Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b130e5ce authored by Javier Cardona's avatar Javier Cardona Committed by John W. Linville
Browse files

nl80211: Introduce NL80211_MESH_SETUP_USERSPACE_AMPE 



Introduce a new configuration option to support AMPE from userspace.

Prior to this series we only supported authentication in userspace: an
authentication daemon would authenticate peer candidates in userspace
and hand them over to the kernel.  From that point the mesh stack would
take over and establish a peer link (Mesh Peering Management).

These patches introduce support for Authenticated Mesh Peering Exchange
in userspace.  The userspace daemon implements the AMPE protocol and on
successfull completion create mesh peers and install encryption keys.

Signed-off-by: default avatarJavier Cardona <javier@cozybit.com>
Signed-off-by: default avatarJohn W. Linville <linville@tuxdriver.com>
parent f3a57fd1

include/linux/nl80211.h

+10 −0
Original line number Diff line number Diff line
@@ -1769,6 +1769,15 @@ enum nl80211_meshconf_params { 
 * @NL80211_MESH_SETUP_USERSPACE_AUTH: Enable this option if an authentication

 * daemon will be authenticating mesh candidates.

 *

 * @NL80211_MESH_SETUP_USERSPACE_AMPE: Enable this option if an authentication

 * daemon will be securing peer link frames.  AMPE is a secured version of Mesh

 * Peering Management (MPM) and is implemented with the assistance of a

 * userspace daemon.  When this flag is set, the kernel will send peer

 * management frames to a userspace daemon that will implement AMPE

 * functionality (security capabilities selection, key confirmation, and key

 * management).  When the flag is unset (default), the kernel can autonomously

 * complete (unsecured) mesh peering without the need of a userspace daemon.

 *

 * @NL80211_MESH_SETUP_ATTR_MAX: highest possible mesh setup attribute number

 * @__NL80211_MESH_SETUP_ATTR_AFTER_LAST: Internal use

 */
@@ -1778,6 +1787,7 @@ enum nl80211_mesh_setup_params { 
	NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC,

	NL80211_MESH_SETUP_IE,

	NL80211_MESH_SETUP_USERSPACE_AUTH,

	NL80211_MESH_SETUP_USERSPACE_AMPE,



	/* keep last */

	__NL80211_MESH_SETUP_ATTR_AFTER_LAST,

include/net/cfg80211.h

+3 −1
Original line number Diff line number Diff line
@@ -695,7 +695,8 @@ struct mesh_config { 
 * @path_metric: which metric to use

 * @ie: vendor information elements (optional)

 * @ie_len: length of vendor information elements

 * @is_secure: or not

 * @is_authenticated: this mesh requires authentication

 * @is_secure: this mesh uses security

 *

 * These parameters are fixed when the mesh is created.

 */
@@ -706,6 +707,7 @@ struct mesh_setup { 
	u8  path_metric;

	const u8 *ie;

	u8 ie_len;

	bool is_authenticated;

	bool is_secure;

};

net/mac80211/cfg.c

+5 −1
Original line number Diff line number Diff line
@@ -1064,7 +1064,11 @@ static int copy_mesh_setup(struct ieee80211_if_mesh *ifmsh, 
	memcpy(ifmsh->mesh_id, setup->mesh_id, ifmsh->mesh_id_len);

	ifmsh->mesh_pp_id = setup->path_sel_proto;

	ifmsh->mesh_pm_id = setup->path_metric;

	ifmsh->is_secure = setup->is_secure;

	ifmsh->security = IEEE80211_MESH_SEC_NONE;

	if (setup->is_authenticated)

		ifmsh->security |= IEEE80211_MESH_SEC_AUTHED;

	if (setup->is_secure)

		ifmsh->security |= IEEE80211_MESH_SEC_SECURED;



	return 0;

}

net/mac80211/ieee80211_i.h

+5 −1
Original line number Diff line number Diff line
@@ -490,7 +490,11 @@ struct ieee80211_if_mesh { 
	bool accepting_plinks;

	const u8 *ie;

	u8 ie_len;

	bool is_secure;

	enum {

		IEEE80211_MESH_SEC_NONE = 0x0,

		IEEE80211_MESH_SEC_AUTHED = 0x1,

		IEEE80211_MESH_SEC_SECURED = 0x2,

	} security;

};



#ifdef CONFIG_MAC80211_MESH

net/mac80211/mesh.c

+1 −1
Original line number Diff line number Diff line
@@ -574,7 +574,7 @@ static void ieee80211_mesh_rx_bcn_presp(struct ieee80211_sub_if_data *sdata, 
			       &elems);



	/* ignore beacons from secure mesh peers if our security is off */

	if (elems.rsn_len && !sdata->u.mesh.is_secure)

	if (elems.rsn_len && sdata->u.mesh.security == IEEE80211_MESH_SEC_NONE)

		return;



	if (elems.ds_params && elems.ds_params_len == 1)