18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * wpa_supplicant - IBSS RSN 38d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Copyright (c) 2009, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 58d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This program is free software; you can redistribute it and/or modify 68d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * it under the terms of the GNU General Public License version 2 as 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * published by the Free Software Foundation. 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Alternatively, this software may be distributed under the terms of BSD 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * license. 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * See README and COPYING for more details. 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "includes.h" 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "common.h" 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "l2_packet/l2_packet.h" 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "rsn_supp/wpa.h" 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "rsn_supp/wpa_ie.h" 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "ap/wpa_auth.h" 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "wpa_supplicant_i.h" 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "driver_i.h" 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "ibss_rsn.h" 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void ibss_rsn_free(struct ibss_rsn_peer *peer) 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_auth_sta_deinit(peer->auth); 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_sm_deinit(peer->supp); 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(peer); 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void supp_set_state(void *ctx, enum wpa_states state) 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ibss_rsn_peer *peer = ctx; 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->supp_state = state; 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic enum wpa_states supp_get_state(void *ctx) 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ibss_rsn_peer *peer = ctx; 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return peer->supp_state; 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int supp_ether_send(void *ctx, const u8 *dest, u16 proto, const u8 *buf, 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len) 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ibss_rsn_peer *peer = ctx; 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_supplicant *wpa_s = peer->ibss_rsn->wpa_s; 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SUPP: %s(dest=" MACSTR " proto=0x%04x " 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "len=%lu)", 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__, MAC2STR(dest), proto, (unsigned long) len); 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_s->l2) 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return l2_packet_send(wpa_s->l2, dest, proto, buf, len); 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return wpa_drv_send_eapol(wpa_s, dest, proto, buf, len); 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic u8 * supp_alloc_eapol(void *ctx, u8 type, const void *data, 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 data_len, size_t *msg_len, void **data_pos) 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ieee802_1x_hdr *hdr; 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SUPP: %s(type=%d data_len=%d)", 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__, type, data_len); 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *msg_len = sizeof(*hdr) + data_len; 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hdr = os_malloc(*msg_len); 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (hdr == NULL) 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hdr->version = 2; 808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hdr->type = type; 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hdr->length = host_to_be16(data_len); 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (data) 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(hdr + 1, data, data_len); 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(hdr + 1, 0, data_len); 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (data_pos) 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt *data_pos = hdr + 1; 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return (u8 *) hdr; 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int supp_get_beacon_ie(void *ctx) 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ibss_rsn_peer *peer = ctx; 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SUPP: %s", __func__); 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: get correct RSN IE */ 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return wpa_sm_set_ap_rsn_ie(peer->supp, 1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) "\x30\x14\x01\x00" 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "\x00\x0f\xac\x04" 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "\x01\x00\x00\x0f\xac\x04" 1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "\x01\x00\x00\x0f\xac\x02" 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "\x00\x00", 22); 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int supp_set_key(void *ctx, enum wpa_alg alg, 1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr, int key_idx, int set_tx, 1128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *seq, size_t seq_len, 1138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *key, size_t key_len) 1148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ibss_rsn_peer *peer = ctx; 1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SUPP: %s(alg=%d addr=" MACSTR " key_idx=%d " 1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "set_tx=%d)", 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__, alg, MAC2STR(addr), key_idx, set_tx); 1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "SUPP: set_key - seq", seq, seq_len); 1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "SUPP: set_key - key", key, key_len); 1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (key_idx == 0) { 1248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 1258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * In IBSS RSN, the pairwise key from the 4-way handshake 1268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * initiated by the peer with highest MAC address is used. 1278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 1288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(peer->ibss_rsn->wpa_s->own_addr, peer->addr, 1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ETH_ALEN) > 0) { 1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SUPP: Do not use this PTK"); 1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (is_broadcast_ether_addr(addr)) 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt addr = peer->addr; 1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return wpa_drv_set_key(peer->ibss_rsn->wpa_s, alg, addr, key_idx, 1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt set_tx, seq, seq_len, key, key_len); 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void * supp_get_network_ctx(void *ctx) 1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ibss_rsn_peer *peer = ctx; 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return wpa_supplicant_get_ssid(peer->ibss_rsn->wpa_s); 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int supp_mlme_setprotection(void *ctx, const u8 *addr, 1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int protection_type, int key_type) 1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SUPP: %s(addr=" MACSTR " protection_type=%d " 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "key_type=%d)", 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__, MAC2STR(addr), protection_type, key_type); 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void supp_cancel_auth_timeout(void *ctx) 1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SUPP: %s", __func__); 1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void supp_deauthenticate(void * ctx, int reason_code) 1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SUPP: %s (TODO)", __func__); 1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint ibss_rsn_supp_init(struct ibss_rsn_peer *peer, const u8 *own_addr, 1728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *psk) 1738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_sm_ctx *ctx = os_zalloc(sizeof(*ctx)); 1758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ctx == NULL) 1768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ctx->ctx = peer; 1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ctx->msg_ctx = peer->ibss_rsn->wpa_s; 1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ctx->set_state = supp_set_state; 1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ctx->get_state = supp_get_state; 1828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ctx->ether_send = supp_ether_send; 1838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ctx->get_beacon_ie = supp_get_beacon_ie; 1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ctx->alloc_eapol = supp_alloc_eapol; 1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ctx->set_key = supp_set_key; 1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ctx->get_network_ctx = supp_get_network_ctx; 1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ctx->mlme_setprotection = supp_mlme_setprotection; 1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ctx->cancel_auth_timeout = supp_cancel_auth_timeout; 1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ctx->deauthenticate = supp_deauthenticate; 1908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->supp = wpa_sm_init(ctx); 1918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer->supp == NULL) { 1928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SUPP: wpa_sm_init() failed"); 1938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_sm_set_own_addr(peer->supp, own_addr); 1978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_sm_set_param(peer->supp, WPA_PARAM_RSN_ENABLED, 1); 1988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_sm_set_param(peer->supp, WPA_PARAM_PROTO, WPA_PROTO_RSN); 1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_sm_set_param(peer->supp, WPA_PARAM_PAIRWISE, WPA_CIPHER_CCMP); 2008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_sm_set_param(peer->supp, WPA_PARAM_GROUP, WPA_CIPHER_CCMP); 2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_sm_set_param(peer->supp, WPA_PARAM_KEY_MGMT, WPA_KEY_MGMT_PSK); 2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_sm_set_pmk(peer->supp, psk, PMK_LEN); 2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->supp_ie_len = sizeof(peer->supp_ie); 2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_sm_set_assoc_wpa_ie_default(peer->supp, peer->supp_ie, 2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt &peer->supp_ie_len) < 0) { 2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "SUPP: wpa_sm_set_assoc_wpa_ie_default()" 2088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " failed"); 2098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 2108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_sm_notify_assoc(peer->supp, peer->addr); 2138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 2158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void auth_logger(void *ctx, const u8 *addr, logger_level level, 2198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *txt) 2208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (addr) 2228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "AUTH: " MACSTR " - %s", 2238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAC2STR(addr), txt); 2248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 2258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "AUTH: %s", txt); 2268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic const u8 * auth_get_psk(void *ctx, const u8 *addr, const u8 *prev_psk) 2308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ibss_rsn *ibss_rsn = ctx; 2328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "AUTH: %s (addr=" MACSTR " prev_psk=%p)", 2338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__, MAC2STR(addr), prev_psk); 2348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev_psk) 2358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 2368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return ibss_rsn->psk; 2378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int auth_send_eapol(void *ctx, const u8 *addr, const u8 *data, 2418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t data_len, int encrypt) 2428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ibss_rsn *ibss_rsn = ctx; 2448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_supplicant *wpa_s = ibss_rsn->wpa_s; 2458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "AUTH: %s(addr=" MACSTR " data_len=%lu " 2478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "encrypt=%d)", 2488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__, MAC2STR(addr), (unsigned long) data_len, encrypt); 2498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_s->l2) 2518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return l2_packet_send(wpa_s->l2, addr, ETH_P_EAPOL, data, 2528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt data_len); 2538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return wpa_drv_send_eapol(wpa_s, addr, ETH_P_EAPOL, data, data_len); 2558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int auth_set_key(void *ctx, int vlan_id, enum wpa_alg alg, 2598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *addr, int idx, u8 *key, size_t key_len) 2608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ibss_rsn *ibss_rsn = ctx; 2628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 seq[6]; 2638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(seq, 0, sizeof(seq)); 2658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (addr) { 2678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "AUTH: %s(alg=%d addr=" MACSTR 2688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt " key_idx=%d)", 2698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__, alg, MAC2STR(addr), idx); 2708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 2718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "AUTH: %s(alg=%d key_idx=%d)", 2728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__, alg, idx); 2738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_key(MSG_DEBUG, "AUTH: set_key - key", key, key_len); 2758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (idx == 0) { 2778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 2788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * In IBSS RSN, the pairwise key from the 4-way handshake 2798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * initiated by the peer with highest MAC address is used. 2808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (addr == NULL || 2828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcmp(ibss_rsn->wpa_s->own_addr, addr, ETH_ALEN) < 0) { 2838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "AUTH: Do not use this PTK"); 2848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 2858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return wpa_drv_set_key(ibss_rsn->wpa_s, alg, addr, idx, 2898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1, seq, 6, key, key_len); 2908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int auth_for_each_sta(void *ctx, int (*cb)(struct wpa_state_machine *sm, 2948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *ctx), 2958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *cb_ctx) 2968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ibss_rsn *ibss_rsn = ctx; 2988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ibss_rsn_peer *peer; 2998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "AUTH: for_each_sta"); 3018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (peer = ibss_rsn->peers; peer; peer = peer->next) { 3038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer->auth && cb(peer->auth, cb_ctx)) 3048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 1; 3058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 3088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int ibss_rsn_auth_init_group(struct ibss_rsn *ibss_rsn, 3128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *own_addr) 3138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_auth_config conf; 3158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpa_auth_callbacks cb; 3168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "AUTH: Initializing group state machine"); 3188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(&conf, 0, sizeof(conf)); 3208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf.wpa = 2; 3218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf.wpa_key_mgmt = WPA_KEY_MGMT_PSK; 3228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf.wpa_pairwise = WPA_CIPHER_CCMP; 3238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf.rsn_pairwise = WPA_CIPHER_CCMP; 3248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf.wpa_group = WPA_CIPHER_CCMP; 3258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf.eapol_version = 2; 3268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt conf.wpa_group_rekey = 600; 3278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memset(&cb, 0, sizeof(cb)); 3298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cb.ctx = ibss_rsn; 3308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cb.logger = auth_logger; 3318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cb.send_eapol = auth_send_eapol; 3328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cb.get_psk = auth_get_psk; 3338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cb.set_key = auth_set_key; 3348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt cb.for_each_sta = auth_for_each_sta; 3358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ibss_rsn->auth_group = wpa_init(own_addr, &conf, &cb); 3378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ibss_rsn->auth_group == NULL) { 3388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "AUTH: wpa_init() failed"); 3398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 3438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int ibss_rsn_auth_init(struct ibss_rsn *ibss_rsn, 3478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ibss_rsn_peer *peer) 3488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->auth = wpa_auth_sta_init(ibss_rsn->auth_group, peer->addr); 3508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer->auth == NULL) { 3518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "AUTH: wpa_auth_sta_init() failed"); 3528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: get peer RSN IE with Probe Request */ 3568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_validate_wpa_ie(ibss_rsn->auth_group, peer->auth, 3578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (u8 *) "\x30\x14\x01\x00" 3588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "\x00\x0f\xac\x04" 3598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "\x01\x00\x00\x0f\xac\x04" 3608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "\x01\x00\x00\x0f\xac\x02" 3618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "\x00\x00", 22, NULL, 0) != 3628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt WPA_IE_OK) { 3638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "AUTH: wpa_validate_wpa_ie() failed"); 3648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_auth_sm_event(peer->auth, WPA_ASSOC)) 3688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (wpa_auth_sta_associated(ibss_rsn->auth_group, peer->auth)) 3718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 3748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint ibss_rsn_start(struct ibss_rsn *ibss_rsn, const u8 *addr) 3788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ibss_rsn_peer *peer; 3808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ibss_rsn == NULL) 3828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (peer = ibss_rsn->peers; peer; peer = peer->next) { 3858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(addr, peer->addr, ETH_ALEN) == 0) { 3868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: IBSS Authenticator and " 3878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Supplicant for peer " MACSTR " already " 3888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "running", MAC2STR(addr)); 3898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 3908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: Starting IBSS Authenticator and " 3948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Supplicant for peer " MACSTR, MAC2STR(addr)); 3958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer = os_zalloc(sizeof(*peer)); 3978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peer == NULL) 3988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 3998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->ibss_rsn = ibss_rsn; 4018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(peer->addr, addr, ETH_ALEN); 4028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ibss_rsn_supp_init(peer, ibss_rsn->wpa_s->own_addr, ibss_rsn->psk) 4048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt < 0) { 4058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ibss_rsn_free(peer); 4068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ibss_rsn_auth_init(ibss_rsn, peer) < 0) { 4108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ibss_rsn_free(peer); 4118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 4128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer->next = ibss_rsn->peers; 4158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ibss_rsn->peers = peer; 4168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 4188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid ibss_rsn_stop(struct ibss_rsn *ibss_rsn, const u8 *peermac) 4228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ibss_rsn_peer *peer, *prev; 4248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ibss_rsn == NULL) 4268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 4278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (peermac == NULL) { 4298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* remove all peers */ 4308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "%s: Remove all peers", __func__); 4318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer = ibss_rsn->peers; 4328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (peer) { 4338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = peer; 4348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer = peer->next; 4358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ibss_rsn_free(prev); 4368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ibss_rsn->peers = peer; 4378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 4398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* remove specific peer */ 4408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "%s: Remove specific peer " MACSTR, 4418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__, MAC2STR(peermac)); 4428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (prev = NULL, peer = ibss_rsn->peers; peer != NULL; 4448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = peer, peer = peer->next) { 4458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(peermac, peer->addr, ETH_ALEN) == 0) { 4468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev == NULL) 4478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ibss_rsn->peers = peer->next; 4488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 4498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = peer->next; 4508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ibss_rsn_free(peer); 4518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "%s: Successfully " 4528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "removed a specific peer", 4538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt __func__); 4548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 4558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct ibss_rsn * ibss_rsn_init(struct wpa_supplicant *wpa_s) 4628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ibss_rsn *ibss_rsn; 4648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ibss_rsn = os_zalloc(sizeof(*ibss_rsn)); 4668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ibss_rsn == NULL) 4678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 4688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ibss_rsn->wpa_s = wpa_s; 4698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ibss_rsn_auth_init_group(ibss_rsn, wpa_s->own_addr) < 0) { 4718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ibss_rsn_deinit(ibss_rsn); 4728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 4738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return ibss_rsn; 4768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid ibss_rsn_deinit(struct ibss_rsn *ibss_rsn) 4808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ibss_rsn_peer *peer, *prev; 4828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ibss_rsn == NULL) 4848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 4858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer = ibss_rsn->peers; 4878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (peer) { 4888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = peer; 4898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt peer = peer->next; 4908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ibss_rsn_free(prev); 4918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_deinit(ibss_rsn->auth_group); 4948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(ibss_rsn); 4958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int ibss_rsn_eapol_dst_supp(const u8 *buf, size_t len) 5008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct ieee802_1x_hdr *hdr; 5028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct wpa_eapol_key *key; 5038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u16 key_info; 5048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t plen; 5058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: Support other EAPOL packets than just EAPOL-Key */ 5078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (len < sizeof(*hdr) + sizeof(*key)) 5098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt hdr = (const struct ieee802_1x_hdr *) buf; 5128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt key = (const struct wpa_eapol_key *) (hdr + 1); 5138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt plen = be_to_host16(hdr->length); 5148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (hdr->version < EAPOL_VERSION) { 5168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* TODO: backwards compatibility */ 5178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (hdr->type != IEEE802_1X_TYPE_EAPOL_KEY) { 5198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: EAPOL frame (type %u) discarded, " 5208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "not a Key frame", hdr->type); 5218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (plen > len - sizeof(*hdr) || plen < sizeof(*key)) { 5248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: EAPOL frame payload size %lu " 5258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "invalid (frame size %lu)", 5268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt (unsigned long) plen, (unsigned long) len); 5278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (key->type != EAPOL_KEY_TYPE_RSN) { 5318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: EAPOL-Key type (%d) unknown, " 5328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "discarded", key->type); 5338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt key_info = WPA_GET_BE16(key->key_info); 5378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return !!(key_info & WPA_KEY_INFO_ACK); 5398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic int ibss_rsn_process_rx_eapol(struct ibss_rsn *ibss_rsn, 5438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ibss_rsn_peer *peer, 5448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *buf, size_t len) 5458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int supp; 5478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 *tmp; 5488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt supp = ibss_rsn_eapol_dst_supp(buf, len); 5508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (supp < 0) 5518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt tmp = os_malloc(len); 5548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (tmp == NULL) 5558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(tmp, buf, len); 5578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (supp) { 5588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: IBSS RX EAPOL for Supplicant"); 5598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_sm_rx_eapol(peer->supp, peer->addr, tmp, len); 5608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 5618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: IBSS RX EAPOL for Authenticator"); 5628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_receive(ibss_rsn->auth_group, peer->auth, tmp, len); 5638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(tmp); 5658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 1; 5678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint ibss_rsn_rx_eapol(struct ibss_rsn *ibss_rsn, const u8 *src_addr, 5718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *buf, size_t len) 5728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 5738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct ibss_rsn_peer *peer; 5748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ibss_rsn == NULL) 5768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (peer = ibss_rsn->peers; peer; peer = peer->next) { 5798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(src_addr, peer->addr, ETH_ALEN) == 0) 5808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return ibss_rsn_process_rx_eapol(ibss_rsn, peer, 5818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf, len); 5828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ibss_rsn_eapol_dst_supp(buf, len) > 0) { 5858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* 5868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Create new IBSS peer based on an EAPOL message from the peer 5878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Authenticator. 5888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 5898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ibss_rsn_start(ibss_rsn, src_addr) < 0) 5908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 5918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return ibss_rsn_process_rx_eapol(ibss_rsn, ibss_rsn->peers, 5928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt buf, len); 5938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 5948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return 0; 5968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 5978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 5998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid ibss_rsn_set_psk(struct ibss_rsn *ibss_rsn, const u8 *psk) 6008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 6018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (ibss_rsn == NULL) 6028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 6038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(ibss_rsn->psk, psk, PMK_LEN); 6048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 605