hostapd的radius/eap server代码分析(4)-在windows下启动hostapd的radius/eap server

hostapd的radius/eap server代码分析(4)-在windows下启动hostapd的radius/eap server

 

NJZhuJinhua@csdn May.14, 2010
mail:jinhua1982@gmail.com
http://blog.csdn.net/njzhujinhua
转载请注明出处。

 

为了更好的调测hostapd，通过删减及增加必要代码实现了windows下的hostapd框架，框架仍然读的是hostapd的配置文件，安全关联，用户信息等。

 

这个架子仅简单搭建，仅为实现hostapd的启动，用于协议研究。同时也描述了实现backend authentication server要做的一些事情。

 

 

1：main函数，很简单就两大步  @main.cpp
int main(int argc,char ** const argv)
{
    // 初始化radius及EAP server
    InitEAP();

    if (argc == 1)
    {
        cout<<"usage:prog ip:port"<
        return -1;
    }

    // 启动业务线程，处理消息。我是通过ACE的ACE_Event_Handler及ACE_Reactor实现的，这不是重点，不放出。
    RunEapServer(argv[1]);

    return 0;
};

 

 

2:@initeap.cpp

//extern hostapd_data *g_hostapdcfg;
extern void         *g_ssl_context;
extern void         *g_eap_sim_db_priv;
char                *g_config_fname = "./config/hostapd.conf";
radius_server_data  *g_radius_server_data = NULL;

 

/**************************************************
function:int InitEAP()
Detail:  register eap methods, apply hostapd config and openssl init
para In: N/A
para Out:N/A
return value: 0 success
Author:Zhu.Jinhua 2010.05.01
***************************************************/
int InitEAP()
{
//eap方法注册
    if (eap_server_register_methods())
    {
        cout<<"Failed to register EAP methods"<
        return -1;
    }
    //读取配置文件，同时获知用户信息，安全关联等的配置文件目录及文件名
    struct hostapd_config *hostapdconf = NULL;
    hostapdconf = hostapd_config_read((const char *)g_config_fname);
    if (NULL == hostapdconf)
    {
        return -1;
    }

    //初始化Openssl
    if(InitOpenssl(hostapdconf))
    {
        PTRACE(1,"Failed to InitOpenssl");
    }

//radius server的设置
    hostapd_setup_radius_srv(hostapdconf);
    //add for openssl Multi Thread using,
    thread_setup();
    return 0;
};

 

 

int InitOpenssl(/*struct hostapd_data *hostapddata, */hostapd_config *hostapdconf)
{
    struct tls_connection_params params;
    memset(&params, 0, sizeof(params));
    struct hostapd_bss_config *bssconf = hostapdconf->bss;

    // call tls_init initialize ssl context
    g_ssl_context = tls_init(NULL);
    if (g_ssl_context == NULL)
    {
        return -1;
    }
    os_memset(&params, 0, sizeof(params));
    params.ca_cert = bssconf->ca_cert;
    params.server_cert = bssconf->server_cert;
    params.private_key = bssconf->private_key;
    params.private_key_passwd = bssconf->private_key_passwd;
//    params.dh_file = hapd->conf->dh_file;
    if (tls_global_set_params(g_ssl_context, &params)) {
        wpa_printf(MSG_ERROR, "Failed to set TLS parameters");
        return -1;
    }
    if (tls_global_set_verify(g_ssl_context,
        0/*hapd->conf->check_crl*/))
    {
        wpa_printf(MSG_ERROR, "Failed to enable check_crl");
        return -1;
    }

 

    /**
* eap_sim_db_init - Initialize EAP-SIM DB / authentication gateway interface
* @config: Configuration data (e.g., file name)
* @get_complete_cb: Callback function for reporting availability of triplets
* @ctx: Context pointer for get_complete_cb
* Returns: Pointer to a private data structure or %NULL on failure
*/
//虽然这部分有了，但是具体eap_sim/aka还没完成，暂时没试验这个
#ifdef EAP_SERVER
    if (bssconf->eap_sim_db)
    {
        g_eap_sim_db_priv =
            eap_sim_db_init(bssconf->eap_sim_db,
            hostapd_sim_db_cb, g_radius_server_data);
        if (g_eap_sim_db_priv == NULL)
        {
            wpa_printf(MSG_ERROR, "Failed to initialize EAP-SIM "
                "database interface");
            return -1;
        }
    }
#endif /* EAP_SERVER */

    return 0;
}

 

 

static int hostapd_setup_radius_srv(struct hostapd_config *hostapdconf)
{
    struct radius_server_conf srv;
    os_memset(&srv, 0, sizeof(srv));

    struct hostapd_bss_config *conf = hostapdconf->bss;
//安全关联
    srv.client_file = conf->radius_server_clients;
//鉴权端口，在我们的实现中，由RunEapServer实现了，这里的并没用到
    srv.auth_port = conf->radius_server_auth_port;
    srv.conf_ctx = conf;
//eap_sim/aka用到的数据
    srv.eap_sim_db_priv = g_eap_sim_db_priv;//hostapdconf->eap_sim_db_priv;
//ssl相关用到的全局上下文
    srv.ssl_ctx = g_ssl_context;
    srv.pac_opaque_encr_key = conf->pac_opaque_encr_key;
    srv.eap_fast_a_id = conf->eap_fast_a_id;
    srv.eap_fast_a_id_len = conf->eap_fast_a_id_len;
    srv.eap_fast_a_id_info = conf->eap_fast_a_id_info;
    srv.eap_fast_prov = conf->eap_fast_prov;
    srv.pac_key_lifetime = conf->pac_key_lifetime;
    srv.pac_key_refresh_time = conf->pac_key_refresh_time;
    srv.eap_sim_aka_result_ind = conf->eap_sim_aka_result_ind;
    srv.tnc = conf->tnc;
    srv.wps = NULL;//hapd->wps;
    srv.ipv6 = 0;
//获取用户信息的回调函数
    srv.get_eap_user = hostapd_radius_get_eap_user;
    srv.eap_req_id_text = conf->eap_req_id_text;
    srv.eap_req_id_text_len = conf->eap_req_id_text_len;
    g_radius_server_data = radius_server_init(&srv);

    //g_radius_server_data = radius_server_init(&srv);
    if (g_radius_server_data == NULL) {
        wpa_printf(MSG_ERROR, "RADIUS server initialization failed.");
        return -1;
    }
    return 0;
}

 

 

 

/**************************************************
function:int hostapd_radius_get_eap_user()
Detail:  callback of get eap user for radius_server_init
para In: void *ctx, config
const u8 *identity,
size_t identity_len,
int phase2: is phase2?
para Out:struct eap_user *user
return value: 0 success
Author:Zhu.Jinhua 2010.05.01
***************************************************/
static int hostapd_radius_get_eap_user(void *ctx, const u8 *identity,
                                       size_t identity_len, int phase2,
                                       struct eap_user *user)
{
    const struct hostapd_eap_user *eap_user;
    int i, count;
    eap_user = hostapd_get_eap_user((hostapd_bss_config *)ctx, identity, identity_len, phase2);
    if (eap_user == NULL)
        return -1;
    if (user == NULL)
        return 0;
    os_memset(user, 0, sizeof(*user));
    count = EAP_USER_MAX_METHODS;
    if (count > EAP_MAX_METHODS)
        count = EAP_MAX_METHODS;
    for (i = 0; i < count; i++) {
        user->methods[i].vendor = eap_user->methods[i].vendor;
        user->methods[i].method = eap_user->methods[i].method;
    }
    if (eap_user->password) {
        user->password = (unsigned char *)os_malloc(eap_user->password_len);
        if (user->password == NULL)
            return -1;
        os_memcpy(user->password, eap_user->password,
            eap_user->password_len);
        user->password_len = eap_user->password_len;
        user->password_hash = eap_user->password_hash;
    }
    user->force_version = eap_user->force_version;
    user->ttls_auth = eap_user->ttls_auth;
    return 0;
}