/* * hostapd / DPP integration * Copyright (c) 2017, Qualcomm Atheros, Inc. * Copyright (c) 2018-2020, The Linux Foundation * Copyright (c) 2021-2022, Qualcomm Innovation Center, Inc. * * This software may be distributed under the terms of the BSD license. * See README for more details. */ #include "utils/includes.h" #include "utils/common.h" #include "utils/eloop.h" #include "common/dpp.h" #include "common/gas.h" #include "common/wpa_ctrl.h" #include "crypto/random.h" #include "hostapd.h" #include "ap_drv_ops.h" #include "gas_query_ap.h" #include "gas_serv.h" #include "wpa_auth.h" #include "beacon.h" #include "dpp_hostapd.h" static void hostapd_dpp_reply_wait_timeout(void *eloop_ctx, void *timeout_ctx); static void hostapd_dpp_auth_conf_wait_timeout(void *eloop_ctx, void *timeout_ctx); static void hostapd_dpp_auth_success(struct hostapd_data *hapd, int initiator); static void hostapd_dpp_init_timeout(void *eloop_ctx, void *timeout_ctx); static int hostapd_dpp_auth_init_next(struct hostapd_data *hapd); static void hostapd_dpp_set_testing_options(struct hostapd_data *hapd, struct dpp_authentication *auth); static void hostapd_dpp_start_gas_client(struct hostapd_data *hapd); #ifdef CONFIG_DPP2 static void hostapd_dpp_reconfig_reply_wait_timeout(void *eloop_ctx, void *timeout_ctx); static void hostapd_dpp_handle_config_obj(struct hostapd_data *hapd, struct dpp_authentication *auth, struct dpp_config_obj *conf); static int hostapd_dpp_process_conf_obj(void *ctx, struct dpp_authentication *auth); #endif /* CONFIG_DPP2 */ static const u8 broadcast[ETH_ALEN] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff }; /** * hostapd_dpp_qr_code - Parse and add DPP bootstrapping info from a QR Code * @hapd: Pointer to hostapd_data * @cmd: DPP URI read from a QR Code * Returns: Identifier of the stored info or -1 on failure */ int hostapd_dpp_qr_code(struct hostapd_data *hapd, const char *cmd) { struct dpp_bootstrap_info *bi; struct dpp_authentication *auth = hapd->dpp_auth; bi = dpp_add_qr_code(hapd->iface->interfaces->dpp, cmd); if (!bi) return -1; if (auth && auth->response_pending && dpp_notify_new_qr_code(auth, bi) == 1) { wpa_printf(MSG_DEBUG, "DPP: Sending out pending authentication response"); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX "dst=" MACSTR " freq=%u type=%d", MAC2STR(auth->peer_mac_addr), auth->curr_freq, DPP_PA_AUTHENTICATION_RESP); hostapd_drv_send_action(hapd, auth->curr_freq, 0, auth->peer_mac_addr, wpabuf_head(hapd->dpp_auth->resp_msg), wpabuf_len(hapd->dpp_auth->resp_msg)); } #ifdef CONFIG_DPP2 dpp_controller_new_qr_code(hapd->iface->interfaces->dpp, bi); #endif /* CONFIG_DPP2 */ return bi->id; } /** * hostapd_dpp_nfc_uri - Parse and add DPP bootstrapping info from NFC Tag (URI) * @hapd: Pointer to hostapd_data * @cmd: DPP URI read from a NFC Tag (URI NDEF message) * Returns: Identifier of the stored info or -1 on failure */ int hostapd_dpp_nfc_uri(struct hostapd_data *hapd, const char *cmd) { struct dpp_bootstrap_info *bi; bi = dpp_add_nfc_uri(hapd->iface->interfaces->dpp, cmd); if (!bi) return -1; return bi->id; } int hostapd_dpp_nfc_handover_req(struct hostapd_data *hapd, const char *cmd) { const char *pos; struct dpp_bootstrap_info *peer_bi, *own_bi; pos = os_strstr(cmd, " own="); if (!pos) return -1; pos += 5; own_bi = dpp_bootstrap_get_id(hapd->iface->interfaces->dpp, atoi(pos)); if (!own_bi) return -1; pos = os_strstr(cmd, " uri="); if (!pos) return -1; pos += 5; peer_bi = dpp_add_nfc_uri(hapd->iface->interfaces->dpp, pos); if (!peer_bi) { wpa_printf(MSG_INFO, "DPP: Failed to parse URI from NFC Handover Request"); return -1; } if (dpp_nfc_update_bi(own_bi, peer_bi) < 0) return -1; return peer_bi->id; } int hostapd_dpp_nfc_handover_sel(struct hostapd_data *hapd, const char *cmd) { const char *pos; struct dpp_bootstrap_info *peer_bi, *own_bi; pos = os_strstr(cmd, " own="); if (!pos) return -1; pos += 5; own_bi = dpp_bootstrap_get_id(hapd->iface->interfaces->dpp, atoi(pos)); if (!own_bi) return -1; pos = os_strstr(cmd, " uri="); if (!pos) return -1; pos += 5; peer_bi = dpp_add_nfc_uri(hapd->iface->interfaces->dpp, pos); if (!peer_bi) { wpa_printf(MSG_INFO, "DPP: Failed to parse URI from NFC Handover Select"); return -1; } if (peer_bi->curve != own_bi->curve) { wpa_printf(MSG_INFO, "DPP: Peer (NFC Handover Selector) used different curve"); return -1; } return peer_bi->id; } static void hostapd_dpp_auth_resp_retry_timeout(void *eloop_ctx, void *timeout_ctx) { struct hostapd_data *hapd = eloop_ctx; struct dpp_authentication *auth = hapd->dpp_auth; if (!auth || !auth->resp_msg) return; wpa_printf(MSG_DEBUG, "DPP: Retry Authentication Response after timeout"); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX "dst=" MACSTR " freq=%u type=%d", MAC2STR(auth->peer_mac_addr), auth->curr_freq, DPP_PA_AUTHENTICATION_RESP); hostapd_drv_send_action(hapd, auth->curr_freq, 500, auth->peer_mac_addr, wpabuf_head(auth->resp_msg), wpabuf_len(auth->resp_msg)); } static void hostapd_dpp_auth_resp_retry(struct hostapd_data *hapd) { struct dpp_authentication *auth = hapd->dpp_auth; unsigned int wait_time, max_tries; if (!auth || !auth->resp_msg) return; if (hapd->dpp_resp_max_tries) max_tries = hapd->dpp_resp_max_tries; else max_tries = 5; auth->auth_resp_tries++; if (auth->auth_resp_tries >= max_tries) { wpa_printf(MSG_INFO, "DPP: No confirm received from initiator - stopping exchange"); hostapd_drv_send_action_cancel_wait(hapd); dpp_auth_deinit(hapd->dpp_auth); hapd->dpp_auth = NULL; return; } if (hapd->dpp_resp_retry_time) wait_time = hapd->dpp_resp_retry_time; else wait_time = 1000; wpa_printf(MSG_DEBUG, "DPP: Schedule retransmission of Authentication Response frame in %u ms", wait_time); eloop_cancel_timeout(hostapd_dpp_auth_resp_retry_timeout, hapd, NULL); eloop_register_timeout(wait_time / 1000, (wait_time % 1000) * 1000, hostapd_dpp_auth_resp_retry_timeout, hapd, NULL); } static int hostapd_dpp_allow_ir(struct hostapd_data *hapd, unsigned int freq) { int i, j; if (!hapd->iface->hw_features) return -1; for (i = 0; i < hapd->iface->num_hw_features; i++) { struct hostapd_hw_modes *mode = &hapd->iface->hw_features[i]; for (j = 0; j < mode->num_channels; j++) { struct hostapd_channel_data *chan = &mode->channels[j]; if (chan->freq != (int) freq) continue; if (chan->flag & (HOSTAPD_CHAN_DISABLED | HOSTAPD_CHAN_NO_IR | HOSTAPD_CHAN_RADAR)) continue; return 1; } } wpa_printf(MSG_DEBUG, "DPP: Frequency %u MHz not supported or does not allow PKEX initiation in the current channel list", freq); return 0; } static int hostapd_dpp_pkex_next_channel(struct hostapd_data *hapd, struct dpp_pkex *pkex) { if (pkex->freq == 2437) pkex->freq = 5745; else if (pkex->freq == 5745) pkex->freq = 5220; else if (pkex->freq == 5220) pkex->freq = 60480; else return -1; /* no more channels to try */ if (hostapd_dpp_allow_ir(hapd, pkex->freq) == 1) { wpa_printf(MSG_DEBUG, "DPP: Try to initiate on %u MHz", pkex->freq); return 0; } /* Could not use this channel - try the next one */ return hostapd_dpp_pkex_next_channel(hapd, pkex); } static void hostapd_dpp_pkex_clear_code(struct hostapd_data *hapd) { if (!hapd->dpp_pkex_code && !hapd->dpp_pkex_identifier) return; /* Delete PKEX code and identifier on successful completion of * PKEX. We are not supposed to reuse these without being * explicitly requested to perform PKEX again. */ wpa_printf(MSG_DEBUG, "DPP: Delete PKEX code/identifier"); os_free(hapd->dpp_pkex_code); hapd->dpp_pkex_code = NULL; os_free(hapd->dpp_pkex_identifier); hapd->dpp_pkex_identifier = NULL; } #ifdef CONFIG_DPP2 static int hostapd_dpp_pkex_done(void *ctx, void *conn, struct dpp_bootstrap_info *peer_bi) { struct hostapd_data *hapd = ctx; char cmd[500]; const char *pos; u8 allowed_roles = DPP_CAPAB_CONFIGURATOR; struct dpp_bootstrap_info *own_bi = NULL; struct dpp_authentication *auth; hostapd_dpp_pkex_clear_code(hapd); os_snprintf(cmd, sizeof(cmd), " peer=%u %s", peer_bi->id, hapd->dpp_pkex_auth_cmd ? hapd->dpp_pkex_auth_cmd : ""); wpa_printf(MSG_DEBUG, "DPP: Start authentication after PKEX (cmd: %s)", cmd); pos = os_strstr(cmd, " own="); if (pos) { pos += 5; own_bi = dpp_bootstrap_get_id(hapd->iface->interfaces->dpp, atoi(pos)); if (!own_bi) { wpa_printf(MSG_INFO, "DPP: Could not find bootstrapping info for the identified local entry"); return -1; } if (peer_bi->curve != own_bi->curve) { wpa_printf(MSG_INFO, "DPP: Mismatching curves in bootstrapping info (peer=%s own=%s)", peer_bi->curve->name, own_bi->curve->name); return -1; } } pos = os_strstr(cmd, " role="); if (pos) { pos += 6; if (os_strncmp(pos, "configurator", 12) == 0) allowed_roles = DPP_CAPAB_CONFIGURATOR; else if (os_strncmp(pos, "enrollee", 8) == 0) allowed_roles = DPP_CAPAB_ENROLLEE; else if (os_strncmp(pos, "either", 6) == 0) allowed_roles = DPP_CAPAB_CONFIGURATOR | DPP_CAPAB_ENROLLEE; else return -1; } auth = dpp_auth_init(hapd->iface->interfaces->dpp, hapd->msg_ctx, peer_bi, own_bi, allowed_roles, 0, hapd->iface->hw_features, hapd->iface->num_hw_features); if (!auth) return -1; hostapd_dpp_set_testing_options(hapd, auth); if (dpp_set_configurator(auth, cmd) < 0) { dpp_auth_deinit(auth); return -1; } return dpp_tcp_auth(hapd->iface->interfaces->dpp, conn, auth, hapd->conf->dpp_name, DPP_NETROLE_AP, hapd->conf->dpp_mud_url, hapd->conf->dpp_extra_conf_req_name, hapd->conf->dpp_extra_conf_req_value, hostapd_dpp_process_conf_obj, NULL); } #endif /* CONFIG_DPP2 */ static int hostapd_dpp_pkex_init(struct hostapd_data *hapd, enum dpp_pkex_ver ver, const struct hostapd_ip_addr *ipaddr, int tcp_port) { struct dpp_pkex *pkex; struct wpabuf *msg; unsigned int wait_time; bool v2 = ver != PKEX_VER_ONLY_1; wpa_printf(MSG_DEBUG, "DPP: Initiating PKEXv%d", v2 ? 2 : 1); dpp_pkex_free(hapd->dpp_pkex); hapd->dpp_pkex = NULL; pkex = dpp_pkex_init(hapd->msg_ctx, hapd->dpp_pkex_bi, hapd->own_addr, hapd->dpp_pkex_identifier, hapd->dpp_pkex_code, hapd->dpp_pkex_code_len, v2); if (!pkex) return -1; pkex->forced_ver = ver != PKEX_VER_AUTO; if (ipaddr) { #ifdef CONFIG_DPP2 return dpp_tcp_pkex_init(hapd->iface->interfaces->dpp, pkex, ipaddr, tcp_port, hapd->msg_ctx, hapd, hostapd_dpp_pkex_done); #else /* CONFIG_DPP2 */ return -1; #endif /* CONFIG_DPP2 */ } hapd->dpp_pkex = pkex; msg = hapd->dpp_pkex->exchange_req; wait_time = 2000; /* TODO: hapd->max_remain_on_chan; */ pkex->freq = 2437; wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX "dst=" MACSTR " freq=%u type=%d", MAC2STR(broadcast), pkex->freq, v2 ? DPP_PA_PKEX_EXCHANGE_REQ : DPP_PA_PKEX_V1_EXCHANGE_REQ); hostapd_drv_send_action(hapd, pkex->freq, 0, broadcast, wpabuf_head(msg), wpabuf_len(msg)); pkex->exch_req_wait_time = wait_time; pkex->exch_req_tries = 1; return 0; } static void hostapd_dpp_pkex_retry_timeout(void *eloop_ctx, void *timeout_ctx) { struct hostapd_data *hapd = eloop_ctx; struct dpp_pkex *pkex = hapd->dpp_pkex; if (!pkex || !pkex->exchange_req) return; if (pkex->exch_req_tries >= 5) { if (hostapd_dpp_pkex_next_channel(hapd, pkex) < 0) { #ifdef CONFIG_DPP3 if (pkex->v2 && !pkex->forced_ver) { wpa_printf(MSG_DEBUG, "DPP: Fall back to PKEXv1"); hostapd_dpp_pkex_init(hapd, PKEX_VER_ONLY_1, NULL, 0); return; } #endif /* CONFIG_DPP3 */ wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_FAIL "No response from PKEX peer"); dpp_pkex_free(pkex); hapd->dpp_pkex = NULL; return; } pkex->exch_req_tries = 0; } pkex->exch_req_tries++; wpa_printf(MSG_DEBUG, "DPP: Retransmit PKEX Exchange Request (try %u)", pkex->exch_req_tries); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX "dst=" MACSTR " freq=%u type=%d", MAC2STR(broadcast), pkex->freq, pkex->v2 ? DPP_PA_PKEX_EXCHANGE_REQ : DPP_PA_PKEX_V1_EXCHANGE_REQ); hostapd_drv_send_action(hapd, pkex->freq, pkex->exch_req_wait_time, broadcast, wpabuf_head(pkex->exchange_req), wpabuf_len(pkex->exchange_req)); } static void hostapd_dpp_pkex_tx_status(struct hostapd_data *hapd, const u8 *dst, const u8 *data, size_t data_len, int ok) { struct dpp_pkex *pkex = hapd->dpp_pkex; if (pkex->failed) { wpa_printf(MSG_DEBUG, "DPP: Terminate PKEX exchange due to an earlier error"); if (pkex->t > pkex->own_bi->pkex_t) pkex->own_bi->pkex_t = pkex->t; dpp_pkex_free(pkex); hapd->dpp_pkex = NULL; return; } if (pkex->exch_req_wait_time && pkex->exchange_req) { /* Wait for PKEX Exchange Response frame and retry request if * no response is seen. */ eloop_cancel_timeout(hostapd_dpp_pkex_retry_timeout, hapd, NULL); eloop_register_timeout(pkex->exch_req_wait_time / 1000, (pkex->exch_req_wait_time % 1000) * 1000, hostapd_dpp_pkex_retry_timeout, hapd, NULL); } } void hostapd_dpp_tx_status(struct hostapd_data *hapd, const u8 *dst, const u8 *data, size_t data_len, int ok) { struct dpp_authentication *auth = hapd->dpp_auth; wpa_printf(MSG_DEBUG, "DPP: TX status: dst=" MACSTR " ok=%d", MAC2STR(dst), ok); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX_STATUS "dst=" MACSTR " result=%s", MAC2STR(dst), ok ? "SUCCESS" : "FAILED"); if (!hapd->dpp_auth) { if (hapd->dpp_pkex) { hostapd_dpp_pkex_tx_status(hapd, dst, data, data_len, ok); return; } wpa_printf(MSG_DEBUG, "DPP: Ignore TX status since there is no ongoing authentication exchange"); return; } #ifdef CONFIG_DPP2 if (auth->connect_on_tx_status) { wpa_printf(MSG_DEBUG, "DPP: Complete exchange on configuration result"); dpp_auth_deinit(hapd->dpp_auth); hapd->dpp_auth = NULL; return; } #endif /* CONFIG_DPP2 */ if (hapd->dpp_auth->remove_on_tx_status) { wpa_printf(MSG_DEBUG, "DPP: Terminate authentication exchange due to an earlier error"); eloop_cancel_timeout(hostapd_dpp_init_timeout, hapd, NULL); eloop_cancel_timeout(hostapd_dpp_reply_wait_timeout, hapd, NULL); eloop_cancel_timeout(hostapd_dpp_auth_conf_wait_timeout, hapd, NULL); eloop_cancel_timeout(hostapd_dpp_auth_resp_retry_timeout, hapd, NULL); #ifdef CONFIG_DPP2 eloop_cancel_timeout(hostapd_dpp_reconfig_reply_wait_timeout, hapd, NULL); #endif /* CONFIG_DPP2 */ hostapd_drv_send_action_cancel_wait(hapd); dpp_auth_deinit(hapd->dpp_auth); hapd->dpp_auth = NULL; return; } if (hapd->dpp_auth_ok_on_ack) hostapd_dpp_auth_success(hapd, 1); if (!is_broadcast_ether_addr(dst) && !ok) { wpa_printf(MSG_DEBUG, "DPP: Unicast DPP Action frame was not ACKed"); if (auth->waiting_auth_resp) { /* In case of DPP Authentication Request frame, move to * the next channel immediately. */ hostapd_drv_send_action_cancel_wait(hapd); hostapd_dpp_auth_init_next(hapd); return; } if (auth->waiting_auth_conf) { hostapd_dpp_auth_resp_retry(hapd); return; } } if (auth->waiting_auth_conf && auth->auth_resp_status == DPP_STATUS_OK) { /* Make sure we do not get stuck waiting for Auth Confirm * indefinitely after successfully transmitted Auth Response to * allow new authentication exchanges to be started. */ eloop_cancel_timeout(hostapd_dpp_auth_conf_wait_timeout, hapd, NULL); eloop_register_timeout(1, 0, hostapd_dpp_auth_conf_wait_timeout, hapd, NULL); } if (!is_broadcast_ether_addr(dst) && auth->waiting_auth_resp && ok) { /* Allow timeout handling to stop iteration if no response is * received from a peer that has ACKed a request. */ auth->auth_req_ack = 1; } if (!hapd->dpp_auth_ok_on_ack && hapd->dpp_auth->neg_freq > 0 && hapd->dpp_auth->curr_freq != hapd->dpp_auth->neg_freq) { wpa_printf(MSG_DEBUG, "DPP: Move from curr_freq %u MHz to neg_freq %u MHz for response", hapd->dpp_auth->curr_freq, hapd->dpp_auth->neg_freq); hostapd_drv_send_action_cancel_wait(hapd); if (hapd->dpp_auth->neg_freq != (unsigned int) hapd->iface->freq && hapd->iface->freq > 0) { /* TODO: Listen operation on non-operating channel */ wpa_printf(MSG_INFO, "DPP: Listen operation on non-operating channel (%d MHz) is not yet supported (operating channel: %d MHz)", hapd->dpp_auth->neg_freq, hapd->iface->freq); } } if (hapd->dpp_auth_ok_on_ack) hapd->dpp_auth_ok_on_ack = 0; } static void hostapd_dpp_reply_wait_timeout(void *eloop_ctx, void *timeout_ctx) { struct hostapd_data *hapd = eloop_ctx; struct dpp_authentication *auth = hapd->dpp_auth; unsigned int freq; struct os_reltime now, diff; unsigned int wait_time, diff_ms; if (!auth || !auth->waiting_auth_resp) return; wait_time = hapd->dpp_resp_wait_time ? hapd->dpp_resp_wait_time : 2000; os_get_reltime(&now); os_reltime_sub(&now, &hapd->dpp_last_init, &diff); diff_ms = diff.sec * 1000 + diff.usec / 1000; wpa_printf(MSG_DEBUG, "DPP: Reply wait timeout - wait_time=%u diff_ms=%u", wait_time, diff_ms); if (auth->auth_req_ack && diff_ms >= wait_time) { /* Peer ACK'ed Authentication Request frame, but did not reply * with Authentication Response frame within two seconds. */ wpa_printf(MSG_INFO, "DPP: No response received from responder - stopping initiation attempt"); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_AUTH_INIT_FAILED); hostapd_drv_send_action_cancel_wait(hapd); hostapd_dpp_listen_stop(hapd); dpp_auth_deinit(auth); hapd->dpp_auth = NULL; return; } if (diff_ms >= wait_time) { /* Authentication Request frame was not ACK'ed and no reply * was receiving within two seconds. */ wpa_printf(MSG_DEBUG, "DPP: Continue Initiator channel iteration"); hostapd_drv_send_action_cancel_wait(hapd); hostapd_dpp_listen_stop(hapd); hostapd_dpp_auth_init_next(hapd); return; } /* Driver did not support 2000 ms long wait_time with TX command, so * schedule listen operation to continue waiting for the response. * * DPP listen operations continue until stopped, so simply schedule a * new call to this function at the point when the two second reply * wait has expired. */ wait_time -= diff_ms; freq = auth->curr_freq; if (auth->neg_freq > 0) freq = auth->neg_freq; wpa_printf(MSG_DEBUG, "DPP: Continue reply wait on channel %u MHz for %u ms", freq, wait_time); hapd->dpp_in_response_listen = 1; if (freq != (unsigned int) hapd->iface->freq && hapd->iface->freq > 0) { /* TODO: Listen operation on non-operating channel */ wpa_printf(MSG_INFO, "DPP: Listen operation on non-operating channel (%d MHz) is not yet supported (operating channel: %d MHz)", freq, hapd->iface->freq); } eloop_register_timeout(wait_time / 1000, (wait_time % 1000) * 1000, hostapd_dpp_reply_wait_timeout, hapd, NULL); } static void hostapd_dpp_auth_conf_wait_timeout(void *eloop_ctx, void *timeout_ctx) { struct hostapd_data *hapd = eloop_ctx; struct dpp_authentication *auth = hapd->dpp_auth; if (!auth || !auth->waiting_auth_conf) return; wpa_printf(MSG_DEBUG, "DPP: Terminate authentication exchange due to Auth Confirm timeout"); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_FAIL "No Auth Confirm received"); hostapd_drv_send_action_cancel_wait(hapd); dpp_auth_deinit(auth); hapd->dpp_auth = NULL; } static void hostapd_dpp_set_testing_options(struct hostapd_data *hapd, struct dpp_authentication *auth) { #ifdef CONFIG_TESTING_OPTIONS if (hapd->dpp_config_obj_override) auth->config_obj_override = os_strdup(hapd->dpp_config_obj_override); if (hapd->dpp_discovery_override) auth->discovery_override = os_strdup(hapd->dpp_discovery_override); if (hapd->dpp_groups_override) auth->groups_override = os_strdup(hapd->dpp_groups_override); auth->ignore_netaccesskey_mismatch = hapd->dpp_ignore_netaccesskey_mismatch; #endif /* CONFIG_TESTING_OPTIONS */ } static void hostapd_dpp_init_timeout(void *eloop_ctx, void *timeout_ctx) { struct hostapd_data *hapd = eloop_ctx; if (!hapd->dpp_auth) return; wpa_printf(MSG_DEBUG, "DPP: Retry initiation after timeout"); hostapd_dpp_auth_init_next(hapd); } static int hostapd_dpp_auth_init_next(struct hostapd_data *hapd) { struct dpp_authentication *auth = hapd->dpp_auth; const u8 *dst; unsigned int wait_time, max_wait_time, freq, max_tries, used; struct os_reltime now, diff; if (!auth) return -1; if (auth->freq_idx == 0) os_get_reltime(&hapd->dpp_init_iter_start); if (auth->freq_idx >= auth->num_freq) { auth->num_freq_iters++; if (hapd->dpp_init_max_tries) max_tries = hapd->dpp_init_max_tries; else max_tries = 5; if (auth->num_freq_iters >= max_tries || auth->auth_req_ack) { wpa_printf(MSG_INFO, "DPP: No response received from responder - stopping initiation attempt"); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_AUTH_INIT_FAILED); eloop_cancel_timeout(hostapd_dpp_reply_wait_timeout, hapd, NULL); hostapd_drv_send_action_cancel_wait(hapd); dpp_auth_deinit(hapd->dpp_auth); hapd->dpp_auth = NULL; return -1; } auth->freq_idx = 0; eloop_cancel_timeout(hostapd_dpp_init_timeout, hapd, NULL); if (hapd->dpp_init_retry_time) wait_time = hapd->dpp_init_retry_time; else wait_time = 10000; os_get_reltime(&now); os_reltime_sub(&now, &hapd->dpp_init_iter_start, &diff); used = diff.sec * 1000 + diff.usec / 1000; if (used > wait_time) wait_time = 0; else wait_time -= used; wpa_printf(MSG_DEBUG, "DPP: Next init attempt in %u ms", wait_time); eloop_register_timeout(wait_time / 1000, (wait_time % 1000) * 1000, hostapd_dpp_init_timeout, hapd, NULL); return 0; } freq = auth->freq[auth->freq_idx++]; auth->curr_freq = freq; if (!is_zero_ether_addr(auth->peer_mac_addr)) dst = auth->peer_mac_addr; else if (is_zero_ether_addr(auth->peer_bi->mac_addr)) dst = broadcast; else dst = auth->peer_bi->mac_addr; hapd->dpp_auth_ok_on_ack = 0; eloop_cancel_timeout(hostapd_dpp_reply_wait_timeout, hapd, NULL); wait_time = 2000; /* TODO: hapd->max_remain_on_chan; */ max_wait_time = hapd->dpp_resp_wait_time ? hapd->dpp_resp_wait_time : 2000; if (wait_time > max_wait_time) wait_time = max_wait_time; wait_time += 10; /* give the driver some extra time to complete */ eloop_register_timeout(wait_time / 1000, (wait_time % 1000) * 1000, hostapd_dpp_reply_wait_timeout, hapd, NULL); wait_time -= 10; if (auth->neg_freq > 0 && freq != auth->neg_freq) { wpa_printf(MSG_DEBUG, "DPP: Initiate on %u MHz and move to neg_freq %u MHz for response", freq, auth->neg_freq); } wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX "dst=" MACSTR " freq=%u type=%d", MAC2STR(dst), freq, DPP_PA_AUTHENTICATION_REQ); auth->auth_req_ack = 0; os_get_reltime(&hapd->dpp_last_init); return hostapd_drv_send_action(hapd, freq, wait_time, dst, wpabuf_head(hapd->dpp_auth->req_msg), wpabuf_len(hapd->dpp_auth->req_msg)); } #ifdef CONFIG_DPP2 static int hostapd_dpp_process_conf_obj(void *ctx, struct dpp_authentication *auth) { struct hostapd_data *hapd = ctx; unsigned int i; for (i = 0; i < auth->num_conf_obj; i++) hostapd_dpp_handle_config_obj(hapd, auth, &auth->conf_obj[i]); return 0; } #endif /* CONFIG_DPP2 */ int hostapd_dpp_auth_init(struct hostapd_data *hapd, const char *cmd) { const char *pos; struct dpp_bootstrap_info *peer_bi, *own_bi = NULL; struct dpp_authentication *auth; u8 allowed_roles = DPP_CAPAB_CONFIGURATOR; unsigned int neg_freq = 0; int tcp = 0; #ifdef CONFIG_DPP2 int tcp_port = DPP_TCP_PORT; struct hostapd_ip_addr ipaddr; char *addr; #endif /* CONFIG_DPP2 */ pos = os_strstr(cmd, " peer="); if (!pos) return -1; pos += 6; peer_bi = dpp_bootstrap_get_id(hapd->iface->interfaces->dpp, atoi(pos)); if (!peer_bi) { wpa_printf(MSG_INFO, "DPP: Could not find bootstrapping info for the identified peer"); return -1; } #ifdef CONFIG_DPP2 pos = os_strstr(cmd, " tcp_port="); if (pos) { pos += 10; tcp_port = atoi(pos); } addr = get_param(cmd, " tcp_addr="); if (addr && os_strcmp(addr, "from-uri") == 0) { os_free(addr); if (!peer_bi->host) { wpa_printf(MSG_INFO, "DPP: TCP address not available in peer URI"); return -1; } tcp = 1; os_memcpy(&ipaddr, peer_bi->host, sizeof(ipaddr)); tcp_port = peer_bi->port; } else if (addr) { int res; res = hostapd_parse_ip_addr(addr, &ipaddr); os_free(addr); if (res) return -1; tcp = 1; } #endif /* CONFIG_DPP2 */ pos = os_strstr(cmd, " own="); if (pos) { pos += 5; own_bi = dpp_bootstrap_get_id(hapd->iface->interfaces->dpp, atoi(pos)); if (!own_bi) { wpa_printf(MSG_INFO, "DPP: Could not find bootstrapping info for the identified local entry"); return -1; } if (peer_bi->curve != own_bi->curve) { wpa_printf(MSG_INFO, "DPP: Mismatching curves in bootstrapping info (peer=%s own=%s)", peer_bi->curve->name, own_bi->curve->name); return -1; } } pos = os_strstr(cmd, " role="); if (pos) { pos += 6; if (os_strncmp(pos, "configurator", 12) == 0) allowed_roles = DPP_CAPAB_CONFIGURATOR; else if (os_strncmp(pos, "enrollee", 8) == 0) allowed_roles = DPP_CAPAB_ENROLLEE; else if (os_strncmp(pos, "either", 6) == 0) allowed_roles = DPP_CAPAB_CONFIGURATOR | DPP_CAPAB_ENROLLEE; else goto fail; } pos = os_strstr(cmd, " neg_freq="); if (pos) neg_freq = atoi(pos + 10); if (!tcp && hapd->dpp_auth) { eloop_cancel_timeout(hostapd_dpp_init_timeout, hapd, NULL); eloop_cancel_timeout(hostapd_dpp_reply_wait_timeout, hapd, NULL); eloop_cancel_timeout(hostapd_dpp_auth_conf_wait_timeout, hapd, NULL); eloop_cancel_timeout(hostapd_dpp_auth_resp_retry_timeout, hapd, NULL); #ifdef CONFIG_DPP2 eloop_cancel_timeout(hostapd_dpp_reconfig_reply_wait_timeout, hapd, NULL); #endif /* CONFIG_DPP2 */ hostapd_drv_send_action_cancel_wait(hapd); dpp_auth_deinit(hapd->dpp_auth); } auth = dpp_auth_init(hapd->iface->interfaces->dpp, hapd->msg_ctx, peer_bi, own_bi, allowed_roles, neg_freq, hapd->iface->hw_features, hapd->iface->num_hw_features); if (!auth) goto fail; hostapd_dpp_set_testing_options(hapd, auth); if (dpp_set_configurator(auth, cmd) < 0) { dpp_auth_deinit(auth); goto fail; } auth->neg_freq = neg_freq; if (!is_zero_ether_addr(peer_bi->mac_addr)) os_memcpy(auth->peer_mac_addr, peer_bi->mac_addr, ETH_ALEN); #ifdef CONFIG_DPP2 if (tcp) return dpp_tcp_init(hapd->iface->interfaces->dpp, auth, &ipaddr, tcp_port, hapd->conf->dpp_name, DPP_NETROLE_AP, hapd->conf->dpp_mud_url, hapd->conf->dpp_extra_conf_req_name, hapd->conf->dpp_extra_conf_req_value, hapd->msg_ctx, hapd, hostapd_dpp_process_conf_obj, NULL); #endif /* CONFIG_DPP2 */ hapd->dpp_auth = auth; return hostapd_dpp_auth_init_next(hapd); fail: return -1; } int hostapd_dpp_listen(struct hostapd_data *hapd, const char *cmd) { int freq; freq = atoi(cmd); if (freq <= 0) return -1; if (os_strstr(cmd, " role=configurator")) hapd->dpp_allowed_roles = DPP_CAPAB_CONFIGURATOR; else if (os_strstr(cmd, " role=enrollee")) hapd->dpp_allowed_roles = DPP_CAPAB_ENROLLEE; else hapd->dpp_allowed_roles = DPP_CAPAB_CONFIGURATOR | DPP_CAPAB_ENROLLEE; hapd->dpp_qr_mutual = os_strstr(cmd, " qr=mutual") != NULL; if (freq != hapd->iface->freq && hapd->iface->freq > 0) { /* TODO: Listen operation on non-operating channel */ wpa_printf(MSG_INFO, "DPP: Listen operation on non-operating channel (%d MHz) is not yet supported (operating channel: %d MHz)", freq, hapd->iface->freq); return -1; } hostapd_drv_dpp_listen(hapd, true); return 0; } void hostapd_dpp_listen_stop(struct hostapd_data *hapd) { hostapd_drv_dpp_listen(hapd, false); /* TODO: Stop listen operation on non-operating channel */ } #ifdef CONFIG_DPP2 static void hostapd_dpp_relay_needs_controller(struct hostapd_data *hapd, const u8 *src, enum dpp_public_action_frame_type type) { struct os_reltime now; if (!hapd->conf->dpp_relay_port) return; os_get_reltime(&now); if (hapd->dpp_relay_last_needs_ctrl.sec && !os_reltime_expired(&now, &hapd->dpp_relay_last_needs_ctrl, 60)) return; hapd->dpp_relay_last_needs_ctrl = now; wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_RELAY_NEEDS_CONTROLLER MACSTR " %u", MAC2STR(src), type); } #endif /* CONFIG_DPP2 */ static void hostapd_dpp_rx_auth_req(struct hostapd_data *hapd, const u8 *src, const u8 *hdr, const u8 *buf, size_t len, unsigned int freq) { const u8 *r_bootstrap, *i_bootstrap; u16 r_bootstrap_len, i_bootstrap_len; struct dpp_bootstrap_info *own_bi = NULL, *peer_bi = NULL; if (!hapd->iface->interfaces->dpp) return; wpa_printf(MSG_DEBUG, "DPP: Authentication Request from " MACSTR, MAC2STR(src)); #ifdef CONFIG_DPP2 hostapd_dpp_chirp_stop(hapd); #endif /* CONFIG_DPP2 */ r_bootstrap = dpp_get_attr(buf, len, DPP_ATTR_R_BOOTSTRAP_KEY_HASH, &r_bootstrap_len); if (!r_bootstrap || r_bootstrap_len != SHA256_MAC_LEN) { wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_FAIL "Missing or invalid required Responder Bootstrapping Key Hash attribute"); return; } wpa_hexdump(MSG_MSGDUMP, "DPP: Responder Bootstrapping Key Hash", r_bootstrap, r_bootstrap_len); i_bootstrap = dpp_get_attr(buf, len, DPP_ATTR_I_BOOTSTRAP_KEY_HASH, &i_bootstrap_len); if (!i_bootstrap || i_bootstrap_len != SHA256_MAC_LEN) { wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_FAIL "Missing or invalid required Initiator Bootstrapping Key Hash attribute"); return; } wpa_hexdump(MSG_MSGDUMP, "DPP: Initiator Bootstrapping Key Hash", i_bootstrap, i_bootstrap_len); /* Try to find own and peer bootstrapping key matches based on the * received hash values */ dpp_bootstrap_find_pair(hapd->iface->interfaces->dpp, i_bootstrap, r_bootstrap, &own_bi, &peer_bi); #ifdef CONFIG_DPP2 if (!own_bi) { if (dpp_relay_rx_action(hapd->iface->interfaces->dpp, src, hdr, buf, len, freq, i_bootstrap, r_bootstrap, hapd) == 0) return; hostapd_dpp_relay_needs_controller(hapd, src, DPP_PA_AUTHENTICATION_REQ); } #endif /* CONFIG_DPP2 */ if (!own_bi) { wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_FAIL "No matching own bootstrapping key found - ignore message"); return; } if (own_bi->type == DPP_BOOTSTRAP_PKEX) { if (!peer_bi || peer_bi->type != DPP_BOOTSTRAP_PKEX) { wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_FAIL "No matching peer bootstrapping key found for PKEX - ignore message"); return; } if (os_memcmp(peer_bi->pubkey_hash, own_bi->peer_pubkey_hash, SHA256_MAC_LEN) != 0) { wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_FAIL "Mismatching peer PKEX bootstrapping key - ignore message"); return; } } if (hapd->dpp_auth) { wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_FAIL "Already in DPP authentication exchange - ignore new one"); return; } hapd->dpp_auth_ok_on_ack = 0; hapd->dpp_auth = dpp_auth_req_rx(hapd->iface->interfaces->dpp, hapd->msg_ctx, hapd->dpp_allowed_roles, hapd->dpp_qr_mutual, peer_bi, own_bi, freq, hdr, buf, len); if (!hapd->dpp_auth) { wpa_printf(MSG_DEBUG, "DPP: No response generated"); return; } hostapd_dpp_set_testing_options(hapd, hapd->dpp_auth); if (dpp_set_configurator(hapd->dpp_auth, hapd->dpp_configurator_params) < 0) { dpp_auth_deinit(hapd->dpp_auth); hapd->dpp_auth = NULL; return; } os_memcpy(hapd->dpp_auth->peer_mac_addr, src, ETH_ALEN); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX "dst=" MACSTR " freq=%u type=%d", MAC2STR(src), hapd->dpp_auth->curr_freq, DPP_PA_AUTHENTICATION_RESP); hostapd_drv_send_action(hapd, hapd->dpp_auth->curr_freq, 0, src, wpabuf_head(hapd->dpp_auth->resp_msg), wpabuf_len(hapd->dpp_auth->resp_msg)); } static void hostapd_dpp_handle_config_obj(struct hostapd_data *hapd, struct dpp_authentication *auth, struct dpp_config_obj *conf) { wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONF_RECEIVED); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONFOBJ_AKM "%s", dpp_akm_str(conf->akm)); if (conf->ssid_len) wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONFOBJ_SSID "%s", wpa_ssid_txt(conf->ssid, conf->ssid_len)); if (conf->connector) { /* TODO: Save the Connector and consider using a command * to fetch the value instead of sending an event with * it. The Connector could end up being larger than what * most clients are ready to receive as an event * message. */ wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONNECTOR "%s", conf->connector); } if (conf->passphrase[0]) { char hex[64 * 2 + 1]; wpa_snprintf_hex(hex, sizeof(hex), (const u8 *) conf->passphrase, os_strlen(conf->passphrase)); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONFOBJ_PASS "%s", hex); } else if (conf->psk_set) { char hex[PMK_LEN * 2 + 1]; wpa_snprintf_hex(hex, sizeof(hex), conf->psk, PMK_LEN); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONFOBJ_PSK "%s", hex); } if (conf->c_sign_key) { char *hex; size_t hexlen; hexlen = 2 * wpabuf_len(conf->c_sign_key) + 1; hex = os_malloc(hexlen); if (hex) { wpa_snprintf_hex(hex, hexlen, wpabuf_head(conf->c_sign_key), wpabuf_len(conf->c_sign_key)); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_C_SIGN_KEY "%s", hex); os_free(hex); } } if (auth->net_access_key) { char *hex; size_t hexlen; hexlen = 2 * wpabuf_len(auth->net_access_key) + 1; hex = os_malloc(hexlen); if (hex) { wpa_snprintf_hex(hex, hexlen, wpabuf_head(auth->net_access_key), wpabuf_len(auth->net_access_key)); if (auth->net_access_key_expiry) wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_NET_ACCESS_KEY "%s %lu", hex, (unsigned long) auth->net_access_key_expiry); else wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_NET_ACCESS_KEY "%s", hex); os_free(hex); } } } static int hostapd_dpp_handle_key_pkg(struct hostapd_data *hapd, struct dpp_asymmetric_key *key) { #ifdef CONFIG_DPP2 int res; if (!key) return 0; wpa_printf(MSG_DEBUG, "DPP: Received Configurator backup"); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONF_RECEIVED); while (key) { res = dpp_configurator_from_backup( hapd->iface->interfaces->dpp, key); if (res < 0) return -1; wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONFIGURATOR_ID "%d", res); key = key->next; } #endif /* CONFIG_DPP2 */ return 0; } #ifdef CONFIG_DPP3 static void hostapd_dpp_build_new_key(void *eloop_ctx, void *timeout_ctx) { struct hostapd_data *hapd = eloop_ctx; struct dpp_authentication *auth = hapd->dpp_auth; if (!auth || !auth->waiting_new_key) return; wpa_printf(MSG_DEBUG, "DPP: Build config request with a new key"); hostapd_dpp_start_gas_client(hapd); } #endif /* CONFIG_DPP3 */ static void hostapd_dpp_gas_resp_cb(void *ctx, const u8 *addr, u8 dialog_token, enum gas_query_ap_result result, const struct wpabuf *adv_proto, const struct wpabuf *resp, u16 status_code) { struct hostapd_data *hapd = ctx; const u8 *pos; struct dpp_authentication *auth = hapd->dpp_auth; enum dpp_status_error status = DPP_STATUS_CONFIG_REJECTED; int res; if (!auth || !auth->auth_success) { wpa_printf(MSG_DEBUG, "DPP: No matching exchange in progress"); return; } if (result != GAS_QUERY_AP_SUCCESS || !resp || status_code != WLAN_STATUS_SUCCESS) { wpa_printf(MSG_DEBUG, "DPP: GAS query did not succeed"); goto fail; } wpa_hexdump_buf(MSG_DEBUG, "DPP: Configuration Response adv_proto", adv_proto); wpa_hexdump_buf(MSG_DEBUG, "DPP: Configuration Response (GAS response)", resp); if (wpabuf_len(adv_proto) != 10 || !(pos = wpabuf_head(adv_proto)) || pos[0] != WLAN_EID_ADV_PROTO || pos[1] != 8 || pos[3] != WLAN_EID_VENDOR_SPECIFIC || pos[4] != 5 || WPA_GET_BE24(&pos[5]) != OUI_WFA || pos[8] != 0x1a || pos[9] != 1) { wpa_printf(MSG_DEBUG, "DPP: Not a DPP Advertisement Protocol ID"); goto fail; } res = dpp_conf_resp_rx(auth, resp); #ifdef CONFIG_DPP3 if (res == -3) { wpa_printf(MSG_DEBUG, "DPP: New protocol key needed"); eloop_register_timeout(0, 0, hostapd_dpp_build_new_key, hapd, NULL); return; } #endif /* CONFIG_DPP3 */ if (res < 0) { wpa_printf(MSG_DEBUG, "DPP: Configuration attempt failed"); goto fail; } hostapd_dpp_handle_config_obj(hapd, auth, &auth->conf_obj[0]); if (hostapd_dpp_handle_key_pkg(hapd, auth->conf_key_pkg) < 0) goto fail; status = DPP_STATUS_OK; #ifdef CONFIG_TESTING_OPTIONS if (dpp_test == DPP_TEST_REJECT_CONFIG) { wpa_printf(MSG_INFO, "DPP: TESTING - Reject Config Object"); status = DPP_STATUS_CONFIG_REJECTED; } #endif /* CONFIG_TESTING_OPTIONS */ fail: if (status != DPP_STATUS_OK) wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONF_FAILED); #ifdef CONFIG_DPP2 if (auth->peer_version >= 2 && auth->conf_resp_status == DPP_STATUS_OK) { struct wpabuf *msg; wpa_printf(MSG_DEBUG, "DPP: Send DPP Configuration Result"); msg = dpp_build_conf_result(auth, status); if (!msg) goto fail2; wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX "dst=" MACSTR " freq=%u type=%d", MAC2STR(addr), auth->curr_freq, DPP_PA_CONFIGURATION_RESULT); hostapd_drv_send_action(hapd, auth->curr_freq, 0, addr, wpabuf_head(msg), wpabuf_len(msg)); wpabuf_free(msg); /* This exchange will be terminated in the TX status handler */ auth->connect_on_tx_status = 1; return; } fail2: #endif /* CONFIG_DPP2 */ dpp_auth_deinit(hapd->dpp_auth); hapd->dpp_auth = NULL; } static void hostapd_dpp_start_gas_client(struct hostapd_data *hapd) { struct dpp_authentication *auth = hapd->dpp_auth; struct wpabuf *buf; int res; buf = dpp_build_conf_req_helper(auth, hapd->conf->dpp_name, DPP_NETROLE_AP, hapd->conf->dpp_mud_url, NULL, hapd->conf->dpp_extra_conf_req_name, hapd->conf->dpp_extra_conf_req_value); if (!buf) { wpa_printf(MSG_DEBUG, "DPP: No configuration request data available"); return; } wpa_printf(MSG_DEBUG, "DPP: GAS request to " MACSTR " (freq %u MHz)", MAC2STR(auth->peer_mac_addr), auth->curr_freq); res = gas_query_ap_req(hapd->gas, auth->peer_mac_addr, auth->curr_freq, buf, hostapd_dpp_gas_resp_cb, hapd); if (res < 0) { wpa_msg(hapd->msg_ctx, MSG_DEBUG, "GAS: Failed to send Query Request"); wpabuf_free(buf); } else { wpa_printf(MSG_DEBUG, "DPP: GAS query started with dialog token %u", res); } } static void hostapd_dpp_auth_success(struct hostapd_data *hapd, int initiator) { wpa_printf(MSG_DEBUG, "DPP: Authentication succeeded"); dpp_notify_auth_success(hapd->dpp_auth, initiator); #ifdef CONFIG_TESTING_OPTIONS if (dpp_test == DPP_TEST_STOP_AT_AUTH_CONF) { wpa_printf(MSG_INFO, "DPP: TESTING - stop at Authentication Confirm"); if (hapd->dpp_auth->configurator) { /* Prevent GAS response */ hapd->dpp_auth->auth_success = 0; } return; } #endif /* CONFIG_TESTING_OPTIONS */ if (!hapd->dpp_auth->configurator) hostapd_dpp_start_gas_client(hapd); } static void hostapd_dpp_rx_auth_resp(struct hostapd_data *hapd, const u8 *src, const u8 *hdr, const u8 *buf, size_t len, unsigned int freq) { struct dpp_authentication *auth = hapd->dpp_auth; struct wpabuf *msg; wpa_printf(MSG_DEBUG, "DPP: Authentication Response from " MACSTR, MAC2STR(src)); if (!auth) { wpa_printf(MSG_DEBUG, "DPP: No DPP Authentication in progress - drop"); return; } if (!is_zero_ether_addr(auth->peer_mac_addr) && os_memcmp(src, auth->peer_mac_addr, ETH_ALEN) != 0) { wpa_printf(MSG_DEBUG, "DPP: MAC address mismatch (expected " MACSTR ") - drop", MAC2STR(auth->peer_mac_addr)); return; } eloop_cancel_timeout(hostapd_dpp_reply_wait_timeout, hapd, NULL); if (auth->curr_freq != freq && auth->neg_freq == freq) { wpa_printf(MSG_DEBUG, "DPP: Responder accepted request for different negotiation channel"); auth->curr_freq = freq; } eloop_cancel_timeout(hostapd_dpp_init_timeout, hapd, NULL); msg = dpp_auth_resp_rx(auth, hdr, buf, len); if (!msg) { if (auth->auth_resp_status == DPP_STATUS_RESPONSE_PENDING) { wpa_printf(MSG_DEBUG, "DPP: Wait for full response"); return; } wpa_printf(MSG_DEBUG, "DPP: No confirm generated"); return; } os_memcpy(auth->peer_mac_addr, src, ETH_ALEN); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX "dst=" MACSTR " freq=%u type=%d", MAC2STR(src), auth->curr_freq, DPP_PA_AUTHENTICATION_CONF); hostapd_drv_send_action(hapd, auth->curr_freq, 0, src, wpabuf_head(msg), wpabuf_len(msg)); wpabuf_free(msg); hapd->dpp_auth_ok_on_ack = 1; } static void hostapd_dpp_rx_auth_conf(struct hostapd_data *hapd, const u8 *src, const u8 *hdr, const u8 *buf, size_t len) { struct dpp_authentication *auth = hapd->dpp_auth; wpa_printf(MSG_DEBUG, "DPP: Authentication Confirmation from " MACSTR, MAC2STR(src)); if (!auth) { wpa_printf(MSG_DEBUG, "DPP: No DPP Authentication in progress - drop"); return; } if (os_memcmp(src, auth->peer_mac_addr, ETH_ALEN) != 0) { wpa_printf(MSG_DEBUG, "DPP: MAC address mismatch (expected " MACSTR ") - drop", MAC2STR(auth->peer_mac_addr)); return; } if (dpp_auth_conf_rx(auth, hdr, buf, len) < 0) { wpa_printf(MSG_DEBUG, "DPP: Authentication failed"); return; } hostapd_dpp_auth_success(hapd, 0); } #ifdef CONFIG_DPP2 static void hostapd_dpp_config_result_wait_timeout(void *eloop_ctx, void *timeout_ctx) { struct hostapd_data *hapd = eloop_ctx; struct dpp_authentication *auth = hapd->dpp_auth; if (!auth || !auth->waiting_conf_result) return; wpa_printf(MSG_DEBUG, "DPP: Timeout while waiting for Configuration Result"); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONF_FAILED); dpp_auth_deinit(auth); hapd->dpp_auth = NULL; } static void hostapd_dpp_conn_status_result_wait_timeout(void *eloop_ctx, void *timeout_ctx) { struct hostapd_data *hapd = eloop_ctx; struct dpp_authentication *auth = hapd->dpp_auth; if (!auth || !auth->waiting_conf_result) return; wpa_printf(MSG_DEBUG, "DPP: Timeout while waiting for Connection Status Result"); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONN_STATUS_RESULT "timeout"); dpp_auth_deinit(auth); hapd->dpp_auth = NULL; } #ifdef CONFIG_DPP3 static bool hostapd_dpp_pb_active(struct hostapd_data *hapd) { struct hapd_interfaces *ifaces = hapd->iface->interfaces; return ifaces && (ifaces->dpp_pb_time.sec || ifaces->dpp_pb_time.usec); } static void hostapd_dpp_remove_pb_hash(struct hostapd_data *hapd) { struct hapd_interfaces *ifaces = hapd->iface->interfaces; int i; if (!ifaces->dpp_pb_bi) return; for (i = 0; i < DPP_PB_INFO_COUNT; i++) { struct dpp_pb_info *info = &ifaces->dpp_pb[i]; if (info->rx_time.sec == 0 && info->rx_time.usec == 0) continue; if (os_memcmp(info->hash, ifaces->dpp_pb_resp_hash, SHA256_MAC_LEN) == 0) { /* Allow a new push button session to be established * immediately without the successfully completed * session triggering session overlap. */ info->rx_time.sec = 0; info->rx_time.usec = 0; wpa_printf(MSG_DEBUG, "DPP: Removed PB hash from session overlap detection due to successfully completed provisioning"); } } } #endif /* CONFIG_DPP3 */ static void hostapd_dpp_rx_conf_result(struct hostapd_data *hapd, const u8 *src, const u8 *hdr, const u8 *buf, size_t len) { struct dpp_authentication *auth = hapd->dpp_auth; enum dpp_status_error status; #ifdef CONFIG_DPP3 struct hapd_interfaces *ifaces = hapd->iface->interfaces; #endif /* CONFIG_DPP3 */ wpa_printf(MSG_DEBUG, "DPP: Configuration Result from " MACSTR, MAC2STR(src)); if (!auth || !auth->waiting_conf_result) { wpa_printf(MSG_DEBUG, "DPP: No DPP Configuration waiting for result - drop"); return; } if (os_memcmp(src, auth->peer_mac_addr, ETH_ALEN) != 0) { wpa_printf(MSG_DEBUG, "DPP: MAC address mismatch (expected " MACSTR ") - drop", MAC2STR(auth->peer_mac_addr)); return; } status = dpp_conf_result_rx(auth, hdr, buf, len); if (status == DPP_STATUS_OK && auth->send_conn_status) { wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONF_SENT "wait_conn_status=1 conf_status=%d", auth->conf_resp_status); wpa_printf(MSG_DEBUG, "DPP: Wait for Connection Status Result"); eloop_cancel_timeout(hostapd_dpp_config_result_wait_timeout, hapd, NULL); auth->waiting_conn_status_result = 1; eloop_cancel_timeout( hostapd_dpp_conn_status_result_wait_timeout, hapd, NULL); eloop_register_timeout( 16, 0, hostapd_dpp_conn_status_result_wait_timeout, hapd, NULL); return; } hostapd_drv_send_action_cancel_wait(hapd); hostapd_dpp_listen_stop(hapd); if (status == DPP_STATUS_OK) wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONF_SENT "conf_status=%d", auth->conf_resp_status); else wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONF_FAILED); dpp_auth_deinit(auth); hapd->dpp_auth = NULL; eloop_cancel_timeout(hostapd_dpp_config_result_wait_timeout, hapd, NULL); #ifdef CONFIG_DPP3 if (!ifaces->dpp_pb_result_indicated && hostapd_dpp_pb_active(hapd)) { if (status == DPP_STATUS_OK) wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_PB_RESULT "success"); else wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_PB_RESULT "no-configuration-available"); ifaces->dpp_pb_result_indicated = true; if (status == DPP_STATUS_OK) hostapd_dpp_remove_pb_hash(hapd); hostapd_dpp_push_button_stop(hapd); } #endif /* CONFIG_DPP3 */ } static void hostapd_dpp_rx_conn_status_result(struct hostapd_data *hapd, const u8 *src, const u8 *hdr, const u8 *buf, size_t len) { struct dpp_authentication *auth = hapd->dpp_auth; enum dpp_status_error status; u8 ssid[SSID_MAX_LEN]; size_t ssid_len = 0; char *channel_list = NULL; wpa_printf(MSG_DEBUG, "DPP: Connection Status Result"); if (!auth || !auth->waiting_conn_status_result) { wpa_printf(MSG_DEBUG, "DPP: No DPP Configuration waiting for connection status result - drop"); return; } status = dpp_conn_status_result_rx(auth, hdr, buf, len, ssid, &ssid_len, &channel_list); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONN_STATUS_RESULT "result=%d ssid=%s channel_list=%s", status, wpa_ssid_txt(ssid, ssid_len), channel_list ? channel_list : "N/A"); os_free(channel_list); hostapd_drv_send_action_cancel_wait(hapd); hostapd_dpp_listen_stop(hapd); dpp_auth_deinit(auth); hapd->dpp_auth = NULL; eloop_cancel_timeout(hostapd_dpp_conn_status_result_wait_timeout, hapd, NULL); } static void hostapd_dpp_rx_presence_announcement(struct hostapd_data *hapd, const u8 *src, const u8 *hdr, const u8 *buf, size_t len, unsigned int freq) { const u8 *r_bootstrap; u16 r_bootstrap_len; struct dpp_bootstrap_info *peer_bi; struct dpp_authentication *auth; wpa_printf(MSG_DEBUG, "DPP: Presence Announcement from " MACSTR, MAC2STR(src)); r_bootstrap = dpp_get_attr(buf, len, DPP_ATTR_R_BOOTSTRAP_KEY_HASH, &r_bootstrap_len); if (!r_bootstrap || r_bootstrap_len != SHA256_MAC_LEN) { wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_FAIL "Missing or invalid required Responder Bootstrapping Key Hash attribute"); return; } wpa_hexdump(MSG_MSGDUMP, "DPP: Responder Bootstrapping Key Hash", r_bootstrap, r_bootstrap_len); peer_bi = dpp_bootstrap_find_chirp(hapd->iface->interfaces->dpp, r_bootstrap); dpp_notify_chirp_received(hapd->msg_ctx, peer_bi ? (int) peer_bi->id : -1, src, freq, r_bootstrap); if (!peer_bi) { if (dpp_relay_rx_action(hapd->iface->interfaces->dpp, src, hdr, buf, len, freq, NULL, r_bootstrap, hapd) == 0) return; wpa_printf(MSG_DEBUG, "DPP: No matching bootstrapping information found"); hostapd_dpp_relay_needs_controller( hapd, src, DPP_PA_PRESENCE_ANNOUNCEMENT); return; } if (hapd->dpp_auth) { wpa_printf(MSG_DEBUG, "DPP: Ignore Presence Announcement during ongoing Authentication"); return; } auth = dpp_auth_init(hapd->iface->interfaces->dpp, hapd->msg_ctx, peer_bi, NULL, DPP_CAPAB_CONFIGURATOR, freq, NULL, 0); if (!auth) return; hostapd_dpp_set_testing_options(hapd, auth); if (dpp_set_configurator(auth, hapd->dpp_configurator_params) < 0) { dpp_auth_deinit(auth); return; } auth->neg_freq = freq; /* The source address of the Presence Announcement frame overrides any * MAC address information from the bootstrapping information. */ os_memcpy(auth->peer_mac_addr, src, ETH_ALEN); hapd->dpp_auth = auth; if (hostapd_dpp_auth_init_next(hapd) < 0) { dpp_auth_deinit(hapd->dpp_auth); hapd->dpp_auth = NULL; } } static void hostapd_dpp_reconfig_reply_wait_timeout(void *eloop_ctx, void *timeout_ctx) { struct hostapd_data *hapd = eloop_ctx; struct dpp_authentication *auth = hapd->dpp_auth; if (!auth) return; wpa_printf(MSG_DEBUG, "DPP: Reconfig Reply wait timeout"); hostapd_dpp_listen_stop(hapd); dpp_auth_deinit(auth); hapd->dpp_auth = NULL; } static void hostapd_dpp_rx_reconfig_announcement(struct hostapd_data *hapd, const u8 *src, const u8 *hdr, const u8 *buf, size_t len, unsigned int freq) { const u8 *csign_hash, *fcgroup, *a_nonce, *e_id; u16 csign_hash_len, fcgroup_len, a_nonce_len, e_id_len; struct dpp_configurator *conf; struct dpp_authentication *auth; unsigned int wait_time, max_wait_time; u16 group; if (hapd->dpp_auth) { wpa_printf(MSG_DEBUG, "DPP: Ignore Reconfig Announcement during ongoing Authentication"); return; } wpa_printf(MSG_DEBUG, "DPP: Reconfig Announcement from " MACSTR, MAC2STR(src)); csign_hash = dpp_get_attr(buf, len, DPP_ATTR_C_SIGN_KEY_HASH, &csign_hash_len); if (!csign_hash || csign_hash_len != SHA256_MAC_LEN) { wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_FAIL "Missing or invalid required Configurator C-sign key Hash attribute"); return; } wpa_hexdump(MSG_MSGDUMP, "DPP: Configurator C-sign key Hash (kid)", csign_hash, csign_hash_len); conf = dpp_configurator_find_kid(hapd->iface->interfaces->dpp, csign_hash); if (!conf) { if (dpp_relay_rx_action(hapd->iface->interfaces->dpp, src, hdr, buf, len, freq, NULL, NULL, hapd) == 0) return; wpa_printf(MSG_DEBUG, "DPP: No matching Configurator information found"); hostapd_dpp_relay_needs_controller( hapd, src, DPP_PA_RECONFIG_ANNOUNCEMENT); return; } fcgroup = dpp_get_attr(buf, len, DPP_ATTR_FINITE_CYCLIC_GROUP, &fcgroup_len); if (!fcgroup || fcgroup_len != 2) { wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_FAIL "Missing or invalid required Finite Cyclic Group attribute"); return; } group = WPA_GET_LE16(fcgroup); wpa_printf(MSG_DEBUG, "DPP: Enrollee finite cyclic group: %u", group); a_nonce = dpp_get_attr(buf, len, DPP_ATTR_A_NONCE, &a_nonce_len); e_id = dpp_get_attr(buf, len, DPP_ATTR_E_PRIME_ID, &e_id_len); auth = dpp_reconfig_init(hapd->iface->interfaces->dpp, hapd->msg_ctx, conf, freq, group, a_nonce, a_nonce_len, e_id, e_id_len); if (!auth) return; hostapd_dpp_set_testing_options(hapd, auth); if (dpp_set_configurator(auth, hapd->dpp_configurator_params) < 0) { dpp_auth_deinit(auth); return; } os_memcpy(auth->peer_mac_addr, src, ETH_ALEN); hapd->dpp_auth = auth; hapd->dpp_in_response_listen = 0; hapd->dpp_auth_ok_on_ack = 0; wait_time = 2000; /* TODO: hapd->max_remain_on_chan; */ max_wait_time = hapd->dpp_resp_wait_time ? hapd->dpp_resp_wait_time : 2000; if (wait_time > max_wait_time) wait_time = max_wait_time; wait_time += 10; /* give the driver some extra time to complete */ eloop_register_timeout(wait_time / 1000, (wait_time % 1000) * 1000, hostapd_dpp_reconfig_reply_wait_timeout, hapd, NULL); wait_time -= 10; wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX "dst=" MACSTR " freq=%u type=%d", MAC2STR(src), freq, DPP_PA_RECONFIG_AUTH_REQ); if (hostapd_drv_send_action(hapd, freq, wait_time, src, wpabuf_head(auth->reconfig_req_msg), wpabuf_len(auth->reconfig_req_msg)) < 0) { dpp_auth_deinit(hapd->dpp_auth); hapd->dpp_auth = NULL; } } static void hostapd_dpp_rx_reconfig_auth_resp(struct hostapd_data *hapd, const u8 *src, const u8 *hdr, const u8 *buf, size_t len, unsigned int freq) { struct dpp_authentication *auth = hapd->dpp_auth; struct wpabuf *conf; wpa_printf(MSG_DEBUG, "DPP: Reconfig Authentication Response from " MACSTR, MAC2STR(src)); if (!auth || !auth->reconfig || !auth->configurator) { wpa_printf(MSG_DEBUG, "DPP: No DPP Reconfig Authentication in progress - drop"); return; } if (os_memcmp(src, auth->peer_mac_addr, ETH_ALEN) != 0) { wpa_printf(MSG_DEBUG, "DPP: MAC address mismatch (expected " MACSTR ") - drop", MAC2STR(auth->peer_mac_addr)); return; } conf = dpp_reconfig_auth_resp_rx(auth, hdr, buf, len); if (!conf) return; eloop_cancel_timeout(hostapd_dpp_reconfig_reply_wait_timeout, hapd, NULL); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX "dst=" MACSTR " freq=%u type=%d", MAC2STR(src), freq, DPP_PA_RECONFIG_AUTH_CONF); if (hostapd_drv_send_action(hapd, freq, 500, src, wpabuf_head(conf), wpabuf_len(conf)) < 0) { wpabuf_free(conf); dpp_auth_deinit(hapd->dpp_auth); hapd->dpp_auth = NULL; return; } wpabuf_free(conf); } #endif /* CONFIG_DPP2 */ static void hostapd_dpp_send_peer_disc_resp(struct hostapd_data *hapd, const u8 *src, unsigned int freq, u8 trans_id, enum dpp_status_error status) { struct wpabuf *msg; size_t len; len = 5 + 5 + 4 + os_strlen(hapd->conf->dpp_connector); #ifdef CONFIG_DPP2 len += 5; #endif /* CONFIG_DPP2 */ msg = dpp_alloc_msg(DPP_PA_PEER_DISCOVERY_RESP, len); if (!msg) return; #ifdef CONFIG_TESTING_OPTIONS if (dpp_test == DPP_TEST_NO_TRANSACTION_ID_PEER_DISC_RESP) { wpa_printf(MSG_INFO, "DPP: TESTING - no Transaction ID"); goto skip_trans_id; } if (dpp_test == DPP_TEST_INVALID_TRANSACTION_ID_PEER_DISC_RESP) { wpa_printf(MSG_INFO, "DPP: TESTING - invalid Transaction ID"); trans_id ^= 0x01; } #endif /* CONFIG_TESTING_OPTIONS */ /* Transaction ID */ wpabuf_put_le16(msg, DPP_ATTR_TRANSACTION_ID); wpabuf_put_le16(msg, 1); wpabuf_put_u8(msg, trans_id); #ifdef CONFIG_TESTING_OPTIONS skip_trans_id: if (dpp_test == DPP_TEST_NO_STATUS_PEER_DISC_RESP) { wpa_printf(MSG_INFO, "DPP: TESTING - no Status"); goto skip_status; } if (dpp_test == DPP_TEST_INVALID_STATUS_PEER_DISC_RESP) { wpa_printf(MSG_INFO, "DPP: TESTING - invalid Status"); status = 254; } #endif /* CONFIG_TESTING_OPTIONS */ /* DPP Status */ wpabuf_put_le16(msg, DPP_ATTR_STATUS); wpabuf_put_le16(msg, 1); wpabuf_put_u8(msg, status); #ifdef CONFIG_TESTING_OPTIONS skip_status: if (dpp_test == DPP_TEST_NO_CONNECTOR_PEER_DISC_RESP) { wpa_printf(MSG_INFO, "DPP: TESTING - no Connector"); goto skip_connector; } if (status == DPP_STATUS_OK && dpp_test == DPP_TEST_INVALID_CONNECTOR_PEER_DISC_RESP) { char *connector; wpa_printf(MSG_INFO, "DPP: TESTING - invalid Connector"); connector = dpp_corrupt_connector_signature( hapd->conf->dpp_connector); if (!connector) { wpabuf_free(msg); return; } wpabuf_put_le16(msg, DPP_ATTR_CONNECTOR); wpabuf_put_le16(msg, os_strlen(connector)); wpabuf_put_str(msg, connector); os_free(connector); goto skip_connector; } #endif /* CONFIG_TESTING_OPTIONS */ /* DPP Connector */ if (status == DPP_STATUS_OK) { wpabuf_put_le16(msg, DPP_ATTR_CONNECTOR); wpabuf_put_le16(msg, os_strlen(hapd->conf->dpp_connector)); wpabuf_put_str(msg, hapd->conf->dpp_connector); } #ifdef CONFIG_TESTING_OPTIONS skip_connector: if (dpp_test == DPP_TEST_NO_PROTOCOL_VERSION_PEER_DISC_RESP) { wpa_printf(MSG_INFO, "DPP: TESTING - no Protocol Version"); goto skip_proto_ver; } #endif /* CONFIG_TESTING_OPTIONS */ #ifdef CONFIG_DPP2 if (DPP_VERSION > 1) { u8 ver = DPP_VERSION; #ifdef CONFIG_DPP3 int conn_ver; conn_ver = dpp_get_connector_version(hapd->conf->dpp_connector); if (conn_ver > 0 && ver != conn_ver) { wpa_printf(MSG_DEBUG, "DPP: Use Connector version %d instead of current protocol version %d", conn_ver, ver); ver = conn_ver; } #endif /* CONFIG_DPP3 */ #ifdef CONFIG_TESTING_OPTIONS if (dpp_test == DPP_TEST_INVALID_PROTOCOL_VERSION_PEER_DISC_RESP) { wpa_printf(MSG_INFO, "DPP: TESTING - invalid Protocol Version"); ver = 1; } #endif /* CONFIG_TESTING_OPTIONS */ /* Protocol Version */ wpabuf_put_le16(msg, DPP_ATTR_PROTOCOL_VERSION); wpabuf_put_le16(msg, 1); wpabuf_put_u8(msg, ver); } #endif /* CONFIG_DPP2 */ #ifdef CONFIG_TESTING_OPTIONS skip_proto_ver: #endif /* CONFIG_TESTING_OPTIONS */ wpa_printf(MSG_DEBUG, "DPP: Send Peer Discovery Response to " MACSTR " status=%d", MAC2STR(src), status); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX "dst=" MACSTR " freq=%u type=%d status=%d", MAC2STR(src), freq, DPP_PA_PEER_DISCOVERY_RESP, status); hostapd_drv_send_action(hapd, freq, 0, src, wpabuf_head(msg), wpabuf_len(msg)); wpabuf_free(msg); } static bool hapd_dpp_connector_available(struct hostapd_data *hapd) { if (!hapd->wpa_auth || !(hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_DPP) || !(hapd->conf->wpa & WPA_PROTO_RSN)) { wpa_printf(MSG_DEBUG, "DPP: DPP AKM not in use"); return false; } if (!hapd->conf->dpp_connector || !hapd->conf->dpp_netaccesskey || !hapd->conf->dpp_csign) { wpa_printf(MSG_DEBUG, "DPP: No own Connector/keys set"); return false; } return true; } static void hostapd_dpp_rx_peer_disc_req(struct hostapd_data *hapd, const u8 *src, const u8 *buf, size_t len, unsigned int freq) { const u8 *connector, *trans_id; u16 connector_len, trans_id_len; struct os_time now; struct dpp_introduction intro; os_time_t expire; int expiration; enum dpp_status_error res; u8 pkhash[SHA256_MAC_LEN]; os_memset(&intro, 0, sizeof(intro)); wpa_printf(MSG_DEBUG, "DPP: Peer Discovery Request from " MACSTR, MAC2STR(src)); if (!hapd_dpp_connector_available(hapd)) return; os_get_time(&now); if (hapd->conf->dpp_netaccesskey_expiry && (os_time_t) hapd->conf->dpp_netaccesskey_expiry < now.sec) { wpa_printf(MSG_INFO, "DPP: Own netAccessKey expired"); return; } trans_id = dpp_get_attr(buf, len, DPP_ATTR_TRANSACTION_ID, &trans_id_len); if (!trans_id || trans_id_len != 1) { wpa_printf(MSG_DEBUG, "DPP: Peer did not include Transaction ID"); return; } connector = dpp_get_attr(buf, len, DPP_ATTR_CONNECTOR, &connector_len); if (!connector) { wpa_printf(MSG_DEBUG, "DPP: Peer did not include its Connector"); return; } res = dpp_peer_intro(&intro, hapd->conf->dpp_connector, wpabuf_head(hapd->conf->dpp_netaccesskey), wpabuf_len(hapd->conf->dpp_netaccesskey), wpabuf_head(hapd->conf->dpp_csign), wpabuf_len(hapd->conf->dpp_csign), connector, connector_len, &expire, pkhash); if (res == 255) { wpa_printf(MSG_INFO, "DPP: Network Introduction protocol resulted in internal failure (peer " MACSTR ")", MAC2STR(src)); goto done; } if (res != DPP_STATUS_OK) { wpa_printf(MSG_INFO, "DPP: Network Introduction protocol resulted in failure (peer " MACSTR " status %d)", MAC2STR(src), res); hostapd_dpp_send_peer_disc_resp(hapd, src, freq, trans_id[0], res); goto done; } #ifdef CONFIG_DPP3 if (intro.peer_version && intro.peer_version >= 2) { const u8 *version; u16 version_len; u8 attr_version = 1; version = dpp_get_attr(buf, len, DPP_ATTR_PROTOCOL_VERSION, &version_len); if (version && version_len >= 1) attr_version = version[0]; if (attr_version != intro.peer_version) { wpa_printf(MSG_INFO, "DPP: Protocol version mismatch (Connector: %d Attribute: %d", intro.peer_version, attr_version); hostapd_dpp_send_peer_disc_resp(hapd, src, freq, trans_id[0], DPP_STATUS_NO_MATCH); goto done; } } #endif /* CONFIG_DPP3 */ if (!expire || (os_time_t) hapd->conf->dpp_netaccesskey_expiry < expire) expire = hapd->conf->dpp_netaccesskey_expiry; if (expire) expiration = expire - now.sec; else expiration = 0; if (wpa_auth_pmksa_add3(hapd->wpa_auth, src, intro.pmk, intro.pmk_len, intro.pmkid, expiration, WPA_KEY_MGMT_DPP, pkhash) < 0) { wpa_printf(MSG_ERROR, "DPP: Failed to add PMKSA cache entry"); goto done; } hostapd_dpp_send_peer_disc_resp(hapd, src, freq, trans_id[0], DPP_STATUS_OK); done: dpp_peer_intro_deinit(&intro); } static void hostapd_dpp_rx_pkex_exchange_req(struct hostapd_data *hapd, const u8 *src, const u8 *hdr, const u8 *buf, size_t len, unsigned int freq, bool v2) { struct wpabuf *msg; wpa_printf(MSG_DEBUG, "DPP: PKEX Exchange Request from " MACSTR, MAC2STR(src)); if (hapd->dpp_pkex_ver == PKEX_VER_ONLY_1 && v2) { wpa_printf(MSG_DEBUG, "DPP: Ignore PKEXv2 Exchange Request when configured to be PKEX v1 only"); return; } if (hapd->dpp_pkex_ver == PKEX_VER_ONLY_2 && !v2) { wpa_printf(MSG_DEBUG, "DPP: Ignore PKEXv1 Exchange Request when configured to be PKEX v2 only"); return; } /* TODO: Support multiple PKEX codes by iterating over all the enabled * values here */ if (!hapd->dpp_pkex_code || !hapd->dpp_pkex_bi) { wpa_printf(MSG_DEBUG, "DPP: No PKEX code configured - ignore request"); goto try_relay; } #ifdef CONFIG_DPP2 if (dpp_controller_is_own_pkex_req(hapd->iface->interfaces->dpp, buf, len)) { wpa_printf(MSG_DEBUG, "DPP: PKEX Exchange Request is from local Controller - ignore request"); return; } #endif /* CONFIG_DPP2 */ if (hapd->dpp_pkex) { /* TODO: Support parallel operations */ wpa_printf(MSG_DEBUG, "DPP: Already in PKEX session - ignore new request"); goto try_relay; } hapd->dpp_pkex = dpp_pkex_rx_exchange_req(hapd->msg_ctx, hapd->dpp_pkex_bi, hapd->own_addr, src, hapd->dpp_pkex_identifier, hapd->dpp_pkex_code, hapd->dpp_pkex_code_len, buf, len, v2); if (!hapd->dpp_pkex) { wpa_printf(MSG_DEBUG, "DPP: Failed to process the request - ignore it"); goto try_relay; } msg = hapd->dpp_pkex->exchange_resp; wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX "dst=" MACSTR " freq=%u type=%d", MAC2STR(src), freq, DPP_PA_PKEX_EXCHANGE_RESP); hostapd_drv_send_action(hapd, freq, 0, src, wpabuf_head(msg), wpabuf_len(msg)); if (hapd->dpp_pkex->failed) { wpa_printf(MSG_DEBUG, "DPP: Terminate PKEX exchange due to an earlier error"); if (hapd->dpp_pkex->t > hapd->dpp_pkex->own_bi->pkex_t) hapd->dpp_pkex->own_bi->pkex_t = hapd->dpp_pkex->t; dpp_pkex_free(hapd->dpp_pkex); hapd->dpp_pkex = NULL; } return; try_relay: #ifdef CONFIG_DPP2 if (v2 && dpp_relay_rx_action(hapd->iface->interfaces->dpp, src, hdr, buf, len, freq, NULL, NULL, hapd) != 0) { wpa_printf(MSG_DEBUG, "DPP: No Relay available for the message"); hostapd_dpp_relay_needs_controller(hapd, src, DPP_PA_PKEX_EXCHANGE_REQ); } #else /* CONFIG_DPP2 */ wpa_printf(MSG_DEBUG, "DPP: No relay functionality included - skip"); #endif /* CONFIG_DPP2 */ } static void hostapd_dpp_rx_pkex_exchange_resp(struct hostapd_data *hapd, const u8 *src, const u8 *buf, size_t len, unsigned int freq) { struct wpabuf *msg; wpa_printf(MSG_DEBUG, "DPP: PKEX Exchange Response from " MACSTR, MAC2STR(src)); /* TODO: Support multiple PKEX codes by iterating over all the enabled * values here */ if (!hapd->dpp_pkex || !hapd->dpp_pkex->initiator || hapd->dpp_pkex->exchange_done) { wpa_printf(MSG_DEBUG, "DPP: No matching PKEX session"); return; } eloop_cancel_timeout(hostapd_dpp_pkex_retry_timeout, hapd, NULL); hapd->dpp_pkex->exch_req_wait_time = 0; msg = dpp_pkex_rx_exchange_resp(hapd->dpp_pkex, src, buf, len); if (!msg) { wpa_printf(MSG_DEBUG, "DPP: Failed to process the response"); return; } wpa_printf(MSG_DEBUG, "DPP: Send PKEX Commit-Reveal Request to " MACSTR, MAC2STR(src)); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX "dst=" MACSTR " freq=%u type=%d", MAC2STR(src), freq, DPP_PA_PKEX_COMMIT_REVEAL_REQ); hostapd_drv_send_action(hapd, freq, 0, src, wpabuf_head(msg), wpabuf_len(msg)); wpabuf_free(msg); } static void hostapd_dpp_rx_pkex_commit_reveal_req(struct hostapd_data *hapd, const u8 *src, const u8 *hdr, const u8 *buf, size_t len, unsigned int freq) { struct wpabuf *msg; struct dpp_pkex *pkex = hapd->dpp_pkex; struct dpp_bootstrap_info *bi; wpa_printf(MSG_DEBUG, "DPP: PKEX Commit-Reveal Request from " MACSTR, MAC2STR(src)); if (!pkex || pkex->initiator || !pkex->exchange_done) { wpa_printf(MSG_DEBUG, "DPP: No matching PKEX session"); return; } msg = dpp_pkex_rx_commit_reveal_req(pkex, hdr, buf, len); if (!msg) { wpa_printf(MSG_DEBUG, "DPP: Failed to process the request"); if (hapd->dpp_pkex->failed) { wpa_printf(MSG_DEBUG, "DPP: Terminate PKEX exchange"); if (hapd->dpp_pkex->t > hapd->dpp_pkex->own_bi->pkex_t) hapd->dpp_pkex->own_bi->pkex_t = hapd->dpp_pkex->t; dpp_pkex_free(hapd->dpp_pkex); hapd->dpp_pkex = NULL; } return; } wpa_printf(MSG_DEBUG, "DPP: Send PKEX Commit-Reveal Response to " MACSTR, MAC2STR(src)); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX "dst=" MACSTR " freq=%u type=%d", MAC2STR(src), freq, DPP_PA_PKEX_COMMIT_REVEAL_RESP); hostapd_drv_send_action(hapd, freq, 0, src, wpabuf_head(msg), wpabuf_len(msg)); wpabuf_free(msg); hostapd_dpp_pkex_clear_code(hapd); bi = dpp_pkex_finish(hapd->iface->interfaces->dpp, pkex, src, freq); if (!bi) return; hapd->dpp_pkex = NULL; } static void hostapd_dpp_rx_pkex_commit_reveal_resp(struct hostapd_data *hapd, const u8 *src, const u8 *hdr, const u8 *buf, size_t len, unsigned int freq) { struct hapd_interfaces *ifaces = hapd->iface->interfaces; int res; struct dpp_bootstrap_info *bi; struct dpp_pkex *pkex = hapd->dpp_pkex; char cmd[500]; wpa_printf(MSG_DEBUG, "DPP: PKEX Commit-Reveal Response from " MACSTR, MAC2STR(src)); if (!pkex || !pkex->initiator || !pkex->exchange_done) { wpa_printf(MSG_DEBUG, "DPP: No matching PKEX session"); return; } res = dpp_pkex_rx_commit_reveal_resp(pkex, hdr, buf, len); if (res < 0) { wpa_printf(MSG_DEBUG, "DPP: Failed to process the response"); return; } hostapd_dpp_pkex_clear_code(hapd); bi = dpp_pkex_finish(ifaces->dpp, pkex, src, freq); if (!bi) return; hapd->dpp_pkex = NULL; #ifdef CONFIG_DPP3 if (ifaces->dpp_pb_bi && os_memcmp(bi->pubkey_hash_chirp, ifaces->dpp_pb_resp_hash, SHA256_MAC_LEN) != 0) { char id[20]; wpa_printf(MSG_INFO, "DPP: Peer bootstrap key from PKEX does not match PB announcement hash"); wpa_hexdump(MSG_DEBUG, "DPP: Peer provided bootstrap key hash(chirp) from PB PKEX", bi->pubkey_hash_chirp, SHA256_MAC_LEN); wpa_hexdump(MSG_DEBUG, "DPP: Peer provided bootstrap key hash(chirp) from PB announcement", ifaces->dpp_pb_resp_hash, SHA256_MAC_LEN); os_snprintf(id, sizeof(id), "%u", bi->id); dpp_bootstrap_remove(ifaces->dpp, id); hostapd_dpp_push_button_stop(hapd); return; } #endif /* CONFIG_DPP3 */ os_snprintf(cmd, sizeof(cmd), " peer=%u %s", bi->id, hapd->dpp_pkex_auth_cmd ? hapd->dpp_pkex_auth_cmd : ""); wpa_printf(MSG_DEBUG, "DPP: Start authentication after PKEX with parameters: %s", cmd); if (hostapd_dpp_auth_init(hapd, cmd) < 0) { wpa_printf(MSG_DEBUG, "DPP: Authentication initialization failed"); return; } } #ifdef CONFIG_DPP3 static void hostapd_dpp_pb_pkex_init(struct hostapd_data *hapd, unsigned int freq, const u8 *src, const u8 *r_hash) { struct hapd_interfaces *ifaces = hapd->iface->interfaces; struct dpp_pkex *pkex; struct wpabuf *msg; char ssid_hex[2 * SSID_MAX_LEN + 1], *pass_hex = NULL; char cmd[300]; const char *password = NULL; struct sae_password_entry *e; int conf_id = -1; bool sae = false, psk = false; size_t len; if (hapd->dpp_pkex) { wpa_printf(MSG_DEBUG, "PDP: Sending previously generated PKEX Exchange Request to " MACSTR, MAC2STR(src)); msg = hapd->dpp_pkex->exchange_req; hostapd_drv_send_action(hapd, freq, 0, src, wpabuf_head(msg), wpabuf_len(msg)); return; } wpa_printf(MSG_DEBUG, "DPP: Initiate PKEX for push button with " MACSTR, MAC2STR(src)); hapd->dpp_pkex_bi = ifaces->dpp_pb_bi; os_memcpy(ifaces->dpp_pb_resp_hash, r_hash, SHA256_MAC_LEN); pkex = dpp_pkex_init(hapd->msg_ctx, hapd->dpp_pkex_bi, hapd->own_addr, "PBPKEX", (const char *) ifaces->dpp_pb_c_nonce, ifaces->dpp_pb_bi->curve->nonce_len, true); if (!pkex) { hostapd_dpp_push_button_stop(hapd); return; } pkex->freq = freq; hapd->dpp_pkex = pkex; msg = hapd->dpp_pkex->exchange_req; if (ifaces->dpp_pb_cmd) { /* Use the externally provided configuration */ os_free(hapd->dpp_pkex_auth_cmd); len = 30 + os_strlen(ifaces->dpp_pb_cmd); hapd->dpp_pkex_auth_cmd = os_malloc(len); if (!hapd->dpp_pkex_auth_cmd) { hostapd_dpp_push_button_stop(hapd); return; } os_snprintf(hapd->dpp_pkex_auth_cmd, len, " own=%d %s", hapd->dpp_pkex_bi->id, ifaces->dpp_pb_cmd); goto send_frame; } /* Build config based on the current AP configuration */ wpa_snprintf_hex(ssid_hex, sizeof(ssid_hex), (const u8 *) hapd->conf->ssid.ssid, hapd->conf->ssid.ssid_len); if (hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_DPP) { /* TODO: If a local Configurator has been enabled, allow a * DPP AKM credential to be provisioned by setting conf_id. */ } if (hapd->conf->wpa & WPA_PROTO_RSN) { psk = hapd->conf->wpa_key_mgmt & (WPA_KEY_MGMT_PSK | WPA_KEY_MGMT_PSK_SHA256); #ifdef CONFIG_SAE sae = hapd->conf->wpa_key_mgmt & WPA_KEY_MGMT_SAE; #endif /* CONFIG_SAE */ } #ifdef CONFIG_SAE for (e = hapd->conf->sae_passwords; sae && e && !password; e = e->next) { if (e->identifier || !is_broadcast_ether_addr(e->peer_addr)) continue; password = e->password; } #endif /* CONFIG_SAE */ if (!password && hapd->conf->ssid.wpa_passphrase_set && hapd->conf->ssid.wpa_passphrase) password = hapd->conf->ssid.wpa_passphrase; if (password) { len = 2 * os_strlen(password) + 1; pass_hex = os_malloc(len); if (!pass_hex) { hostapd_dpp_push_button_stop(hapd); return; } wpa_snprintf_hex(pass_hex, len, (const u8 *) password, os_strlen(password)); } if (conf_id > 0 && sae && psk && pass_hex) { os_snprintf(cmd, sizeof(cmd), "conf=sta-dpp+psk+sae configurator=%d ssid=%s pass=%s", conf_id, ssid_hex, pass_hex); } else if (conf_id > 0 && sae && pass_hex) { os_snprintf(cmd, sizeof(cmd), "conf=sta-dpp+sae configurator=%d ssid=%s pass=%s", conf_id, ssid_hex, pass_hex); } else if (conf_id > 0) { os_snprintf(cmd, sizeof(cmd), "conf=sta-dpp configurator=%d ssid=%s", conf_id, ssid_hex); } if (sae && psk && pass_hex) { os_snprintf(cmd, sizeof(cmd), "conf=sta-psk+sae ssid=%s pass=%s", ssid_hex, pass_hex); } else if (sae && pass_hex) { os_snprintf(cmd, sizeof(cmd), "conf=sta-sae ssid=%s pass=%s", ssid_hex, pass_hex); } else if (psk && pass_hex) { os_snprintf(cmd, sizeof(cmd), "conf=sta-psk ssid=%s pass=%s", ssid_hex, pass_hex); } else { wpa_printf(MSG_INFO, "DPP: Unsupported AP configuration for push button"); str_clear_free(pass_hex); hostapd_dpp_push_button_stop(hapd); return; } str_clear_free(pass_hex); os_free(hapd->dpp_pkex_auth_cmd); len = 30 + os_strlen(cmd); hapd->dpp_pkex_auth_cmd = os_malloc(len); if (hapd->dpp_pkex_auth_cmd) os_snprintf(hapd->dpp_pkex_auth_cmd, len, " own=%d %s", hapd->dpp_pkex_bi->id, cmd); forced_memzero(cmd, sizeof(cmd)); if (!hapd->dpp_pkex_auth_cmd) { hostapd_dpp_push_button_stop(hapd); return; } send_frame: wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX "dst=" MACSTR " freq=%u type=%d", MAC2STR(src), freq, DPP_PA_PKEX_EXCHANGE_REQ); hostapd_drv_send_action(hapd, pkex->freq, 0, src, wpabuf_head(msg), wpabuf_len(msg)); pkex->exch_req_wait_time = 2000; pkex->exch_req_tries = 1; } static void hostapd_dpp_rx_pb_presence_announcement(struct hostapd_data *hapd, const u8 *src, const u8 *hdr, const u8 *buf, size_t len, unsigned int freq) { struct hapd_interfaces *ifaces = hapd->iface->interfaces; const u8 *r_hash; u16 r_hash_len; unsigned int i; bool found = false; struct dpp_pb_info *info, *tmp; struct os_reltime now, age; struct wpabuf *msg; if (!ifaces) return; os_get_reltime(&now); wpa_printf(MSG_DEBUG, "DPP: Push Button Presence Announcement from " MACSTR, MAC2STR(src)); r_hash = dpp_get_attr(buf, len, DPP_ATTR_R_BOOTSTRAP_KEY_HASH, &r_hash_len); if (!r_hash || r_hash_len != SHA256_MAC_LEN) { wpa_printf(MSG_DEBUG, "DPP: Missing or invalid required Responder Bootstrapping Key Hash attribute"); return; } wpa_hexdump(MSG_MSGDUMP, "DPP: Responder Bootstrapping Key Hash", r_hash, r_hash_len); for (i = 0; i < DPP_PB_INFO_COUNT; i++) { info = &ifaces->dpp_pb[i]; if ((info->rx_time.sec == 0 && info->rx_time.usec == 0) || os_memcmp(r_hash, info->hash, SHA256_MAC_LEN) != 0) continue; wpa_printf(MSG_DEBUG, "DPP: Active push button Enrollee already known"); found = true; info->rx_time = now; } if (!found) { for (i = 0; i < DPP_PB_INFO_COUNT; i++) { tmp = &ifaces->dpp_pb[i]; if (tmp->rx_time.sec == 0 && tmp->rx_time.usec == 0) continue; if (os_reltime_expired(&now, &tmp->rx_time, 120)) { wpa_hexdump(MSG_DEBUG, "DPP: Push button Enrollee hash expired", tmp->hash, SHA256_MAC_LEN); tmp->rx_time.sec = 0; tmp->rx_time.usec = 0; continue; } wpa_hexdump(MSG_DEBUG, "DPP: Push button session overlap with hash", tmp->hash, SHA256_MAC_LEN); if (!ifaces->dpp_pb_result_indicated && hostapd_dpp_pb_active(hapd)) { wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_PB_RESULT "session-overlap"); ifaces->dpp_pb_result_indicated = true; } hostapd_dpp_push_button_stop(hapd); return; } /* Replace the oldest entry */ info = &ifaces->dpp_pb[0]; for (i = 1; i < DPP_PB_INFO_COUNT; i++) { tmp = &ifaces->dpp_pb[i]; if (os_reltime_before(&tmp->rx_time, &info->rx_time)) info = tmp; } wpa_printf(MSG_DEBUG, "DPP: New active push button Enrollee"); os_memcpy(info->hash, r_hash, SHA256_MAC_LEN); info->rx_time = now; } if (!hostapd_dpp_pb_active(hapd)) { wpa_printf(MSG_DEBUG, "DPP: Discard message since own push button has not been pressed"); return; } if (ifaces->dpp_pb_announce_time.sec == 0 && ifaces->dpp_pb_announce_time.usec == 0) { /* Start a wait before allowing PKEX to be initiated */ ifaces->dpp_pb_announce_time = now; } if (!ifaces->dpp_pb_bi) { int res; res = dpp_bootstrap_gen(ifaces->dpp, "type=pkex"); if (res < 0) return; ifaces->dpp_pb_bi = dpp_bootstrap_get_id(ifaces->dpp, res); if (!ifaces->dpp_pb_bi) return; if (random_get_bytes(ifaces->dpp_pb_c_nonce, ifaces->dpp_pb_bi->curve->nonce_len)) { wpa_printf(MSG_ERROR, "DPP: Failed to generate C-nonce"); hostapd_dpp_push_button_stop(hapd); return; } } /* Skip the response if one was sent within last 50 ms since the * Enrollee is going to send out at least three announcement messages. */ os_reltime_sub(&now, &ifaces->dpp_pb_last_resp, &age); if (age.sec == 0 && age.usec < 50000) { wpa_printf(MSG_DEBUG, "DPP: Skip Push Button Presence Announcement Response frame immediately after having sent one"); return; } msg = dpp_build_pb_announcement_resp( ifaces->dpp_pb_bi, r_hash, ifaces->dpp_pb_c_nonce, ifaces->dpp_pb_bi->curve->nonce_len); if (!msg) { hostapd_dpp_push_button_stop(hapd); return; } wpa_printf(MSG_DEBUG, "DPP: Send Push Button Presence Announcement Response to " MACSTR, MAC2STR(src)); ifaces->dpp_pb_last_resp = now; wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX "dst=" MACSTR " freq=%u type=%d", MAC2STR(src), freq, DPP_PA_PB_PRESENCE_ANNOUNCEMENT_RESP); hostapd_drv_send_action(hapd, freq, 0, src, wpabuf_head(msg), wpabuf_len(msg)); wpabuf_free(msg); if (os_reltime_expired(&now, &ifaces->dpp_pb_announce_time, 15)) hostapd_dpp_pb_pkex_init(hapd, freq, src, r_hash); } static void hostapd_dpp_rx_priv_peer_intro_query(struct hostapd_data *hapd, const u8 *src, const u8 *hdr, const u8 *buf, size_t len, unsigned int freq) { const u8 *trans_id, *version; u16 trans_id_len, version_len; struct wpabuf *msg; u8 ver = DPP_VERSION; int conn_ver; wpa_printf(MSG_DEBUG, "DPP: Private Peer Introduction Query from " MACSTR, MAC2STR(src)); if (!hapd_dpp_connector_available(hapd)) return; trans_id = dpp_get_attr(buf, len, DPP_ATTR_TRANSACTION_ID, &trans_id_len); if (!trans_id || trans_id_len != 1) { wpa_printf(MSG_DEBUG, "DPP: Peer did not include Transaction ID"); return; } version = dpp_get_attr(buf, len, DPP_ATTR_PROTOCOL_VERSION, &version_len); if (!version || version_len != 1) { wpa_printf(MSG_DEBUG, "DPP: Peer did not include Protocol Version"); return; } wpa_printf(MSG_DEBUG, "DPP: Transaction ID %u, Version %u", trans_id[0], version[0]); len = 5 + 5 + 4 + os_strlen(hapd->conf->dpp_connector); msg = dpp_alloc_msg(DPP_PA_PRIV_PEER_INTRO_NOTIFY, len); if (!msg) return; /* Transaction ID */ wpabuf_put_le16(msg, DPP_ATTR_TRANSACTION_ID); wpabuf_put_le16(msg, 1); wpabuf_put_u8(msg, trans_id[0]); /* Protocol Version */ conn_ver = dpp_get_connector_version(hapd->conf->dpp_connector); if (conn_ver > 0 && ver != conn_ver) { wpa_printf(MSG_DEBUG, "DPP: Use Connector version %d instead of current protocol version %d", conn_ver, ver); ver = conn_ver; } wpabuf_put_le16(msg, DPP_ATTR_PROTOCOL_VERSION); wpabuf_put_le16(msg, 1); wpabuf_put_u8(msg, ver); /* DPP Connector */ wpabuf_put_le16(msg, DPP_ATTR_CONNECTOR); wpabuf_put_le16(msg, os_strlen(hapd->conf->dpp_connector)); wpabuf_put_str(msg, hapd->conf->dpp_connector); wpa_printf(MSG_DEBUG, "DPP: Send Private Peer Introduction Notify to " MACSTR, MAC2STR(src)); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX "dst=" MACSTR " freq=%u type=%d", MAC2STR(src), freq, DPP_PA_PRIV_PEER_INTRO_NOTIFY); hostapd_drv_send_action(hapd, freq, 0, src, wpabuf_head(msg), wpabuf_len(msg)); wpabuf_free(msg); } static void hostapd_dpp_rx_priv_peer_intro_update(struct hostapd_data *hapd, const u8 *src, const u8 *hdr, const u8 *buf, size_t len, unsigned int freq) { struct crypto_ec_key *own_key; const struct dpp_curve_params *curve; enum hpke_kem_id kem_id; enum hpke_kdf_id kdf_id; enum hpke_aead_id aead_id; const u8 *aad = hdr; size_t aad_len = DPP_HDR_LEN; struct wpabuf *pt; const u8 *trans_id, *wrapped, *version, *connector; u16 trans_id_len, wrapped_len, version_len, connector_len; struct os_time now; struct dpp_introduction intro; os_time_t expire; int expiration; enum dpp_status_error res; u8 pkhash[SHA256_MAC_LEN]; os_memset(&intro, 0, sizeof(intro)); wpa_printf(MSG_DEBUG, "DPP: Private Peer Introduction Update from " MACSTR, MAC2STR(src)); if (!hapd_dpp_connector_available(hapd)) return; os_get_time(&now); if (hapd->conf->dpp_netaccesskey_expiry && (os_time_t) hapd->conf->dpp_netaccesskey_expiry < now.sec) { wpa_printf(MSG_INFO, "DPP: Own netAccessKey expired"); return; } trans_id = dpp_get_attr(buf, len, DPP_ATTR_TRANSACTION_ID, &trans_id_len); if (!trans_id || trans_id_len != 1) { wpa_printf(MSG_DEBUG, "DPP: Peer did not include Transaction ID"); return; } wrapped = dpp_get_attr(buf, len, DPP_ATTR_WRAPPED_DATA, &wrapped_len); if (!wrapped) { wpa_printf(MSG_DEBUG, "DPP: Peer did not include Wrapped Data"); return; } own_key = dpp_set_keypair(&curve, wpabuf_head(hapd->conf->dpp_netaccesskey), wpabuf_len(hapd->conf->dpp_netaccesskey)); if (!own_key) { wpa_printf(MSG_ERROR, "DPP: Failed to parse own netAccessKey"); return; } if (dpp_hpke_suite(curve->ike_group, &kem_id, &kdf_id, &aead_id) < 0) { wpa_printf(MSG_ERROR, "DPP: Unsupported curve %d", curve->ike_group); crypto_ec_key_deinit(own_key); return; } pt = hpke_base_open(kem_id, kdf_id, aead_id, own_key, NULL, 0, aad, aad_len, wrapped, wrapped_len); crypto_ec_key_deinit(own_key); if (!pt) { wpa_printf(MSG_INFO, "DPP: Failed to decrypt Connector"); return; } wpa_hexdump_buf(MSG_MSGDUMP, "DPP: HPKE-Decrypted Wrapped Data", pt); connector = dpp_get_attr(wpabuf_head(pt), wpabuf_len(pt), DPP_ATTR_CONNECTOR, &connector_len); if (!connector) { wpa_printf(MSG_DEBUG, "DPP: Peer did not include its Connector"); goto done; } version = dpp_get_attr(wpabuf_head(pt), wpabuf_len(pt), DPP_ATTR_PROTOCOL_VERSION, &version_len); if (!version || version_len < 1) { wpa_printf(MSG_DEBUG, "DPP: Peer did not include Protocol Version"); goto done; } res = dpp_peer_intro(&intro, hapd->conf->dpp_connector, wpabuf_head(hapd->conf->dpp_netaccesskey), wpabuf_len(hapd->conf->dpp_netaccesskey), wpabuf_head(hapd->conf->dpp_csign), wpabuf_len(hapd->conf->dpp_csign), connector, connector_len, &expire, pkhash); if (res == 255) { wpa_printf(MSG_INFO, "DPP: Network Introduction protocol resulted in internal failure (peer " MACSTR ")", MAC2STR(src)); goto done; } if (res != DPP_STATUS_OK) { wpa_printf(MSG_INFO, "DPP: Network Introduction protocol resulted in failure (peer " MACSTR " status %d)", MAC2STR(src), res); goto done; } if (intro.peer_version && intro.peer_version >= 2) { u8 attr_version = 1; if (version && version_len >= 1) attr_version = version[0]; if (attr_version != intro.peer_version) { wpa_printf(MSG_INFO, "DPP: Protocol version mismatch (Connector: %d Attribute: %d", intro.peer_version, attr_version); goto done; } } if (!expire || (os_time_t) hapd->conf->dpp_netaccesskey_expiry < expire) expire = hapd->conf->dpp_netaccesskey_expiry; if (expire) expiration = expire - now.sec; else expiration = 0; if (wpa_auth_pmksa_add3(hapd->wpa_auth, src, intro.pmk, intro.pmk_len, intro.pmkid, expiration, WPA_KEY_MGMT_DPP, pkhash) < 0) { wpa_printf(MSG_ERROR, "DPP: Failed to add PMKSA cache entry"); goto done; } wpa_printf(MSG_DEBUG, "DPP: Private Peer Introduction completed with " MACSTR, MAC2STR(src)); done: dpp_peer_intro_deinit(&intro); wpabuf_free(pt); } #endif /* CONFIG_DPP3 */ void hostapd_dpp_rx_action(struct hostapd_data *hapd, const u8 *src, const u8 *buf, size_t len, unsigned int freq) { u8 crypto_suite; enum dpp_public_action_frame_type type; const u8 *hdr; unsigned int pkex_t; if (len < DPP_HDR_LEN) return; if (WPA_GET_BE24(buf) != OUI_WFA || buf[3] != DPP_OUI_TYPE) return; hdr = buf; buf += 4; len -= 4; crypto_suite = *buf++; type = *buf++; len -= 2; wpa_printf(MSG_DEBUG, "DPP: Received DPP Public Action frame crypto suite %u type %d from " MACSTR " freq=%u", crypto_suite, type, MAC2STR(src), freq); if (crypto_suite != 1) { wpa_printf(MSG_DEBUG, "DPP: Unsupported crypto suite %u", crypto_suite); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_RX "src=" MACSTR " freq=%u type=%d ignore=unsupported-crypto-suite", MAC2STR(src), freq, type); return; } wpa_hexdump(MSG_MSGDUMP, "DPP: Received message attributes", buf, len); if (dpp_check_attrs(buf, len) < 0) { wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_RX "src=" MACSTR " freq=%u type=%d ignore=invalid-attributes", MAC2STR(src), freq, type); return; } wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_RX "src=" MACSTR " freq=%u type=%d", MAC2STR(src), freq, type); #ifdef CONFIG_DPP2 if (dpp_relay_rx_action(hapd->iface->interfaces->dpp, src, hdr, buf, len, freq, NULL, NULL, hapd) == 0) return; #endif /* CONFIG_DPP2 */ switch (type) { case DPP_PA_AUTHENTICATION_REQ: hostapd_dpp_rx_auth_req(hapd, src, hdr, buf, len, freq); break; case DPP_PA_AUTHENTICATION_RESP: hostapd_dpp_rx_auth_resp(hapd, src, hdr, buf, len, freq); break; case DPP_PA_AUTHENTICATION_CONF: hostapd_dpp_rx_auth_conf(hapd, src, hdr, buf, len); break; case DPP_PA_PEER_DISCOVERY_REQ: hostapd_dpp_rx_peer_disc_req(hapd, src, buf, len, freq); break; #ifdef CONFIG_DPP3 case DPP_PA_PKEX_EXCHANGE_REQ: /* This is for PKEXv2, but for now, process only with * CONFIG_DPP3 to avoid issues with a capability that has not * been tested with other implementations. */ hostapd_dpp_rx_pkex_exchange_req(hapd, src, hdr, buf, len, freq, true); break; #endif /* CONFIG_DPP3 */ case DPP_PA_PKEX_V1_EXCHANGE_REQ: hostapd_dpp_rx_pkex_exchange_req(hapd, src, hdr, buf, len, freq, false); break; case DPP_PA_PKEX_EXCHANGE_RESP: hostapd_dpp_rx_pkex_exchange_resp(hapd, src, buf, len, freq); break; case DPP_PA_PKEX_COMMIT_REVEAL_REQ: hostapd_dpp_rx_pkex_commit_reveal_req(hapd, src, hdr, buf, len, freq); break; case DPP_PA_PKEX_COMMIT_REVEAL_RESP: hostapd_dpp_rx_pkex_commit_reveal_resp(hapd, src, hdr, buf, len, freq); break; #ifdef CONFIG_DPP2 case DPP_PA_CONFIGURATION_RESULT: hostapd_dpp_rx_conf_result(hapd, src, hdr, buf, len); break; case DPP_PA_CONNECTION_STATUS_RESULT: hostapd_dpp_rx_conn_status_result(hapd, src, hdr, buf, len); break; case DPP_PA_PRESENCE_ANNOUNCEMENT: hostapd_dpp_rx_presence_announcement(hapd, src, hdr, buf, len, freq); break; case DPP_PA_RECONFIG_ANNOUNCEMENT: hostapd_dpp_rx_reconfig_announcement(hapd, src, hdr, buf, len, freq); break; case DPP_PA_RECONFIG_AUTH_RESP: hostapd_dpp_rx_reconfig_auth_resp(hapd, src, hdr, buf, len, freq); break; #endif /* CONFIG_DPP2 */ #ifdef CONFIG_DPP3 case DPP_PA_PB_PRESENCE_ANNOUNCEMENT: hostapd_dpp_rx_pb_presence_announcement(hapd, src, hdr, buf, len, freq); break; case DPP_PA_PRIV_PEER_INTRO_QUERY: hostapd_dpp_rx_priv_peer_intro_query(hapd, src, hdr, buf, len, freq); break; case DPP_PA_PRIV_PEER_INTRO_UPDATE: hostapd_dpp_rx_priv_peer_intro_update(hapd, src, hdr, buf, len, freq); break; #endif /* CONFIG_DPP3 */ default: wpa_printf(MSG_DEBUG, "DPP: Ignored unsupported frame subtype %d", type); break; } if (hapd->dpp_pkex) pkex_t = hapd->dpp_pkex->t; else if (hapd->dpp_pkex_bi) pkex_t = hapd->dpp_pkex_bi->pkex_t; else pkex_t = 0; if (pkex_t >= PKEX_COUNTER_T_LIMIT) { wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_PKEX_T_LIMIT "id=0"); hostapd_dpp_pkex_remove(hapd, "*"); } } struct wpabuf * hostapd_dpp_gas_req_handler(struct hostapd_data *hapd, const u8 *sa, const u8 *query, size_t query_len, const u8 *data, size_t data_len) { struct dpp_authentication *auth = hapd->dpp_auth; struct wpabuf *resp; wpa_printf(MSG_DEBUG, "DPP: GAS request from " MACSTR, MAC2STR(sa)); if (!auth || (!auth->auth_success && !auth->reconfig_success) || os_memcmp(sa, auth->peer_mac_addr, ETH_ALEN) != 0) { #ifdef CONFIG_DPP2 if (dpp_relay_rx_gas_req(hapd->iface->interfaces->dpp, sa, data, data_len) == 0) { /* Response will be forwarded once received over TCP */ return NULL; } #endif /* CONFIG_DPP2 */ wpa_printf(MSG_DEBUG, "DPP: No matching exchange in progress"); return NULL; } if (hapd->dpp_auth_ok_on_ack && auth->configurator) { wpa_printf(MSG_DEBUG, "DPP: Have not received ACK for Auth Confirm yet - assume it was received based on this GAS request"); /* hostapd_dpp_auth_success() would normally have been called * from TX status handler, but since there was no such handler * call yet, simply send out the event message and proceed with * exchange. */ dpp_notify_auth_success(hapd->dpp_auth, 1); hapd->dpp_auth_ok_on_ack = 0; } wpa_hexdump(MSG_DEBUG, "DPP: Received Configuration Request (GAS Query Request)", query, query_len); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONF_REQ_RX "src=" MACSTR, MAC2STR(sa)); resp = dpp_conf_req_rx(auth, query, query_len); if (!resp) wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONF_FAILED); return resp; } void hostapd_dpp_gas_status_handler(struct hostapd_data *hapd, int ok) { struct dpp_authentication *auth = hapd->dpp_auth; #ifdef CONFIG_DPP3 struct hapd_interfaces *ifaces = hapd->iface->interfaces; #endif /* CONFIG_DPP3 */ if (!auth) return; #ifdef CONFIG_DPP3 if (auth->waiting_new_key && ok) { wpa_printf(MSG_DEBUG, "DPP: Waiting for a new key"); return; } #endif /* CONFIG_DPP3 */ wpa_printf(MSG_DEBUG, "DPP: Configuration exchange completed (ok=%d)", ok); eloop_cancel_timeout(hostapd_dpp_reply_wait_timeout, hapd, NULL); eloop_cancel_timeout(hostapd_dpp_auth_conf_wait_timeout, hapd, NULL); eloop_cancel_timeout(hostapd_dpp_auth_resp_retry_timeout, hapd, NULL); #ifdef CONFIG_DPP2 eloop_cancel_timeout(hostapd_dpp_reconfig_reply_wait_timeout, hapd, NULL); if (ok && auth->peer_version >= 2 && auth->conf_resp_status == DPP_STATUS_OK) { wpa_printf(MSG_DEBUG, "DPP: Wait for Configuration Result"); auth->waiting_conf_result = 1; eloop_cancel_timeout(hostapd_dpp_config_result_wait_timeout, hapd, NULL); eloop_register_timeout(2, 0, hostapd_dpp_config_result_wait_timeout, hapd, NULL); return; } #endif /* CONFIG_DPP2 */ hostapd_drv_send_action_cancel_wait(hapd); if (ok) wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONF_SENT "conf_status=%d", auth->conf_resp_status); else wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CONF_FAILED); dpp_auth_deinit(hapd->dpp_auth); hapd->dpp_auth = NULL; #ifdef CONFIG_DPP3 if (!ifaces->dpp_pb_result_indicated && hostapd_dpp_pb_active(hapd)) { if (ok) wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_PB_RESULT "success"); else wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_PB_RESULT "could-not-connect"); ifaces->dpp_pb_result_indicated = true; if (ok) hostapd_dpp_remove_pb_hash(hapd); hostapd_dpp_push_button_stop(hapd); } #endif /* CONFIG_DPP3 */ } int hostapd_dpp_configurator_sign(struct hostapd_data *hapd, const char *cmd) { struct dpp_authentication *auth; int ret = -1; char *curve = NULL; auth = dpp_alloc_auth(hapd->iface->interfaces->dpp, hapd->msg_ctx); if (!auth) return -1; curve = get_param(cmd, " curve="); hostapd_dpp_set_testing_options(hapd, auth); if (dpp_set_configurator(auth, cmd) == 0 && dpp_configurator_own_config(auth, curve, 1) == 0) { hostapd_dpp_handle_config_obj(hapd, auth, &auth->conf_obj[0]); ret = 0; } dpp_auth_deinit(auth); os_free(curve); return ret; } int hostapd_dpp_pkex_add(struct hostapd_data *hapd, const char *cmd) { struct dpp_bootstrap_info *own_bi; const char *pos, *end; #ifdef CONFIG_DPP3 enum dpp_pkex_ver ver = PKEX_VER_AUTO; #else /* CONFIG_DPP3 */ enum dpp_pkex_ver ver = PKEX_VER_ONLY_1; #endif /* CONFIG_DPP3 */ int tcp_port = DPP_TCP_PORT; struct hostapd_ip_addr *ipaddr = NULL; #ifdef CONFIG_DPP2 struct hostapd_ip_addr ipaddr_buf; char *addr; pos = os_strstr(cmd, " tcp_port="); if (pos) { pos += 10; tcp_port = atoi(pos); } addr = get_param(cmd, " tcp_addr="); if (addr) { int res; res = hostapd_parse_ip_addr(addr, &ipaddr_buf); os_free(addr); if (res) return -1; ipaddr = &ipaddr_buf; } #endif /* CONFIG_DPP2 */ pos = os_strstr(cmd, " own="); if (!pos) return -1; pos += 5; own_bi = dpp_bootstrap_get_id(hapd->iface->interfaces->dpp, atoi(pos)); if (!own_bi) { wpa_printf(MSG_DEBUG, "DPP: Identified bootstrap info not found"); return -1; } if (own_bi->type != DPP_BOOTSTRAP_PKEX) { wpa_printf(MSG_DEBUG, "DPP: Identified bootstrap info not for PKEX"); return -1; } hapd->dpp_pkex_bi = own_bi; own_bi->pkex_t = 0; /* clear pending errors on new code */ os_free(hapd->dpp_pkex_identifier); hapd->dpp_pkex_identifier = NULL; pos = os_strstr(cmd, " identifier="); if (pos) { pos += 12; end = os_strchr(pos, ' '); if (!end) return -1; hapd->dpp_pkex_identifier = os_malloc(end - pos + 1); if (!hapd->dpp_pkex_identifier) return -1; os_memcpy(hapd->dpp_pkex_identifier, pos, end - pos); hapd->dpp_pkex_identifier[end - pos] = '\0'; } pos = os_strstr(cmd, " code="); if (!pos) return -1; os_free(hapd->dpp_pkex_code); hapd->dpp_pkex_code = os_strdup(pos + 6); if (!hapd->dpp_pkex_code) return -1; hapd->dpp_pkex_code_len = os_strlen(hapd->dpp_pkex_code); pos = os_strstr(cmd, " ver="); if (pos) { int v; pos += 5; v = atoi(pos); if (v == 1) ver = PKEX_VER_ONLY_1; else if (v == 2) ver = PKEX_VER_ONLY_2; else return -1; } hapd->dpp_pkex_ver = ver; if (os_strstr(cmd, " init=1")) { if (hostapd_dpp_pkex_init(hapd, ver, ipaddr, tcp_port) < 0) return -1; } else { #ifdef CONFIG_DPP2 dpp_controller_pkex_add(hapd->iface->interfaces->dpp, own_bi, hapd->dpp_pkex_code, hapd->dpp_pkex_identifier); #endif /* CONFIG_DPP2 */ } /* TODO: Support multiple PKEX info entries */ os_free(hapd->dpp_pkex_auth_cmd); hapd->dpp_pkex_auth_cmd = os_strdup(cmd); return 1; } int hostapd_dpp_pkex_remove(struct hostapd_data *hapd, const char *id) { unsigned int id_val; if (os_strcmp(id, "*") == 0) { id_val = 0; } else { id_val = atoi(id); if (id_val == 0) return -1; } if ((id_val != 0 && id_val != 1)) return -1; /* TODO: Support multiple PKEX entries */ os_free(hapd->dpp_pkex_code); hapd->dpp_pkex_code = NULL; os_free(hapd->dpp_pkex_identifier); hapd->dpp_pkex_identifier = NULL; os_free(hapd->dpp_pkex_auth_cmd); hapd->dpp_pkex_auth_cmd = NULL; hapd->dpp_pkex_bi = NULL; /* TODO: Remove dpp_pkex only if it is for the identified PKEX code */ dpp_pkex_free(hapd->dpp_pkex); hapd->dpp_pkex = NULL; return 0; } void hostapd_dpp_stop(struct hostapd_data *hapd) { dpp_auth_deinit(hapd->dpp_auth); hapd->dpp_auth = NULL; dpp_pkex_free(hapd->dpp_pkex); hapd->dpp_pkex = NULL; #ifdef CONFIG_DPP3 hostapd_dpp_push_button_stop(hapd); #endif /* CONFIG_DPP3 */ } #ifdef CONFIG_DPP2 static void hostapd_dpp_relay_tx(void *ctx, const u8 *addr, unsigned int freq, const u8 *msg, size_t len) { struct hostapd_data *hapd = ctx; u8 *buf; if (freq == 0) freq = hapd->iface->freq; wpa_printf(MSG_DEBUG, "DPP: Send action frame dst=" MACSTR " freq=%u", MAC2STR(addr), freq); buf = os_malloc(2 + len); if (!buf) return; buf[0] = WLAN_ACTION_PUBLIC; buf[1] = WLAN_PA_VENDOR_SPECIFIC; os_memcpy(buf + 2, msg, len); hostapd_drv_send_action(hapd, freq, 0, addr, buf, 2 + len); os_free(buf); } static void hostapd_dpp_relay_gas_resp_tx(void *ctx, const u8 *addr, u8 dialog_token, int prot, struct wpabuf *buf) { struct hostapd_data *hapd = ctx; gas_serv_req_dpp_processing(hapd, addr, dialog_token, prot, buf, 0); } #endif /* CONFIG_DPP2 */ static int hostapd_dpp_add_controllers(struct hostapd_data *hapd) { #ifdef CONFIG_DPP2 struct dpp_controller_conf *ctrl; struct dpp_relay_config config; os_memset(&config, 0, sizeof(config)); config.msg_ctx = hapd->msg_ctx; config.cb_ctx = hapd; config.tx = hostapd_dpp_relay_tx; config.gas_resp_tx = hostapd_dpp_relay_gas_resp_tx; for (ctrl = hapd->conf->dpp_controller; ctrl; ctrl = ctrl->next) { config.ipaddr = &ctrl->ipaddr; config.pkhash = ctrl->pkhash; if (dpp_relay_add_controller(hapd->iface->interfaces->dpp, &config) < 0) return -1; } if (hapd->conf->dpp_relay_port) dpp_relay_listen(hapd->iface->interfaces->dpp, hapd->conf->dpp_relay_port, &config); #endif /* CONFIG_DPP2 */ return 0; } #ifdef CONFIG_DPP2 int hostapd_dpp_add_controller(struct hostapd_data *hapd, const char *cmd) { struct dpp_relay_config config; struct hostapd_ip_addr addr; u8 pkhash[SHA256_MAC_LEN]; char *pos, *tmp; int ret = -1; bool prev_state, new_state; struct dpp_global *dpp = hapd->iface->interfaces->dpp; tmp = os_strdup(cmd); if (!tmp) goto fail; pos = os_strchr(tmp, ' '); if (!pos) goto fail; *pos++ = '\0'; if (hostapd_parse_ip_addr(tmp, &addr) < 0 || hexstr2bin(pos, pkhash, SHA256_MAC_LEN) < 0) goto fail; os_memset(&config, 0, sizeof(config)); config.msg_ctx = hapd->msg_ctx; config.cb_ctx = hapd; config.tx = hostapd_dpp_relay_tx; config.gas_resp_tx = hostapd_dpp_relay_gas_resp_tx; config.ipaddr = &addr; config.pkhash = pkhash; prev_state = dpp_relay_controller_available(dpp); ret = dpp_relay_add_controller(dpp, &config); new_state = dpp_relay_controller_available(dpp); if (new_state != prev_state) ieee802_11_update_beacons(hapd->iface); fail: os_free(tmp); return ret; } void hostapd_dpp_remove_controller(struct hostapd_data *hapd, const char *cmd) { struct hostapd_ip_addr addr; bool prev_state, new_state; struct dpp_global *dpp = hapd->iface->interfaces->dpp; if (hostapd_parse_ip_addr(cmd, &addr) < 0) return; prev_state = dpp_relay_controller_available(dpp); dpp_relay_remove_controller(dpp, &addr); new_state = dpp_relay_controller_available(dpp); if (new_state != prev_state) ieee802_11_update_beacons(hapd->iface); } #endif /* CONFIG_DPP2 */ int hostapd_dpp_init(struct hostapd_data *hapd) { hapd->dpp_allowed_roles = DPP_CAPAB_CONFIGURATOR | DPP_CAPAB_ENROLLEE; hapd->dpp_init_done = 1; return hostapd_dpp_add_controllers(hapd); } void hostapd_dpp_deinit(struct hostapd_data *hapd) { #ifdef CONFIG_TESTING_OPTIONS os_free(hapd->dpp_config_obj_override); hapd->dpp_config_obj_override = NULL; os_free(hapd->dpp_discovery_override); hapd->dpp_discovery_override = NULL; os_free(hapd->dpp_groups_override); hapd->dpp_groups_override = NULL; hapd->dpp_ignore_netaccesskey_mismatch = 0; #endif /* CONFIG_TESTING_OPTIONS */ if (!hapd->dpp_init_done) return; eloop_cancel_timeout(hostapd_dpp_pkex_retry_timeout, hapd, NULL); eloop_cancel_timeout(hostapd_dpp_reply_wait_timeout, hapd, NULL); eloop_cancel_timeout(hostapd_dpp_auth_conf_wait_timeout, hapd, NULL); eloop_cancel_timeout(hostapd_dpp_init_timeout, hapd, NULL); eloop_cancel_timeout(hostapd_dpp_auth_resp_retry_timeout, hapd, NULL); #ifdef CONFIG_DPP2 eloop_cancel_timeout(hostapd_dpp_reconfig_reply_wait_timeout, hapd, NULL); eloop_cancel_timeout(hostapd_dpp_config_result_wait_timeout, hapd, NULL); eloop_cancel_timeout(hostapd_dpp_conn_status_result_wait_timeout, hapd, NULL); hostapd_dpp_chirp_stop(hapd); if (hapd->iface->interfaces) { dpp_relay_stop_listen(hapd->iface->interfaces->dpp); dpp_controller_stop_for_ctx(hapd->iface->interfaces->dpp, hapd); } #endif /* CONFIG_DPP2 */ #ifdef CONFIG_DPP3 eloop_cancel_timeout(hostapd_dpp_build_new_key, hapd, NULL); hostapd_dpp_push_button_stop(hapd); #endif /* CONFIG_DPP3 */ dpp_auth_deinit(hapd->dpp_auth); hapd->dpp_auth = NULL; hostapd_dpp_pkex_remove(hapd, "*"); hapd->dpp_pkex = NULL; os_free(hapd->dpp_configurator_params); hapd->dpp_configurator_params = NULL; os_free(hapd->dpp_pkex_auth_cmd); hapd->dpp_pkex_auth_cmd = NULL; } #ifdef CONFIG_DPP2 int hostapd_dpp_controller_start(struct hostapd_data *hapd, const char *cmd) { struct dpp_controller_config config; const char *pos; os_memset(&config, 0, sizeof(config)); config.allowed_roles = DPP_CAPAB_ENROLLEE | DPP_CAPAB_CONFIGURATOR; config.netrole = DPP_NETROLE_AP; config.msg_ctx = hapd->msg_ctx; config.cb_ctx = hapd; config.process_conf_obj = hostapd_dpp_process_conf_obj; if (cmd) { pos = os_strstr(cmd, " tcp_port="); if (pos) { pos += 10; config.tcp_port = atoi(pos); } pos = os_strstr(cmd, " role="); if (pos) { pos += 6; if (os_strncmp(pos, "configurator", 12) == 0) config.allowed_roles = DPP_CAPAB_CONFIGURATOR; else if (os_strncmp(pos, "enrollee", 8) == 0) config.allowed_roles = DPP_CAPAB_ENROLLEE; else if (os_strncmp(pos, "either", 6) == 0) config.allowed_roles = DPP_CAPAB_CONFIGURATOR | DPP_CAPAB_ENROLLEE; else return -1; } config.qr_mutual = os_strstr(cmd, " qr=mutual") != NULL; } config.configurator_params = hapd->dpp_configurator_params; return dpp_controller_start(hapd->iface->interfaces->dpp, &config); } static void hostapd_dpp_chirp_next(void *eloop_ctx, void *timeout_ctx); static void hostapd_dpp_chirp_timeout(void *eloop_ctx, void *timeout_ctx) { struct hostapd_data *hapd = eloop_ctx; wpa_printf(MSG_DEBUG, "DPP: No chirp response received"); hostapd_drv_send_action_cancel_wait(hapd); hostapd_dpp_chirp_next(hapd, NULL); } static void hostapd_dpp_chirp_start(struct hostapd_data *hapd) { struct wpabuf *msg; int type; msg = hapd->dpp_presence_announcement; type = DPP_PA_PRESENCE_ANNOUNCEMENT; wpa_printf(MSG_DEBUG, "DPP: Chirp on %d MHz", hapd->dpp_chirp_freq); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_TX "dst=" MACSTR " freq=%u type=%d", MAC2STR(broadcast), hapd->dpp_chirp_freq, type); if (hostapd_drv_send_action( hapd, hapd->dpp_chirp_freq, 2000, broadcast, wpabuf_head(msg), wpabuf_len(msg)) < 0 || eloop_register_timeout(2, 0, hostapd_dpp_chirp_timeout, hapd, NULL) < 0) hostapd_dpp_chirp_stop(hapd); } static struct hostapd_hw_modes * dpp_get_mode(struct hostapd_data *hapd, enum hostapd_hw_mode mode) { struct hostapd_hw_modes *modes = hapd->iface->hw_features; u16 num_modes = hapd->iface->num_hw_features; u16 i; for (i = 0; i < num_modes; i++) { if (modes[i].mode != mode || !modes[i].num_channels || !modes[i].channels) continue; return &modes[i]; } return NULL; } static void hostapd_dpp_chirp_scan_res_handler(struct hostapd_iface *iface) { struct hostapd_data *hapd = iface->bss[0]; struct wpa_scan_results *scan_res; struct dpp_bootstrap_info *bi = hapd->dpp_chirp_bi; unsigned int i; struct hostapd_hw_modes *mode; int c; bool chan6 = hapd->iface->hw_features == NULL; if (!bi) return; hapd->dpp_chirp_scan_done = 1; scan_res = hostapd_driver_get_scan_results(hapd); os_free(hapd->dpp_chirp_freqs); hapd->dpp_chirp_freqs = NULL; /* Channels from own bootstrapping info */ if (bi) { for (i = 0; i < bi->num_freq; i++) int_array_add_unique(&hapd->dpp_chirp_freqs, bi->freq[i]); } /* Preferred chirping channels */ mode = dpp_get_mode(hapd, HOSTAPD_MODE_IEEE80211G); if (mode) { for (c = 0; c < mode->num_channels; c++) { struct hostapd_channel_data *chan = &mode->channels[c]; if (chan->flag & (HOSTAPD_CHAN_DISABLED | HOSTAPD_CHAN_RADAR) || chan->freq != 2437) continue; chan6 = true; break; } } if (chan6) int_array_add_unique(&hapd->dpp_chirp_freqs, 2437); mode = dpp_get_mode(hapd, HOSTAPD_MODE_IEEE80211A); if (mode) { int chan44 = 0, chan149 = 0; for (c = 0; c < mode->num_channels; c++) { struct hostapd_channel_data *chan = &mode->channels[c]; if (chan->flag & (HOSTAPD_CHAN_DISABLED | HOSTAPD_CHAN_RADAR)) continue; if (chan->freq == 5220) chan44 = 1; if (chan->freq == 5745) chan149 = 1; } if (chan149) int_array_add_unique(&hapd->dpp_chirp_freqs, 5745); else if (chan44) int_array_add_unique(&hapd->dpp_chirp_freqs, 5220); } mode = dpp_get_mode(hapd, HOSTAPD_MODE_IEEE80211AD); if (mode) { for (c = 0; c < mode->num_channels; c++) { struct hostapd_channel_data *chan = &mode->channels[c]; if ((chan->flag & (HOSTAPD_CHAN_DISABLED | HOSTAPD_CHAN_RADAR)) || chan->freq != 60480) continue; int_array_add_unique(&hapd->dpp_chirp_freqs, 60480); break; } } /* Add channels from scan results for APs that advertise Configurator * Connectivity element */ for (i = 0; scan_res && i < scan_res->num; i++) { struct wpa_scan_res *bss = scan_res->res[i]; size_t ie_len = bss->ie_len; if (!ie_len) ie_len = bss->beacon_ie_len; if (get_vendor_ie((const u8 *) (bss + 1), ie_len, DPP_CC_IE_VENDOR_TYPE)) int_array_add_unique(&hapd->dpp_chirp_freqs, bss->freq); } if (!hapd->dpp_chirp_freqs || eloop_register_timeout(0, 0, hostapd_dpp_chirp_next, hapd, NULL) < 0) hostapd_dpp_chirp_stop(hapd); wpa_scan_results_free(scan_res); } static void hostapd_dpp_chirp_next(void *eloop_ctx, void *timeout_ctx) { struct hostapd_data *hapd = eloop_ctx; int i; if (hapd->dpp_chirp_listen) hostapd_dpp_listen_stop(hapd); if (hapd->dpp_chirp_freq == 0) { if (hapd->dpp_chirp_round % 4 == 0 && !hapd->dpp_chirp_scan_done) { struct wpa_driver_scan_params params; int ret; wpa_printf(MSG_DEBUG, "DPP: Update channel list for chirping"); os_memset(¶ms, 0, sizeof(params)); ret = hostapd_driver_scan(hapd, ¶ms); if (ret < 0) { wpa_printf(MSG_DEBUG, "DPP: Failed to request a scan ret=%d (%s)", ret, strerror(-ret)); hostapd_dpp_chirp_scan_res_handler(hapd->iface); } else { hapd->iface->scan_cb = hostapd_dpp_chirp_scan_res_handler; } return; } hapd->dpp_chirp_freq = hapd->dpp_chirp_freqs[0]; hapd->dpp_chirp_round++; wpa_printf(MSG_DEBUG, "DPP: Start chirping round %d", hapd->dpp_chirp_round); } else { for (i = 0; hapd->dpp_chirp_freqs[i]; i++) if (hapd->dpp_chirp_freqs[i] == hapd->dpp_chirp_freq) break; if (!hapd->dpp_chirp_freqs[i]) { wpa_printf(MSG_DEBUG, "DPP: Previous chirp freq %d not found", hapd->dpp_chirp_freq); return; } i++; if (hapd->dpp_chirp_freqs[i]) { hapd->dpp_chirp_freq = hapd->dpp_chirp_freqs[i]; } else { hapd->dpp_chirp_iter--; if (hapd->dpp_chirp_iter <= 0) { wpa_printf(MSG_DEBUG, "DPP: Chirping iterations completed"); hostapd_dpp_chirp_stop(hapd); return; } hapd->dpp_chirp_freq = 0; hapd->dpp_chirp_scan_done = 0; if (eloop_register_timeout(30, 0, hostapd_dpp_chirp_next, hapd, NULL) < 0) { hostapd_dpp_chirp_stop(hapd); return; } if (hapd->dpp_chirp_listen) { wpa_printf(MSG_DEBUG, "DPP: Listen on %d MHz during chirp 30 second wait", hapd->dpp_chirp_listen); /* TODO: start listen on the channel */ } else { wpa_printf(MSG_DEBUG, "DPP: Wait 30 seconds before starting the next chirping round"); } return; } } hostapd_dpp_chirp_start(hapd); } int hostapd_dpp_chirp(struct hostapd_data *hapd, const char *cmd) { const char *pos; int iter = 1, listen_freq = 0; struct dpp_bootstrap_info *bi; pos = os_strstr(cmd, " own="); if (!pos) return -1; pos += 5; bi = dpp_bootstrap_get_id(hapd->iface->interfaces->dpp, atoi(pos)); if (!bi) { wpa_printf(MSG_DEBUG, "DPP: Identified bootstrap info not found"); return -1; } pos = os_strstr(cmd, " iter="); if (pos) { iter = atoi(pos + 6); if (iter <= 0) return -1; } pos = os_strstr(cmd, " listen="); if (pos) { listen_freq = atoi(pos + 8); if (listen_freq <= 0) return -1; } hostapd_dpp_chirp_stop(hapd); hapd->dpp_allowed_roles = DPP_CAPAB_ENROLLEE; hapd->dpp_qr_mutual = 0; hapd->dpp_chirp_bi = bi; hapd->dpp_presence_announcement = dpp_build_presence_announcement(bi); if (!hapd->dpp_presence_announcement) return -1; hapd->dpp_chirp_iter = iter; hapd->dpp_chirp_round = 0; hapd->dpp_chirp_scan_done = 0; hapd->dpp_chirp_listen = listen_freq; return eloop_register_timeout(0, 0, hostapd_dpp_chirp_next, hapd, NULL); } void hostapd_dpp_chirp_stop(struct hostapd_data *hapd) { if (hapd->dpp_presence_announcement) { hostapd_drv_send_action_cancel_wait(hapd); wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_CHIRP_STOPPED); } hapd->dpp_chirp_bi = NULL; wpabuf_free(hapd->dpp_presence_announcement); hapd->dpp_presence_announcement = NULL; if (hapd->dpp_chirp_listen) hostapd_dpp_listen_stop(hapd); hapd->dpp_chirp_listen = 0; hapd->dpp_chirp_freq = 0; os_free(hapd->dpp_chirp_freqs); hapd->dpp_chirp_freqs = NULL; eloop_cancel_timeout(hostapd_dpp_chirp_next, hapd, NULL); eloop_cancel_timeout(hostapd_dpp_chirp_timeout, hapd, NULL); if (hapd->iface->scan_cb == hostapd_dpp_chirp_scan_res_handler) { /* TODO: abort ongoing scan */ hapd->iface->scan_cb = NULL; } } static int handle_dpp_remove_bi(struct hostapd_iface *iface, void *ctx) { struct dpp_bootstrap_info *bi = ctx; size_t i; for (i = 0; i < iface->num_bss; i++) { struct hostapd_data *hapd = iface->bss[i]; if (bi == hapd->dpp_chirp_bi) hostapd_dpp_chirp_stop(hapd); } return 0; } void hostapd_dpp_remove_bi(void *ctx, struct dpp_bootstrap_info *bi) { struct hapd_interfaces *interfaces = ctx; hostapd_for_each_interface(interfaces, handle_dpp_remove_bi, bi); } #endif /* CONFIG_DPP2 */ #ifdef CONFIG_DPP3 static void hostapd_dpp_push_button_expire(void *eloop_ctx, void *timeout_ctx) { struct hostapd_data *hapd = eloop_ctx; wpa_printf(MSG_DEBUG, "DPP: Active push button mode expired"); hostapd_dpp_push_button_stop(hapd); } int hostapd_dpp_push_button(struct hostapd_data *hapd, const char *cmd) { struct hapd_interfaces *ifaces = hapd->iface->interfaces; if (!ifaces || !ifaces->dpp) return -1; os_get_reltime(&ifaces->dpp_pb_time); ifaces->dpp_pb_announce_time.sec = 0; ifaces->dpp_pb_announce_time.usec = 0; str_clear_free(ifaces->dpp_pb_cmd); ifaces->dpp_pb_cmd = NULL; if (cmd) { ifaces->dpp_pb_cmd = os_strdup(cmd); if (!ifaces->dpp_pb_cmd) return -1; } eloop_register_timeout(100, 0, hostapd_dpp_push_button_expire, hapd, NULL); return 0; } void hostapd_dpp_push_button_stop(struct hostapd_data *hapd) { struct hapd_interfaces *ifaces = hapd->iface->interfaces; if (!ifaces || !ifaces->dpp) return; eloop_cancel_timeout(hostapd_dpp_push_button_expire, hapd, NULL); if (hostapd_dpp_pb_active(hapd)) { wpa_printf(MSG_DEBUG, "DPP: Stop active push button mode"); if (!ifaces->dpp_pb_result_indicated) wpa_msg(hapd->msg_ctx, MSG_INFO, DPP_EVENT_PB_RESULT "failed"); } ifaces->dpp_pb_time.sec = 0; ifaces->dpp_pb_time.usec = 0; dpp_pkex_free(hapd->dpp_pkex); hapd->dpp_pkex = NULL; os_free(hapd->dpp_pkex_auth_cmd); hapd->dpp_pkex_auth_cmd = NULL; if (ifaces->dpp_pb_bi) { char id[20]; os_snprintf(id, sizeof(id), "%u", ifaces->dpp_pb_bi->id); dpp_bootstrap_remove(ifaces->dpp, id); ifaces->dpp_pb_bi = NULL; } ifaces->dpp_pb_result_indicated = false; str_clear_free(ifaces->dpp_pb_cmd); ifaces->dpp_pb_cmd = NULL; } #endif /* CONFIG_DPP3 */ #ifdef CONFIG_DPP2 bool hostapd_dpp_configurator_connectivity(struct hostapd_data *hapd) { return hapd->conf->dpp_configurator_connectivity || (hapd->iface->interfaces && dpp_relay_controller_available(hapd->iface->interfaces->dpp)); } #endif /* CONFIG_DPP2 */