104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt/* 204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt * Copyright (c) 2009, Atheros Communications, Inc. 304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt * Copyright (c) 2011-2012, Qualcomm Atheros, Inc. 404949598a23f501be6eec21697465fd46a28840aDmitry Shmidt * 504949598a23f501be6eec21697465fd46a28840aDmitry Shmidt * This software may be distributed under the terms of the BSD license. 604949598a23f501be6eec21697465fd46a28840aDmitry Shmidt * See README for more details. 704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt */ 804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 904949598a23f501be6eec21697465fd46a28840aDmitry Shmidt#include "includes.h" 1004949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 1104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt#include "common.h" 1204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt#include "eloop.h" 1304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt#include "common/ieee802_11_common.h" 1404949598a23f501be6eec21697465fd46a28840aDmitry Shmidt#include "common/ieee802_11_defs.h" 1504949598a23f501be6eec21697465fd46a28840aDmitry Shmidt#include "common/gas.h" 1604949598a23f501be6eec21697465fd46a28840aDmitry Shmidt#include "common/wpa_ctrl.h" 1704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt#include "wpa_supplicant_i.h" 1804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt#include "driver_i.h" 1904949598a23f501be6eec21697465fd46a28840aDmitry Shmidt#include "config.h" 2004949598a23f501be6eec21697465fd46a28840aDmitry Shmidt#include "bss.h" 2104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt#include "gas_query.h" 2204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt#include "interworking.h" 2304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt#include "hs20_supplicant.h" 2404949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 2504949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 2604949598a23f501be6eec21697465fd46a28840aDmitry Shmidtvoid wpas_hs20_add_indication(struct wpabuf *buf) 2704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt{ 2804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_put_u8(buf, WLAN_EID_VENDOR_SPECIFIC); 2904949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_put_u8(buf, 5); 3004949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_put_be24(buf, OUI_WFA); 3104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_put_u8(buf, HS20_INDICATION_OUI_TYPE); 3204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_put_u8(buf, 0x00); /* Hotspot Configuration */ 3304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt} 3404949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 3504949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 3651b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidtint is_hs20_network(struct wpa_supplicant *wpa_s, struct wpa_ssid *ssid, 3751b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt struct wpa_bss *bss) 3851b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt{ 3951b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt if (!wpa_s->conf->hs20 || !ssid) 4051b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt return 0; 4151b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt 4251b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt if (ssid->parent_cred) 4351b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt return 1; 4451b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt 4551b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt if (bss && !wpa_bss_get_vendor_ie(bss, HS20_IE_VENDOR_TYPE)) 4651b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt return 0; 4751b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt 4851b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt /* 4951b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt * This may catch some non-Hotspot 2.0 cases, but it is safer to do that 5051b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt * than cause Hotspot 2.0 connections without indication element getting 5151b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt * added. Non-Hotspot 2.0 APs should ignore the unknown vendor element. 5251b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt */ 5351b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt 5451b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt if (!(ssid->key_mgmt & WPA_KEY_MGMT_IEEE8021X)) 5551b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt return 0; 5651b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt if (!(ssid->pairwise_cipher & WPA_CIPHER_CCMP)) 5751b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt return 0; 5851b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt if (ssid->proto != WPA_PROTO_RSN) 5951b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt return 0; 6051b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt 6151b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt return 1; 6251b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt} 6351b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt 6451b6ea882f234c14cd1fe1332a3840cf61fafccaDmitry Shmidt 6504949598a23f501be6eec21697465fd46a28840aDmitry Shmidtstruct wpabuf * hs20_build_anqp_req(u32 stypes, const u8 *payload, 6604949598a23f501be6eec21697465fd46a28840aDmitry Shmidt size_t payload_len) 6704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt{ 6804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt struct wpabuf *buf; 6904949598a23f501be6eec21697465fd46a28840aDmitry Shmidt u8 *len_pos; 7004949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 7104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt buf = gas_anqp_build_initial_req(0, 100 + payload_len); 7204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt if (buf == NULL) 7304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt return NULL; 7404949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 7504949598a23f501be6eec21697465fd46a28840aDmitry Shmidt len_pos = gas_anqp_add_element(buf, ANQP_VENDOR_SPECIFIC); 7604949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_put_be24(buf, OUI_WFA); 7704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_put_u8(buf, HS20_ANQP_OUI_TYPE); 7804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt if (stypes == BIT(HS20_STYPE_NAI_HOME_REALM_QUERY)) { 7904949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_put_u8(buf, HS20_STYPE_NAI_HOME_REALM_QUERY); 8004949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_put_u8(buf, 0); /* Reserved */ 8104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt if (payload) 8204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_put_data(buf, payload, payload_len); 8304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt } else { 8404949598a23f501be6eec21697465fd46a28840aDmitry Shmidt u8 i; 8504949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_put_u8(buf, HS20_STYPE_QUERY_LIST); 8604949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_put_u8(buf, 0); /* Reserved */ 8704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt for (i = 0; i < 32; i++) { 8804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt if (stypes & BIT(i)) 8904949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_put_u8(buf, i); 9004949598a23f501be6eec21697465fd46a28840aDmitry Shmidt } 9104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt } 9204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt gas_anqp_set_element_len(buf, len_pos); 9304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 9404949598a23f501be6eec21697465fd46a28840aDmitry Shmidt gas_anqp_set_len(buf); 9504949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 9604949598a23f501be6eec21697465fd46a28840aDmitry Shmidt return buf; 9704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt} 9804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 9904949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 10004949598a23f501be6eec21697465fd46a28840aDmitry Shmidtint hs20_anqp_send_req(struct wpa_supplicant *wpa_s, const u8 *dst, u32 stypes, 10104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt const u8 *payload, size_t payload_len) 10204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt{ 10304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt struct wpabuf *buf; 10404949598a23f501be6eec21697465fd46a28840aDmitry Shmidt int ret = 0; 10504949598a23f501be6eec21697465fd46a28840aDmitry Shmidt int freq; 10604949598a23f501be6eec21697465fd46a28840aDmitry Shmidt struct wpa_bss *bss; 10704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt int res; 10804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 10904949598a23f501be6eec21697465fd46a28840aDmitry Shmidt freq = wpa_s->assoc_freq; 11004949598a23f501be6eec21697465fd46a28840aDmitry Shmidt bss = wpa_bss_get_bssid(wpa_s, dst); 111d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt if (bss) { 112d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt wpa_bss_anqp_unshare_alloc(bss); 11304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt freq = bss->freq; 114d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt } 11504949598a23f501be6eec21697465fd46a28840aDmitry Shmidt if (freq <= 0) 11604949598a23f501be6eec21697465fd46a28840aDmitry Shmidt return -1; 11704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 11804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpa_printf(MSG_DEBUG, "HS20: ANQP Query Request to " MACSTR " for " 11904949598a23f501be6eec21697465fd46a28840aDmitry Shmidt "subtypes 0x%x", MAC2STR(dst), stypes); 12004949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 12104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt buf = hs20_build_anqp_req(stypes, payload, payload_len); 12204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt if (buf == NULL) 12304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt return -1; 12404949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 12504949598a23f501be6eec21697465fd46a28840aDmitry Shmidt res = gas_query_req(wpa_s->gas, dst, freq, buf, anqp_resp_cb, wpa_s); 12604949598a23f501be6eec21697465fd46a28840aDmitry Shmidt if (res < 0) { 12704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpa_printf(MSG_DEBUG, "ANQP: Failed to send Query Request"); 12804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt ret = -1; 12904949598a23f501be6eec21697465fd46a28840aDmitry Shmidt } else 13004949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpa_printf(MSG_DEBUG, "ANQP: Query started with dialog token " 13104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt "%u", res); 13204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 13304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_free(buf); 13404949598a23f501be6eec21697465fd46a28840aDmitry Shmidt return ret; 13504949598a23f501be6eec21697465fd46a28840aDmitry Shmidt} 13604949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 13704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 13804949598a23f501be6eec21697465fd46a28840aDmitry Shmidtvoid hs20_parse_rx_hs20_anqp_resp(struct wpa_supplicant *wpa_s, 13904949598a23f501be6eec21697465fd46a28840aDmitry Shmidt const u8 *sa, const u8 *data, size_t slen) 14004949598a23f501be6eec21697465fd46a28840aDmitry Shmidt{ 14104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt const u8 *pos = data; 14204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt u8 subtype; 14304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt struct wpa_bss *bss = wpa_bss_get_bssid(wpa_s, sa); 1444530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt struct wpa_bss_anqp *anqp = NULL; 14504949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 14604949598a23f501be6eec21697465fd46a28840aDmitry Shmidt if (slen < 2) 14704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt return; 14804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 1494530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt if (bss) 1504530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt anqp = bss->anqp; 1514530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt 15204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt subtype = *pos++; 15304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt slen--; 15404949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 15504949598a23f501be6eec21697465fd46a28840aDmitry Shmidt pos++; /* Reserved */ 15604949598a23f501be6eec21697465fd46a28840aDmitry Shmidt slen--; 15704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 15804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt switch (subtype) { 15904949598a23f501be6eec21697465fd46a28840aDmitry Shmidt case HS20_STYPE_CAPABILITY_LIST: 16004949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpa_msg(wpa_s, MSG_INFO, "RX-HS20-ANQP " MACSTR 16104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt " HS Capability List", MAC2STR(sa)); 16204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpa_hexdump_ascii(MSG_DEBUG, "HS Capability List", pos, slen); 16304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt break; 16404949598a23f501be6eec21697465fd46a28840aDmitry Shmidt case HS20_STYPE_OPERATOR_FRIENDLY_NAME: 16504949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpa_msg(wpa_s, MSG_INFO, "RX-HS20-ANQP " MACSTR 16604949598a23f501be6eec21697465fd46a28840aDmitry Shmidt " Operator Friendly Name", MAC2STR(sa)); 16704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpa_hexdump_ascii(MSG_DEBUG, "oper friendly name", pos, slen); 1684530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt if (anqp) { 1694530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt wpabuf_free(anqp->hs20_operator_friendly_name); 1704530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt anqp->hs20_operator_friendly_name = 17104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_alloc_copy(pos, slen); 17204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt } 17304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt break; 17404949598a23f501be6eec21697465fd46a28840aDmitry Shmidt case HS20_STYPE_WAN_METRICS: 175d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt wpa_hexdump(MSG_DEBUG, "WAN Metrics", pos, slen); 176d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt if (slen < 13) { 177d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt wpa_dbg(wpa_s, MSG_DEBUG, "HS 2.0: Too short WAN " 178d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt "Metrics value from " MACSTR, MAC2STR(sa)); 179d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt break; 180d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt } 18104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpa_msg(wpa_s, MSG_INFO, "RX-HS20-ANQP " MACSTR 182d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt " WAN Metrics %02x:%u:%u:%u:%u:%u", MAC2STR(sa), 183d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt pos[0], WPA_GET_LE32(pos + 1), WPA_GET_LE32(pos + 5), 184d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt pos[9], pos[10], WPA_GET_LE16(pos + 11)); 1854530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt if (anqp) { 1864530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt wpabuf_free(anqp->hs20_wan_metrics); 1874530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt anqp->hs20_wan_metrics = wpabuf_alloc_copy(pos, slen); 18804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt } 18904949598a23f501be6eec21697465fd46a28840aDmitry Shmidt break; 19004949598a23f501be6eec21697465fd46a28840aDmitry Shmidt case HS20_STYPE_CONNECTION_CAPABILITY: 19104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpa_msg(wpa_s, MSG_INFO, "RX-HS20-ANQP " MACSTR 19204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt " Connection Capability", MAC2STR(sa)); 19304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpa_hexdump_ascii(MSG_DEBUG, "conn capability", pos, slen); 1944530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt if (anqp) { 1954530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt wpabuf_free(anqp->hs20_connection_capability); 1964530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt anqp->hs20_connection_capability = 19704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_alloc_copy(pos, slen); 19804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt } 19904949598a23f501be6eec21697465fd46a28840aDmitry Shmidt break; 20004949598a23f501be6eec21697465fd46a28840aDmitry Shmidt case HS20_STYPE_OPERATING_CLASS: 20104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpa_msg(wpa_s, MSG_INFO, "RX-HS20-ANQP " MACSTR 20204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt " Operating Class", MAC2STR(sa)); 20304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpa_hexdump_ascii(MSG_DEBUG, "Operating Class", pos, slen); 2044530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt if (anqp) { 2054530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt wpabuf_free(anqp->hs20_operating_class); 2064530cfd4d14a77c58e35393b91e40f8dd9d62697Dmitry Shmidt anqp->hs20_operating_class = 20704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_alloc_copy(pos, slen); 20804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt } 20904949598a23f501be6eec21697465fd46a28840aDmitry Shmidt break; 21004949598a23f501be6eec21697465fd46a28840aDmitry Shmidt default: 21104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpa_printf(MSG_DEBUG, "HS20: Unsupported subtype %u", subtype); 21204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt break; 21304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt } 21404949598a23f501be6eec21697465fd46a28840aDmitry Shmidt} 215