DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions
hostapd/src/ap/dpp_hostapd.h

55 lines
2.7 KiB
C
Raw Normal View History

DPP: Integration for hostapd This adds DPP bootstrapping, authentication, and configuration into hostapd similarly to how the design was integrated in wpa_supplicant. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 21:16:45 +02:00
/*
* hostapd / DPP integration
* Copyright (c) 2017, Qualcomm Atheros, Inc.
DPP: NFC negotiated connection handover Add new control interface commands "DPP_NFC_HANDOVER_REQ own=<id> uri=<URI>" and "DPP_NFC_HANDOVER_SEL own=<id> uri=<URI>" to support NFC negotiated connection handover. These commands are used to report a DPP URI received from a peer NFC Device in Handover Request and Handover Select messages. The commands return peer bootstrapping information ID or FAIL on failure. The returned ID is used similarly to any other bootstrapping information to initiate DPP authentication. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2020-01-27 16:04:26 +01:00
* Copyright (c) 2018-2020, The Linux Foundation
DPP: Integration for hostapd This adds DPP bootstrapping, authentication, and configuration into hostapd similarly to how the design was integrated in wpa_supplicant. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 21:16:45 +02:00
*
* This software may be distributed under the terms of the BSD license.
* See README for more details.
*/
#ifndef DPP_HOSTAPD_H
#define DPP_HOSTAPD_H
DPP2: Chirping in hostapd Enrollee Add a new hostapd control interface command "DPP_CHIRP own=<BI ID> iter=<count>" to request chirping, i.e., sending of Presence Announcement frames, to be started. This follows the model of similar wpa_supplicant functionality from commit 562f77144cd2 ("DPP2: Chirping in wpa_supplicant Enrollee"). The hostapd case requires the AP to be started without beaconing, i.e., with start_disabled=1 in hostapd configuration, to allow iteration of channels needed for chirping. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2020-05-13 16:11:40 +02:00
struct dpp_bootstrap_info;
DPP: Integration for hostapd This adds DPP bootstrapping, authentication, and configuration into hostapd similarly to how the design was integrated in wpa_supplicant. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 21:16:45 +02:00
int hostapd_dpp_qr_code(struct hostapd_data *hapd, const char *cmd);
DPP: Bootstrapping via NFC URI Record This extends hostapd and wpa_supplicant DPP implementation to allow the bootstrapping URI to be generated for and parsed from an NFC Tag with an NFC URI Record. This is similar to the way the bootstrapping URI is used with QR Code for unidirectional authentication. The DPP_BOOTSTRAP_GEN command uses "type=nfc-uri" to request the URI to be assigned for NFC URI Record. In practice, the URI is generated identically to the QR Code case, but the internal entry maintains the NFC-URI type. A new command "DPP_NFC_URI <uri>" can now be used to parse the URI read from an NFC Tag with the NFC URI Record. This is similar to the DPP_QR_CODE command. Other commands (mainly, DPP_LISTEN and DPP_AUTH_INIT) are used for NFC URI in the same way as they are used for QR Code. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-12-03 17:22:36 +01:00
int hostapd_dpp_nfc_uri(struct hostapd_data *hapd, const char *cmd);
DPP: NFC negotiated connection handover Add new control interface commands "DPP_NFC_HANDOVER_REQ own=<id> uri=<URI>" and "DPP_NFC_HANDOVER_SEL own=<id> uri=<URI>" to support NFC negotiated connection handover. These commands are used to report a DPP URI received from a peer NFC Device in Handover Request and Handover Select messages. The commands return peer bootstrapping information ID or FAIL on failure. The returned ID is used similarly to any other bootstrapping information to initiate DPP authentication. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2020-01-27 16:04:26 +01:00
int hostapd_dpp_nfc_handover_req(struct hostapd_data *hapd, const char *cmd);
int hostapd_dpp_nfc_handover_sel(struct hostapd_data *hapd, const char *cmd);
DPP: Integration for hostapd This adds DPP bootstrapping, authentication, and configuration into hostapd similarly to how the design was integrated in wpa_supplicant. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 21:16:45 +02:00
int hostapd_dpp_auth_init(struct hostapd_data *hapd, const char *cmd);
DPP: Add DPP_LISTEN and DPP_STOP_LISTEN to hostapd This is an initial step in allowing non-operating channel operations with DPP when hostapd is the Responder. For now, this is only used for specifying role=configurator/enrollee and qr=mutual cases similarly to the wpa_supplicant configuration for in Responder role. Request to use a non-operating channel will be rejected. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-11-04 10:27:00 +01:00
int hostapd_dpp_listen(struct hostapd_data *hapd, const char *cmd);
void hostapd_dpp_listen_stop(struct hostapd_data *hapd);
DPP: Integration for hostapd This adds DPP bootstrapping, authentication, and configuration into hostapd similarly to how the design was integrated in wpa_supplicant. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 21:16:45 +02:00
void hostapd_dpp_rx_action(struct hostapd_data *hapd, const u8 *src,
const u8 *buf, size_t len, unsigned int freq);
void hostapd_dpp_tx_status(struct hostapd_data *hapd, const u8 *dst,
const u8 *data, size_t data_len, int ok);
DPP: Configurator in hostapd This integrates DPP configuration request processing into hostapd GAS server implementation. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-07-03 11:56:48 +02:00
struct wpabuf *
hostapd_dpp_gas_req_handler(struct hostapd_data *hapd, const u8 *sa,
DPP2: hostapd as TCP Relay The new hostapd configuration parameter dpp_controller can now be used with the following subparameter values: ipaddr=<IP address> pkhash=<hexdump>. This adds a new Controller into the configuration (i.e., more than one can be configured) and all incoming DPP exchanges that match the specified Controller public key hash are relayed to the particular Controller. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-03-24 21:17:49 +01:00
const u8 *query, size_t query_len,
const u8 *data, size_t data_len);
DPP: Clear authentication instance on configuration completion in AP wpa_supplicant was already doing this and hostapd needs to clear hapd->dpp_auth when completing the exchange in Configurator (GAS server) role. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-11-27 19:33:43 +01:00
void hostapd_dpp_gas_status_handler(struct hostapd_data *hapd, int ok);
DPP: Configurator in hostapd This integrates DPP configuration request processing into hostapd GAS server implementation. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-07-03 11:56:48 +02:00
int hostapd_dpp_configurator_add(struct hostapd_data *hapd, const char *cmd);
int hostapd_dpp_configurator_remove(struct hostapd_data *hapd, const char *id);
DPP: Add DPP_CONFIGURATOR_SIGN support to hostapd Configurator signing its own Connector was previously supported only in wpa_supplicant. This commit extends that to hostapd to allow an AP acting as a Configurator to self-configure itself. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-11-27 11:43:40 +01:00
int hostapd_dpp_configurator_sign(struct hostapd_data *hapd, const char *cmd);
DPP: Support retrieving of configurator's private key To retain configurator information across hostapd/wpa_supplicant restart, private key need to be maintained to generate a valid pair of authentication keys (connector, netaccess_key, csign) for new enrollees in the network. Add a DPP_CONFIGURATOR_GET_KEY control interface API through which the private key of an existing configurator can be fetched. Command format: DPP_CONFIGURATOR_GET_KEY <configurator_id> The output from this command can then be used with "DPP_CONFIGURATOR_ADD key=<hexdump>" to create the same key again. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2018-03-16 11:04:21 +01:00
int hostapd_dpp_configurator_get_key(struct hostapd_data *hapd, unsigned int id,
char *buf, size_t buflen);
DPP: PKEX in hostapd Allow hostapd to initiate and respond with PKEX bootstrapping similarly to how this was implemented in wpa_supplicant. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-07-02 11:36:48 +02:00
int hostapd_dpp_pkex_add(struct hostapd_data *hapd, const char *cmd);
int hostapd_dpp_pkex_remove(struct hostapd_data *hapd, const char *id);
DPP: Stop authentication exchange of DPP_STOP_LISTEN Previously, this command stopped listen operation immediately, but if there was an ongoing authentication exchange, a new listen operation was started. This is not really expected behavior, so stop the authentication exchange first with this command to avoid restarting listen operation. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-11-13 11:12:08 +01:00
void hostapd_dpp_stop(struct hostapd_data *hapd);
DPP: Integration for hostapd This adds DPP bootstrapping, authentication, and configuration into hostapd similarly to how the design was integrated in wpa_supplicant. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 21:16:45 +02:00
int hostapd_dpp_init(struct hostapd_data *hapd);
void hostapd_dpp_deinit(struct hostapd_data *hapd);
DPP: Move hostapd Configurator/bootstrap data into global context This moves the Configurator and Bootstrapping Information data from struct hostapd_data (per-BSS) to struct hapd_interfaces (per-hostapd process). This allows the information to be maintained over interface restarts and shared between interfaces. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-11-27 12:22:32 +01:00
void hostapd_dpp_init_global(struct hapd_interfaces *ifaces);
void hostapd_dpp_deinit_global(struct hapd_interfaces *ifaces);
DPP: Integration for hostapd This adds DPP bootstrapping, authentication, and configuration into hostapd similarly to how the design was integrated in wpa_supplicant. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 21:16:45 +02:00
DPP2: Controller support in hostapd Extend hostapd support for DPP Controller to cover the DPP_CONTROLLER_* cases that were previously implemented only in wpa_supplicant. This allows hostapd/AP to be provisioned using DPP over TCP. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2020-08-25 14:53:08 +02:00
int hostapd_dpp_controller_start(struct hostapd_data *hapd, const char *cmd);
DPP2: Chirping in hostapd Enrollee Add a new hostapd control interface command "DPP_CHIRP own=<BI ID> iter=<count>" to request chirping, i.e., sending of Presence Announcement frames, to be started. This follows the model of similar wpa_supplicant functionality from commit 562f77144cd2 ("DPP2: Chirping in wpa_supplicant Enrollee"). The hostapd case requires the AP to be started without beaconing, i.e., with start_disabled=1 in hostapd configuration, to allow iteration of channels needed for chirping. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2020-05-13 16:11:40 +02:00
int hostapd_dpp_chirp(struct hostapd_data *hapd, const char *cmd);
void hostapd_dpp_chirp_stop(struct hostapd_data *hapd);
void hostapd_dpp_remove_bi(void *ctx, struct dpp_bootstrap_info *bi);
DPP3: Allow external configuration to be specified on AP for PB While the most likely production use case for DPP push button is to provision the AP's current configuration, there might be some use cases for providing different configuration. Add possibility for doing this by extending the DPP_PUSH_BUTTON command to accept an optional set of parameters similarly to the other DPP commands for the Configurator. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2022-07-07 23:12:07 +02:00
int hostapd_dpp_push_button(struct hostapd_data *hapd, const char *cmd);
DPP3: Push button bootstrap mechanism Add support to use a push button -based bootstrap mechanism with DPP. The new DPP_PUSH_BUTTON control interface command enables this mode on the AP/hostapd and station/wpa_supplicant. This goes through the following sequence of events: a suitable peer in active push button mode is discovered with session overlap detection, PKEX is executed with bootstrap key hash validation, DPP authentication and configuration exchanges are performed. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2022-07-06 16:11:12 +02:00
void hostapd_dpp_push_button_stop(struct hostapd_data *hapd);
DPP: Advertise Configurator connectivity on Relay automatically Instead of requiring explicit configuration through dpp_configurator_connectivity=1, advertise Configurator connectivity automatically if a Relay is configured with a Controller that can operate as a Responder. Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2022-07-23 15:54:47 +02:00
bool hostapd_dpp_configurator_connectivity(struct hostapd_data *hapd);
DPP: Allow Relay connections to Controllers to be added and removed The new control interface commands "DPP_RELAY_ADD_CONTROLLER <IP addr> <PK hash>" and "DPP_RELAY_REMOVE_CONTROLLER <IP addr>" can now be used to dynamically add and remove connections to Controllers for the cases where the connection is initialized through a DPP Public Action frame (i.e., Controller as the Responder). Signed-off-by: Jouni Malinen <quic_jouni@quicinc.com>
2022-07-23 16:41:00 +02:00
int hostapd_dpp_add_controller(struct hostapd_data *hapd, const char *cmd);
void hostapd_dpp_remove_controller(struct hostapd_data *hapd, const char *cmd);
DPP2: Chirping in hostapd Enrollee Add a new hostapd control interface command "DPP_CHIRP own=<BI ID> iter=<count>" to request chirping, i.e., sending of Presence Announcement frames, to be started. This follows the model of similar wpa_supplicant functionality from commit 562f77144cd2 ("DPP2: Chirping in wpa_supplicant Enrollee"). The hostapd case requires the AP to be started without beaconing, i.e., with start_disabled=1 in hostapd configuration, to allow iteration of channels needed for chirping. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2020-05-13 16:11:40 +02:00
DPP: Integration for hostapd This adds DPP bootstrapping, authentication, and configuration into hostapd similarly to how the design was integrated in wpa_supplicant. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 21:16:45 +02:00
#endif /* DPP_HOSTAPD_H */
Reference in a new issue Copy permalink