18d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt/* 28d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * hostapd / EAP-Identity 38d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * Copyright (c) 2004-2006, Jouni Malinen <j@w1.fi> 48d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt * 5c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * This software may be distributed under the terms of the BSD license. 6c5ec7f57ead87efa365800228aa0b09a12d9e6c4Dmitry Shmidt * See README for more details. 78d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt */ 88d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 98d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "includes.h" 108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "common.h" 128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt#include "eap_i.h" 138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstruct eap_identity_data { 168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt enum { CONTINUE, SUCCESS, FAILURE } state; 178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt int pick_up; 188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt}; 198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void * eap_identity_init(struct eap_sm *sm) 228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 238d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_identity_data *data; 248d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 258d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt data = os_zalloc(sizeof(*data)); 268d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (data == NULL) 278d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 288d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt data->state = CONTINUE; 298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return data; 318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void * eap_identity_initPickUp(struct eap_sm *sm) 358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_identity_data *data; 378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt data = eap_identity_init(sm); 388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (data) { 398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt data->pick_up = 1; 408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return data; 428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void eap_identity_reset(struct eap_sm *sm, void *priv) 468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_identity_data *data = priv; 488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(data); 498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic struct wpabuf * eap_identity_buildReq(struct eap_sm *sm, void *priv, 538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt u8 id) 548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_identity_data *data = priv; 568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *req; 578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const char *req_data; 588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t req_data_len; 598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm->eapol_cb->get_eap_req_id_text) { 618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt req_data = sm->eapol_cb->get_eap_req_id_text(sm->eapol_ctx, 628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt &req_data_len); 638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt req_data = NULL; 658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt req_data_len = 0; 668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt req = eap_msg_alloc(EAP_VENDOR_IETF, EAP_TYPE_IDENTITY, req_data_len, 688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt EAP_CODE_REQUEST, id); 698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (req == NULL) { 708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_ERROR, "EAP-Identity: Failed to allocate " 718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "memory for request"); 728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt data->state = FAILURE; 738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return NULL; 748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 768d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpabuf_put_data(req, req_data, req_data_len); 778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 788d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return req; 798d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 808d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 818d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 828d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic Boolean eap_identity_check(struct eap_sm *sm, void *priv, 838d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *respData) 848d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 858d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *pos; 868d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len; 878d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 888d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = eap_hdr_validate(EAP_VENDOR_IETF, EAP_TYPE_IDENTITY, 898d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt respData, &len); 908d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos == NULL) { 918d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_INFO, "EAP-Identity: Invalid frame"); 928d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return TRUE; 938d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 948d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 958d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return FALSE; 968d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 978d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 988d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 998d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic void eap_identity_process(struct eap_sm *sm, void *priv, 1008d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct wpabuf *respData) 1018d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1028d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_identity_data *data = priv; 1038d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt const u8 *pos; 1048d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt size_t len; 105818ea489ef32dcdc7c098d8a336d6e1dd8996112Dmitry Shmidt char *buf; 1068d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1078d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (data->pick_up) { 1088d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eap_identity_check(sm, data, respData)) { 1098d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_printf(MSG_DEBUG, "EAP-Identity: failed to pick " 1108d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "up already started negotiation"); 1118d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt data->state = FAILURE; 1128d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; 1138d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1148d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt data->pick_up = 0; 1158d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1168d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1178d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt pos = eap_hdr_validate(EAP_VENDOR_IETF, EAP_TYPE_IDENTITY, 1188d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt respData, &len); 1198d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (pos == NULL) 1208d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return; /* Should not happen - frame already validated */ 1218d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1228d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt wpa_hexdump_ascii(MSG_DEBUG, "EAP-Identity: Peer identity", pos, len); 123b5d893b5dec601a58c3ce0fc9e5d6da3816ce97aDmitry Shmidt buf = os_malloc(len * 4 + 1); 124818ea489ef32dcdc7c098d8a336d6e1dd8996112Dmitry Shmidt if (buf) { 125b5d893b5dec601a58c3ce0fc9e5d6da3816ce97aDmitry Shmidt printf_encode(buf, len * 4 + 1, pos, len); 126818ea489ef32dcdc7c098d8a336d6e1dd8996112Dmitry Shmidt eap_log_msg(sm, "EAP-Response/Identity '%s'", buf); 127818ea489ef32dcdc7c098d8a336d6e1dd8996112Dmitry Shmidt os_free(buf); 128818ea489ef32dcdc7c098d8a336d6e1dd8996112Dmitry Shmidt } 1298d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm->identity) 1308d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->update_user = TRUE; 1318d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_free(sm->identity); 1328d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->identity = os_malloc(len ? len : 1); 1338d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (sm->identity == NULL) { 1348d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt data->state = FAILURE; 1358d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } else { 1368d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt os_memcpy(sm->identity, pos, len); 1378d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt sm->identity_len = len; 1388d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt data->state = SUCCESS; 1398d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt } 1408d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1418d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1428d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1438d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic Boolean eap_identity_isDone(struct eap_sm *sm, void *priv) 1448d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1458d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_identity_data *data = priv; 1468d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return data->state != CONTINUE; 1478d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1488d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1498d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1508d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtstatic Boolean eap_identity_isSuccess(struct eap_sm *sm, void *priv) 1518d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1528d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_identity_data *data = priv; 1538d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return data->state == SUCCESS; 1548d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 1558d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1568d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1578d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidtint eap_server_identity_register(void) 1588d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt{ 1598d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt struct eap_method *eap; 1608d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1618d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap = eap_server_method_alloc(EAP_SERVER_METHOD_INTERFACE_VERSION, 1628d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt EAP_VENDOR_IETF, EAP_TYPE_IDENTITY, 1638d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt "Identity"); 1648d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt if (eap == NULL) 1658d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt return -1; 1668d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1678d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap->init = eap_identity_init; 1688d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap->initPickUp = eap_identity_initPickUp; 1698d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap->reset = eap_identity_reset; 1708d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap->buildReq = eap_identity_buildReq; 1718d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap->check = eap_identity_check; 1728d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap->process = eap_identity_process; 1738d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap->isDone = eap_identity_isDone; 1748d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt eap->isSuccess = eap_identity_isSuccess; 1758d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt 1761d6bf427f4769edb60865a3999d01eeb8f8fcb19Dmitry Shmidt return eap_server_method_register(eap); 1778d520ff1dc2da35cdca849e982051b86468016d8Dmitry Shmidt} 178