18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * hostapd - PMKSA cache for IEEE 802.11i RSN 340b07208ef4402da20a7f666835a62f6ec098e16Dmitry Shmidt * Copyright (c) 2004-2008, 2012-2015, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license. 6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details. 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "utils/includes.h" 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "utils/common.h" 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "utils/eloop.h" 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "eapol_auth/eapol_auth_sm.h" 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "eapol_auth/eapol_auth_sm_i.h" 15432d603c922e970f55866c63212d29c997438977Dmitry Shmidt#include "radius/radius_das.h" 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "sta_info.h" 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "ap_config.h" 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "pmksa_cache_auth.h" 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic const int pmksa_cache_max_entries = 1024; 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic const int dot11RSNAConfigPMKLifetime = 43200; 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct rsn_pmksa_cache { 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define PMKID_HASH_SIZE 128 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#define PMKID_HASH(pmkid) (unsigned int) ((pmkid)[0] & 0x7f) 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *pmkid[PMKID_HASH_SIZE]; 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *pmksa; 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pmksa_count; 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void (*free_cb)(struct rsn_pmksa_cache_entry *entry, void *ctx); 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *ctx; 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void pmksa_cache_set_expiration(struct rsn_pmksa_cache *pmksa); 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void _pmksa_cache_free_entry(struct rsn_pmksa_cache_entry *entry) 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(entry->identity); 4204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_free(entry->cui); 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NO_RADIUS 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_free_class(&entry->radius_class); 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NO_RADIUS */ 469ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt bin_clear_free(entry, sizeof(*entry)); 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 50f7e0a9905988e62e4f70fed8b795722abeab719bDmitry Shmidtvoid pmksa_cache_free_entry(struct rsn_pmksa_cache *pmksa, 51f7e0a9905988e62e4f70fed8b795722abeab719bDmitry Shmidt struct rsn_pmksa_cache_entry *entry) 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *pos, *prev; 549ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt unsigned int hash; 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->pmksa_count--; 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->free_cb(entry, pmksa->ctx); 589ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt 599ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt /* unlink from hash list */ 609ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt hash = PMKID_HASH(entry->pmkid); 619ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt pos = pmksa->pmkid[hash]; 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pos) { 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos == entry) { 659ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt if (prev != NULL) 669ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt prev->hnext = entry->hnext; 679ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt else 689ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt pmksa->pmkid[hash] = entry->hnext; 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = pos; 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pos->hnext; 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 759ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt /* unlink from entry list */ 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pmksa->pmksa; 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pos) { 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos == entry) { 808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev != NULL) 819ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt prev->next = entry->next; 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 839ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt pmksa->pmksa = entry->next; 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = pos; 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pos->next; 888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 899ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _pmksa_cache_free_entry(entry); 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void pmksa_cache_expire(void *eloop_ctx, void *timeout_ctx) 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache *pmksa = eloop_ctx; 97fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt struct os_reltime now; 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 99fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt os_get_reltime(&now); 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pmksa->pmksa && pmksa->pmksa->expiration <= now.sec) { 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: expired PMKSA cache entry for " 102d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt MACSTR, MAC2STR(pmksa->pmksa->spa)); 103d5e4923d04122f81300fa68fb07d64ede28fd44dDmitry Shmidt pmksa_cache_free_entry(pmksa, pmksa->pmksa); 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_set_expiration(pmksa); 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void pmksa_cache_set_expiration(struct rsn_pmksa_cache *pmksa) 1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int sec; 113fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt struct os_reltime now; 1148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(pmksa_cache_expire, pmksa, NULL); 1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pmksa->pmksa == NULL) 1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 118fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt os_get_reltime(&now); 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sec = pmksa->pmksa->expiration - now.sec; 1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sec < 0) 1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sec = 0; 1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_register_timeout(sec + 1, 0, pmksa_cache_expire, pmksa, NULL); 1238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void pmksa_cache_from_eapol_data(struct rsn_pmksa_cache_entry *entry, 1278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eapol_state_machine *eapol) 1288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eapol == NULL) 1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eapol->identity) { 1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->identity = os_malloc(eapol->identity_len); 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->identity) { 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->identity_len = eapol->identity_len; 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->identity, eapol->identity, 1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eapol->identity_len); 1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 14104949598a23f501be6eec21697465fd46a28840aDmitry Shmidt if (eapol->radius_cui) 14204949598a23f501be6eec21697465fd46a28840aDmitry Shmidt entry->cui = wpabuf_dup(eapol->radius_cui); 14304949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NO_RADIUS 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_copy_class(&entry->radius_class, &eapol->radius_class); 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NO_RADIUS */ 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->eap_type_authsrv = eapol->eap_type_authsrv; 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->vlan_id = ((struct sta_info *) eapol->sta)->vlan_id; 150fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt 151fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt entry->acct_multi_session_id_hi = eapol->acct_multi_session_id_hi; 152fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt entry->acct_multi_session_id_lo = eapol->acct_multi_session_id_lo; 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid pmksa_cache_to_eapol_data(struct rsn_pmksa_cache_entry *entry, 1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eapol_state_machine *eapol) 1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry == NULL || eapol == NULL) 1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->identity) { 1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(eapol->identity); 1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eapol->identity = os_malloc(entry->identity_len); 1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eapol->identity) { 1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eapol->identity_len = entry->identity_len; 1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(eapol->identity, entry->identity, 1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->identity_len); 1698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_ascii(MSG_DEBUG, "STA identity from PMKSA", 1718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eapol->identity, eapol->identity_len); 1728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 17404949598a23f501be6eec21697465fd46a28840aDmitry Shmidt if (entry->cui) { 17504949598a23f501be6eec21697465fd46a28840aDmitry Shmidt wpabuf_free(eapol->radius_cui); 17604949598a23f501be6eec21697465fd46a28840aDmitry Shmidt eapol->radius_cui = wpabuf_dup(entry->cui); 17704949598a23f501be6eec21697465fd46a28840aDmitry Shmidt } 17804949598a23f501be6eec21697465fd46a28840aDmitry Shmidt 1798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NO_RADIUS 1808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_free_class(&eapol->radius_class); 1818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_copy_class(&eapol->radius_class, &entry->radius_class); 1828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NO_RADIUS */ 1838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eapol->radius_class.attr) { 1848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "Copied %lu Class attribute(s) from " 1858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "PMKSA", (unsigned long) eapol->radius_class.count); 1868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eapol->eap_type_authsrv = entry->eap_type_authsrv; 1898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt ((struct sta_info *) eapol->sta)->vlan_id = entry->vlan_id; 190fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt 191fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt eapol->acct_multi_session_id_hi = entry->acct_multi_session_id_hi; 192fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt eapol->acct_multi_session_id_lo = entry->acct_multi_session_id_lo; 1938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void pmksa_cache_link_entry(struct rsn_pmksa_cache *pmksa, 1978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry) 1988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *pos, *prev; 2009ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt int hash; 2018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Add the new entry; order by expiration time */ 2038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pmksa->pmksa; 2048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = NULL; 2058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (pos) { 2068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos->expiration > entry->expiration) 2078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt break; 2088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = pos; 2098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pos->next; 2108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (prev == NULL) { 2128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next = pmksa->pmksa; 2138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->pmksa = entry; 2148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 2158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->next = prev->next; 2168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev->next = entry; 2178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 2189ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt 2199ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt hash = PMKID_HASH(entry->pmkid); 2209ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt entry->hnext = pmksa->pmkid[hash]; 2219ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt pmksa->pmkid[hash] = entry; 2228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->pmksa_count++; 224a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt if (prev == NULL) 225a54fa5fb807eaeff45464139b5a7759f060cec68Dmitry Shmidt pmksa_cache_set_expiration(pmksa); 2268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: added PMKSA cache entry for " MACSTR, 2278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAC2STR(entry->spa)); 2288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump(MSG_DEBUG, "RSN: added PMKID", entry->pmkid, PMKID_LEN); 2298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 2308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 2338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pmksa_cache_auth_add - Add a PMKSA cache entry 2348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmksa: Pointer to PMKSA cache data from pmksa_cache_auth_init() 2358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmk: The new pairwise master key 2368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmk_len: PMK length in bytes, usually PMK_LEN (32) 237fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt * @kck: Key confirmation key or %NULL if not yet derived 238fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt * @kck_len: KCK length in bytes 2398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @aa: Authenticator address 2408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @spa: Supplicant address 2418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @session_timeout: Session timeout 2428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @eapol: Pointer to EAPOL state machine data 2438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @akmp: WPA_KEY_MGMT_* used in key derivation 2448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to the added PMKSA cache entry or %NULL on error 2458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 2468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * This function create a PMKSA entry for a new PMK and adds it to the PMKSA 2478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * cache. If an old entry is already in the cache for the same Supplicant, 2488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * this entry will be replaced with the new entry. PMKID will be calculated 2498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * based on the PMK. 2508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct rsn_pmksa_cache_entry * 2528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtpmksa_cache_auth_add(struct rsn_pmksa_cache *pmksa, 2538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *pmk, size_t pmk_len, 254fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt const u8 *kck, size_t kck_len, 255fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt const u8 *aa, const u8 *spa, int session_timeout, 256fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt struct eapol_state_machine *eapol, int akmp) 2578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 2588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry, *pos; 259fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt struct os_reltime now; 2608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pmk_len > PMK_LEN) 2628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 2638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 264fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt if (wpa_key_mgmt_suite_b(akmp) && !kck) 265fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt return NULL; 266fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt 2678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = os_zalloc(sizeof(*entry)); 2688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry == NULL) 2698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 2708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->pmk, pmk, pmk_len); 2718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->pmk_len = pmk_len; 27240b07208ef4402da20a7f666835a62f6ec098e16Dmitry Shmidt if (akmp == WPA_KEY_MGMT_IEEE8021X_SUITE_B_192) 27340b07208ef4402da20a7f666835a62f6ec098e16Dmitry Shmidt rsn_pmkid_suite_b_192(kck, kck_len, aa, spa, entry->pmkid); 27440b07208ef4402da20a7f666835a62f6ec098e16Dmitry Shmidt else if (wpa_key_mgmt_suite_b(akmp)) 275fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt rsn_pmkid_suite_b(kck, kck_len, aa, spa, entry->pmkid); 276fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt else 277fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt rsn_pmkid(pmk, pmk_len, aa, spa, entry->pmkid, 278fb45fd5cfed8bdccd0859c7fc05449fc187e2d06Dmitry Shmidt wpa_key_mgmt_sha256(akmp)); 279fb79edc9df1f20461e90e478363d207348213d35Dmitry Shmidt os_get_reltime(&now); 2808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->expiration = now.sec; 2818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (session_timeout > 0) 2828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->expiration += session_timeout; 2838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt else 2848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->expiration += dot11RSNAConfigPMKLifetime; 2858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->akmp = akmp; 2868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->spa, spa, ETH_ALEN); 2878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_from_eapol_data(entry, eapol); 2888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Replace an old entry for the same STA (if found) with the new entry 2908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 2918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = pmksa_cache_auth_get(pmksa, spa, NULL); 2928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos) 2938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_free_entry(pmksa, pos); 2948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 2958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pmksa->pmksa_count >= pmksa_cache_max_entries && pmksa->pmksa) { 2968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt /* Remove the oldest entry to make room for the new entry */ 2978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "RSN: removed the oldest PMKSA cache " 2988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "entry (for " MACSTR ") to make room for new one", 2998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt MAC2STR(pmksa->pmksa->spa)); 3008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_free_entry(pmksa, pmksa->pmksa); 3018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_link_entry(pmksa, entry); 3048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return entry; 3068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct rsn_pmksa_cache_entry * 3108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtpmksa_cache_add_okc(struct rsn_pmksa_cache *pmksa, 3118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const struct rsn_pmksa_cache_entry *old_entry, 3128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *aa, const u8 *pmkid) 3138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry; 3158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = os_zalloc(sizeof(*entry)); 3178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry == NULL) 3188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 3198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->pmkid, pmkid, PMKID_LEN); 3208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->pmk, old_entry->pmk, old_entry->pmk_len); 3218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->pmk_len = old_entry->pmk_len; 3228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->expiration = old_entry->expiration; 3238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->akmp = old_entry->akmp; 3248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->spa, old_entry->spa, ETH_ALEN); 3258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->opportunistic = 1; 3268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (old_entry->identity) { 3278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->identity = os_malloc(old_entry->identity_len); 3288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (entry->identity) { 3298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->identity_len = old_entry->identity_len; 3308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(entry->identity, old_entry->identity, 3318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt old_entry->identity_len); 3328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 33404949598a23f501be6eec21697465fd46a28840aDmitry Shmidt if (old_entry->cui) 33504949598a23f501be6eec21697465fd46a28840aDmitry Shmidt entry->cui = wpabuf_dup(old_entry->cui); 3368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#ifndef CONFIG_NO_RADIUS 3378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt radius_copy_class(&entry->radius_class, &old_entry->radius_class); 3388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#endif /* CONFIG_NO_RADIUS */ 3398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->eap_type_authsrv = old_entry->eap_type_authsrv; 3408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->vlan_id = old_entry->vlan_id; 3418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry->opportunistic = 1; 3428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa_cache_link_entry(pmksa, entry); 3448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return entry; 3468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 3508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pmksa_cache_auth_deinit - Free all entries in PMKSA cache 3518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmksa: Pointer to PMKSA cache data from pmksa_cache_auth_init() 3528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtvoid pmksa_cache_auth_deinit(struct rsn_pmksa_cache *pmksa) 3548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry, *prev; 3568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int i; 3578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pmksa == NULL) 3598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 3608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = pmksa->pmksa; 3628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt while (entry) { 3638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt prev = entry; 3648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt entry = entry->next; 3658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt _pmksa_cache_free_entry(prev); 3668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 3678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eloop_cancel_timeout(pmksa_cache_expire, pmksa, NULL); 3689ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt pmksa->pmksa_count = 0; 3699ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt pmksa->pmksa = NULL; 3708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt for (i = 0; i < PMKID_HASH_SIZE; i++) 3718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->pmkid[i] = NULL; 3728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(pmksa); 3738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 3748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 3778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pmksa_cache_auth_get - Fetch a PMKSA cache entry 3788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmksa: Pointer to PMKSA cache data from pmksa_cache_auth_init() 3798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @spa: Supplicant address or %NULL to match any 3808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmkid: PMKID or %NULL to match any 3818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to PMKSA cache entry or %NULL if no match was found 3828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 3838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct rsn_pmksa_cache_entry * 3848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtpmksa_cache_auth_get(struct rsn_pmksa_cache *pmksa, 3858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *spa, const u8 *pmkid) 3868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 3878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry; 3888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 3899ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt if (pmkid) { 3909ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt for (entry = pmksa->pmkid[PMKID_HASH(pmkid)]; entry; 3919ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt entry = entry->hnext) { 3929ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt if ((spa == NULL || 3939ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt os_memcmp(entry->spa, spa, ETH_ALEN) == 0) && 3949ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt os_memcmp(entry->pmkid, pmkid, PMKID_LEN) == 0) 3959ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt return entry; 3969ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt } 3979ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt } else { 3989ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt for (entry = pmksa->pmksa; entry; entry = entry->next) { 3999ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt if (spa == NULL || 4009ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt os_memcmp(entry->spa, spa, ETH_ALEN) == 0) 4019ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt return entry; 4029ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt } 4038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4049ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt 4058d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 4068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 4108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pmksa_cache_get_okc - Fetch a PMKSA cache entry using OKC 4118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmksa: Pointer to PMKSA cache data from pmksa_cache_auth_init() 4128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @aa: Authenticator address 4138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @spa: Supplicant address 4148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @pmkid: PMKID 4158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to PMKSA cache entry or %NULL if no match was found 4168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 4178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Use opportunistic key caching (OKC) to find a PMK for a supplicant. 4188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 4198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct rsn_pmksa_cache_entry * pmksa_cache_get_okc( 4208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache *pmksa, const u8 *aa, const u8 *spa, 4218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *pmkid) 4228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache_entry *entry; 4248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 new_pmkid[PMKID_LEN]; 4258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4269ead16e203b81d44a2d84eadc2901ceeb7daf805Dmitry Shmidt for (entry = pmksa->pmksa; entry; entry = entry->next) { 4278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(entry->spa, spa, ETH_ALEN) != 0) 4288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt continue; 4298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt rsn_pmkid(entry->pmk, entry->pmk_len, aa, spa, new_pmkid, 4308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_key_mgmt_sha256(entry->akmp)); 4318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (os_memcmp(new_pmkid, pmkid, PMKID_LEN) == 0) 4328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return entry; 4338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 4358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 4368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/** 4398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * pmksa_cache_auth_init - Initialize PMKSA cache 4408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @free_cb: Callback function to be called when a PMKSA cache entry is freed 4418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * @ctx: Context pointer for free_cb function 4428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Returns: Pointer to PMKSA cache data or %NULL on failure 4438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 4448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct rsn_pmksa_cache * 4458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtpmksa_cache_auth_init(void (*free_cb)(struct rsn_pmksa_cache_entry *entry, 4468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt void *ctx), void *ctx) 4478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 4488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct rsn_pmksa_cache *pmksa; 4498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa = os_zalloc(sizeof(*pmksa)); 4518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pmksa) { 4528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->free_cb = free_cb; 4538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pmksa->ctx = ctx; 4548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 4558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 4568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return pmksa; 4578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 458432d603c922e970f55866c63212d29c997438977Dmitry Shmidt 459432d603c922e970f55866c63212d29c997438977Dmitry Shmidt 460432d603c922e970f55866c63212d29c997438977Dmitry Shmidtstatic int das_attr_match(struct rsn_pmksa_cache_entry *entry, 461432d603c922e970f55866c63212d29c997438977Dmitry Shmidt struct radius_das_attrs *attr) 462432d603c922e970f55866c63212d29c997438977Dmitry Shmidt{ 463432d603c922e970f55866c63212d29c997438977Dmitry Shmidt int match = 0; 464432d603c922e970f55866c63212d29c997438977Dmitry Shmidt 465432d603c922e970f55866c63212d29c997438977Dmitry Shmidt if (attr->sta_addr) { 466432d603c922e970f55866c63212d29c997438977Dmitry Shmidt if (os_memcmp(attr->sta_addr, entry->spa, ETH_ALEN) != 0) 467432d603c922e970f55866c63212d29c997438977Dmitry Shmidt return 0; 468432d603c922e970f55866c63212d29c997438977Dmitry Shmidt match++; 469432d603c922e970f55866c63212d29c997438977Dmitry Shmidt } 470432d603c922e970f55866c63212d29c997438977Dmitry Shmidt 471432d603c922e970f55866c63212d29c997438977Dmitry Shmidt if (attr->acct_multi_session_id) { 472432d603c922e970f55866c63212d29c997438977Dmitry Shmidt char buf[20]; 473432d603c922e970f55866c63212d29c997438977Dmitry Shmidt 474432d603c922e970f55866c63212d29c997438977Dmitry Shmidt if (attr->acct_multi_session_id_len != 17) 475432d603c922e970f55866c63212d29c997438977Dmitry Shmidt return 0; 476432d603c922e970f55866c63212d29c997438977Dmitry Shmidt os_snprintf(buf, sizeof(buf), "%08X+%08X", 477432d603c922e970f55866c63212d29c997438977Dmitry Shmidt entry->acct_multi_session_id_hi, 478432d603c922e970f55866c63212d29c997438977Dmitry Shmidt entry->acct_multi_session_id_lo); 479432d603c922e970f55866c63212d29c997438977Dmitry Shmidt if (os_memcmp(attr->acct_multi_session_id, buf, 17) != 0) 480432d603c922e970f55866c63212d29c997438977Dmitry Shmidt return 0; 481432d603c922e970f55866c63212d29c997438977Dmitry Shmidt match++; 482432d603c922e970f55866c63212d29c997438977Dmitry Shmidt } 483432d603c922e970f55866c63212d29c997438977Dmitry Shmidt 484432d603c922e970f55866c63212d29c997438977Dmitry Shmidt if (attr->cui) { 485432d603c922e970f55866c63212d29c997438977Dmitry Shmidt if (!entry->cui || 486432d603c922e970f55866c63212d29c997438977Dmitry Shmidt attr->cui_len != wpabuf_len(entry->cui) || 487432d603c922e970f55866c63212d29c997438977Dmitry Shmidt os_memcmp(attr->cui, wpabuf_head(entry->cui), 488432d603c922e970f55866c63212d29c997438977Dmitry Shmidt attr->cui_len) != 0) 489432d603c922e970f55866c63212d29c997438977Dmitry Shmidt return 0; 490432d603c922e970f55866c63212d29c997438977Dmitry Shmidt match++; 491432d603c922e970f55866c63212d29c997438977Dmitry Shmidt } 492432d603c922e970f55866c63212d29c997438977Dmitry Shmidt 493432d603c922e970f55866c63212d29c997438977Dmitry Shmidt if (attr->user_name) { 494432d603c922e970f55866c63212d29c997438977Dmitry Shmidt if (!entry->identity || 495432d603c922e970f55866c63212d29c997438977Dmitry Shmidt attr->user_name_len != entry->identity_len || 496432d603c922e970f55866c63212d29c997438977Dmitry Shmidt os_memcmp(attr->user_name, entry->identity, 497432d603c922e970f55866c63212d29c997438977Dmitry Shmidt attr->user_name_len) != 0) 498432d603c922e970f55866c63212d29c997438977Dmitry Shmidt return 0; 499432d603c922e970f55866c63212d29c997438977Dmitry Shmidt match++; 500432d603c922e970f55866c63212d29c997438977Dmitry Shmidt } 501432d603c922e970f55866c63212d29c997438977Dmitry Shmidt 502432d603c922e970f55866c63212d29c997438977Dmitry Shmidt return match; 503432d603c922e970f55866c63212d29c997438977Dmitry Shmidt} 504432d603c922e970f55866c63212d29c997438977Dmitry Shmidt 505432d603c922e970f55866c63212d29c997438977Dmitry Shmidt 506432d603c922e970f55866c63212d29c997438977Dmitry Shmidtint pmksa_cache_auth_radius_das_disconnect(struct rsn_pmksa_cache *pmksa, 507432d603c922e970f55866c63212d29c997438977Dmitry Shmidt struct radius_das_attrs *attr) 508432d603c922e970f55866c63212d29c997438977Dmitry Shmidt{ 509432d603c922e970f55866c63212d29c997438977Dmitry Shmidt int found = 0; 510432d603c922e970f55866c63212d29c997438977Dmitry Shmidt struct rsn_pmksa_cache_entry *entry, *prev; 511432d603c922e970f55866c63212d29c997438977Dmitry Shmidt 512432d603c922e970f55866c63212d29c997438977Dmitry Shmidt if (attr->acct_session_id) 513432d603c922e970f55866c63212d29c997438977Dmitry Shmidt return -1; 514432d603c922e970f55866c63212d29c997438977Dmitry Shmidt 515432d603c922e970f55866c63212d29c997438977Dmitry Shmidt entry = pmksa->pmksa; 516432d603c922e970f55866c63212d29c997438977Dmitry Shmidt while (entry) { 517432d603c922e970f55866c63212d29c997438977Dmitry Shmidt if (das_attr_match(entry, attr)) { 518432d603c922e970f55866c63212d29c997438977Dmitry Shmidt found++; 519432d603c922e970f55866c63212d29c997438977Dmitry Shmidt prev = entry; 520432d603c922e970f55866c63212d29c997438977Dmitry Shmidt entry = entry->next; 521432d603c922e970f55866c63212d29c997438977Dmitry Shmidt pmksa_cache_free_entry(pmksa, prev); 522432d603c922e970f55866c63212d29c997438977Dmitry Shmidt continue; 523432d603c922e970f55866c63212d29c997438977Dmitry Shmidt } 524432d603c922e970f55866c63212d29c997438977Dmitry Shmidt entry = entry->next; 525432d603c922e970f55866c63212d29c997438977Dmitry Shmidt } 526432d603c922e970f55866c63212d29c997438977Dmitry Shmidt 527432d603c922e970f55866c63212d29c997438977Dmitry Shmidt return found ? 0 : -1; 528432d603c922e970f55866c63212d29c997438977Dmitry Shmidt} 529