src/ap/authsrv.c

107 	struct hostapd_bss_config *conf = hapd->conf;
109 	srv.client_file = conf->radius_server_clients;
110 	srv.auth_port = conf->radius_server_auth_port;
111 	srv.acct_port = conf->radius_server_acct_port;
116 	srv.pac_opaque_encr_key = conf->pac_opaque_encr_key;
117 	srv.eap_fast_a_id = conf->eap_fast_a_id;
118 	srv.eap_fast_a_id_len = conf->eap_fast_a_id_len;
119 	srv.eap_fast_a_id_info = conf->eap_fast_a_id_info;
120 	srv.eap_fast_prov = conf->eap_fast_prov;
121 	srv.pac_key_lifetime = conf->pac_key_lifetime;
122 	srv.pac_key_refresh_time = conf->pac_key_refresh_time;
123 	srv.eap_teap_auth = conf->eap_teap_auth;
124 	srv.eap_teap_pac_no_inner = conf->eap_teap_pac_no_inner;
125 	srv.eap_sim_aka_result_ind = conf->eap_sim_aka_result_ind;
126 	srv.eap_sim_id = conf->eap_sim_id;
127 	srv.tnc = conf->tnc;
129 	srv.ipv6 = conf->radius_server_ipv6;
131 	srv.eap_req_id_text = conf->eap_req_id_text;
132 	srv.eap_req_id_text_len = conf->eap_req_id_text_len;
133 	srv.pwd_group = conf->pwd_group;
134 	srv.server_id = conf->server_id ? conf->server_id : "hostapd";
135 	srv.sqlite_file = conf->eap_user_sqlite;
137 	srv.dump_msk_file = conf->dump_msk_file;
140 	srv.subscr_remediation_url = conf->subscr_remediation_url;
141 	srv.subscr_remediation_method = conf->subscr_remediation_method;
142 	srv.hs20_sim_provisioning_url = conf->hs20_sim_provisioning_url;
143 	srv.t_c_server_url = conf->t_c_server_url;
145 	srv.erp = conf->eap_server_erp;
146 	srv.erp_domain = conf->erp_domain;
147 	srv.tls_session_lifetime = conf->tls_session_lifetime;
148 	srv.tls_flags = conf->tls_flags;
199 	if (hapd->conf->eap_server &&
200 	    (hapd->conf->ca_cert || hapd->conf->server_cert ||
201 	     hapd->conf->private_key || hapd->conf->dh_file ||
202 	     hapd->conf->server_cert2 || hapd->conf->private_key2)) {
203 		struct tls_config conf;
206 		os_memset(&conf, 0, sizeof(conf));
207 		conf.tls_session_lifetime = hapd->conf->tls_session_lifetime;
208 		if (hapd->conf->crl_reload_interval > 0 &&
209 		    hapd->conf->check_crl <= 0) {
212 		} else if (hapd->conf->crl_reload_interval > 0) {
213 			conf.crl_reload_interval =
214 				hapd->conf->crl_reload_interval;
218 		conf.tls_flags = hapd->conf->tls_flags;
219 		conf.event_cb = authsrv_tls_event;
220 		conf.cb_ctx = hapd;
221 		hapd->ssl_ctx = tls_init(&conf);
229 		params.ca_cert = hapd->conf->ca_cert;
230 		params.client_cert = hapd->conf->server_cert;
231 		params.client_cert2 = hapd->conf->server_cert2;
232 		params.private_key = hapd->conf->private_key;
233 		params.private_key2 = hapd->conf->private_key2;
234 		params.private_key_passwd = hapd->conf->private_key_passwd;
235 		params.private_key_passwd2 = hapd->conf->private_key_passwd2;
236 		params.dh_file = hapd->conf->dh_file;
237 		params.openssl_ciphers = hapd->conf->openssl_ciphers;
238 		params.openssl_ecdh_curves = hapd->conf->openssl_ecdh_curves;
240 			hapd->conf->ocsp_stapling_response;
242 			hapd->conf->ocsp_stapling_response_multi;
243 		params.check_cert_subject = hapd->conf->check_cert_subject;
252 					  hapd->conf->check_crl,
253 					  hapd->conf->check_crl_strict)) {
262 	if (hapd->conf->eap_sim_db) {
264 			eap_sim_db_init(hapd->conf->eap_sim_db,
265 					hapd->conf->eap_sim_db_timeout,
277 	if (hapd->conf->radius_server_clients &&