hostapd的radius/eap server代码分析(4)-在windows下启动hostapd的radius/eap server

hostapd的radius/eap server代码分析(4)-在windows下启动hostapd的radius/eap server

 

NJZhuJinhua@csdn May.14, 2010

mail:jinhua1982@gmail.com
http://blog.csdn.net/njzhujinhua

转载请注明出处。

 

为了更好的调测hostapd，通过删减及增加必要代码实现了windows下的hostapd框架，框架仍然读的是hostapd的配置文件，安全关联，用户信息等。

 

这个架子仅简单搭建，仅为实现hostapd的启动，用于协议研究。同时也描述了实现backend authentication server要做的一些事情。

 

 

1：main函数，很简单就两大步  @main.cpp

int main(int argc,char ** const argv)

{

    // 初始化radius及EAP server

    InitEAP();

    if (argc == 1)

    {

        cout<<"usage:prog ip:port"<

        return -1;

    }

    // 启动业务线程，处理消息。我是通过ACE的ACE_Event_Handler及ACE_Reactor实现的，这不是重点，不放出。

    RunEapServer(argv[1]);

    return 0;

};

 

 

2:@initeap.cpp

//extern hostapd_data *g_hostapdcfg;

extern void         *g_ssl_context;

extern void         *g_eap_sim_db_priv;

char                *g_config_fname = "./config/hostapd.conf";

radius_server_data  *g_radius_server_data = NULL;

 

/**************************************************

function:int InitEAP()

Detail:  register eap methods, apply hostapd config and openssl init

para In: N/A

para Out:N/A

return value: 0 success

Author:Zhu.Jinhua 2010.05.01

***************************************************/

int InitEAP()

{

//eap方法注册

    if (eap_server_register_methods())

    {

        cout<<"Failed to register EAP methods"<

        return -1;

    }

    //读取配置文件，同时获知用户信息，安全关联等的配置文件目录及文件名

    struct hostapd_config *hostapdconf = NULL;

    hostapdconf = hostapd_config_read((const char *)g_config_fname);

    if (NULL == hostapdconf)

    {

        return -1;

    }

    //初始化Openssl

    if(InitOpenssl(hostapdconf))

    {

        PTRACE(1,"Failed to InitOpenssl");

    }

//radius server的设置

    hostapd_setup_radius_srv(hostapdconf);

    //add for openssl Multi Thread using,

    thread_setup();

    return 0;

};

 

 

int InitOpenssl(/*struct hostapd_data *hostapddata, */hostapd_config *hostapdconf)

{

    struct tls_connection_params params;

    memset(¶ms, 0, sizeof(params));

    struct hostapd_bss_config *bssconf = hostapdconf->bss;

    // call tls_init initialize ssl context

    g_ssl_context = tls_init(NULL);

    if (g_ssl_context == NULL)

    {

        return -1;

    }

    os_memset(¶ms, 0, sizeof(params));

    params.ca_cert = bssconf->ca_cert;

    params.server_cert = bssconf->server_cert;

    params.private_key = bssconf->private_key;

    params.private_key_passwd = bssconf->private_key_passwd;

//    params.dh_file = hapd->conf->dh_file;

    if (tls_global_set_params(g_ssl_context, ¶ms)) {

        wpa_printf(MSG_ERROR, "Failed to set TLS parameters");

        return -1;

    }

    if (tls_global_set_verify(g_ssl_context,

        0/*hapd->conf->check_crl*/))

    {

        wpa_printf(MSG_ERROR, "Failed to enable check_crl");

        return -1;

    }

 

    /**

* eap_sim_db_init - Initialize EAP-SIM DB / authentication gateway interface

* @config: Configuration data (e.g., file name)

* @get_complete_cb: Callback function for reporting availability of triplets

* @ctx: Context pointer for get_complete_cb

* Returns: Pointer to a private data structure or %NULL on failure

*/

//虽然这部分有了，但是具体eap_sim/aka还没完成，暂时没试验这个

#ifdef EAP_SERVER

    if (bssconf->eap_sim_db)

    {

        g_eap_sim_db_priv =

            eap_sim_db_init(bssconf->eap_sim_db,

            hostapd_sim_db_cb, g_radius_server_data);

        if (g_eap_sim_db_priv == NULL)

        {

            wpa_printf(MSG_ERROR, "Failed to initialize EAP-SIM "

                "database interface");

            return -1;

        }

    }

#endif /* EAP_SERVER */

    return 0;

}

 

 

static int hostapd_setup_radius_srv(struct hostapd_config *hostapdconf)

{

    struct radius_server_conf srv;

    os_memset(&srv, 0, sizeof(srv));

    struct hostapd_bss_config *conf = hostapdconf->bss;

//安全关联

    srv.client_file = conf->radius_server_clients;

//鉴权端口，在我们的实现中，由RunEapServer实现了，这里的并没用到

    srv.auth_port = conf->radius_server_auth_port;

    srv.conf_ctx = conf;

//eap_sim/aka用到的数据

    srv.eap_sim_db_priv = g_eap_sim_db_priv;//hostapdconf->eap_sim_db_priv;

//ssl相关用到的全局上下文

    srv.ssl_ctx = g_ssl_context;

    srv.pac_opaque_encr_key = conf->pac_opaque_encr_key;

    srv.eap_fast_a_id = conf->eap_fast_a_id;

    srv.eap_fast_a_id_len = conf->eap_fast_a_id_len;

    srv.eap_fast_a_id_info = conf->eap_fast_a_id_info;

    srv.eap_fast_prov = conf->eap_fast_prov;

    srv.pac_key_lifetime = conf->pac_key_lifetime;

    srv.pac_key_refresh_time = conf->pac_key_refresh_time;

    srv.eap_sim_aka_result_ind = conf->eap_sim_aka_result_ind;

    srv.tnc = conf->tnc;

    srv.wps = NULL;//hapd->wps;

    srv.ipv6 = 0;

//获取用户信息的回调函数

    srv.get_eap_user = hostapd_radius_get_eap_user;

    srv.eap_req_id_text = conf->eap_req_id_text;

    srv.eap_req_id_text_len = conf->eap_req_id_text_len;

    g_radius_server_data = radius_server_init(&srv);

    //g_radius_server_data = radius_server_init(&srv);

    if (g_radius_server_data == NULL) {

        wpa_printf(MSG_ERROR, "RADIUS server initialization failed.");

        return -1;

    }

    return 0;

}

 

 

 

/**************************************************

function:int hostapd_radius_get_eap_user()

Detail:  callback of get eap user for radius_server_init

para In: void *ctx, config

const u8 *identity,

size_t identity_len,

int phase2: is phase2?

para Out:struct eap_user *user

return value: 0 success

Author:Zhu.Jinhua 2010.05.01

***************************************************/

static int hostapd_radius_get_eap_user(void *ctx, const u8 *identity,

                                       size_t identity_len, int phase2,

                                       struct eap_user *user)

{

    const struct hostapd_eap_user *eap_user;

    int i, count;

    eap_user = hostapd_get_eap_user((hostapd_bss_config *)ctx, identity, identity_len, phase2);

    if (eap_user == NULL)

        return -1;

    if (user == NULL)

        return 0;

    os_memset(user, 0, sizeof(*user));

    count = EAP_USER_MAX_METHODS;

    if (count > EAP_MAX_METHODS)

        count = EAP_MAX_METHODS;

    for (i = 0; i < count; i++) {

        user->methods[i].vendor = eap_user->methods[i].vendor;

        user->methods[i].method = eap_user->methods[i].method;

    }

    if (eap_user->password) {

        user->password = (unsigned char *)os_malloc(eap_user->password_len);

        if (user->password == NULL)

            return -1;

        os_memcpy(user->password, eap_user->password,

            eap_user->password_len);

        user->password_len = eap_user->password_len;

        user->password_hash = eap_user->password_hash;

    }

    user->force_version = eap_user->force_version;

    user->ttls_auth = eap_user->ttls_auth;

    return 0;

}