pmksa_cache_auth.c revision 8d520ff1dc2da35cdca849e982051b86468016d8
18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * hostapd - PMKSA cache for IEEE 802.11i RSN 38d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Copyright (c) 2004-2008, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 58d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This program is free software; you can redistribute it and/or modify 68d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * it under the terms of the GNU General Public License version 2 as 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * published by the Free Software Foundation. 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Alternatively, this software may be distributed under the terms of BSD 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * license. 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * See README and COPYING for more details. 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "utils/includes.h" 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "utils/common.h" 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "utils/eloop.h" 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "eapol_auth/eapol_auth_sm.h" 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "eapol_auth/eapol_auth_sm_i.h" 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "sta_info.h" 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "ap_config.h" 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "pmksa_cache_auth.h" 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic const int pmksa_cache_max_entries = 1024; 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic const int dot11RSNAConfigPMKLifetime = 43200; 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct rsn_pmksa_cache { 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define PMKID_HASH_SIZE 128 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define PMKID_HASH(pmkid) (unsigned int) ((pmkid)[0] & 0x7f) 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *pmkid[PMKID_HASH_SIZE]; 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *pmksa; 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pmksa_count; 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void (*free_cb)(struct rsn_pmksa_cache_entry *entry, void *ctx); 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *ctx; 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void pmksa_cache_set_expiration(struct rsn_pmksa_cache *pmksa); 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void _pmksa_cache_free_entry(struct rsn_pmksa_cache_entry *entry) 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry == NULL) 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(entry->identity); 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NO_RADIUS 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_free_class(&entry->radius_class); 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NO_RADIUS */ 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(entry); 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void pmksa_cache_free_entry(struct rsn_pmksa_cache *pmksa, 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry) 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *pos, *prev; 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->pmksa_count--; 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->free_cb(entry, pmksa->ctx); 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pmksa->pmkid[PMKID_HASH(entry->pmkid)]; 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pos) { 668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos == entry) { 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev != NULL) { 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->hnext = pos->hnext; 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->pmkid[PMKID_HASH(entry->pmkid)] = 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos->hnext; 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = pos; 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pos->hnext; 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pmksa->pmksa; 808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pos) { 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos == entry) { 838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev != NULL) 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = pos->next; 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->pmksa = pos->next; 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = pos; 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pos->next; 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _pmksa_cache_free_entry(entry); 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void pmksa_cache_expire(void *eloop_ctx, void *timeout_ctx) 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache *pmksa = eloop_ctx; 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct os_time now; 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_get_time(&now); 1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pmksa->pmksa && pmksa->pmksa->expiration <= now.sec) { 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry = pmksa->pmksa; 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->pmksa = entry->next; 1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: expired PMKSA cache entry for " 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MACSTR, MAC2STR(entry->spa)); 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_free_entry(pmksa, entry); 1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_set_expiration(pmksa); 1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void pmksa_cache_set_expiration(struct rsn_pmksa_cache *pmksa) 1158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int sec; 1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct os_time now; 1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(pmksa_cache_expire, pmksa, NULL); 1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pmksa->pmksa == NULL) 1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_get_time(&now); 1238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sec = pmksa->pmksa->expiration - now.sec; 1248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sec < 0) 1258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sec = 0; 1268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(sec + 1, 0, pmksa_cache_expire, pmksa, NULL); 1278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void pmksa_cache_from_eapol_data(struct rsn_pmksa_cache_entry *entry, 1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eapol_state_machine *eapol) 1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eapol == NULL) 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eapol->identity) { 1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->identity = os_malloc(eapol->identity_len); 1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->identity) { 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->identity_len = eapol->identity_len; 1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->identity, eapol->identity, 1418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eapol->identity_len); 1428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NO_RADIUS 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_copy_class(&entry->radius_class, &eapol->radius_class); 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NO_RADIUS */ 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->eap_type_authsrv = eapol->eap_type_authsrv; 1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->vlan_id = ((struct sta_info *) eapol->sta)->vlan_id; 1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid pmksa_cache_to_eapol_data(struct rsn_pmksa_cache_entry *entry, 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eapol_state_machine *eapol) 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry == NULL || eapol == NULL) 1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->identity) { 1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(eapol->identity); 1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eapol->identity = os_malloc(entry->identity_len); 1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eapol->identity) { 1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eapol->identity_len = entry->identity_len; 1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(eapol->identity, entry->identity, 1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->identity_len); 1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_ascii(MSG_DEBUG, "STA identity from PMKSA", 1698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eapol->identity, eapol->identity_len); 1708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NO_RADIUS 1738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_free_class(&eapol->radius_class); 1748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_copy_class(&eapol->radius_class, &entry->radius_class); 1758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NO_RADIUS */ 1768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eapol->radius_class.attr) { 1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "Copied %lu Class attribute(s) from " 1788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "PMKSA", (unsigned long) eapol->radius_class.count); 1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eapol->eap_type_authsrv = entry->eap_type_authsrv; 1828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ((struct sta_info *) eapol->sta)->vlan_id = entry->vlan_id; 1838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void pmksa_cache_link_entry(struct rsn_pmksa_cache *pmksa, 1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry) 1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *pos, *prev; 1908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Add the new entry; order by expiration time */ 1928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pmksa->pmksa; 1938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pos) { 1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos->expiration > entry->expiration) 1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 1978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = pos; 1988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pos->next; 1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev == NULL) { 2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next = pmksa->pmksa; 2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->pmksa = entry; 2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next = prev->next; 2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = entry; 2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->hnext = pmksa->pmkid[PMKID_HASH(entry->pmkid)]; 2088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->pmkid[PMKID_HASH(entry->pmkid)] = entry; 2098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->pmksa_count++; 2118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: added PMKSA cache entry for " MACSTR, 2128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAC2STR(entry->spa)); 2138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "RSN: added PMKID", entry->pmkid, PMKID_LEN); 2148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 2188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pmksa_cache_auth_add - Add a PMKSA cache entry 2198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmksa: Pointer to PMKSA cache data from pmksa_cache_auth_init() 2208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmk: The new pairwise master key 2218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmk_len: PMK length in bytes, usually PMK_LEN (32) 2228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @aa: Authenticator address 2238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @spa: Supplicant address 2248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @session_timeout: Session timeout 2258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @eapol: Pointer to EAPOL state machine data 2268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @akmp: WPA_KEY_MGMT_* used in key derivation 2278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to the added PMKSA cache entry or %NULL on error 2288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function create a PMKSA entry for a new PMK and adds it to the PMKSA 2308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * cache. If an old entry is already in the cache for the same Supplicant, 2318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * this entry will be replaced with the new entry. PMKID will be calculated 2328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * based on the PMK. 2338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct rsn_pmksa_cache_entry * 2358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtpmksa_cache_auth_add(struct rsn_pmksa_cache *pmksa, 2368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *pmk, size_t pmk_len, 2378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *aa, const u8 *spa, int session_timeout, 2388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eapol_state_machine *eapol, int akmp) 2398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry, *pos; 2418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct os_time now; 2428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pmk_len > PMK_LEN) 2448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 2458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = os_zalloc(sizeof(*entry)); 2478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry == NULL) 2488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 2498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->pmk, pmk, pmk_len); 2508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->pmk_len = pmk_len; 2518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsn_pmkid(pmk, pmk_len, aa, spa, entry->pmkid, 2528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_key_mgmt_sha256(akmp)); 2538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_get_time(&now); 2548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->expiration = now.sec; 2558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (session_timeout > 0) 2568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->expiration += session_timeout; 2578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 2588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->expiration += dot11RSNAConfigPMKLifetime; 2598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->akmp = akmp; 2608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->spa, spa, ETH_ALEN); 2618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_from_eapol_data(entry, eapol); 2628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Replace an old entry for the same STA (if found) with the new entry 2648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pmksa_cache_auth_get(pmksa, spa, NULL); 2668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos) 2678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_free_entry(pmksa, pos); 2688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pmksa->pmksa_count >= pmksa_cache_max_entries && pmksa->pmksa) { 2708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Remove the oldest entry to make room for the new entry */ 2718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: removed the oldest PMKSA cache " 2728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "entry (for " MACSTR ") to make room for new one", 2738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAC2STR(pmksa->pmksa->spa)); 2748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_free_entry(pmksa, pmksa->pmksa); 2758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_link_entry(pmksa, entry); 2788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return entry; 2808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct rsn_pmksa_cache_entry * 2848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtpmksa_cache_add_okc(struct rsn_pmksa_cache *pmksa, 2858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct rsn_pmksa_cache_entry *old_entry, 2868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *aa, const u8 *pmkid) 2878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry; 2898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = os_zalloc(sizeof(*entry)); 2918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry == NULL) 2928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 2938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->pmkid, pmkid, PMKID_LEN); 2948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->pmk, old_entry->pmk, old_entry->pmk_len); 2958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->pmk_len = old_entry->pmk_len; 2968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->expiration = old_entry->expiration; 2978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->akmp = old_entry->akmp; 2988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->spa, old_entry->spa, ETH_ALEN); 2998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->opportunistic = 1; 3008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (old_entry->identity) { 3018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->identity = os_malloc(old_entry->identity_len); 3028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->identity) { 3038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->identity_len = old_entry->identity_len; 3048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->identity, old_entry->identity, 3058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt old_entry->identity_len); 3068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NO_RADIUS 3098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_copy_class(&entry->radius_class, &old_entry->radius_class); 3108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NO_RADIUS */ 3118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->eap_type_authsrv = old_entry->eap_type_authsrv; 3128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->vlan_id = old_entry->vlan_id; 3138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->opportunistic = 1; 3148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_link_entry(pmksa, entry); 3168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return entry; 3188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 3228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pmksa_cache_auth_deinit - Free all entries in PMKSA cache 3238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmksa: Pointer to PMKSA cache data from pmksa_cache_auth_init() 3248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid pmksa_cache_auth_deinit(struct rsn_pmksa_cache *pmksa) 3268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry, *prev; 3288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int i; 3298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pmksa == NULL) 3318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 3328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = pmksa->pmksa; 3348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 3358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 3368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 3378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _pmksa_cache_free_entry(prev); 3388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(pmksa_cache_expire, pmksa, NULL); 3408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; i < PMKID_HASH_SIZE; i++) 3418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->pmkid[i] = NULL; 3428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(pmksa); 3438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 3478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pmksa_cache_auth_get - Fetch a PMKSA cache entry 3488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmksa: Pointer to PMKSA cache data from pmksa_cache_auth_init() 3498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @spa: Supplicant address or %NULL to match any 3508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmkid: PMKID or %NULL to match any 3518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to PMKSA cache entry or %NULL if no match was found 3528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct rsn_pmksa_cache_entry * 3548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtpmksa_cache_auth_get(struct rsn_pmksa_cache *pmksa, 3558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *spa, const u8 *pmkid) 3568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry; 3588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pmkid) 3608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = pmksa->pmkid[PMKID_HASH(pmkid)]; 3618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 3628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = pmksa->pmksa; 3638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 3648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if ((spa == NULL || 3658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(entry->spa, spa, ETH_ALEN) == 0) && 3668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (pmkid == NULL || 3678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(entry->pmkid, pmkid, PMKID_LEN) == 0)) 3688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return entry; 3698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = pmkid ? entry->hnext : entry->next; 3708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 3728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 3768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pmksa_cache_get_okc - Fetch a PMKSA cache entry using OKC 3778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmksa: Pointer to PMKSA cache data from pmksa_cache_auth_init() 3788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @aa: Authenticator address 3798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @spa: Supplicant address 3808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmkid: PMKID 3818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to PMKSA cache entry or %NULL if no match was found 3828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 3838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Use opportunistic key caching (OKC) to find a PMK for a supplicant. 3848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct rsn_pmksa_cache_entry * pmksa_cache_get_okc( 3868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache *pmksa, const u8 *aa, const u8 *spa, 3878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *pmkid) 3888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry; 3908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 new_pmkid[PMKID_LEN]; 3918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = pmksa->pmksa; 3938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 3948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(entry->spa, spa, ETH_ALEN) != 0) 3958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 3968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsn_pmkid(entry->pmk, entry->pmk_len, aa, spa, new_pmkid, 3978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_key_mgmt_sha256(entry->akmp)); 3988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(new_pmkid, pmkid, PMKID_LEN) == 0) 3998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return entry; 4008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 4018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 4038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 4078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pmksa_cache_auth_init - Initialize PMKSA cache 4088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @free_cb: Callback function to be called when a PMKSA cache entry is freed 4098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ctx: Context pointer for free_cb function 4108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to PMKSA cache data or %NULL on failure 4118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 4128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct rsn_pmksa_cache * 4138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtpmksa_cache_auth_init(void (*free_cb)(struct rsn_pmksa_cache_entry *entry, 4148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *ctx), void *ctx) 4158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache *pmksa; 4178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa = os_zalloc(sizeof(*pmksa)); 4198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pmksa) { 4208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->free_cb = free_cb; 4218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->ctx = ctx; 4228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return pmksa; 4258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 426