Commit c0692b8f authored by Johannes Berg's avatar Johannes Berg Committed by John W. Linville
Browse files

cfg80211: allow changing port control protocol 



Some vendor specified mechanisms for 802.1X-style
functionality use a different protocol than EAP
(even if EAP is vendor-extensible). Allow setting
the ethertype for the protocol when a driver has
support for this. The default if unspecified is
EAP, of course.

Note: This is suitable only for station mode, not
      for AP implementation.

Signed-off-by: default avatarJohannes Berg <johannes.berg@intel.com>
Signed-off-by: default avatarJuuso Oikarinen <juuso.oikarinen@nokia.com>
Signed-off-by: default avatarJohn W. Linville <linville@tuxdriver.com>
parent 3ffc2a90

include/linux/nl80211.h

+15 −1
Original line number Diff line number Diff line
@@ -295,7 +295,9 @@ 
 *	auth and assoc steps. For this, you need to specify the SSID in a

 *	%NL80211_ATTR_SSID attribute, and can optionally specify the association

 *	IEs in %NL80211_ATTR_IE, %NL80211_ATTR_AUTH_TYPE, %NL80211_ATTR_MAC,

 *	%NL80211_ATTR_WIPHY_FREQ and %NL80211_ATTR_CONTROL_PORT.

 *	%NL80211_ATTR_WIPHY_FREQ, %NL80211_ATTR_CONTROL_PORT,

 *	%NL80211_ATTR_CONTROL_PORT_ETHERTYPE and

 *	%NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT.

 *	It is also sent as an event, with the BSSID and response IEs when the

 *	connection is established or failed to be established. This can be

 *	determined by the STATUS_CODE attribute.
@@ -686,6 +688,15 @@ enum nl80211_commands { 
 *	request, the driver will assume that the port is unauthorized until

 *	authorized by user space. Otherwise, port is marked authorized by

 *	default in station mode.

 * @NL80211_ATTR_CONTROL_PORT_ETHERTYPE: A 16-bit value indicating the

 *	ethertype that will be used for key negotiation. It can be

 *	specified with the associate and connect commands. If it is not

 *	specified, the value defaults to 0x888E (PAE, 802.1X). This

 *	attribute is also used as a flag in the wiphy information to

 *	indicate that protocols other than PAE are supported.

 * @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT: When included along with

 *	%NL80211_ATTR_CONTROL_PORT_ETHERTYPE, indicates that the custom

 *	ethertype frames used for key negotiation must not be encrypted.

 *

 * @NL80211_ATTR_TESTDATA: Testmode data blob, passed through to the driver.

 *	We recommend using nested, driver-specific attributes within this.
@@ -951,6 +962,9 @@ enum nl80211_attrs { 
	NL80211_ATTR_RX_FRAME_TYPES,

	NL80211_ATTR_FRAME_TYPE,



	NL80211_ATTR_CONTROL_PORT_ETHERTYPE,

	NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT,



	/* add attributes here, update the policy in nl80211.c */



	__NL80211_ATTR_AFTER_LAST,

include/net/cfg80211.h

+17 −7
Original line number Diff line number Diff line
@@ -763,6 +763,10 @@ const u8 *ieee80211_bss_get_ie(struct cfg80211_bss *bss, u8 ie); 
 *	sets/clears %NL80211_STA_FLAG_AUTHORIZED. If true, the driver is

 *	required to assume that the port is unauthorized until authorized by

 *	user space. Otherwise, port is marked authorized by default.

 * @control_port_ethertype: the control port protocol that should be

 *	allowed through even on unauthorized ports

 * @control_port_no_encrypt: TRUE to prevent encryption of control port

 *	protocol frames.

 */

struct cfg80211_crypto_settings {

	u32 wpa_versions;
@@ -772,6 +776,8 @@ struct cfg80211_crypto_settings { 
	int n_akm_suites;

	u32 akm_suites[NL80211_MAX_NR_AKM_SUITES];

	bool control_port;

	__be16 control_port_ethertype;

	bool control_port_no_encrypt;

};



/**
@@ -1293,6 +1299,9 @@ struct cfg80211_ops { 
 * @WIPHY_FLAG_4ADDR_AP: supports 4addr mode even on AP (with a single station

 *	on a VLAN interface)

 * @WIPHY_FLAG_4ADDR_STATION: supports 4addr mode even as a station

 * @WIPHY_FLAG_CONTROL_PORT_PROTOCOL: This device supports setting the

 *	control port protocol ethertype. The device also honours the

 *	control_port_no_encrypt flag.

 */

enum wiphy_flags {

	WIPHY_FLAG_CUSTOM_REGULATORY		= BIT(0),
@@ -1302,6 +1311,7 @@ enum wiphy_flags { 
	WIPHY_FLAG_PS_ON_BY_DEFAULT		= BIT(4),

	WIPHY_FLAG_4ADDR_AP			= BIT(5),

	WIPHY_FLAG_4ADDR_STATION		= BIT(6),

	WIPHY_FLAG_CONTROL_PORT_PROTOCOL	= BIT(7),

};



struct mac_address {

net/wireless/nl80211.c

+22 −3
Original line number Diff line number Diff line
@@ -136,6 +136,8 @@ static const struct nla_policy nl80211_policy[NL80211_ATTR_MAX+1] = { 
		.len = sizeof(struct nl80211_sta_flag_update),

	},

	[NL80211_ATTR_CONTROL_PORT] = { .type = NLA_FLAG },

	[NL80211_ATTR_CONTROL_PORT_ETHERTYPE] = { .type = NLA_U16 },

	[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT] = { .type = NLA_FLAG },

	[NL80211_ATTR_PRIVACY] = { .type = NLA_FLAG },

	[NL80211_ATTR_CIPHER_SUITE_GROUP] = { .type = NLA_U32 },

	[NL80211_ATTR_WPA_VERSIONS] = { .type = NLA_U32 },
@@ -474,6 +476,9 @@ static int nl80211_send_wiphy(struct sk_buff *msg, u32 pid, u32 seq, int flags, 
	NLA_PUT_U8(msg, NL80211_ATTR_MAX_NUM_PMKIDS,

		   dev->wiphy.max_num_pmkids);



	if (dev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL)

		NLA_PUT_FLAG(msg, NL80211_ATTR_CONTROL_PORT_ETHERTYPE);



	nl_modes = nla_nest_start(msg, NL80211_ATTR_SUPPORTED_IFTYPES);

	if (!nl_modes)

		goto nla_put_failure;
@@ -3691,7 +3696,8 @@ unlock_rtnl: 
	return err;

}



static int nl80211_crypto_settings(struct genl_info *info,

static int nl80211_crypto_settings(struct cfg80211_registered_device *rdev,

				   struct genl_info *info,

				   struct cfg80211_crypto_settings *settings,

				   int cipher_limit)

{
@@ -3699,6 +3705,19 @@ static int nl80211_crypto_settings(struct genl_info *info, 


	settings->control_port = info->attrs[NL80211_ATTR_CONTROL_PORT];



	if (info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]) {

		u16 proto;

		proto = nla_get_u16(

			info->attrs[NL80211_ATTR_CONTROL_PORT_ETHERTYPE]);

		settings->control_port_ethertype = cpu_to_be16(proto);

		if (!(rdev->wiphy.flags & WIPHY_FLAG_CONTROL_PORT_PROTOCOL) &&

		    proto != ETH_P_PAE)

			return -EINVAL;

		if (info->attrs[NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT])

			settings->control_port_no_encrypt = true;

	} else

		settings->control_port_ethertype = cpu_to_be16(ETH_P_PAE);



	if (info->attrs[NL80211_ATTR_CIPHER_SUITES_PAIRWISE]) {

		void *data;

		int len, i;
@@ -3826,7 +3845,7 @@ static int nl80211_associate(struct sk_buff *skb, struct genl_info *info) 
	if (info->attrs[NL80211_ATTR_PREV_BSSID])

		prev_bssid = nla_data(info->attrs[NL80211_ATTR_PREV_BSSID]);



	err = nl80211_crypto_settings(info, &crypto, 1);

	err = nl80211_crypto_settings(rdev, info, &crypto, 1);

	if (!err)

		err = cfg80211_mlme_assoc(rdev, dev, chan, bssid, prev_bssid,

					  ssid, ssid_len, ie, ie_len, use_mfp,
@@ -4303,7 +4322,7 @@ static int nl80211_connect(struct sk_buff *skb, struct genl_info *info) 


	connect.privacy = info->attrs[NL80211_ATTR_PRIVACY];



	err = nl80211_crypto_settings(info, &connect.crypto,

	err = nl80211_crypto_settings(rdev, info, &connect.crypto,

				      NL80211_MAX_NR_CIPHER_SUITES);

	if (err)

		return err;

net/wireless/wext-sme.c

+2 −0
Original line number Diff line number Diff line
@@ -197,6 +197,8 @@ int cfg80211_mgd_wext_siwessid(struct net_device *dev, 
	wdev->wext.connect.ssid_len = len;



	wdev->wext.connect.crypto.control_port = false;

	wdev->wext.connect.crypto.control_port_ethertype =

					cpu_to_be16(ETH_P_PAE);



	err = cfg80211_mgd_wext_connect(rdev, wdev);

 out:

CRA Git | Maintained and supported by SUSTech CRA and CCSE