2 * WPA Supplicant - Basic AP mode support routines
3 * Copyright (c) 2003-2009, Jouni Malinen <j@w1.fi>
4 * Copyright (c) 2009, Atheros Communications
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2 as
8 * published by the Free Software Foundation.
10 * Alternatively, this software may be distributed under the terms of BSD
13 * See README and COPYING for more details.
16 #include "utils/includes.h"
18 #include "utils/common.h"
19 #include "common/ieee802_11_defs.h"
20 #include "ap/hostapd.h"
21 #include "ap/ap_config.h"
23 #include "ap/ieee802_11.h"
24 #endif /* NEED_AP_MLME */
25 #include "ap/ieee802_1x.h"
26 #include "ap/wps_hostapd.h"
27 #include "ap/ctrl_iface_ap.h"
28 #include "eap_common/eap_defs.h"
29 #include "eap_server/eap_methods.h"
30 #include "eap_common/eap_wsc_common.h"
32 #include "config_ssid.h"
34 #include "wpa_supplicant_i.h"
39 static int wpa_supplicant_conf_ap(struct wpa_supplicant
*wpa_s
,
40 struct wpa_ssid
*ssid
,
41 struct hostapd_config
*conf
)
43 struct hostapd_bss_config
*bss
= &conf
->bss
[0];
46 conf
->driver
= wpa_s
->driver
;
48 os_strlcpy(bss
->iface
, wpa_s
->ifname
, sizeof(bss
->iface
));
50 if (ssid
->frequency
== 0) {
51 /* default channel 11 */
52 conf
->hw_mode
= HOSTAPD_MODE_IEEE80211G
;
54 } else if (ssid
->frequency
>= 2412 && ssid
->frequency
<= 2472) {
55 conf
->hw_mode
= HOSTAPD_MODE_IEEE80211G
;
56 conf
->channel
= (ssid
->frequency
- 2407) / 5;
57 } else if ((ssid
->frequency
>= 5180 && ssid
->frequency
<= 5240) ||
58 (ssid
->frequency
>= 5745 && ssid
->frequency
<= 5825)) {
59 conf
->hw_mode
= HOSTAPD_MODE_IEEE80211A
;
60 conf
->channel
= (ssid
->frequency
- 5000) / 5;
62 wpa_printf(MSG_ERROR
, "Unsupported AP mode frequency: %d MHz",
67 /* TODO: enable HT if driver supports it;
68 * drop to 11b if driver does not support 11g */
70 if (ssid
->ssid_len
== 0) {
71 wpa_printf(MSG_ERROR
, "No SSID configured for AP mode");
74 os_memcpy(bss
->ssid
.ssid
, ssid
->ssid
, ssid
->ssid_len
);
75 bss
->ssid
.ssid
[ssid
->ssid_len
] = '\0';
76 bss
->ssid
.ssid_len
= ssid
->ssid_len
;
77 bss
->ssid
.ssid_set
= 1;
79 if (wpa_key_mgmt_wpa_psk(ssid
->key_mgmt
))
80 bss
->wpa
= ssid
->proto
;
81 bss
->wpa_key_mgmt
= ssid
->key_mgmt
;
82 bss
->wpa_pairwise
= ssid
->pairwise_cipher
;
83 if (ssid
->passphrase
) {
84 bss
->ssid
.wpa_passphrase
= os_strdup(ssid
->passphrase
);
85 } else if (ssid
->psk_set
) {
86 os_free(bss
->ssid
.wpa_psk
);
87 bss
->ssid
.wpa_psk
= os_zalloc(sizeof(struct hostapd_wpa_psk
));
88 if (bss
->ssid
.wpa_psk
== NULL
)
90 os_memcpy(bss
->ssid
.wpa_psk
->psk
, ssid
->psk
, PMK_LEN
);
91 bss
->ssid
.wpa_psk
->group
= 1;
94 /* Select group cipher based on the enabled pairwise cipher suites */
97 pairwise
|= bss
->wpa_pairwise
;
99 if (bss
->rsn_pairwise
== 0)
100 bss
->rsn_pairwise
= bss
->wpa_pairwise
;
101 pairwise
|= bss
->rsn_pairwise
;
103 if (pairwise
& WPA_CIPHER_TKIP
)
104 bss
->wpa_group
= WPA_CIPHER_TKIP
;
106 bss
->wpa_group
= WPA_CIPHER_CCMP
;
108 if (bss
->wpa
&& bss
->ieee802_1x
)
109 bss
->ssid
.security_policy
= SECURITY_WPA
;
111 bss
->ssid
.security_policy
= SECURITY_WPA_PSK
;
112 else if (bss
->ieee802_1x
) {
113 bss
->ssid
.security_policy
= SECURITY_IEEE_802_1X
;
114 bss
->ssid
.wep
.default_len
= bss
->default_wep_key_len
;
115 } else if (bss
->ssid
.wep
.keys_set
)
116 bss
->ssid
.security_policy
= SECURITY_STATIC_WEP
;
118 bss
->ssid
.security_policy
= SECURITY_PLAINTEXT
;
122 * Enable WPS by default, but require user interaction to actually use
123 * it. Only the internal Registrar is supported.
127 bss
->ap_setup_locked
= 1;
128 if (wpa_s
->conf
->config_methods
)
129 bss
->config_methods
= os_strdup(wpa_s
->conf
->config_methods
);
130 if (wpa_s
->conf
->device_type
)
131 bss
->device_type
= os_strdup(wpa_s
->conf
->device_type
);
132 #endif /* CONFIG_WPS */
138 static void ap_public_action_rx(void *ctx
, const u8
*buf
, size_t len
, int freq
)
143 static int ap_probe_req_rx(void *ctx
, const u8
*addr
, const u8
*ie
,
150 static void ap_wps_reg_success_cb(void *ctx
, const u8
*mac_addr
,
156 int wpa_supplicant_create_ap(struct wpa_supplicant
*wpa_s
,
157 struct wpa_ssid
*ssid
)
159 struct wpa_driver_associate_params params
;
160 struct hostapd_iface
*hapd_iface
;
161 struct hostapd_config
*conf
;
164 if (ssid
->ssid
== NULL
|| ssid
->ssid_len
== 0) {
165 wpa_printf(MSG_ERROR
, "No SSID configured for AP mode");
169 wpa_supplicant_ap_deinit(wpa_s
);
171 wpa_printf(MSG_DEBUG
, "Setting up AP (SSID='%s')",
172 wpa_ssid_txt(ssid
->ssid
, ssid
->ssid_len
));
174 os_memset(¶ms
, 0, sizeof(params
));
175 params
.ssid
= ssid
->ssid
;
176 params
.ssid_len
= ssid
->ssid_len
;
177 switch (ssid
->mode
) {
178 case WPAS_MODE_INFRA
:
179 params
.mode
= IEEE80211_MODE_INFRA
;
182 params
.mode
= IEEE80211_MODE_IBSS
;
185 params
.mode
= IEEE80211_MODE_AP
;
188 params
.freq
= ssid
->frequency
;
190 if (ssid
->key_mgmt
& WPA_KEY_MGMT_PSK
)
191 wpa_s
->key_mgmt
= WPA_KEY_MGMT_PSK
;
193 wpa_s
->key_mgmt
= WPA_KEY_MGMT_NONE
;
194 params
.key_mgmt_suite
= key_mgmt2driver(wpa_s
->key_mgmt
);
196 if (ssid
->pairwise_cipher
& WPA_CIPHER_CCMP
)
197 wpa_s
->pairwise_cipher
= WPA_CIPHER_CCMP
;
198 else if (ssid
->pairwise_cipher
& WPA_CIPHER_TKIP
)
199 wpa_s
->pairwise_cipher
= WPA_CIPHER_TKIP
;
200 else if (ssid
->pairwise_cipher
& WPA_CIPHER_NONE
)
201 wpa_s
->pairwise_cipher
= WPA_CIPHER_NONE
;
203 wpa_printf(MSG_WARNING
, "WPA: Failed to select pairwise "
207 params
.pairwise_suite
= cipher_suite2driver(wpa_s
->pairwise_cipher
);
208 params
.group_suite
= params
.pairwise_suite
;
210 if (wpa_drv_associate(wpa_s
, ¶ms
) < 0) {
211 wpa_msg(wpa_s
, MSG_INFO
, "Failed to start AP functionality");
215 wpa_s
->ap_iface
= hapd_iface
= os_zalloc(sizeof(*wpa_s
->ap_iface
));
216 if (hapd_iface
== NULL
)
218 hapd_iface
->owner
= wpa_s
;
220 wpa_s
->ap_iface
->conf
= conf
= hostapd_config_defaults();
222 wpa_supplicant_ap_deinit(wpa_s
);
226 if (wpa_supplicant_conf_ap(wpa_s
, ssid
, conf
)) {
227 wpa_printf(MSG_ERROR
, "Failed to create AP configuration");
228 wpa_supplicant_ap_deinit(wpa_s
);
232 hapd_iface
->num_bss
= conf
->num_bss
;
233 hapd_iface
->bss
= os_zalloc(conf
->num_bss
*
234 sizeof(struct hostapd_data
*));
235 if (hapd_iface
->bss
== NULL
) {
236 wpa_supplicant_ap_deinit(wpa_s
);
240 for (i
= 0; i
< conf
->num_bss
; i
++) {
242 hostapd_alloc_bss_data(hapd_iface
, conf
,
244 if (hapd_iface
->bss
[i
] == NULL
) {
245 wpa_supplicant_ap_deinit(wpa_s
);
249 hapd_iface
->bss
[i
]->msg_ctx
= wpa_s
;
250 hapd_iface
->bss
[i
]->public_action_cb
= ap_public_action_rx
;
251 hapd_iface
->bss
[i
]->public_action_cb_ctx
= wpa_s
;
252 hostapd_register_probereq_cb(hapd_iface
->bss
[i
],
253 ap_probe_req_rx
, wpa_s
);
254 hapd_iface
->bss
[i
]->wps_reg_success_cb
= ap_wps_reg_success_cb
;
255 hapd_iface
->bss
[i
]->wps_reg_success_cb_ctx
= wpa_s
;
258 os_memcpy(hapd_iface
->bss
[0]->own_addr
, wpa_s
->own_addr
, ETH_ALEN
);
259 hapd_iface
->bss
[0]->driver
= wpa_s
->driver
;
260 hapd_iface
->bss
[0]->drv_priv
= wpa_s
->drv_priv
;
262 if (hostapd_setup_interface(wpa_s
->ap_iface
)) {
263 wpa_printf(MSG_ERROR
, "Failed to initialize AP interface");
264 wpa_supplicant_ap_deinit(wpa_s
);
268 wpa_s
->current_ssid
= ssid
;
269 os_memcpy(wpa_s
->bssid
, wpa_s
->own_addr
, ETH_ALEN
);
270 wpa_supplicant_set_state(wpa_s
, WPA_COMPLETED
);
272 if (wpa_s
->ap_configured_cb
)
273 wpa_s
->ap_configured_cb(wpa_s
->ap_configured_cb_ctx
,
274 wpa_s
->ap_configured_cb_data
);
280 void wpa_supplicant_ap_deinit(struct wpa_supplicant
*wpa_s
)
282 if (wpa_s
->ap_iface
== NULL
)
285 wpa_s
->current_ssid
= NULL
;
286 hostapd_interface_deinit(wpa_s
->ap_iface
);
287 hostapd_interface_free(wpa_s
->ap_iface
);
288 wpa_s
->ap_iface
= NULL
;
289 wpa_drv_deinit_ap(wpa_s
);
293 void ap_tx_status(void *ctx
, const u8
*addr
,
294 const u8
*buf
, size_t len
, int ack
)
297 struct wpa_supplicant
*wpa_s
= ctx
;
298 hostapd_tx_status(wpa_s
->ap_iface
->bss
[0], addr
, buf
, len
, ack
);
299 #endif /* NEED_AP_MLME */
303 void ap_rx_from_unknown_sta(void *ctx
, const u8
*frame
, size_t len
)
306 struct wpa_supplicant
*wpa_s
= ctx
;
307 const struct ieee80211_hdr
*hdr
=
308 (const struct ieee80211_hdr
*) frame
;
309 u16 fc
= le_to_host16(hdr
->frame_control
);
310 ieee802_11_rx_from_unknown(wpa_s
->ap_iface
->bss
[0], hdr
->addr2
,
311 (fc
& (WLAN_FC_TODS
| WLAN_FC_FROMDS
)) ==
312 (WLAN_FC_TODS
| WLAN_FC_FROMDS
));
313 #endif /* NEED_AP_MLME */
317 void ap_mgmt_rx(void *ctx
, struct rx_mgmt
*rx_mgmt
)
320 struct wpa_supplicant
*wpa_s
= ctx
;
321 struct hostapd_frame_info fi
;
322 os_memset(&fi
, 0, sizeof(fi
));
323 fi
.datarate
= rx_mgmt
->datarate
;
324 fi
.ssi_signal
= rx_mgmt
->ssi_signal
;
325 ieee802_11_mgmt(wpa_s
->ap_iface
->bss
[0], rx_mgmt
->frame
,
326 rx_mgmt
->frame_len
, &fi
);
327 #endif /* NEED_AP_MLME */
331 void ap_mgmt_tx_cb(void *ctx
, const u8
*buf
, size_t len
, u16 stype
, int ok
)
334 struct wpa_supplicant
*wpa_s
= ctx
;
335 ieee802_11_mgmt_cb(wpa_s
->ap_iface
->bss
[0], buf
, len
, stype
, ok
);
336 #endif /* NEED_AP_MLME */
340 void wpa_supplicant_ap_rx_eapol(struct wpa_supplicant
*wpa_s
,
341 const u8
*src_addr
, const u8
*buf
, size_t len
)
343 ieee802_1x_receive(wpa_s
->ap_iface
->bss
[0], src_addr
, buf
, len
);
349 int wpa_supplicant_ap_wps_pbc(struct wpa_supplicant
*wpa_s
, const u8
*bssid
)
351 if (!wpa_s
->ap_iface
)
353 return hostapd_wps_button_pushed(wpa_s
->ap_iface
->bss
[0]);
357 int wpa_supplicant_ap_wps_pin(struct wpa_supplicant
*wpa_s
, const u8
*bssid
,
358 const char *pin
, char *buf
, size_t buflen
)
360 int ret
, ret_len
= 0;
362 if (!wpa_s
->ap_iface
)
366 unsigned int rpin
= wps_generate_pin();
367 ret_len
= os_snprintf(buf
, buflen
, "%d", rpin
);
371 ret
= hostapd_wps_add_pin(wpa_s
->ap_iface
->bss
[0], "any", pin
, 0);
377 #endif /* CONFIG_WPS */
380 #ifdef CONFIG_CTRL_IFACE
382 int ap_ctrl_iface_sta_first(struct wpa_supplicant
*wpa_s
,
383 char *buf
, size_t buflen
)
385 if (wpa_s
->ap_iface
== NULL
)
387 return hostapd_ctrl_iface_sta_first(wpa_s
->ap_iface
->bss
[0],
392 int ap_ctrl_iface_sta(struct wpa_supplicant
*wpa_s
, const char *txtaddr
,
393 char *buf
, size_t buflen
)
395 if (wpa_s
->ap_iface
== NULL
)
397 return hostapd_ctrl_iface_sta(wpa_s
->ap_iface
->bss
[0], txtaddr
,
402 int ap_ctrl_iface_sta_next(struct wpa_supplicant
*wpa_s
, const char *txtaddr
,
403 char *buf
, size_t buflen
)
405 if (wpa_s
->ap_iface
== NULL
)
407 return hostapd_ctrl_iface_sta_next(wpa_s
->ap_iface
->bss
[0], txtaddr
,
412 int ap_ctrl_iface_wpa_get_status(struct wpa_supplicant
*wpa_s
, char *buf
,
413 size_t buflen
, int verbose
)
415 char *pos
= buf
, *end
= buf
+ buflen
;
417 struct hostapd_bss_config
*conf
;
419 if (wpa_s
->ap_iface
== NULL
)
422 conf
= wpa_s
->ap_iface
->bss
[0]->conf
;
426 ret
= os_snprintf(pos
, end
- pos
,
427 "pairwise_cipher=%s\n"
430 wpa_cipher_txt(conf
->rsn_pairwise
),
431 wpa_cipher_txt(conf
->wpa_group
),
432 wpa_key_mgmt_txt(conf
->wpa_key_mgmt
,
434 if (ret
< 0 || ret
>= end
- pos
)
440 #endif /* CONFIG_CTRL_IFACE */
443 int wpa_supplicant_ap_mac_addr_filter(struct wpa_supplicant
*wpa_s
,
446 struct hostapd_data
*hapd
;
447 struct hostapd_bss_config
*conf
;
449 if (!wpa_s
->ap_iface
)
453 wpa_printf(MSG_DEBUG
, "AP: Set MAC address filter: " MACSTR
,
456 wpa_printf(MSG_DEBUG
, "AP: Clear MAC address filter");
458 hapd
= wpa_s
->ap_iface
->bss
[0];
461 os_free(conf
->accept_mac
);
462 conf
->accept_mac
= NULL
;
463 conf
->num_accept_mac
= 0;
464 os_free(conf
->deny_mac
);
465 conf
->deny_mac
= NULL
;
466 conf
->num_deny_mac
= 0;
469 conf
->macaddr_acl
= ACCEPT_UNLESS_DENIED
;
473 conf
->macaddr_acl
= DENY_UNLESS_ACCEPTED
;
474 conf
->accept_mac
= os_zalloc(sizeof(struct mac_acl_entry
));
475 if (conf
->accept_mac
== NULL
)
477 os_memcpy(conf
->accept_mac
[0].addr
, addr
, ETH_ALEN
);
478 conf
->num_accept_mac
= 1;