1214501Srpaulo/* 2214501Srpaulo * hostapd / EAP-Identity 3214501Srpaulo * Copyright (c) 2004-2006, Jouni Malinen <j@w1.fi> 4214501Srpaulo * 5252726Srpaulo * This software may be distributed under the terms of the BSD license. 6252726Srpaulo * See README for more details. 7214501Srpaulo */ 8214501Srpaulo 9214501Srpaulo#include "includes.h" 10214501Srpaulo 11214501Srpaulo#include "common.h" 12214501Srpaulo#include "eap_i.h" 13214501Srpaulo 14214501Srpaulo 15214501Srpaulostruct eap_identity_data { 16214501Srpaulo enum { CONTINUE, SUCCESS, FAILURE } state; 17214501Srpaulo int pick_up; 18214501Srpaulo}; 19214501Srpaulo 20214501Srpaulo 21214501Srpaulostatic void * eap_identity_init(struct eap_sm *sm) 22214501Srpaulo{ 23214501Srpaulo struct eap_identity_data *data; 24214501Srpaulo 25214501Srpaulo data = os_zalloc(sizeof(*data)); 26214501Srpaulo if (data == NULL) 27214501Srpaulo return NULL; 28214501Srpaulo data->state = CONTINUE; 29214501Srpaulo 30214501Srpaulo return data; 31214501Srpaulo} 32214501Srpaulo 33214501Srpaulo 34214501Srpaulostatic void * eap_identity_initPickUp(struct eap_sm *sm) 35214501Srpaulo{ 36214501Srpaulo struct eap_identity_data *data; 37214501Srpaulo data = eap_identity_init(sm); 38214501Srpaulo if (data) { 39214501Srpaulo data->pick_up = 1; 40214501Srpaulo } 41214501Srpaulo return data; 42214501Srpaulo} 43214501Srpaulo 44214501Srpaulo 45214501Srpaulostatic void eap_identity_reset(struct eap_sm *sm, void *priv) 46214501Srpaulo{ 47214501Srpaulo struct eap_identity_data *data = priv; 48214501Srpaulo os_free(data); 49214501Srpaulo} 50214501Srpaulo 51214501Srpaulo 52214501Srpaulostatic struct wpabuf * eap_identity_buildReq(struct eap_sm *sm, void *priv, 53214501Srpaulo u8 id) 54214501Srpaulo{ 55214501Srpaulo struct eap_identity_data *data = priv; 56214501Srpaulo struct wpabuf *req; 57214501Srpaulo const char *req_data; 58214501Srpaulo size_t req_data_len; 59214501Srpaulo 60214501Srpaulo if (sm->eapol_cb->get_eap_req_id_text) { 61214501Srpaulo req_data = sm->eapol_cb->get_eap_req_id_text(sm->eapol_ctx, 62214501Srpaulo &req_data_len); 63214501Srpaulo } else { 64214501Srpaulo req_data = NULL; 65214501Srpaulo req_data_len = 0; 66214501Srpaulo } 67214501Srpaulo req = eap_msg_alloc(EAP_VENDOR_IETF, EAP_TYPE_IDENTITY, req_data_len, 68214501Srpaulo EAP_CODE_REQUEST, id); 69214501Srpaulo if (req == NULL) { 70214501Srpaulo wpa_printf(MSG_ERROR, "EAP-Identity: Failed to allocate " 71214501Srpaulo "memory for request"); 72214501Srpaulo data->state = FAILURE; 73214501Srpaulo return NULL; 74214501Srpaulo } 75214501Srpaulo 76214501Srpaulo wpabuf_put_data(req, req_data, req_data_len); 77214501Srpaulo 78214501Srpaulo return req; 79214501Srpaulo} 80214501Srpaulo 81214501Srpaulo 82214501Srpaulostatic Boolean eap_identity_check(struct eap_sm *sm, void *priv, 83214501Srpaulo struct wpabuf *respData) 84214501Srpaulo{ 85214501Srpaulo const u8 *pos; 86214501Srpaulo size_t len; 87214501Srpaulo 88214501Srpaulo pos = eap_hdr_validate(EAP_VENDOR_IETF, EAP_TYPE_IDENTITY, 89214501Srpaulo respData, &len); 90214501Srpaulo if (pos == NULL) { 91214501Srpaulo wpa_printf(MSG_INFO, "EAP-Identity: Invalid frame"); 92214501Srpaulo return TRUE; 93214501Srpaulo } 94214501Srpaulo 95214501Srpaulo return FALSE; 96214501Srpaulo} 97214501Srpaulo 98214501Srpaulo 99214501Srpaulostatic void eap_identity_process(struct eap_sm *sm, void *priv, 100214501Srpaulo struct wpabuf *respData) 101214501Srpaulo{ 102214501Srpaulo struct eap_identity_data *data = priv; 103214501Srpaulo const u8 *pos; 104214501Srpaulo size_t len; 105281806Srpaulo char *buf; 106214501Srpaulo 107214501Srpaulo if (data->pick_up) { 108214501Srpaulo if (eap_identity_check(sm, data, respData)) { 109214501Srpaulo wpa_printf(MSG_DEBUG, "EAP-Identity: failed to pick " 110214501Srpaulo "up already started negotiation"); 111214501Srpaulo data->state = FAILURE; 112214501Srpaulo return; 113214501Srpaulo } 114214501Srpaulo data->pick_up = 0; 115214501Srpaulo } 116214501Srpaulo 117214501Srpaulo pos = eap_hdr_validate(EAP_VENDOR_IETF, EAP_TYPE_IDENTITY, 118214501Srpaulo respData, &len); 119214501Srpaulo if (pos == NULL) 120214501Srpaulo return; /* Should not happen - frame already validated */ 121214501Srpaulo 122214501Srpaulo wpa_hexdump_ascii(MSG_DEBUG, "EAP-Identity: Peer identity", pos, len); 123281806Srpaulo buf = os_malloc(len * 4 + 1); 124281806Srpaulo if (buf) { 125281806Srpaulo printf_encode(buf, len * 4 + 1, pos, len); 126281806Srpaulo eap_log_msg(sm, "EAP-Response/Identity '%s'", buf); 127281806Srpaulo os_free(buf); 128281806Srpaulo } 129214501Srpaulo if (sm->identity) 130214501Srpaulo sm->update_user = TRUE; 131214501Srpaulo os_free(sm->identity); 132214501Srpaulo sm->identity = os_malloc(len ? len : 1); 133214501Srpaulo if (sm->identity == NULL) { 134214501Srpaulo data->state = FAILURE; 135214501Srpaulo } else { 136214501Srpaulo os_memcpy(sm->identity, pos, len); 137214501Srpaulo sm->identity_len = len; 138214501Srpaulo data->state = SUCCESS; 139214501Srpaulo } 140214501Srpaulo} 141214501Srpaulo 142214501Srpaulo 143214501Srpaulostatic Boolean eap_identity_isDone(struct eap_sm *sm, void *priv) 144214501Srpaulo{ 145214501Srpaulo struct eap_identity_data *data = priv; 146214501Srpaulo return data->state != CONTINUE; 147214501Srpaulo} 148214501Srpaulo 149214501Srpaulo 150214501Srpaulostatic Boolean eap_identity_isSuccess(struct eap_sm *sm, void *priv) 151214501Srpaulo{ 152214501Srpaulo struct eap_identity_data *data = priv; 153214501Srpaulo return data->state == SUCCESS; 154214501Srpaulo} 155214501Srpaulo 156214501Srpaulo 157214501Srpauloint eap_server_identity_register(void) 158214501Srpaulo{ 159214501Srpaulo struct eap_method *eap; 160214501Srpaulo 161214501Srpaulo eap = eap_server_method_alloc(EAP_SERVER_METHOD_INTERFACE_VERSION, 162214501Srpaulo EAP_VENDOR_IETF, EAP_TYPE_IDENTITY, 163214501Srpaulo "Identity"); 164214501Srpaulo if (eap == NULL) 165214501Srpaulo return -1; 166214501Srpaulo 167214501Srpaulo eap->init = eap_identity_init; 168214501Srpaulo eap->initPickUp = eap_identity_initPickUp; 169214501Srpaulo eap->reset = eap_identity_reset; 170214501Srpaulo eap->buildReq = eap_identity_buildReq; 171214501Srpaulo eap->check = eap_identity_check; 172214501Srpaulo eap->process = eap_identity_process; 173214501Srpaulo eap->isDone = eap_identity_isDone; 174214501Srpaulo eap->isSuccess = eap_identity_isSuccess; 175214501Srpaulo 176337817Scy return eap_server_method_register(eap); 177214501Srpaulo} 178