Line data Source code
1 : /*
2 : * hostapd / EAP-Identity
3 : * Copyright (c) 2004-2006, Jouni Malinen <j@w1.fi>
4 : *
5 : * This software may be distributed under the terms of the BSD license.
6 : * See README for more details.
7 : */
8 :
9 : #include "includes.h"
10 :
11 : #include "common.h"
12 : #include "eap_i.h"
13 :
14 :
15 : struct eap_identity_data {
16 : enum { CONTINUE, SUCCESS, FAILURE } state;
17 : int pick_up;
18 : };
19 :
20 :
21 904 : static void * eap_identity_init(struct eap_sm *sm)
22 : {
23 : struct eap_identity_data *data;
24 :
25 904 : data = os_zalloc(sizeof(*data));
26 904 : if (data == NULL)
27 0 : return NULL;
28 904 : data->state = CONTINUE;
29 :
30 904 : return data;
31 : }
32 :
33 :
34 304 : static void * eap_identity_initPickUp(struct eap_sm *sm)
35 : {
36 : struct eap_identity_data *data;
37 304 : data = eap_identity_init(sm);
38 304 : if (data) {
39 304 : data->pick_up = 1;
40 : }
41 304 : return data;
42 : }
43 :
44 :
45 904 : static void eap_identity_reset(struct eap_sm *sm, void *priv)
46 : {
47 904 : struct eap_identity_data *data = priv;
48 904 : os_free(data);
49 904 : }
50 :
51 :
52 587 : static struct wpabuf * eap_identity_buildReq(struct eap_sm *sm, void *priv,
53 : u8 id)
54 : {
55 587 : struct eap_identity_data *data = priv;
56 : struct wpabuf *req;
57 : const char *req_data;
58 : size_t req_data_len;
59 :
60 587 : if (sm->eapol_cb->get_eap_req_id_text) {
61 587 : req_data = sm->eapol_cb->get_eap_req_id_text(sm->eapol_ctx,
62 : &req_data_len);
63 : } else {
64 0 : req_data = NULL;
65 0 : req_data_len = 0;
66 : }
67 587 : req = eap_msg_alloc(EAP_VENDOR_IETF, EAP_TYPE_IDENTITY, req_data_len,
68 : EAP_CODE_REQUEST, id);
69 587 : if (req == NULL) {
70 0 : wpa_printf(MSG_ERROR, "EAP-Identity: Failed to allocate "
71 : "memory for request");
72 0 : data->state = FAILURE;
73 0 : return NULL;
74 : }
75 :
76 587 : wpabuf_put_data(req, req_data, req_data_len);
77 :
78 587 : return req;
79 : }
80 :
81 :
82 900 : static Boolean eap_identity_check(struct eap_sm *sm, void *priv,
83 : struct wpabuf *respData)
84 : {
85 : const u8 *pos;
86 : size_t len;
87 :
88 900 : pos = eap_hdr_validate(EAP_VENDOR_IETF, EAP_TYPE_IDENTITY,
89 : respData, &len);
90 900 : if (pos == NULL) {
91 0 : wpa_printf(MSG_INFO, "EAP-Identity: Invalid frame");
92 0 : return TRUE;
93 : }
94 :
95 900 : return FALSE;
96 : }
97 :
98 :
99 900 : static void eap_identity_process(struct eap_sm *sm, void *priv,
100 : struct wpabuf *respData)
101 : {
102 900 : struct eap_identity_data *data = priv;
103 : const u8 *pos;
104 : size_t len;
105 : char *buf;
106 :
107 900 : if (data->pick_up) {
108 304 : if (eap_identity_check(sm, data, respData)) {
109 0 : wpa_printf(MSG_DEBUG, "EAP-Identity: failed to pick "
110 : "up already started negotiation");
111 0 : data->state = FAILURE;
112 0 : return;
113 : }
114 304 : data->pick_up = 0;
115 : }
116 :
117 900 : pos = eap_hdr_validate(EAP_VENDOR_IETF, EAP_TYPE_IDENTITY,
118 : respData, &len);
119 900 : if (pos == NULL)
120 0 : return; /* Should not happen - frame already validated */
121 :
122 900 : wpa_hexdump_ascii(MSG_DEBUG, "EAP-Identity: Peer identity", pos, len);
123 900 : buf = os_malloc(len * 3 + 1);
124 900 : if (buf) {
125 900 : printf_encode(buf, len * 3 + 1, pos, len);
126 900 : eap_log_msg(sm, "EAP-Response/Identity '%s'", buf);
127 900 : os_free(buf);
128 : }
129 900 : if (sm->identity)
130 53 : sm->update_user = TRUE;
131 900 : os_free(sm->identity);
132 900 : sm->identity = os_malloc(len ? len : 1);
133 900 : if (sm->identity == NULL) {
134 0 : data->state = FAILURE;
135 : } else {
136 900 : os_memcpy(sm->identity, pos, len);
137 900 : sm->identity_len = len;
138 900 : data->state = SUCCESS;
139 : }
140 : }
141 :
142 :
143 1441 : static Boolean eap_identity_isDone(struct eap_sm *sm, void *priv)
144 : {
145 1441 : struct eap_identity_data *data = priv;
146 1441 : return data->state != CONTINUE;
147 : }
148 :
149 :
150 594 : static Boolean eap_identity_isSuccess(struct eap_sm *sm, void *priv)
151 : {
152 594 : struct eap_identity_data *data = priv;
153 594 : return data->state == SUCCESS;
154 : }
155 :
156 :
157 6 : int eap_server_identity_register(void)
158 : {
159 : struct eap_method *eap;
160 : int ret;
161 :
162 6 : eap = eap_server_method_alloc(EAP_SERVER_METHOD_INTERFACE_VERSION,
163 : EAP_VENDOR_IETF, EAP_TYPE_IDENTITY,
164 : "Identity");
165 6 : if (eap == NULL)
166 0 : return -1;
167 :
168 6 : eap->init = eap_identity_init;
169 6 : eap->initPickUp = eap_identity_initPickUp;
170 6 : eap->reset = eap_identity_reset;
171 6 : eap->buildReq = eap_identity_buildReq;
172 6 : eap->check = eap_identity_check;
173 6 : eap->process = eap_identity_process;
174 6 : eap->isDone = eap_identity_isDone;
175 6 : eap->isSuccess = eap_identity_isSuccess;
176 :
177 6 : ret = eap_server_method_register(eap);
178 6 : if (ret)
179 0 : eap_server_method_free(eap);
180 6 : return ret;
181 : }
|
