2008-02-28 02:34:43 +01:00
|
|
|
/*
|
|
|
|
* WPA Supplicant - RSN PMKSA cache
|
2012-02-04 11:32:35 +01:00
|
|
|
* Copyright (c) 2004-2009, 2011-2012, Jouni Malinen <j@w1.fi>
|
2008-02-28 02:34:43 +01:00
|
|
|
*
|
2012-02-11 15:46:35 +01:00
|
|
|
* This software may be distributed under the terms of the BSD license.
|
|
|
|
* See README for more details.
|
2008-02-28 02:34:43 +01:00
|
|
|
*/
|
|
|
|
|
|
|
|
#include "includes.h"
|
|
|
|
|
|
|
|
#include "common.h"
|
|
|
|
#include "eloop.h"
|
|
|
|
#include "eapol_supp/eapol_supp_sm.h"
|
2009-11-29 22:04:43 +01:00
|
|
|
#include "wpa.h"
|
|
|
|
#include "wpa_i.h"
|
2008-02-28 02:34:43 +01:00
|
|
|
#include "pmksa_cache.h"
|
|
|
|
|
2013-06-07 19:13:25 +02:00
|
|
|
#ifdef IEEE8021X_EAPOL
|
2008-02-28 02:34:43 +01:00
|
|
|
|
|
|
|
static const int pmksa_cache_max_entries = 32;
|
|
|
|
|
|
|
|
struct rsn_pmksa_cache {
|
|
|
|
struct rsn_pmksa_cache_entry *pmksa; /* PMKSA cache */
|
|
|
|
int pmksa_count; /* number of entries in PMKSA cache */
|
|
|
|
struct wpa_sm *sm; /* TODO: get rid of this reference(?) */
|
|
|
|
|
|
|
|
void (*free_cb)(struct rsn_pmksa_cache_entry *entry, void *ctx,
|
2012-11-25 20:27:18 +01:00
|
|
|
enum pmksa_free_reason reason);
|
2008-02-28 02:34:43 +01:00
|
|
|
void *ctx;
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
static void pmksa_cache_set_expiration(struct rsn_pmksa_cache *pmksa);
|
|
|
|
|
|
|
|
|
|
|
|
static void _pmksa_cache_free_entry(struct rsn_pmksa_cache_entry *entry)
|
|
|
|
{
|
|
|
|
os_free(entry);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void pmksa_cache_free_entry(struct rsn_pmksa_cache *pmksa,
|
|
|
|
struct rsn_pmksa_cache_entry *entry,
|
2012-11-25 20:27:18 +01:00
|
|
|
enum pmksa_free_reason reason)
|
2008-02-28 02:34:43 +01:00
|
|
|
{
|
2011-11-20 11:53:29 +01:00
|
|
|
wpa_sm_remove_pmkid(pmksa->sm, entry->aa, entry->pmkid);
|
2008-02-28 02:34:43 +01:00
|
|
|
pmksa->pmksa_count--;
|
2012-11-25 20:27:18 +01:00
|
|
|
pmksa->free_cb(entry, pmksa->ctx, reason);
|
2008-02-28 02:34:43 +01:00
|
|
|
_pmksa_cache_free_entry(entry);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void pmksa_cache_expire(void *eloop_ctx, void *timeout_ctx)
|
|
|
|
{
|
|
|
|
struct rsn_pmksa_cache *pmksa = eloop_ctx;
|
2013-12-16 21:08:34 +01:00
|
|
|
struct os_reltime now;
|
2008-02-28 02:34:43 +01:00
|
|
|
|
2013-12-16 21:08:34 +01:00
|
|
|
os_get_reltime(&now);
|
2008-02-28 02:34:43 +01:00
|
|
|
while (pmksa->pmksa && pmksa->pmksa->expiration <= now.sec) {
|
|
|
|
struct rsn_pmksa_cache_entry *entry = pmksa->pmksa;
|
|
|
|
pmksa->pmksa = entry->next;
|
|
|
|
wpa_printf(MSG_DEBUG, "RSN: expired PMKSA cache entry for "
|
|
|
|
MACSTR, MAC2STR(entry->aa));
|
2012-11-25 20:27:18 +01:00
|
|
|
pmksa_cache_free_entry(pmksa, entry, PMKSA_EXPIRE);
|
2008-02-28 02:34:43 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
pmksa_cache_set_expiration(pmksa);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void pmksa_cache_reauth(void *eloop_ctx, void *timeout_ctx)
|
|
|
|
{
|
|
|
|
struct rsn_pmksa_cache *pmksa = eloop_ctx;
|
|
|
|
pmksa->sm->cur_pmksa = NULL;
|
|
|
|
eapol_sm_request_reauth(pmksa->sm->eapol);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static void pmksa_cache_set_expiration(struct rsn_pmksa_cache *pmksa)
|
|
|
|
{
|
|
|
|
int sec;
|
|
|
|
struct rsn_pmksa_cache_entry *entry;
|
2013-12-16 21:08:34 +01:00
|
|
|
struct os_reltime now;
|
2008-02-28 02:34:43 +01:00
|
|
|
|
|
|
|
eloop_cancel_timeout(pmksa_cache_expire, pmksa, NULL);
|
|
|
|
eloop_cancel_timeout(pmksa_cache_reauth, pmksa, NULL);
|
|
|
|
if (pmksa->pmksa == NULL)
|
|
|
|
return;
|
2013-12-16 21:08:34 +01:00
|
|
|
os_get_reltime(&now);
|
2008-02-28 02:34:43 +01:00
|
|
|
sec = pmksa->pmksa->expiration - now.sec;
|
|
|
|
if (sec < 0)
|
|
|
|
sec = 0;
|
|
|
|
eloop_register_timeout(sec + 1, 0, pmksa_cache_expire, pmksa, NULL);
|
|
|
|
|
|
|
|
entry = pmksa->sm->cur_pmksa ? pmksa->sm->cur_pmksa :
|
2012-02-04 11:32:35 +01:00
|
|
|
pmksa_cache_get(pmksa, pmksa->sm->bssid, NULL, NULL);
|
2008-02-28 02:34:43 +01:00
|
|
|
if (entry) {
|
|
|
|
sec = pmksa->pmksa->reauth_time - now.sec;
|
|
|
|
if (sec < 0)
|
|
|
|
sec = 0;
|
|
|
|
eloop_register_timeout(sec, 0, pmksa_cache_reauth, pmksa,
|
|
|
|
NULL);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
* pmksa_cache_add - Add a PMKSA cache entry
|
|
|
|
* @pmksa: Pointer to PMKSA cache data from pmksa_cache_init()
|
|
|
|
* @pmk: The new pairwise master key
|
|
|
|
* @pmk_len: PMK length in bytes, usually PMK_LEN (32)
|
|
|
|
* @aa: Authenticator address
|
|
|
|
* @spa: Supplicant address
|
|
|
|
* @network_ctx: Network configuration context for this PMK
|
2008-08-31 21:57:28 +02:00
|
|
|
* @akmp: WPA_KEY_MGMT_* used in key derivation
|
2008-02-28 02:34:43 +01:00
|
|
|
* Returns: Pointer to the added PMKSA cache entry or %NULL on error
|
|
|
|
*
|
|
|
|
* This function create a PMKSA entry for a new PMK and adds it to the PMKSA
|
|
|
|
* cache. If an old entry is already in the cache for the same Authenticator,
|
|
|
|
* this entry will be replaced with the new entry. PMKID will be calculated
|
|
|
|
* based on the PMK and the driver interface is notified of the new PMKID.
|
|
|
|
*/
|
|
|
|
struct rsn_pmksa_cache_entry *
|
|
|
|
pmksa_cache_add(struct rsn_pmksa_cache *pmksa, const u8 *pmk, size_t pmk_len,
|
2008-08-31 21:57:28 +02:00
|
|
|
const u8 *aa, const u8 *spa, void *network_ctx, int akmp)
|
2008-02-28 02:34:43 +01:00
|
|
|
{
|
|
|
|
struct rsn_pmksa_cache_entry *entry, *pos, *prev;
|
2013-12-16 21:08:34 +01:00
|
|
|
struct os_reltime now;
|
2008-02-28 02:34:43 +01:00
|
|
|
|
2009-01-13 19:15:06 +01:00
|
|
|
if (pmk_len > PMK_LEN)
|
2008-02-28 02:34:43 +01:00
|
|
|
return NULL;
|
|
|
|
|
|
|
|
entry = os_zalloc(sizeof(*entry));
|
|
|
|
if (entry == NULL)
|
|
|
|
return NULL;
|
|
|
|
os_memcpy(entry->pmk, pmk, pmk_len);
|
|
|
|
entry->pmk_len = pmk_len;
|
2008-08-31 21:57:28 +02:00
|
|
|
rsn_pmkid(pmk, pmk_len, aa, spa, entry->pmkid,
|
|
|
|
wpa_key_mgmt_sha256(akmp));
|
2013-12-16 21:08:34 +01:00
|
|
|
os_get_reltime(&now);
|
2008-02-28 02:34:43 +01:00
|
|
|
entry->expiration = now.sec + pmksa->sm->dot11RSNAConfigPMKLifetime;
|
|
|
|
entry->reauth_time = now.sec + pmksa->sm->dot11RSNAConfigPMKLifetime *
|
|
|
|
pmksa->sm->dot11RSNAConfigPMKReauthThreshold / 100;
|
2008-08-31 21:57:28 +02:00
|
|
|
entry->akmp = akmp;
|
2008-02-28 02:34:43 +01:00
|
|
|
os_memcpy(entry->aa, aa, ETH_ALEN);
|
|
|
|
entry->network_ctx = network_ctx;
|
|
|
|
|
|
|
|
/* Replace an old entry for the same Authenticator (if found) with the
|
|
|
|
* new entry */
|
|
|
|
pos = pmksa->pmksa;
|
|
|
|
prev = NULL;
|
|
|
|
while (pos) {
|
|
|
|
if (os_memcmp(aa, pos->aa, ETH_ALEN) == 0) {
|
|
|
|
if (pos->pmk_len == pmk_len &&
|
|
|
|
os_memcmp(pos->pmk, pmk, pmk_len) == 0 &&
|
|
|
|
os_memcmp(pos->pmkid, entry->pmkid, PMKID_LEN) ==
|
|
|
|
0) {
|
|
|
|
wpa_printf(MSG_DEBUG, "WPA: reusing previous "
|
|
|
|
"PMKSA entry");
|
|
|
|
os_free(entry);
|
|
|
|
return pos;
|
|
|
|
}
|
|
|
|
if (prev == NULL)
|
|
|
|
pmksa->pmksa = pos->next;
|
|
|
|
else
|
|
|
|
prev->next = pos->next;
|
2011-10-02 18:36:37 +02:00
|
|
|
|
|
|
|
/*
|
|
|
|
* If OKC is used, there may be other PMKSA cache
|
|
|
|
* entries based on the same PMK. These needs to be
|
|
|
|
* flushed so that a new entry can be created based on
|
2013-05-22 12:24:30 +02:00
|
|
|
* the new PMK. Only clear other entries if they have a
|
|
|
|
* matching PMK and this PMK has been used successfully
|
|
|
|
* with the current AP, i.e., if opportunistic flag has
|
|
|
|
* been cleared in wpa_supplicant_key_neg_complete().
|
2011-10-02 18:36:37 +02:00
|
|
|
*/
|
2013-05-22 12:24:30 +02:00
|
|
|
wpa_printf(MSG_DEBUG, "RSN: Replace PMKSA entry for "
|
|
|
|
"the current AP and any PMKSA cache entry "
|
|
|
|
"that was based on the old PMK");
|
|
|
|
if (!pos->opportunistic)
|
|
|
|
pmksa_cache_flush(pmksa, network_ctx, pos->pmk,
|
|
|
|
pos->pmk_len);
|
|
|
|
pmksa_cache_free_entry(pmksa, pos, PMKSA_REPLACE);
|
2008-02-28 02:34:43 +01:00
|
|
|
break;
|
|
|
|
}
|
|
|
|
prev = pos;
|
|
|
|
pos = pos->next;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (pmksa->pmksa_count >= pmksa_cache_max_entries && pmksa->pmksa) {
|
|
|
|
/* Remove the oldest entry to make room for the new entry */
|
|
|
|
pos = pmksa->pmksa;
|
2012-08-10 16:55:17 +02:00
|
|
|
|
|
|
|
if (pos == pmksa->sm->cur_pmksa) {
|
|
|
|
/*
|
|
|
|
* Never remove the current PMKSA cache entry, since
|
|
|
|
* it's in use, and removing it triggers a needless
|
|
|
|
* deauthentication.
|
|
|
|
*/
|
|
|
|
pos = pos->next;
|
|
|
|
pmksa->pmksa->next = pos ? pos->next : NULL;
|
|
|
|
} else
|
|
|
|
pmksa->pmksa = pos->next;
|
|
|
|
|
|
|
|
if (pos) {
|
|
|
|
wpa_printf(MSG_DEBUG, "RSN: removed the oldest idle "
|
|
|
|
"PMKSA cache entry (for " MACSTR ") to "
|
|
|
|
"make room for new one",
|
|
|
|
MAC2STR(pos->aa));
|
2012-11-25 20:27:18 +01:00
|
|
|
pmksa_cache_free_entry(pmksa, pos, PMKSA_FREE);
|
2012-08-10 16:55:17 +02:00
|
|
|
}
|
2008-02-28 02:34:43 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
/* Add the new entry; order by expiration time */
|
|
|
|
pos = pmksa->pmksa;
|
|
|
|
prev = NULL;
|
|
|
|
while (pos) {
|
|
|
|
if (pos->expiration > entry->expiration)
|
|
|
|
break;
|
|
|
|
prev = pos;
|
|
|
|
pos = pos->next;
|
|
|
|
}
|
|
|
|
if (prev == NULL) {
|
|
|
|
entry->next = pmksa->pmksa;
|
|
|
|
pmksa->pmksa = entry;
|
|
|
|
pmksa_cache_set_expiration(pmksa);
|
|
|
|
} else {
|
|
|
|
entry->next = prev->next;
|
|
|
|
prev->next = entry;
|
|
|
|
}
|
|
|
|
pmksa->pmksa_count++;
|
2012-02-04 11:32:35 +01:00
|
|
|
wpa_printf(MSG_DEBUG, "RSN: Added PMKSA cache entry for " MACSTR
|
|
|
|
" network_ctx=%p", MAC2STR(entry->aa), network_ctx);
|
2008-02-28 02:34:43 +01:00
|
|
|
wpa_sm_add_pmkid(pmksa->sm, entry->aa, entry->pmkid);
|
|
|
|
|
|
|
|
return entry;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2011-09-07 16:46:00 +02:00
|
|
|
/**
|
|
|
|
* pmksa_cache_flush - Flush PMKSA cache entries for a specific network
|
|
|
|
* @pmksa: Pointer to PMKSA cache data from pmksa_cache_init()
|
|
|
|
* @network_ctx: Network configuration context or %NULL to flush all entries
|
2013-05-22 12:24:30 +02:00
|
|
|
* @pmk: PMK to match for or %NYLL to match all PMKs
|
|
|
|
* @pmk_len: PMK length
|
2011-09-07 16:46:00 +02:00
|
|
|
*/
|
2013-05-22 12:24:30 +02:00
|
|
|
void pmksa_cache_flush(struct rsn_pmksa_cache *pmksa, void *network_ctx,
|
|
|
|
const u8 *pmk, size_t pmk_len)
|
2011-09-07 16:46:00 +02:00
|
|
|
{
|
|
|
|
struct rsn_pmksa_cache_entry *entry, *prev = NULL, *tmp;
|
|
|
|
int removed = 0;
|
|
|
|
|
|
|
|
entry = pmksa->pmksa;
|
|
|
|
while (entry) {
|
2013-05-22 12:24:30 +02:00
|
|
|
if ((entry->network_ctx == network_ctx ||
|
|
|
|
network_ctx == NULL) &&
|
|
|
|
(pmk == NULL ||
|
|
|
|
(pmk_len == entry->pmk_len &&
|
|
|
|
os_memcmp(pmk, entry->pmk, pmk_len) == 0))) {
|
2011-09-07 16:46:00 +02:00
|
|
|
wpa_printf(MSG_DEBUG, "RSN: Flush PMKSA cache entry "
|
|
|
|
"for " MACSTR, MAC2STR(entry->aa));
|
|
|
|
if (prev)
|
|
|
|
prev->next = entry->next;
|
|
|
|
else
|
|
|
|
pmksa->pmksa = entry->next;
|
|
|
|
tmp = entry;
|
|
|
|
entry = entry->next;
|
2012-11-25 20:27:18 +01:00
|
|
|
pmksa_cache_free_entry(pmksa, tmp, PMKSA_FREE);
|
2011-09-07 16:46:00 +02:00
|
|
|
removed++;
|
|
|
|
} else {
|
|
|
|
prev = entry;
|
|
|
|
entry = entry->next;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
if (removed)
|
|
|
|
pmksa_cache_set_expiration(pmksa);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
2008-02-28 02:34:43 +01:00
|
|
|
/**
|
|
|
|
* pmksa_cache_deinit - Free all entries in PMKSA cache
|
|
|
|
* @pmksa: Pointer to PMKSA cache data from pmksa_cache_init()
|
|
|
|
*/
|
|
|
|
void pmksa_cache_deinit(struct rsn_pmksa_cache *pmksa)
|
|
|
|
{
|
|
|
|
struct rsn_pmksa_cache_entry *entry, *prev;
|
|
|
|
|
|
|
|
if (pmksa == NULL)
|
|
|
|
return;
|
|
|
|
|
|
|
|
entry = pmksa->pmksa;
|
|
|
|
pmksa->pmksa = NULL;
|
|
|
|
while (entry) {
|
|
|
|
prev = entry;
|
|
|
|
entry = entry->next;
|
|
|
|
os_free(prev);
|
|
|
|
}
|
|
|
|
pmksa_cache_set_expiration(pmksa);
|
|
|
|
os_free(pmksa);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
* pmksa_cache_get - Fetch a PMKSA cache entry
|
|
|
|
* @pmksa: Pointer to PMKSA cache data from pmksa_cache_init()
|
|
|
|
* @aa: Authenticator address or %NULL to match any
|
|
|
|
* @pmkid: PMKID or %NULL to match any
|
2012-02-04 11:32:35 +01:00
|
|
|
* @network_ctx: Network context or %NULL to match any
|
2008-02-28 02:34:43 +01:00
|
|
|
* Returns: Pointer to PMKSA cache entry or %NULL if no match was found
|
|
|
|
*/
|
|
|
|
struct rsn_pmksa_cache_entry * pmksa_cache_get(struct rsn_pmksa_cache *pmksa,
|
2012-02-04 11:32:35 +01:00
|
|
|
const u8 *aa, const u8 *pmkid,
|
|
|
|
const void *network_ctx)
|
2008-02-28 02:34:43 +01:00
|
|
|
{
|
|
|
|
struct rsn_pmksa_cache_entry *entry = pmksa->pmksa;
|
|
|
|
while (entry) {
|
|
|
|
if ((aa == NULL || os_memcmp(entry->aa, aa, ETH_ALEN) == 0) &&
|
|
|
|
(pmkid == NULL ||
|
2012-02-04 11:32:35 +01:00
|
|
|
os_memcmp(entry->pmkid, pmkid, PMKID_LEN) == 0) &&
|
|
|
|
(network_ctx == NULL || network_ctx == entry->network_ctx))
|
2008-02-28 02:34:43 +01:00
|
|
|
return entry;
|
|
|
|
entry = entry->next;
|
|
|
|
}
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
static struct rsn_pmksa_cache_entry *
|
|
|
|
pmksa_cache_clone_entry(struct rsn_pmksa_cache *pmksa,
|
|
|
|
const struct rsn_pmksa_cache_entry *old_entry,
|
|
|
|
const u8 *aa)
|
|
|
|
{
|
|
|
|
struct rsn_pmksa_cache_entry *new_entry;
|
|
|
|
|
|
|
|
new_entry = pmksa_cache_add(pmksa, old_entry->pmk, old_entry->pmk_len,
|
|
|
|
aa, pmksa->sm->own_addr,
|
2008-08-31 21:57:28 +02:00
|
|
|
old_entry->network_ctx, old_entry->akmp);
|
2008-02-28 02:34:43 +01:00
|
|
|
if (new_entry == NULL)
|
|
|
|
return NULL;
|
|
|
|
|
|
|
|
/* TODO: reorder entries based on expiration time? */
|
|
|
|
new_entry->expiration = old_entry->expiration;
|
|
|
|
new_entry->opportunistic = 1;
|
|
|
|
|
|
|
|
return new_entry;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
* pmksa_cache_get_opportunistic - Try to get an opportunistic PMKSA entry
|
|
|
|
* @pmksa: Pointer to PMKSA cache data from pmksa_cache_init()
|
|
|
|
* @network_ctx: Network configuration context
|
|
|
|
* @aa: Authenticator address for the new AP
|
|
|
|
* Returns: Pointer to a new PMKSA cache entry or %NULL if not available
|
|
|
|
*
|
|
|
|
* Try to create a new PMKSA cache entry opportunistically by guessing that the
|
|
|
|
* new AP is sharing the same PMK as another AP that has the same SSID and has
|
|
|
|
* already an entry in PMKSA cache.
|
|
|
|
*/
|
|
|
|
struct rsn_pmksa_cache_entry *
|
|
|
|
pmksa_cache_get_opportunistic(struct rsn_pmksa_cache *pmksa, void *network_ctx,
|
|
|
|
const u8 *aa)
|
|
|
|
{
|
|
|
|
struct rsn_pmksa_cache_entry *entry = pmksa->pmksa;
|
|
|
|
|
2011-09-16 17:45:15 +02:00
|
|
|
wpa_printf(MSG_DEBUG, "RSN: Consider " MACSTR " for OKC", MAC2STR(aa));
|
2008-02-28 02:34:43 +01:00
|
|
|
if (network_ctx == NULL)
|
|
|
|
return NULL;
|
|
|
|
while (entry) {
|
|
|
|
if (entry->network_ctx == network_ctx) {
|
|
|
|
entry = pmksa_cache_clone_entry(pmksa, entry, aa);
|
|
|
|
if (entry) {
|
|
|
|
wpa_printf(MSG_DEBUG, "RSN: added "
|
|
|
|
"opportunistic PMKSA cache entry "
|
|
|
|
"for " MACSTR, MAC2STR(aa));
|
|
|
|
}
|
|
|
|
return entry;
|
|
|
|
}
|
|
|
|
entry = entry->next;
|
|
|
|
}
|
|
|
|
return NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
* pmksa_cache_get_current - Get the current used PMKSA entry
|
|
|
|
* @sm: Pointer to WPA state machine data from wpa_sm_init()
|
|
|
|
* Returns: Pointer to the current PMKSA cache entry or %NULL if not available
|
|
|
|
*/
|
|
|
|
struct rsn_pmksa_cache_entry * pmksa_cache_get_current(struct wpa_sm *sm)
|
|
|
|
{
|
|
|
|
if (sm == NULL)
|
|
|
|
return NULL;
|
|
|
|
return sm->cur_pmksa;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
* pmksa_cache_clear_current - Clear the current PMKSA entry selection
|
|
|
|
* @sm: Pointer to WPA state machine data from wpa_sm_init()
|
|
|
|
*/
|
|
|
|
void pmksa_cache_clear_current(struct wpa_sm *sm)
|
|
|
|
{
|
|
|
|
if (sm == NULL)
|
|
|
|
return;
|
|
|
|
sm->cur_pmksa = NULL;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
* pmksa_cache_set_current - Set the current PMKSA entry selection
|
|
|
|
* @sm: Pointer to WPA state machine data from wpa_sm_init()
|
|
|
|
* @pmkid: PMKID for selecting PMKSA or %NULL if not used
|
|
|
|
* @bssid: BSSID for PMKSA or %NULL if not used
|
|
|
|
* @network_ctx: Network configuration context
|
|
|
|
* @try_opportunistic: Whether to allow opportunistic PMKSA caching
|
|
|
|
* Returns: 0 if PMKSA was found or -1 if no matching entry was found
|
|
|
|
*/
|
|
|
|
int pmksa_cache_set_current(struct wpa_sm *sm, const u8 *pmkid,
|
|
|
|
const u8 *bssid, void *network_ctx,
|
|
|
|
int try_opportunistic)
|
|
|
|
{
|
|
|
|
struct rsn_pmksa_cache *pmksa = sm->pmksa;
|
2012-02-04 11:32:35 +01:00
|
|
|
wpa_printf(MSG_DEBUG, "RSN: PMKSA cache search - network_ctx=%p "
|
|
|
|
"try_opportunistic=%d", network_ctx, try_opportunistic);
|
|
|
|
if (pmkid)
|
|
|
|
wpa_hexdump(MSG_DEBUG, "RSN: Search for PMKID",
|
|
|
|
pmkid, PMKID_LEN);
|
|
|
|
if (bssid)
|
|
|
|
wpa_printf(MSG_DEBUG, "RSN: Search for BSSID " MACSTR,
|
|
|
|
MAC2STR(bssid));
|
|
|
|
|
2008-02-28 02:34:43 +01:00
|
|
|
sm->cur_pmksa = NULL;
|
|
|
|
if (pmkid)
|
2012-02-04 11:32:35 +01:00
|
|
|
sm->cur_pmksa = pmksa_cache_get(pmksa, NULL, pmkid,
|
|
|
|
network_ctx);
|
2008-02-28 02:34:43 +01:00
|
|
|
if (sm->cur_pmksa == NULL && bssid)
|
2012-02-04 11:32:35 +01:00
|
|
|
sm->cur_pmksa = pmksa_cache_get(pmksa, bssid, NULL,
|
|
|
|
network_ctx);
|
2008-02-28 02:34:43 +01:00
|
|
|
if (sm->cur_pmksa == NULL && try_opportunistic && bssid)
|
|
|
|
sm->cur_pmksa = pmksa_cache_get_opportunistic(pmksa,
|
|
|
|
network_ctx,
|
|
|
|
bssid);
|
|
|
|
if (sm->cur_pmksa) {
|
2012-02-04 11:32:35 +01:00
|
|
|
wpa_hexdump(MSG_DEBUG, "RSN: PMKSA cache entry found - PMKID",
|
2008-02-28 02:34:43 +01:00
|
|
|
sm->cur_pmksa->pmkid, PMKID_LEN);
|
|
|
|
return 0;
|
|
|
|
}
|
2012-02-04 11:32:35 +01:00
|
|
|
wpa_printf(MSG_DEBUG, "RSN: No PMKSA cache entry found");
|
2008-02-28 02:34:43 +01:00
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
* pmksa_cache_list - Dump text list of entries in PMKSA cache
|
2009-01-13 19:22:42 +01:00
|
|
|
* @pmksa: Pointer to PMKSA cache data from pmksa_cache_init()
|
2008-02-28 02:34:43 +01:00
|
|
|
* @buf: Buffer for the list
|
|
|
|
* @len: Length of the buffer
|
|
|
|
* Returns: number of bytes written to buffer
|
|
|
|
*
|
|
|
|
* This function is used to generate a text format representation of the
|
|
|
|
* current PMKSA cache contents for the ctrl_iface PMKSA command.
|
|
|
|
*/
|
2009-01-13 19:22:42 +01:00
|
|
|
int pmksa_cache_list(struct rsn_pmksa_cache *pmksa, char *buf, size_t len)
|
2008-02-28 02:34:43 +01:00
|
|
|
{
|
|
|
|
int i, ret;
|
|
|
|
char *pos = buf;
|
|
|
|
struct rsn_pmksa_cache_entry *entry;
|
2013-12-16 21:08:34 +01:00
|
|
|
struct os_reltime now;
|
2008-02-28 02:34:43 +01:00
|
|
|
|
2013-12-16 21:08:34 +01:00
|
|
|
os_get_reltime(&now);
|
2008-02-28 02:34:43 +01:00
|
|
|
ret = os_snprintf(pos, buf + len - pos,
|
|
|
|
"Index / AA / PMKID / expiration (in seconds) / "
|
|
|
|
"opportunistic\n");
|
|
|
|
if (ret < 0 || ret >= buf + len - pos)
|
|
|
|
return pos - buf;
|
|
|
|
pos += ret;
|
|
|
|
i = 0;
|
2009-01-13 19:22:42 +01:00
|
|
|
entry = pmksa->pmksa;
|
2008-02-28 02:34:43 +01:00
|
|
|
while (entry) {
|
|
|
|
i++;
|
|
|
|
ret = os_snprintf(pos, buf + len - pos, "%d " MACSTR " ",
|
|
|
|
i, MAC2STR(entry->aa));
|
|
|
|
if (ret < 0 || ret >= buf + len - pos)
|
|
|
|
return pos - buf;
|
|
|
|
pos += ret;
|
|
|
|
pos += wpa_snprintf_hex(pos, buf + len - pos, entry->pmkid,
|
|
|
|
PMKID_LEN);
|
|
|
|
ret = os_snprintf(pos, buf + len - pos, " %d %d\n",
|
|
|
|
(int) (entry->expiration - now.sec),
|
|
|
|
entry->opportunistic);
|
|
|
|
if (ret < 0 || ret >= buf + len - pos)
|
|
|
|
return pos - buf;
|
|
|
|
pos += ret;
|
|
|
|
entry = entry->next;
|
|
|
|
}
|
|
|
|
return pos - buf;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
* pmksa_cache_init - Initialize PMKSA cache
|
|
|
|
* @free_cb: Callback function to be called when a PMKSA cache entry is freed
|
|
|
|
* @ctx: Context pointer for free_cb function
|
|
|
|
* @sm: Pointer to WPA state machine data from wpa_sm_init()
|
|
|
|
* Returns: Pointer to PMKSA cache data or %NULL on failure
|
|
|
|
*/
|
|
|
|
struct rsn_pmksa_cache *
|
|
|
|
pmksa_cache_init(void (*free_cb)(struct rsn_pmksa_cache_entry *entry,
|
2012-11-25 20:27:18 +01:00
|
|
|
void *ctx, enum pmksa_free_reason reason),
|
2008-02-28 02:34:43 +01:00
|
|
|
void *ctx, struct wpa_sm *sm)
|
|
|
|
{
|
|
|
|
struct rsn_pmksa_cache *pmksa;
|
|
|
|
|
|
|
|
pmksa = os_zalloc(sizeof(*pmksa));
|
|
|
|
if (pmksa) {
|
|
|
|
pmksa->free_cb = free_cb;
|
|
|
|
pmksa->ctx = ctx;
|
|
|
|
pmksa->sm = sm;
|
|
|
|
}
|
|
|
|
|
|
|
|
return pmksa;
|
|
|
|
}
|
|
|
|
|
2013-06-07 19:13:25 +02:00
|
|
|
#endif /* IEEE8021X_EAPOL */
|