ocsp_stapling_response_multi;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700373 char *dh_file;
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -0800374 char *openssl_ciphers;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700375 u8 *pac_opaque_encr_key;
376 u8 *eap_fast_a_id;
377 size_t eap_fast_a_id_len;
378 char *eap_fast_a_id_info;
379 int eap_fast_prov;
380 int pac_key_lifetime;
381 int pac_key_refresh_time;
382 int eap_sim_aka_result_ind;
383 int tnc;
384 int fragment_size;
385 u16 pwd_group;
386
387 char *radius_server_clients;
388 int radius_server_auth_port;
Dmitry Shmidtbd14a572014-02-18 10:33:49 -0800389 int radius_server_acct_port;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700390 int radius_server_ipv6;
391
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700392 int use_pae_group_addr; /* Whether to send EAPOL frames to PAE group
393 * address instead of individual address
394 * (for driver_wired.c).
395 */
396
397 int ap_max_inactivity;
398 int ignore_broadcast_ssid;
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800399 int no_probe_resp_if_max_sta;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700400
401 int wmm_enabled;
402 int wmm_uapsd;
403
Dmitry Shmidtd5c075b2013-08-05 14:36:10 -0700404 struct hostapd_vlan *vlan;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700405
406 macaddr bssid;
407
408 /*
409 * Maximum listen interval that STAs can use when associating with this
410 * BSS. If a STA tries to use larger value, the association will be
411 * denied with status code 51.
412 */
413 u16 max_listen_interval;
414
Dmitry Shmidtc55524a2011-07-07 11:18:38 -0700415 int disable_pmksa_caching;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700416 int okc; /* Opportunistic Key Caching */
417
418 int wps_state;
419#ifdef CONFIG_WPS
Dmitry Shmidt444d5672013-04-01 13:08:44 -0700420 int wps_independent;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700421 int ap_setup_locked;
422 u8 uuid[16];
423 char *wps_pin_requests;
424 char *device_name;
425 char *manufacturer;
426 char *model_name;
427 char *model_number;
428 char *serial_number;
429 u8 device_type[WPS_DEV_TYPE_LEN];
430 char *config_methods;
431 u8 os_version[4];
432 char *ap_pin;
433 int skip_cred_build;
434 u8 *extra_cred;
435 size_t extra_cred_len;
436 int wps_cred_processing;
Dmitry Shmidt391c59f2013-09-03 12:16:28 -0700437 int force_per_enrollee_psk;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700438 u8 *ap_settings;
439 size_t ap_settings_len;
440 char *upnp_iface;
441 char *friendly_name;
442 char *manufacturer_url;
443 char *model_description;
444 char *model_url;
445 char *upc;
446 struct wpabuf *wps_vendor_ext[MAX_WPS_VENDOR_EXTENSIONS];
Dmitry Shmidtf8623282013-02-20 14:34:59 -0800447 int wps_nfc_pw_from_config;
Dmitry Shmidt04949592012-07-19 12:16:46 -0700448 int wps_nfc_dev_pw_id;
449 struct wpabuf *wps_nfc_dh_pubkey;
450 struct wpabuf *wps_nfc_dh_privkey;
451 struct wpabuf *wps_nfc_dev_pw;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700452#endif /* CONFIG_WPS */
Jouni Malinen87fd2792011-05-16 18:35:42 +0300453 int pbc_in_m1;
Dmitry Shmidt34af3062013-07-11 10:46:32 -0700454 char *server_id;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700455
456#define P2P_ENABLED BIT(0)
457#define P2P_GROUP_OWNER BIT(1)
458#define P2P_GROUP_FORMATION BIT(2)
459#define P2P_MANAGE BIT(3)
460#define P2P_ALLOW_CROSS_CONNECTION BIT(4)
461 int p2p;
Dmitry Shmidtcf32e602014-01-28 10:57:39 -0800462#ifdef CONFIG_P2P
463 u8 ip_addr_go[4];
464 u8 ip_addr_mask[4];
465 u8 ip_addr_start[4];
466 u8 ip_addr_end[4];
467#endif /* CONFIG_P2P */
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700468
469 int disassoc_low_ack;
Dmitry Shmidt1f69aa52012-01-24 16:10:04 -0800470 int skip_inactivity_poll;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700471
472#define TDLS_PROHIBIT BIT(0)
473#define TDLS_PROHIBIT_CHAN_SWITCH BIT(1)
474 int tdls;
475 int disable_11n;
Dmitry Shmidt04949592012-07-19 12:16:46 -0700476 int disable_11ac;
Dmitry Shmidt1f69aa52012-01-24 16:10:04 -0800477
478 /* IEEE 802.11v */
479 int time_advertisement;
480 char *time_zone;
Dmitry Shmidta54fa5f2013-01-15 13:53:35 -0800481 int wnm_sleep_mode;
482 int bss_transition;
Dmitry Shmidt1f69aa52012-01-24 16:10:04 -0800483
484 /* IEEE 802.11u - Interworking */
485 int interworking;
486 int access_network_type;
487 int internet;
488 int asra;
489 int esr;
490 int uesa;
491 int venue_info_set;
492 u8 venue_group;
493 u8 venue_type;
494 u8 hessid[ETH_ALEN];
495
496 /* IEEE 802.11u - Roaming Consortium list */
497 unsigned int roaming_consortium_count;
498 struct hostapd_roaming_consortium *roaming_consortium;
499
Dmitry Shmidt04949592012-07-19 12:16:46 -0700500 /* IEEE 802.11u - Venue Name duples */
501 unsigned int venue_name_count;
Dmitry Shmidt61d9df32012-08-29 16:22:06 -0700502 struct hostapd_lang_string *venue_name;
503
504 /* IEEE 802.11u - Network Authentication Type */
505 u8 *network_auth_type;
506 size_t network_auth_type_len;
507
508 /* IEEE 802.11u - IP Address Type Availability */
509 u8 ipaddr_type_availability;
510 u8 ipaddr_type_configured;
511
512 /* IEEE 802.11u - 3GPP Cellular Network */
513 u8 *anqp_3gpp_cell_net;
514 size_t anqp_3gpp_cell_net_len;
515
516 /* IEEE 802.11u - Domain Name */
517 u8 *domain_name;
518 size_t domain_name_len;
519
520 unsigned int nai_realm_count;
521 struct hostapd_nai_realm_data *nai_realm_data;
Dmitry Shmidt04949592012-07-19 12:16:46 -0700522
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800523 struct dl_list anqp_elem; /* list of struct anqp_element */
524
Dmitry Shmidt04949592012-07-19 12:16:46 -0700525 u16 gas_comeback_delay;
Dmitry Shmidt29333592017-01-09 12:27:11 -0800526 size_t gas_frag_limit;
Dmitry Shmidtd5ab1b52016-06-21 12:38:41 -0700527 int gas_address3;
Dmitry Shmidt04949592012-07-19 12:16:46 -0700528
Dmitry Shmidt051af732013-10-22 13:52:46 -0700529 u8 qos_map_set[16 + 2 * 21];
530 unsigned int qos_map_set_len;
531
Dmitry Shmidtf21452a2014-02-26 10:55:25 -0800532 int osen;
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -0800533 int proxy_arp;
Dmitry Shmidt1d755d02015-04-28 10:34:29 -0700534 int na_mcast_to_ucast;
Dmitry Shmidt61d9df32012-08-29 16:22:06 -0700535#ifdef CONFIG_HS20
536 int hs20;
537 int disable_dgaf;
Dmitry Shmidtf21452a2014-02-26 10:55:25 -0800538 u16 anqp_domain_id;
Dmitry Shmidt61d9df32012-08-29 16:22:06 -0700539 unsigned int hs20_oper_friendly_name_count;
540 struct hostapd_lang_string *hs20_oper_friendly_name;
541 u8 *hs20_wan_metrics;
542 u8 *hs20_connection_capability;
543 size_t hs20_connection_capability_len;
544 u8 *hs20_operating_class;
545 u8 hs20_operating_class_len;
Dmitry Shmidtf21452a2014-02-26 10:55:25 -0800546 struct hs20_icon {
547 u16 width;
548 u16 height;
549 char language[3];
550 char type[256];
551 char name[256];
552 char file[256];
553 } *hs20_icons;
554 size_t hs20_icons_count;
Dmitry Shmidt9d9e6022015-04-23 10:34:55 -0700555 u8 osu_ssid[SSID_MAX_LEN];
Dmitry Shmidtf21452a2014-02-26 10:55:25 -0800556 size_t osu_ssid_len;
557 struct hs20_osu_provider {
558 unsigned int friendly_name_count;
559 struct hostapd_lang_string *friendly_name;
560 char *server_uri;
561 int *method_list;
562 char **icons;
563 size_t icons_count;
564 char *osu_nai;
565 unsigned int service_desc_count;
566 struct hostapd_lang_string *service_desc;
567 } *hs20_osu_providers, *last_osu;
568 size_t hs20_osu_providers_count;
569 unsigned int hs20_deauth_req_timeout;
570 char *subscr_remediation_url;
571 u8 subscr_remediation_method;
Dmitry Shmidt61d9df32012-08-29 16:22:06 -0700572#endif /* CONFIG_HS20 */
573
Dmitry Shmidt1f69aa52012-01-24 16:10:04 -0800574 u8 wps_rf_bands; /* RF bands for WPS (WPS_RF_*) */
575
576#ifdef CONFIG_RADIUS_TEST
577 char *dump_msk_file;
578#endif /* CONFIG_RADIUS_TEST */
Dmitry Shmidt61d9df32012-08-29 16:22:06 -0700579
580 struct wpabuf *vendor_elements;
Dmitry Shmidt849734c2016-05-27 09:59:01 -0700581 struct wpabuf *assocresp_elements;
Dmitry Shmidta54fa5f2013-01-15 13:53:35 -0800582
583 unsigned int sae_anti_clogging_threshold;
584 int *sae_groups;
Dmitry Shmidtd2986c22017-10-23 14:22:09 -0700585 char *sae_password;
Dmitry Shmidt051af732013-10-22 13:52:46 -0700586
Dmitry Shmidt0207e232014-09-03 14:58:37 -0700587 char *wowlan_triggers; /* Wake-on-WLAN triggers */
588
Dmitry Shmidt051af732013-10-22 13:52:46 -0700589#ifdef CONFIG_TESTING_OPTIONS
590 u8 bss_load_test[5];
591 u8 bss_load_test_set;
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800592 struct wpabuf *own_ie_override;
Dmitry Shmidtd2986c22017-10-23 14:22:09 -0700593 int sae_reflection_attack;
594 struct wpabuf *sae_commit_override;
Dmitry Shmidt051af732013-10-22 13:52:46 -0700595#endif /* CONFIG_TESTING_OPTIONS */
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -0800596
597#define MESH_ENABLED BIT(0)
598 int mesh;
599
Dmitry Shmidt849734c2016-05-27 09:59:01 -0700600 u8 radio_measurements[RRM_CAPABILITIES_IE_LEN];
Dmitry Shmidt2f74e362015-01-21 13:19:05 -0800601
602 int vendor_vht;
Dmitry Shmidt7d175302016-09-06 13:11:34 -0700603 int use_sta_nsts;
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800604
605 char *no_probe_resp_if_seen_on;
606 char *no_auth_if_seen_on;
Dmitry Shmidt57c2d392016-02-23 13:40:19 -0800607
608 int pbss;
609
610#ifdef CONFIG_MBO
611 int mbo_enabled;
Dmitry Shmidtd2986c22017-10-23 14:22:09 -0700612 /**
613 * oce - Enable OCE in AP and/or STA-CFON mode
614 * - BIT(0) is Reserved
615 * - Set BIT(1) to enable OCE in STA-CFON mode
616 * - Set BIT(2) to enable OCE in AP mode
617 */
618 unsigned int oce;
619 int mbo_cell_data_conn_pref;
Dmitry Shmidt57c2d392016-02-23 13:40:19 -0800620#endif /* CONFIG_MBO */
Dmitry Shmidt7d175302016-09-06 13:11:34 -0700621
622 int ftm_responder;
623 int ftm_initiator;
Dmitry Shmidt9839ecd2016-11-07 11:05:47 -0800624
625#ifdef CONFIG_FILS
626 u8 fils_cache_id[FILS_CACHE_ID_LEN];
627 int fils_cache_id_set;
Dmitry Shmidt29333592017-01-09 12:27:11 -0800628 struct dl_list fils_realms; /* list of struct fils_realm */
Dmitry Shmidtd2986c22017-10-23 14:22:09 -0700629 int fils_dh_group;
Dmitry Shmidtebd93af2017-02-21 13:40:44 -0800630 struct hostapd_ip_addr dhcp_server;
631 int dhcp_rapid_commit_proxy;
632 unsigned int fils_hlp_wait_time;
633 u16 dhcp_server_port;
634 u16 dhcp_relay_port;
Dmitry Shmidt9839ecd2016-11-07 11:05:47 -0800635#endif /* CONFIG_FILS */
Dmitry Shmidtabb90a32016-12-05 15:34:39 -0800636
637 int multicast_to_unicast;
Dmitry Shmidtd2986c22017-10-23 14:22:09 -0700638
639 int broadcast_deauth;
640
641#ifdef CONFIG_DPP
642 char *dpp_connector;
643 struct wpabuf *dpp_netaccesskey;
644 unsigned int dpp_netaccesskey_expiry;
645 struct wpabuf *dpp_csign;
646#endif /* CONFIG_DPP */
647
648#ifdef CONFIG_OWE
649 macaddr owe_transition_bssid;
650 u8 owe_transition_ssid[SSID_MAX_LEN];
651 size_t owe_transition_ssid_len;
652 char owe_transition_ifname[IFNAMSIZ + 1];
653 int *owe_groups;
654#endif /* CONFIG_OWE */
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700655};
656
Dmitry Shmidtebd93af2017-02-21 13:40:44 -0800657/**
658 * struct he_phy_capabilities_info - HE PHY capabilities
659 */
660struct he_phy_capabilities_info {
661 Boolean he_su_beamformer;
662 Boolean he_su_beamformee;
663 Boolean he_mu_beamformer;
664};
665
666/**
667 * struct he_operation - HE operation
668 */
669struct he_operation {
670 u8 he_bss_color;
671 u8 he_default_pe_duration;
672 u8 he_twt_required;
673 u8 he_rts_threshold;
674};
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700675
676/**
677 * struct hostapd_config - Per-radio interface configuration
678 */
679struct hostapd_config {
Dmitry Shmidtcce06662013-11-04 18:44:24 -0800680 struct hostapd_bss_config **bss, *last_bss;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700681 size_t num_bss;
682
683 u16 beacon_int;
684 int rts_threshold;
685 int fragm_threshold;
686 u8 send_probe_response;
687 u8 channel;
Dmitry Shmidtdda10c22015-03-24 16:05:01 -0700688 u8 acs;
689 struct wpa_freq_range_list acs_ch_list;
Dmitry Shmidtd2986c22017-10-23 14:22:09 -0700690 int acs_exclude_dfs;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700691 enum hostapd_hw_mode hw_mode; /* HOSTAPD_MODE_IEEE80211A, .. */
692 enum {
693 LONG_PREAMBLE = 0,
694 SHORT_PREAMBLE = 1
695 } preamble;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700696
697 int *supported_rates;
698 int *basic_rates;
Dmitry Shmidtabb90a32016-12-05 15:34:39 -0800699 unsigned int beacon_rate;
700 enum beacon_rate_type rate_type;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700701
702 const struct wpa_driver_ops *driver;
Dmitry Shmidt6c0da2b2015-01-05 13:08:17 -0800703 char *driver_params;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700704
705 int ap_table_max_size;
706 int ap_table_expiration_time;
707
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800708 unsigned int track_sta_max_num;
709 unsigned int track_sta_max_age;
710
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700711 char country[3]; /* first two octets: country code as described in
712 * ISO/IEC 3166-1. Third octet:
713 * ' ' (ascii 32): all environments
714 * 'O': Outdoor environemnt only
715 * 'I': Indoor environment only
Dmitry Shmidtd2986c22017-10-23 14:22:09 -0700716 * 'X': Used with noncountry entity ("XXX")
717 * 0x00..0x31: identifying IEEE 802.11 standard
718 * Annex E table (0x04 = global table)
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700719 */
720
721 int ieee80211d;
722
Dmitry Shmidtea69e842013-05-13 14:52:28 -0700723 int ieee80211h; /* DFS */
724
Dmitry Shmidtf21452a2014-02-26 10:55:25 -0800725 /*
726 * Local power constraint is an octet encoded as an unsigned integer in
727 * units of decibels. Invalid value -1 indicates that Power Constraint
728 * element will not be added.
729 */
730 int local_pwr_constraint;
731
732 /* Control Spectrum Management bit */
733 int spectrum_mgmt_required;
734
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700735 struct hostapd_tx_queue_params tx_queue[NUM_TX_QUEUES];
736
737 /*
738 * WMM AC parameters, in same order as 802.1D, i.e.
739 * 0 = BE (best effort)
740 * 1 = BK (background)
741 * 2 = VI (video)
742 * 3 = VO (voice)
743 */
744 struct hostapd_wmm_ac_params wmm_ac_params[4];
745
746 int ht_op_mode_fixed;
747 u16 ht_capab;
748 int ieee80211n;
749 int secondary_channel;
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800750 int no_pri_sec_switch;
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700751 int require_ht;
Dmitry Shmidt54605472013-11-08 11:10:19 -0800752 int obss_interval;
Dmitry Shmidt04949592012-07-19 12:16:46 -0700753 u32 vht_capab;
754 int ieee80211ac;
Dmitry Shmidt61d9df32012-08-29 16:22:06 -0700755 int require_vht;
Dmitry Shmidt04949592012-07-19 12:16:46 -0700756 u8 vht_oper_chwidth;
Dmitry Shmidt61d9df32012-08-29 16:22:06 -0700757 u8 vht_oper_centr_freq_seg0_idx;
Dmitry Shmidtd5e49232012-12-03 15:08:10 -0800758 u8 vht_oper_centr_freq_seg1_idx;
Dmitry Shmidtd2986c22017-10-23 14:22:09 -0700759 u8 ht40_plus_minus_allowed;
Dmitry Shmidt8da800a2013-04-24 12:57:01 -0700760
Dmitry Shmidt31a29cc2016-03-09 15:58:17 -0800761 /* Use driver-generated interface addresses when adding multiple BSSs */
762 u8 use_driver_iface_addr;
763
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800764#ifdef CONFIG_FST
765 struct fst_iface_cfg fst_cfg;
766#endif /* CONFIG_FST */
767
Dmitry Shmidt7f656022015-02-25 14:36:37 -0800768#ifdef CONFIG_P2P
769 u8 p2p_go_ctwindow;
770#endif /* CONFIG_P2P */
771
Dmitry Shmidt8da800a2013-04-24 12:57:01 -0700772#ifdef CONFIG_TESTING_OPTIONS
773 double ignore_probe_probability;
774 double ignore_auth_probability;
775 double ignore_assoc_probability;
776 double ignore_reassoc_probability;
Dmitry Shmidt51b6ea82013-05-08 10:42:09 -0700777 double corrupt_gtk_rekey_mic_probability;
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800778 int ecsa_ie_only;
Dmitry Shmidt8da800a2013-04-24 12:57:01 -0700779#endif /* CONFIG_TESTING_OPTIONS */
Dmitry Shmidt391c59f2013-09-03 12:16:28 -0700780
781#ifdef CONFIG_ACS
782 unsigned int acs_num_scans;
Dmitry Shmidt7f656022015-02-25 14:36:37 -0800783 struct acs_bias {
784 int channel;
785 double bias;
786 } *acs_chan_bias;
787 unsigned int num_acs_chan_bias;
Dmitry Shmidt391c59f2013-09-03 12:16:28 -0700788#endif /* CONFIG_ACS */
Dmitry Shmidt849734c2016-05-27 09:59:01 -0700789
790 struct wpabuf *lci;
791 struct wpabuf *civic;
Dmitry Shmidt9839ecd2016-11-07 11:05:47 -0800792 int stationary_ap;
Dmitry Shmidtebd93af2017-02-21 13:40:44 -0800793
794 int ieee80211ax;
795#ifdef CONFIG_IEEE80211AX
796 struct he_phy_capabilities_info he_phy_capab;
797 struct he_operation he_op;
798#endif /* CONFIG_IEEE80211AX */
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700799};
800
801
802int hostapd_mac_comp(const void *a, const void *b);
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700803struct hostapd_config * hostapd_config_defaults(void);
804void hostapd_config_defaults_bss(struct hostapd_bss_config *bss);
Dmitry Shmidt818ea482014-03-10 13:15:21 -0700805void hostapd_config_free_eap_user(struct hostapd_eap_user *user);
Dmitry Shmidt29333592017-01-09 12:27:11 -0800806void hostapd_config_free_eap_users(struct hostapd_eap_user *user);
Dmitry Shmidt7f656022015-02-25 14:36:37 -0800807void hostapd_config_clear_wpa_psk(struct hostapd_wpa_psk **p);
Dmitry Shmidtcce06662013-11-04 18:44:24 -0800808void hostapd_config_free_bss(struct hostapd_bss_config *conf);
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700809void hostapd_config_free(struct hostapd_config *conf);
810int hostapd_maclist_found(struct mac_acl_entry *list, int num_entries,
Dmitry Shmidt57c2d392016-02-23 13:40:19 -0800811 const u8 *addr, struct vlan_description *vlan_id);
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700812int hostapd_rate_found(int *list, int rate);
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700813const u8 * hostapd_get_psk(const struct hostapd_bss_config *conf,
Dmitry Shmidt391c59f2013-09-03 12:16:28 -0700814 const u8 *addr, const u8 *p2p_dev_addr,
815 const u8 *prev_psk);
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700816int hostapd_setup_wpa_psk(struct hostapd_bss_config *conf);
Dmitry Shmidt57c2d392016-02-23 13:40:19 -0800817int hostapd_vlan_valid(struct hostapd_vlan *vlan,
818 struct vlan_description *vlan_desc);
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700819const char * hostapd_get_vlan_id_ifname(struct hostapd_vlan *vlan,
820 int vlan_id);
Dmitry Shmidt04949592012-07-19 12:16:46 -0700821struct hostapd_radius_attr *
822hostapd_config_get_radius_attr(struct hostapd_radius_attr *attr, u8 type);
Dmitry Shmidt344abd32014-01-14 13:17:00 -0800823int hostapd_config_check(struct hostapd_config *conf, int full_config);
Dmitry Shmidt71757432014-06-02 13:50:35 -0700824void hostapd_set_security_params(struct hostapd_bss_config *bss,
825 int full_config);
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700826
827#endif /* HOSTAPD_CONFIG_H */