ap_config.h revision d5e4923d04122f81300fa68fb07d64ede28fd44d
1/* 2 * hostapd / Configuration definitions and helpers functions 3 * Copyright (c) 2003-2012, Jouni Malinen <j@w1.fi> 4 * 5 * This software may be distributed under the terms of the BSD license. 6 * See README for more details. 7 */ 8 9#ifndef HOSTAPD_CONFIG_H 10#define HOSTAPD_CONFIG_H 11 12#include "common/defs.h" 13#include "ip_addr.h" 14#include "common/wpa_common.h" 15#include "common/ieee802_11_common.h" 16#include "wps/wps.h" 17 18#define MAX_STA_COUNT 2007 19#define MAX_VLAN_ID 4094 20 21typedef u8 macaddr[ETH_ALEN]; 22 23struct mac_acl_entry { 24 macaddr addr; 25 int vlan_id; 26}; 27 28struct hostapd_radius_servers; 29struct ft_remote_r0kh; 30struct ft_remote_r1kh; 31 32#define HOSTAPD_MAX_SSID_LEN 32 33 34#define NUM_WEP_KEYS 4 35struct hostapd_wep_keys { 36 u8 idx; 37 u8 *key[NUM_WEP_KEYS]; 38 size_t len[NUM_WEP_KEYS]; 39 int keys_set; 40 size_t default_len; /* key length used for dynamic key generation */ 41}; 42 43typedef enum hostap_security_policy { 44 SECURITY_PLAINTEXT = 0, 45 SECURITY_STATIC_WEP = 1, 46 SECURITY_IEEE_802_1X = 2, 47 SECURITY_WPA_PSK = 3, 48 SECURITY_WPA = 4 49} secpolicy; 50 51struct hostapd_ssid { 52 u8 ssid[HOSTAPD_MAX_SSID_LEN]; 53 size_t ssid_len; 54 int ssid_set; 55 56 char vlan[IFNAMSIZ + 1]; 57 secpolicy security_policy; 58 59 struct hostapd_wpa_psk *wpa_psk; 60 char *wpa_passphrase; 61 char *wpa_psk_file; 62 63 struct hostapd_wep_keys wep; 64 65#define DYNAMIC_VLAN_DISABLED 0 66#define DYNAMIC_VLAN_OPTIONAL 1 67#define DYNAMIC_VLAN_REQUIRED 2 68 int dynamic_vlan; 69#define DYNAMIC_VLAN_NAMING_WITHOUT_DEVICE 0 70#define DYNAMIC_VLAN_NAMING_WITH_DEVICE 1 71#define DYNAMIC_VLAN_NAMING_END 2 72 int vlan_naming; 73#ifdef CONFIG_FULL_DYNAMIC_VLAN 74 char *vlan_tagged_interface; 75#endif /* CONFIG_FULL_DYNAMIC_VLAN */ 76 struct hostapd_wep_keys **dyn_vlan_keys; 77 size_t max_dyn_vlan_keys; 78}; 79 80 81#define VLAN_ID_WILDCARD -1 82 83struct hostapd_vlan { 84 struct hostapd_vlan *next; 85 int vlan_id; /* VLAN ID or -1 (VLAN_ID_WILDCARD) for wildcard entry */ 86 char ifname[IFNAMSIZ + 1]; 87 int dynamic_vlan; 88#ifdef CONFIG_FULL_DYNAMIC_VLAN 89 90#define DVLAN_CLEAN_BR 0x1 91#define DVLAN_CLEAN_VLAN 0x2 92#define DVLAN_CLEAN_VLAN_PORT 0x4 93#define DVLAN_CLEAN_WLAN_PORT 0x8 94 int clean; 95#endif /* CONFIG_FULL_DYNAMIC_VLAN */ 96}; 97 98#define PMK_LEN 32 99struct hostapd_sta_wpa_psk_short { 100 struct hostapd_sta_wpa_psk_short *next; 101 u8 psk[PMK_LEN]; 102}; 103 104struct hostapd_wpa_psk { 105 struct hostapd_wpa_psk *next; 106 int group; 107 u8 psk[PMK_LEN]; 108 u8 addr[ETH_ALEN]; 109}; 110 111struct hostapd_eap_user { 112 struct hostapd_eap_user *next; 113 u8 *identity; 114 size_t identity_len; 115 struct { 116 int vendor; 117 u32 method; 118 } methods[EAP_MAX_METHODS]; 119 u8 *password; 120 size_t password_len; 121 int phase2; 122 int force_version; 123 unsigned int wildcard_prefix:1; 124 unsigned int password_hash:1; /* whether password is hashed with 125 * nt_password_hash() */ 126 int ttls_auth; /* EAP_TTLS_AUTH_* bitfield */ 127}; 128 129struct hostapd_radius_attr { 130 u8 type; 131 struct wpabuf *val; 132 struct hostapd_radius_attr *next; 133}; 134 135 136#define NUM_TX_QUEUES 4 137 138struct hostapd_tx_queue_params { 139 int aifs; 140 int cwmin; 141 int cwmax; 142 int burst; /* maximum burst time in 0.1 ms, i.e., 10 = 1 ms */ 143}; 144 145 146#define MAX_ROAMING_CONSORTIUM_LEN 15 147 148struct hostapd_roaming_consortium { 149 u8 len; 150 u8 oi[MAX_ROAMING_CONSORTIUM_LEN]; 151}; 152 153struct hostapd_lang_string { 154 u8 lang[3]; 155 u8 name_len; 156 u8 name[252]; 157}; 158 159#define MAX_NAI_REALMS 10 160#define MAX_NAI_REALMLEN 255 161#define MAX_NAI_EAP_METHODS 5 162#define MAX_NAI_AUTH_TYPES 4 163struct hostapd_nai_realm_data { 164 u8 encoding; 165 char realm_buf[MAX_NAI_REALMLEN + 1]; 166 char *realm[MAX_NAI_REALMS]; 167 u8 eap_method_count; 168 struct hostapd_nai_realm_eap { 169 u8 eap_method; 170 u8 num_auths; 171 u8 auth_id[MAX_NAI_AUTH_TYPES]; 172 u8 auth_val[MAX_NAI_AUTH_TYPES]; 173 } eap_method[MAX_NAI_EAP_METHODS]; 174}; 175 176/** 177 * struct hostapd_bss_config - Per-BSS configuration 178 */ 179struct hostapd_bss_config { 180 char iface[IFNAMSIZ + 1]; 181 char bridge[IFNAMSIZ + 1]; 182 char wds_bridge[IFNAMSIZ + 1]; 183 184 enum hostapd_logger_level logger_syslog_level, logger_stdout_level; 185 186 unsigned int logger_syslog; /* module bitfield */ 187 unsigned int logger_stdout; /* module bitfield */ 188 189 char *dump_log_name; /* file name for state dump (SIGUSR1) */ 190 191 int max_num_sta; /* maximum number of STAs in station table */ 192 193 int dtim_period; 194 195 int ieee802_1x; /* use IEEE 802.1X */ 196 int eapol_version; 197 int eap_server; /* Use internal EAP server instead of external 198 * RADIUS server */ 199 struct hostapd_eap_user *eap_user; 200 char *eap_user_sqlite; 201 char *eap_sim_db; 202 struct hostapd_ip_addr own_ip_addr; 203 char *nas_identifier; 204 struct hostapd_radius_servers *radius; 205 int acct_interim_interval; 206 int radius_request_cui; 207 struct hostapd_radius_attr *radius_auth_req_attr; 208 struct hostapd_radius_attr *radius_acct_req_attr; 209 int radius_das_port; 210 unsigned int radius_das_time_window; 211 int radius_das_require_event_timestamp; 212 struct hostapd_ip_addr radius_das_client_addr; 213 u8 *radius_das_shared_secret; 214 size_t radius_das_shared_secret_len; 215 216 struct hostapd_ssid ssid; 217 218 char *eap_req_id_text; /* optional displayable message sent with 219 * EAP Request-Identity */ 220 size_t eap_req_id_text_len; 221 int eapol_key_index_workaround; 222 223 size_t default_wep_key_len; 224 int individual_wep_key_len; 225 int wep_rekeying_period; 226 int broadcast_key_idx_min, broadcast_key_idx_max; 227 int eap_reauth_period; 228 229 int ieee802_11f; /* use IEEE 802.11f (IAPP) */ 230 char iapp_iface[IFNAMSIZ + 1]; /* interface used with IAPP broadcast 231 * frames */ 232 233 enum { 234 ACCEPT_UNLESS_DENIED = 0, 235 DENY_UNLESS_ACCEPTED = 1, 236 USE_EXTERNAL_RADIUS_AUTH = 2 237 } macaddr_acl; 238 struct mac_acl_entry *accept_mac; 239 int num_accept_mac; 240 struct mac_acl_entry *deny_mac; 241 int num_deny_mac; 242 int wds_sta; 243 int isolate; 244 245 int auth_algs; /* bitfield of allowed IEEE 802.11 authentication 246 * algorithms, WPA_AUTH_ALG_{OPEN,SHARED,LEAP} */ 247 248 int wpa; /* bitfield of WPA_PROTO_WPA, WPA_PROTO_RSN */ 249 int wpa_key_mgmt; 250#ifdef CONFIG_IEEE80211W 251 enum mfp_options ieee80211w; 252 /* dot11AssociationSAQueryMaximumTimeout (in TUs) */ 253 unsigned int assoc_sa_query_max_timeout; 254 /* dot11AssociationSAQueryRetryTimeout (in TUs) */ 255 int assoc_sa_query_retry_timeout; 256#endif /* CONFIG_IEEE80211W */ 257 enum { 258 PSK_RADIUS_IGNORED = 0, 259 PSK_RADIUS_ACCEPTED = 1, 260 PSK_RADIUS_REQUIRED = 2 261 } wpa_psk_radius; 262 int wpa_pairwise; 263 int wpa_group; 264 int wpa_group_rekey; 265 int wpa_strict_rekey; 266 int wpa_gmk_rekey; 267 int wpa_ptk_rekey; 268 int rsn_pairwise; 269 int rsn_preauth; 270 char *rsn_preauth_interfaces; 271 int peerkey; 272 273#ifdef CONFIG_IEEE80211R 274 /* IEEE 802.11r - Fast BSS Transition */ 275 u8 mobility_domain[MOBILITY_DOMAIN_ID_LEN]; 276 u8 r1_key_holder[FT_R1KH_ID_LEN]; 277 u32 r0_key_lifetime; 278 u32 reassociation_deadline; 279 struct ft_remote_r0kh *r0kh_list; 280 struct ft_remote_r1kh *r1kh_list; 281 int pmk_r1_push; 282 int ft_over_ds; 283#endif /* CONFIG_IEEE80211R */ 284 285 char *ctrl_interface; /* directory for UNIX domain sockets */ 286#ifndef CONFIG_NATIVE_WINDOWS 287 gid_t ctrl_interface_gid; 288#endif /* CONFIG_NATIVE_WINDOWS */ 289 int ctrl_interface_gid_set; 290 291 char *ca_cert; 292 char *server_cert; 293 char *private_key; 294 char *private_key_passwd; 295 int check_crl; 296 char *dh_file; 297 u8 *pac_opaque_encr_key; 298 u8 *eap_fast_a_id; 299 size_t eap_fast_a_id_len; 300 char *eap_fast_a_id_info; 301 int eap_fast_prov; 302 int pac_key_lifetime; 303 int pac_key_refresh_time; 304 int eap_sim_aka_result_ind; 305 int tnc; 306 int fragment_size; 307 u16 pwd_group; 308 309 char *radius_server_clients; 310 int radius_server_auth_port; 311 int radius_server_ipv6; 312 313 char *test_socket; /* UNIX domain socket path for driver_test */ 314 315 int use_pae_group_addr; /* Whether to send EAPOL frames to PAE group 316 * address instead of individual address 317 * (for driver_wired.c). 318 */ 319 320 int ap_max_inactivity; 321 int ignore_broadcast_ssid; 322 323 int wmm_enabled; 324 int wmm_uapsd; 325 326 struct hostapd_vlan *vlan, *vlan_tail; 327 328 macaddr bssid; 329 330 /* 331 * Maximum listen interval that STAs can use when associating with this 332 * BSS. If a STA tries to use larger value, the association will be 333 * denied with status code 51. 334 */ 335 u16 max_listen_interval; 336 337 int disable_pmksa_caching; 338 int okc; /* Opportunistic Key Caching */ 339 340 int wps_state; 341#ifdef CONFIG_WPS 342 int ap_setup_locked; 343 u8 uuid[16]; 344 char *wps_pin_requests; 345 char *device_name; 346 char *manufacturer; 347 char *model_name; 348 char *model_number; 349 char *serial_number; 350 u8 device_type[WPS_DEV_TYPE_LEN]; 351 char *config_methods; 352 u8 os_version[4]; 353 char *ap_pin; 354 int skip_cred_build; 355 u8 *extra_cred; 356 size_t extra_cred_len; 357 int wps_cred_processing; 358 u8 *ap_settings; 359 size_t ap_settings_len; 360 char *upnp_iface; 361 char *friendly_name; 362 char *manufacturer_url; 363 char *model_description; 364 char *model_url; 365 char *upc; 366 struct wpabuf *wps_vendor_ext[MAX_WPS_VENDOR_EXTENSIONS]; 367 int wps_nfc_dev_pw_id; 368 struct wpabuf *wps_nfc_dh_pubkey; 369 struct wpabuf *wps_nfc_dh_privkey; 370 struct wpabuf *wps_nfc_dev_pw; 371#endif /* CONFIG_WPS */ 372 int pbc_in_m1; 373 374#define P2P_ENABLED BIT(0) 375#define P2P_GROUP_OWNER BIT(1) 376#define P2P_GROUP_FORMATION BIT(2) 377#define P2P_MANAGE BIT(3) 378#define P2P_ALLOW_CROSS_CONNECTION BIT(4) 379 int p2p; 380 381 int disassoc_low_ack; 382 int skip_inactivity_poll; 383 384#define TDLS_PROHIBIT BIT(0) 385#define TDLS_PROHIBIT_CHAN_SWITCH BIT(1) 386 int tdls; 387 int disable_11n; 388 int disable_11ac; 389 390 /* IEEE 802.11v */ 391 int time_advertisement; 392 char *time_zone; 393 394 /* IEEE 802.11u - Interworking */ 395 int interworking; 396 int access_network_type; 397 int internet; 398 int asra; 399 int esr; 400 int uesa; 401 int venue_info_set; 402 u8 venue_group; 403 u8 venue_type; 404 u8 hessid[ETH_ALEN]; 405 406 /* IEEE 802.11u - Roaming Consortium list */ 407 unsigned int roaming_consortium_count; 408 struct hostapd_roaming_consortium *roaming_consortium; 409 410 /* IEEE 802.11u - Venue Name duples */ 411 unsigned int venue_name_count; 412 struct hostapd_lang_string *venue_name; 413 414 /* IEEE 802.11u - Network Authentication Type */ 415 u8 *network_auth_type; 416 size_t network_auth_type_len; 417 418 /* IEEE 802.11u - IP Address Type Availability */ 419 u8 ipaddr_type_availability; 420 u8 ipaddr_type_configured; 421 422 /* IEEE 802.11u - 3GPP Cellular Network */ 423 u8 *anqp_3gpp_cell_net; 424 size_t anqp_3gpp_cell_net_len; 425 426 /* IEEE 802.11u - Domain Name */ 427 u8 *domain_name; 428 size_t domain_name_len; 429 430 unsigned int nai_realm_count; 431 struct hostapd_nai_realm_data *nai_realm_data; 432 433 u16 gas_comeback_delay; 434 int gas_frag_limit; 435 436#ifdef CONFIG_HS20 437 int hs20; 438 int disable_dgaf; 439 unsigned int hs20_oper_friendly_name_count; 440 struct hostapd_lang_string *hs20_oper_friendly_name; 441 u8 *hs20_wan_metrics; 442 u8 *hs20_connection_capability; 443 size_t hs20_connection_capability_len; 444 u8 *hs20_operating_class; 445 u8 hs20_operating_class_len; 446#endif /* CONFIG_HS20 */ 447 448 u8 wps_rf_bands; /* RF bands for WPS (WPS_RF_*) */ 449 450#ifdef CONFIG_RADIUS_TEST 451 char *dump_msk_file; 452#endif /* CONFIG_RADIUS_TEST */ 453 454 struct wpabuf *vendor_elements; 455}; 456 457 458/** 459 * struct hostapd_config - Per-radio interface configuration 460 */ 461struct hostapd_config { 462 struct hostapd_bss_config *bss, *last_bss; 463 size_t num_bss; 464 465 u16 beacon_int; 466 int rts_threshold; 467 int fragm_threshold; 468 u8 send_probe_response; 469 u8 channel; 470 enum hostapd_hw_mode hw_mode; /* HOSTAPD_MODE_IEEE80211A, .. */ 471 enum { 472 LONG_PREAMBLE = 0, 473 SHORT_PREAMBLE = 1 474 } preamble; 475 476 int *supported_rates; 477 int *basic_rates; 478 479 const struct wpa_driver_ops *driver; 480 481 int ap_table_max_size; 482 int ap_table_expiration_time; 483 484 char country[3]; /* first two octets: country code as described in 485 * ISO/IEC 3166-1. Third octet: 486 * ' ' (ascii 32): all environments 487 * 'O': Outdoor environemnt only 488 * 'I': Indoor environment only 489 */ 490 491 int ieee80211d; 492 493 struct hostapd_tx_queue_params tx_queue[NUM_TX_QUEUES]; 494 495 /* 496 * WMM AC parameters, in same order as 802.1D, i.e. 497 * 0 = BE (best effort) 498 * 1 = BK (background) 499 * 2 = VI (video) 500 * 3 = VO (voice) 501 */ 502 struct hostapd_wmm_ac_params wmm_ac_params[4]; 503 504 int ht_op_mode_fixed; 505 u16 ht_capab; 506 int ieee80211n; 507 int secondary_channel; 508 int require_ht; 509 u32 vht_capab; 510 int ieee80211ac; 511 int require_vht; 512 u8 vht_oper_chwidth; 513 u8 vht_oper_centr_freq_seg0_idx; 514 u8 vht_oper_centr_freq_seg1_idx; 515}; 516 517 518int hostapd_mac_comp(const void *a, const void *b); 519int hostapd_mac_comp_empty(const void *a); 520struct hostapd_config * hostapd_config_defaults(void); 521void hostapd_config_defaults_bss(struct hostapd_bss_config *bss); 522void hostapd_config_free(struct hostapd_config *conf); 523int hostapd_maclist_found(struct mac_acl_entry *list, int num_entries, 524 const u8 *addr, int *vlan_id); 525int hostapd_rate_found(int *list, int rate); 526int hostapd_wep_key_cmp(struct hostapd_wep_keys *a, 527 struct hostapd_wep_keys *b); 528const u8 * hostapd_get_psk(const struct hostapd_bss_config *conf, 529 const u8 *addr, const u8 *prev_psk); 530int hostapd_setup_wpa_psk(struct hostapd_bss_config *conf); 531const char * hostapd_get_vlan_id_ifname(struct hostapd_vlan *vlan, 532 int vlan_id); 533struct hostapd_radius_attr * 534hostapd_config_get_radius_attr(struct hostapd_radius_attr *attr, u8 type); 535 536#endif /* HOSTAPD_CONFIG_H */ 537