| 1 | /* |
| 2 | * hostapd / EAP-Identity |
| 3 | * Copyright (c) 2004-2006, Jouni Malinen <j@w1.fi> |
| 4 | * |
| 5 | * This software may be distributed under the terms of the BSD license. |
| 6 | * See README for more details. |
| 7 | */ |
| 8 | |
| 9 | #include "includes.h" |
| 10 | |
| 11 | #include "common.h" |
| 12 | #include "eap_i.h" |
| 13 | |
| 14 | |
| 15 | struct eap_identity_data { |
| 16 | enum { CONTINUE, SUCCESS, FAILURE } state; |
| 17 | int pick_up; |
| 18 | }; |
| 19 | |
| 20 | |
| 21 | static void * eap_identity_init(struct eap_sm *sm) |
| 22 | { |
| 23 | struct eap_identity_data *data; |
| 24 | |
| 25 | data = os_zalloc(sizeof(*data)); |
| 26 | if (data == NULL) |
| 27 | return NULL; |
| 28 | data->state = CONTINUE; |
| 29 | |
| 30 | return data; |
| 31 | } |
| 32 | |
| 33 | |
| 34 | static void * eap_identity_initPickUp(struct eap_sm *sm) |
| 35 | { |
| 36 | struct eap_identity_data *data; |
| 37 | data = eap_identity_init(sm); |
| 38 | if (data) { |
| 39 | data->pick_up = 1; |
| 40 | } |
| 41 | return data; |
| 42 | } |
| 43 | |
| 44 | |
| 45 | static void eap_identity_reset(struct eap_sm *sm, void *priv) |
| 46 | { |
| 47 | struct eap_identity_data *data = priv; |
| 48 | os_free(data); |
| 49 | } |
| 50 | |
| 51 | |
| 52 | static struct wpabuf * eap_identity_buildReq(struct eap_sm *sm, void *priv, |
| 53 | u8 id) |
| 54 | { |
| 55 | struct eap_identity_data *data = priv; |
| 56 | struct wpabuf *req; |
| 57 | const char *req_data; |
| 58 | size_t req_data_len; |
| 59 | |
| 60 | if (sm->eapol_cb->get_eap_req_id_text) { |
| 61 | req_data = sm->eapol_cb->get_eap_req_id_text(sm->eapol_ctx, |
| 62 | &req_data_len); |
| 63 | } else { |
| 64 | req_data = NULL; |
| 65 | req_data_len = 0; |
| 66 | } |
| 67 | req = eap_msg_alloc(EAP_VENDOR_IETF, EAP_TYPE_IDENTITY, req_data_len, |
| 68 | EAP_CODE_REQUEST, id); |
| 69 | if (req == NULL) { |
| 70 | wpa_printf(MSG_ERROR, "EAP-Identity: Failed to allocate " |
| 71 | "memory for request"); |
| 72 | data->state = FAILURE; |
| 73 | return NULL; |
| 74 | } |
| 75 | |
| 76 | wpabuf_put_data(req, req_data, req_data_len); |
| 77 | |
| 78 | return req; |
| 79 | } |
| 80 | |
| 81 | |
| 82 | static Boolean eap_identity_check(struct eap_sm *sm, void *priv, |
| 83 | struct wpabuf *respData) |
| 84 | { |
| 85 | const u8 *pos; |
| 86 | size_t len; |
| 87 | |
| 88 | pos = eap_hdr_validate(EAP_VENDOR_IETF, EAP_TYPE_IDENTITY, |
| 89 | respData, &len); |
| 90 | if (pos == NULL) { |
| 91 | wpa_printf(MSG_INFO, "EAP-Identity: Invalid frame"); |
| 92 | return TRUE; |
| 93 | } |
| 94 | |
| 95 | return FALSE; |
| 96 | } |
| 97 | |
| 98 | |
| 99 | static void eap_identity_process(struct eap_sm *sm, void *priv, |
| 100 | struct wpabuf *respData) |
| 101 | { |
| 102 | struct eap_identity_data *data = priv; |
| 103 | const u8 *pos; |
| 104 | size_t len; |
| 105 | |
| 106 | if (data->pick_up) { |
| 107 | if (eap_identity_check(sm, data, respData)) { |
| 108 | wpa_printf(MSG_DEBUG, "EAP-Identity: failed to pick " |
| 109 | "up already started negotiation"); |
| 110 | data->state = FAILURE; |
| 111 | return; |
| 112 | } |
| 113 | data->pick_up = 0; |
| 114 | } |
| 115 | |
| 116 | pos = eap_hdr_validate(EAP_VENDOR_IETF, EAP_TYPE_IDENTITY, |
| 117 | respData, &len); |
| 118 | if (pos == NULL) |
| 119 | return; /* Should not happen - frame already validated */ |
| 120 | |
| 121 | wpa_hexdump_ascii(MSG_DEBUG, "EAP-Identity: Peer identity", pos, len); |
| 122 | if (sm->identity) |
| 123 | sm->update_user = TRUE; |
| 124 | os_free(sm->identity); |
| 125 | sm->identity = os_malloc(len ? len : 1); |
| 126 | if (sm->identity == NULL) { |
| 127 | data->state = FAILURE; |
| 128 | } else { |
| 129 | os_memcpy(sm->identity, pos, len); |
| 130 | sm->identity_len = len; |
| 131 | data->state = SUCCESS; |
| 132 | } |
| 133 | } |
| 134 | |
| 135 | |
| 136 | static Boolean eap_identity_isDone(struct eap_sm *sm, void *priv) |
| 137 | { |
| 138 | struct eap_identity_data *data = priv; |
| 139 | return data->state != CONTINUE; |
| 140 | } |
| 141 | |
| 142 | |
| 143 | static Boolean eap_identity_isSuccess(struct eap_sm *sm, void *priv) |
| 144 | { |
| 145 | struct eap_identity_data *data = priv; |
| 146 | return data->state == SUCCESS; |
| 147 | } |
| 148 | |
| 149 | |
| 150 | int eap_server_identity_register(void) |
| 151 | { |
| 152 | struct eap_method *eap; |
| 153 | int ret; |
| 154 | |
| 155 | eap = eap_server_method_alloc(EAP_SERVER_METHOD_INTERFACE_VERSION, |
| 156 | EAP_VENDOR_IETF, EAP_TYPE_IDENTITY, |
| 157 | "Identity"); |
| 158 | if (eap == NULL) |
| 159 | return -1; |
| 160 | |
| 161 | eap->init = eap_identity_init; |
| 162 | eap->initPickUp = eap_identity_initPickUp; |
| 163 | eap->reset = eap_identity_reset; |
| 164 | eap->buildReq = eap_identity_buildReq; |
| 165 | eap->check = eap_identity_check; |
| 166 | eap->process = eap_identity_process; |
| 167 | eap->isDone = eap_identity_isDone; |
| 168 | eap->isSuccess = eap_identity_isSuccess; |
| 169 | |
| 170 | ret = eap_server_method_register(eap); |
| 171 | if (ret) |
| 172 | eap_server_method_free(eap); |
| 173 | return ret; |
| 174 | } |