18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * hostapd - PMKSA cache for IEEE 802.11i RSN 304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt * Copyright (c) 2004-2008, 2012, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license. 6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details. 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "utils/includes.h" 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "utils/common.h" 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "utils/eloop.h" 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "eapol_auth/eapol_auth_sm.h" 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "eapol_auth/eapol_auth_sm_i.h" 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "sta_info.h" 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "ap_config.h" 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "pmksa_cache_auth.h" 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic const int pmksa_cache_max_entries = 1024; 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic const int dot11RSNAConfigPMKLifetime = 43200; 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct rsn_pmksa_cache { 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define PMKID_HASH_SIZE 128 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define PMKID_HASH(pmkid) (unsigned int) ((pmkid)[0] & 0x7f) 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *pmkid[PMKID_HASH_SIZE]; 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *pmksa; 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pmksa_count; 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void (*free_cb)(struct rsn_pmksa_cache_entry *entry, void *ctx); 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *ctx; 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void pmksa_cache_set_expiration(struct rsn_pmksa_cache *pmksa); 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void _pmksa_cache_free_entry(struct rsn_pmksa_cache_entry *entry) 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(entry->identity); 4104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_free(entry->cui); 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NO_RADIUS 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_free_class(&entry->radius_class); 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NO_RADIUS */ 459ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt bin_clear_free(entry, sizeof(*entry)); 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 49f7e0a9905988e62e4f70fed8b795722abeab719bDmitry Shmidtvoid pmksa_cache_free_entry(struct rsn_pmksa_cache *pmksa, 50f7e0a9905988e62e4f70fed8b795722abeab719bDmitry Shmidt struct rsn_pmksa_cache_entry *entry) 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *pos, *prev; 539ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt unsigned int hash; 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->pmksa_count--; 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->free_cb(entry, pmksa->ctx); 579ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt 589ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt /* unlink from hash list */ 599ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt hash = PMKID_HASH(entry->pmkid); 609ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt pos = pmksa->pmkid[hash]; 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pos) { 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos == entry) { 649ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt if (prev != NULL) 659ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt prev->hnext = entry->hnext; 669ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt else 679ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt pmksa->pmkid[hash] = entry->hnext; 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = pos; 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pos->hnext; 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 749ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt /* unlink from entry list */ 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pmksa->pmksa; 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pos) { 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos == entry) { 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev != NULL) 809ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt prev->next = entry->next; 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 829ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt pmksa->pmksa = entry->next; 838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = pos; 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pos->next; 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 889ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _pmksa_cache_free_entry(entry); 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void pmksa_cache_expire(void *eloop_ctx, void *timeout_ctx) 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache *pmksa = eloop_ctx; 96fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt struct os_reltime now; 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 98fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt os_get_reltime(&now); 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pmksa->pmksa && pmksa->pmksa->expiration <= now.sec) { 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: expired PMKSA cache entry for " 101d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt MACSTR, MAC2STR(pmksa->pmksa->spa)); 102d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt pmksa_cache_free_entry(pmksa, pmksa->pmksa); 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_set_expiration(pmksa); 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void pmksa_cache_set_expiration(struct rsn_pmksa_cache *pmksa) 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int sec; 112fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt struct os_reltime now; 1138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(pmksa_cache_expire, pmksa, NULL); 1158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pmksa->pmksa == NULL) 1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 117fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt os_get_reltime(&now); 1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sec = pmksa->pmksa->expiration - now.sec; 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sec < 0) 1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sec = 0; 1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(sec + 1, 0, pmksa_cache_expire, pmksa, NULL); 1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void pmksa_cache_from_eapol_data(struct rsn_pmksa_cache_entry *entry, 1268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eapol_state_machine *eapol) 1278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eapol == NULL) 1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eapol->identity) { 1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->identity = os_malloc(eapol->identity_len); 1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->identity) { 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->identity_len = eapol->identity_len; 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->identity, eapol->identity, 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eapol->identity_len); 1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14004949598a23f501be6eec21697465fd46a28840aDmitry Shmidt if (eapol->radius_cui) 14104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt entry->cui = wpabuf_dup(eapol->radius_cui); 14204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NO_RADIUS 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_copy_class(&entry->radius_class, &eapol->radius_class); 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NO_RADIUS */ 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->eap_type_authsrv = eapol->eap_type_authsrv; 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->vlan_id = ((struct sta_info *) eapol->sta)->vlan_id; 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid pmksa_cache_to_eapol_data(struct rsn_pmksa_cache_entry *entry, 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eapol_state_machine *eapol) 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry == NULL || eapol == NULL) 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->identity) { 1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(eapol->identity); 1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eapol->identity = os_malloc(entry->identity_len); 1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eapol->identity) { 1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eapol->identity_len = entry->identity_len; 1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(eapol->identity, entry->identity, 1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->identity_len); 1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_ascii(MSG_DEBUG, "STA identity from PMKSA", 1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eapol->identity, eapol->identity_len); 1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17004949598a23f501be6eec21697465fd46a28840aDmitry Shmidt if (entry->cui) { 17104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_free(eapol->radius_cui); 17204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt eapol->radius_cui = wpabuf_dup(entry->cui); 17304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt } 17404949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 1758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NO_RADIUS 1768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_free_class(&eapol->radius_class); 1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_copy_class(&eapol->radius_class, &entry->radius_class); 1788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NO_RADIUS */ 1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eapol->radius_class.attr) { 1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "Copied %lu Class attribute(s) from " 1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "PMKSA", (unsigned long) eapol->radius_class.count); 1828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eapol->eap_type_authsrv = entry->eap_type_authsrv; 1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ((struct sta_info *) eapol->sta)->vlan_id = entry->vlan_id; 1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void pmksa_cache_link_entry(struct rsn_pmksa_cache *pmksa, 1908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry) 1918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *pos, *prev; 1939ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt int hash; 1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Add the new entry; order by expiration time */ 1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pmksa->pmksa; 1978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 1988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pos) { 1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos->expiration > entry->expiration) 2008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = pos; 2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pos->next; 2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev == NULL) { 2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next = pmksa->pmksa; 2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->pmksa = entry; 2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 2088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next = prev->next; 2098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = entry; 2108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2119ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt 2129ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt hash = PMKID_HASH(entry->pmkid); 2139ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt entry->hnext = pmksa->pmkid[hash]; 2149ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt pmksa->pmkid[hash] = entry; 2158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->pmksa_count++; 217a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt if (prev == NULL) 218a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt pmksa_cache_set_expiration(pmksa); 2198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: added PMKSA cache entry for " MACSTR, 2208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAC2STR(entry->spa)); 2218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "RSN: added PMKID", entry->pmkid, PMKID_LEN); 2228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 2268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pmksa_cache_auth_add - Add a PMKSA cache entry 2278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmksa: Pointer to PMKSA cache data from pmksa_cache_auth_init() 2288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmk: The new pairwise master key 2298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmk_len: PMK length in bytes, usually PMK_LEN (32) 2308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @aa: Authenticator address 2318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @spa: Supplicant address 2328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @session_timeout: Session timeout 2338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @eapol: Pointer to EAPOL state machine data 2348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @akmp: WPA_KEY_MGMT_* used in key derivation 2358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to the added PMKSA cache entry or %NULL on error 2368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function create a PMKSA entry for a new PMK and adds it to the PMKSA 2388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * cache. If an old entry is already in the cache for the same Supplicant, 2398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * this entry will be replaced with the new entry. PMKID will be calculated 2408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * based on the PMK. 2418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct rsn_pmksa_cache_entry * 2438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtpmksa_cache_auth_add(struct rsn_pmksa_cache *pmksa, 2448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *pmk, size_t pmk_len, 2458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *aa, const u8 *spa, int session_timeout, 2468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eapol_state_machine *eapol, int akmp) 2478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry, *pos; 249fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt struct os_reltime now; 2508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pmk_len > PMK_LEN) 2528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 2538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = os_zalloc(sizeof(*entry)); 2558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry == NULL) 2568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 2578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->pmk, pmk, pmk_len); 2588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->pmk_len = pmk_len; 2598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsn_pmkid(pmk, pmk_len, aa, spa, entry->pmkid, 2608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_key_mgmt_sha256(akmp)); 261fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt os_get_reltime(&now); 2628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->expiration = now.sec; 2638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (session_timeout > 0) 2648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->expiration += session_timeout; 2658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 2668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->expiration += dot11RSNAConfigPMKLifetime; 2678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->akmp = akmp; 2688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->spa, spa, ETH_ALEN); 2698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_from_eapol_data(entry, eapol); 2708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Replace an old entry for the same STA (if found) with the new entry 2728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pmksa_cache_auth_get(pmksa, spa, NULL); 2748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos) 2758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_free_entry(pmksa, pos); 2768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pmksa->pmksa_count >= pmksa_cache_max_entries && pmksa->pmksa) { 2788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Remove the oldest entry to make room for the new entry */ 2798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: removed the oldest PMKSA cache " 2808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "entry (for " MACSTR ") to make room for new one", 2818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAC2STR(pmksa->pmksa->spa)); 2828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_free_entry(pmksa, pmksa->pmksa); 2838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_link_entry(pmksa, entry); 2868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return entry; 2888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct rsn_pmksa_cache_entry * 2928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtpmksa_cache_add_okc(struct rsn_pmksa_cache *pmksa, 2938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct rsn_pmksa_cache_entry *old_entry, 2948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *aa, const u8 *pmkid) 2958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry; 2978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = os_zalloc(sizeof(*entry)); 2998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry == NULL) 3008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 3018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->pmkid, pmkid, PMKID_LEN); 3028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->pmk, old_entry->pmk, old_entry->pmk_len); 3038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->pmk_len = old_entry->pmk_len; 3048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->expiration = old_entry->expiration; 3058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->akmp = old_entry->akmp; 3068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->spa, old_entry->spa, ETH_ALEN); 3078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->opportunistic = 1; 3088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (old_entry->identity) { 3098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->identity = os_malloc(old_entry->identity_len); 3108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->identity) { 3118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->identity_len = old_entry->identity_len; 3128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->identity, old_entry->identity, 3138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt old_entry->identity_len); 3148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 31604949598a23f501be6eec21697465fd46a28840aDmitry Shmidt if (old_entry->cui) 31704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt entry->cui = wpabuf_dup(old_entry->cui); 3188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NO_RADIUS 3198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_copy_class(&entry->radius_class, &old_entry->radius_class); 3208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NO_RADIUS */ 3218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->eap_type_authsrv = old_entry->eap_type_authsrv; 3228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->vlan_id = old_entry->vlan_id; 3238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->opportunistic = 1; 3248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_link_entry(pmksa, entry); 3268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return entry; 3288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 3328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pmksa_cache_auth_deinit - Free all entries in PMKSA cache 3338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmksa: Pointer to PMKSA cache data from pmksa_cache_auth_init() 3348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid pmksa_cache_auth_deinit(struct rsn_pmksa_cache *pmksa) 3368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry, *prev; 3388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int i; 3398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pmksa == NULL) 3418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 3428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = pmksa->pmksa; 3448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 3458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 3468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 3478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _pmksa_cache_free_entry(prev); 3488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(pmksa_cache_expire, pmksa, NULL); 3509ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt pmksa->pmksa_count = 0; 3519ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt pmksa->pmksa = NULL; 3528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; i < PMKID_HASH_SIZE; i++) 3538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->pmkid[i] = NULL; 3548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(pmksa); 3558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 3598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pmksa_cache_auth_get - Fetch a PMKSA cache entry 3608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmksa: Pointer to PMKSA cache data from pmksa_cache_auth_init() 3618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @spa: Supplicant address or %NULL to match any 3628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmkid: PMKID or %NULL to match any 3638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to PMKSA cache entry or %NULL if no match was found 3648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct rsn_pmksa_cache_entry * 3668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtpmksa_cache_auth_get(struct rsn_pmksa_cache *pmksa, 3678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *spa, const u8 *pmkid) 3688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry; 3708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3719ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt if (pmkid) { 3729ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt for (entry = pmksa->pmkid[PMKID_HASH(pmkid)]; entry; 3739ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt entry = entry->hnext) { 3749ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt if ((spa == NULL || 3759ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt os_memcmp(entry->spa, spa, ETH_ALEN) == 0) && 3769ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt os_memcmp(entry->pmkid, pmkid, PMKID_LEN) == 0) 3779ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt return entry; 3789ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt } 3799ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt } else { 3809ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt for (entry = pmksa->pmksa; entry; entry = entry->next) { 3819ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt if (spa == NULL || 3829ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt os_memcmp(entry->spa, spa, ETH_ALEN) == 0) 3839ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt return entry; 3849ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt } 3858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3869ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt 3878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 3888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 3928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pmksa_cache_get_okc - Fetch a PMKSA cache entry using OKC 3938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmksa: Pointer to PMKSA cache data from pmksa_cache_auth_init() 3948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @aa: Authenticator address 3958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @spa: Supplicant address 3968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmkid: PMKID 3978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to PMKSA cache entry or %NULL if no match was found 3988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 3998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Use opportunistic key caching (OKC) to find a PMK for a supplicant. 4008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 4018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct rsn_pmksa_cache_entry * pmksa_cache_get_okc( 4028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache *pmksa, const u8 *aa, const u8 *spa, 4038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *pmkid) 4048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry; 4068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 new_pmkid[PMKID_LEN]; 4078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4089ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt for (entry = pmksa->pmksa; entry; entry = entry->next) { 4098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(entry->spa, spa, ETH_ALEN) != 0) 4108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 4118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsn_pmkid(entry->pmk, entry->pmk_len, aa, spa, new_pmkid, 4128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_key_mgmt_sha256(entry->akmp)); 4138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(new_pmkid, pmkid, PMKID_LEN) == 0) 4148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return entry; 4158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 4178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 4218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pmksa_cache_auth_init - Initialize PMKSA cache 4228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @free_cb: Callback function to be called when a PMKSA cache entry is freed 4238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ctx: Context pointer for free_cb function 4248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to PMKSA cache data or %NULL on failure 4258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 4268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct rsn_pmksa_cache * 4278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtpmksa_cache_auth_init(void (*free_cb)(struct rsn_pmksa_cache_entry *entry, 4288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *ctx), void *ctx) 4298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache *pmksa; 4318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa = os_zalloc(sizeof(*pmksa)); 4338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pmksa) { 4348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->free_cb = free_cb; 4358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->ctx = ctx; 4368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return pmksa; 4398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 440