diff options
Diffstat (limited to 'src/nm-ap-security-wpa-eap.c')
| -rw-r--r-- | src/nm-ap-security-wpa-eap.c | 385 |
1 files changed, 0 insertions, 385 deletions
diff --git a/src/nm-ap-security-wpa-eap.c b/src/nm-ap-security-wpa-eap.c deleted file mode 100644 index 2d5174ff2f..0000000000 --- a/src/nm-ap-security-wpa-eap.c +++ /dev/null @@ -1,385 +0,0 @@ -/* NetworkManager -- Network link manager - * - * Dan Williams <dcbw@redhat.com> - * - * This program is free software; you can redistribute it and/or modify - * it under the terms of the GNU General Public License as published by - * the Free Software Foundation; either version 2 of the License, or - * (at your option) any later version. - * - * This program is distributed in the hope that it will be useful, - * but WITHOUT ANY WARRANTY; without even the implied warranty of - * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the - * GNU General Public License for more details. - * - * You should have received a copy of the GNU General Public License - * along with this program; if not, write to the Free Software - * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. - * - * (C) Copyright 2005 Red Hat, Inc. - * (C) Copyright 2006 Novell, Inc. - */ - -#include <glib.h> -#include <glib/gi18n.h> -#include <dbus/dbus.h> -#include <iwlib.h> - -#include "nm-ap-security.h" -#include "nm-ap-security-wpa-eap.h" -#include "nm-ap-security-private.h" -#include "dbus-helpers.h" -#include "nm-device-802-11-wireless.h" -#include "nm-supplicant-config.h" - -#define NM_AP_SECURITY_WPA_EAP_GET_PRIVATE(o) (G_TYPE_INSTANCE_GET_PRIVATE ((o), NM_TYPE_AP_SECURITY_WPA_EAP, NMAPSecurityWPA_EAPPrivate)) - -struct _NMAPSecurityWPA_EAPPrivate -{ - int eap_method; - int key_type; - int wpa_version; - int key_mgmt; - char * identity; - char * passwd; - char * anon_identity; - char * private_key_passwd; - char * private_key_file; - char * client_cert_file; - char * ca_cert_file; -}; - - -NMAPSecurityWPA_EAP * -nm_ap_security_wpa_eap_new_deserialize (DBusMessageIter *iter) -{ - NMAPSecurityWPA_EAP * security = NULL; - int eap_method; - int key_type; - int wpa_version; - char * identity = NULL; - char * passwd = NULL; - char * anon_identity = NULL; - char * private_key_passwd = NULL; - char * private_key_file = NULL; - char * client_cert_file = NULL; - char * ca_cert_file = NULL; - - g_return_val_if_fail (iter != NULL, NULL); - - if (!nmu_security_deserialize_wpa_eap (iter, &eap_method, &key_type, &identity, &passwd, - &anon_identity, &private_key_passwd, &private_key_file, - &client_cert_file, &ca_cert_file, &wpa_version)) - goto out; - - /* Success, build up our security object */ - security = g_object_new (NM_TYPE_AP_SECURITY_WPA_EAP, NULL); - nm_ap_security_set_we_cipher (NM_AP_SECURITY (security), NM_AUTH_TYPE_WPA_EAP); - if ((private_key_passwd && strlen (private_key_passwd) > 0) || (passwd && strlen (passwd) > 0)) - nm_ap_security_set_key (NM_AP_SECURITY (security), "FIXME", 5); - security->priv->eap_method = eap_method; - security->priv->key_type = key_type; - security->priv->wpa_version = wpa_version; - security->priv->key_mgmt = IW_AUTH_KEY_MGMT_802_1X; - security->priv->identity = g_strdup (identity); - security->priv->passwd = g_strdup (passwd); - security->priv->anon_identity = g_strdup (anon_identity); - security->priv->private_key_passwd = g_strdup (private_key_passwd); - security->priv->private_key_file = g_strdup (private_key_file); - security->priv->client_cert_file = g_strdup (client_cert_file); - security->priv->ca_cert_file = g_strdup (ca_cert_file); - - if (wpa_version == IW_AUTH_WPA_VERSION_WPA2) - nm_ap_security_set_description (NM_AP_SECURITY (security), _("WPA2 Enterprise")); - else - nm_ap_security_set_description (NM_AP_SECURITY (security), _("WPA Enterprise")); - -out: - return security; -} - - -NMAPSecurityWPA_EAP * -nm_ap_security_wpa_eap_new (guint32 capabilities) -{ - NMAPSecurityWPA_EAP *security; - - security = g_object_new (NM_TYPE_AP_SECURITY_WPA_EAP, NULL); - nm_ap_security_set_we_cipher (NM_AP_SECURITY (security), NM_AUTH_TYPE_WPA_EAP); - - if (capabilities & NM_802_11_CAP_PROTO_WPA2) { - security->priv->wpa_version = IW_AUTH_WPA_VERSION_WPA2; - nm_ap_security_set_description (NM_AP_SECURITY (security), _("WPA2 Enterprise")); - } else { - security->priv->wpa_version = IW_AUTH_WPA_VERSION_WPA; - nm_ap_security_set_description (NM_AP_SECURITY (security), _("WPA Enterprise")); - } - - return security; -} - - -static int -real_serialize (NMAPSecurity *instance, DBusMessageIter *iter) -{ - NMAPSecurityWPA_EAP * self = NM_AP_SECURITY_WPA_EAP (instance); - - if (!nmu_security_serialize_wpa_eap (iter, - self->priv->eap_method, - self->priv->key_type, - self->priv->identity ? : "", - self->priv->passwd ? : "", - self->priv->anon_identity ? : "", - self->priv->private_key_passwd ? : "", - self->priv->private_key_file ? : "", - self->priv->client_cert_file ? : "", - self->priv->ca_cert_file ? : "", - self->priv->wpa_version)) - return -1; - return 0; -} - - -static const char * -get_eap_method (int eap_method) -{ - switch (eap_method) - { - case NM_EAP_METHOD_PEAP: - return "PEAP"; - case NM_EAP_METHOD_TLS: - return "TLS"; - case NM_EAP_METHOD_TTLS: - return "TTLS"; - default: - g_warning ("Unmatched eap_method=%d!", eap_method); - return "TLS"; - } -} - - -static gboolean -real_write_supplicant_config (NMAPSecurity *instance, - NMSupplicantConfig * config, - gboolean adhoc) -{ - NMAPSecurityWPA_EAP * self = NM_AP_SECURITY_WPA_EAP (instance); - gboolean success = FALSE; - const char * identity = self->priv->identity; - const char * anon_identity = self->priv->anon_identity; - const char * passwd = self->priv->passwd; - const char * private_key_passwd = self->priv->private_key_passwd; - const char * private_key_file = self->priv->private_key_file; - const char * ca_cert_file = self->priv->ca_cert_file; - const char * client_cert_file = self->priv->client_cert_file; - int wpa_version = self->priv->wpa_version; - int key_mgmt = self->priv->key_mgmt; - int eap_method = self->priv->eap_method; - int key_type = self->priv->key_type; - - g_return_val_if_fail (nm_ap_security_get_we_cipher (instance) == NM_AUTH_TYPE_WPA_EAP, FALSE); - g_return_val_if_fail (key_mgmt == IW_AUTH_KEY_MGMT_802_1X, FALSE); - g_return_val_if_fail (wpa_version == IW_AUTH_WPA_VERSION_WPA - || wpa_version == IW_AUTH_WPA_VERSION_WPA2, FALSE); - g_return_val_if_fail (eap_method == NM_EAP_METHOD_MD5 - || eap_method == NM_EAP_METHOD_MSCHAP - || eap_method == NM_EAP_METHOD_OTP - || eap_method == NM_EAP_METHOD_GTC - || eap_method == NM_EAP_METHOD_PEAP - || eap_method == NM_EAP_METHOD_TLS - || eap_method == NM_EAP_METHOD_TTLS, FALSE); - g_return_val_if_fail ((key_type == NM_AUTH_TYPE_WPA_PSK_AUTO) - || (key_type == IW_AUTH_CIPHER_CCMP) - || (key_type == IW_AUTH_CIPHER_TKIP) - || (key_type == IW_AUTH_CIPHER_WEP104), FALSE); - - /* WPA-EAP network setup */ - - if (self->priv->wpa_version == IW_AUTH_WPA_VERSION_WPA) { - if (!nm_supplicant_config_add_option (config, "proto", "WPA", -1)) - goto out; - } else { - if (!nm_supplicant_config_add_option (config, "proto", "WPA2", -1)) - goto out; - } - - if (key_type != IW_AUTH_CIPHER_WEP104) { - if (!nm_supplicant_config_add_option (config, "key_mgmt", "WPA-EAP", -1)) - goto out; - } else { - /* So-called Dynamic WEP */ - if (!nm_supplicant_config_add_option (config, "key_mgmt", "IEEE8021X", -1)) - goto out; - } - - if (!nm_supplicant_config_add_option (config, "eap", get_eap_method (eap_method), -1)) - goto out; - - if (identity && strlen (identity) > 0) { - if (!nm_supplicant_config_add_option (config, "identity", identity, -1)) - goto out; - } - - if (passwd && strlen (passwd) > 0) { - if (!nm_supplicant_config_add_option (config, "password", passwd, -1)) - goto out; - } - - if (anon_identity && strlen (anon_identity) > 0) { - if (!nm_supplicant_config_add_option (config, "anonymous_identity", anon_identity, -1)) - goto out; - } - - if (private_key_file && strlen (private_key_file) > 0) { - if (!nm_supplicant_config_add_option (config, "private_key", private_key_file, -1)) - goto out; - } - - if (private_key_passwd && strlen (private_key_passwd) > 0) { - if (!nm_supplicant_config_add_option (config, "private_key_passwd", private_key_passwd, -1)) - goto out; - } - - if (client_cert_file && strlen (client_cert_file) > 0) { - if (!nm_supplicant_config_add_option (config, "client_cert", client_cert_file, -1)) - goto out; - } - - if (ca_cert_file && strlen (ca_cert_file) > 0) { - if (!nm_supplicant_config_add_option (config, "ca_cert", ca_cert_file, -1)) - goto out; - } - - /* - * Set the pairwise and group cipher, if the user provided one. If user selected "Automatic", we - * let wpa_supplicant sort it out. Likewise, if the user selected "Dynamic WEP", we do nothing. - */ - if (key_type != NM_AUTH_TYPE_WPA_PSK_AUTO && key_type != IW_AUTH_CIPHER_WEP104) { - const char *cipher; - - /* - * FIXME: Technically, the pairwise cipher does not need to be the same as - * the group cipher. Fixing this requires changes in the UI. - */ - if (key_type == IW_AUTH_CIPHER_TKIP) - cipher = "TKIP"; - else /* IW_AUTH_CIPHER_CCMP */ - cipher = "CCMP"; - - if (!nm_supplicant_config_add_option (config, "pairwise", cipher, -1)) - goto out; - - if (!nm_supplicant_config_add_option (config, "group", cipher, -1)) - goto out; - } - - success = TRUE; - -out: - return success; -} - -static guint32 -real_get_default_capabilities (NMAPSecurity *instance) -{ - NMAPSecurityWPA_EAP *self = NM_AP_SECURITY_WPA_EAP (instance); - guint32 caps = NM_802_11_CAP_NONE; - - if (self->priv->wpa_version == IW_AUTH_WPA_VERSION_WPA) - caps |= NM_802_11_CAP_PROTO_WPA | NM_802_11_CAP_CIPHER_TKIP; - else if (self->priv->wpa_version == IW_AUTH_WPA_VERSION_WPA2) - caps |= NM_802_11_CAP_PROTO_WPA2 | NM_802_11_CAP_CIPHER_CCMP; - - if (self->priv->key_mgmt == IW_AUTH_KEY_MGMT_802_1X) - caps |= NM_802_11_CAP_KEY_MGMT_802_1X; - - return caps; -} - -static gboolean -real_get_authentication_required (NMAPSecurity *instance) -{ - /* WPA Enterprise is all about strong security */ - return TRUE; -} - -static NMAPSecurity * -real_copy_constructor (NMAPSecurity *instance) -{ - NMAPSecurityWPA_EAP * dst = g_object_new (NM_TYPE_AP_SECURITY_WPA_EAP, NULL); - NMAPSecurityWPA_EAP * self = NM_AP_SECURITY_WPA_EAP (instance); - - dst->priv->eap_method = self->priv->eap_method; - dst->priv->key_type = self->priv->key_type; - dst->priv->wpa_version = self->priv->wpa_version; - dst->priv->key_mgmt = self->priv->key_mgmt; - dst->priv->identity = g_strdup (self->priv->identity); - dst->priv->passwd = g_strdup (self->priv->passwd); - dst->priv->anon_identity = g_strdup (self->priv->anon_identity); - dst->priv->private_key_passwd = g_strdup (self->priv->private_key_passwd); - dst->priv->private_key_file = g_strdup (self->priv->private_key_file); - dst->priv->client_cert_file = g_strdup (self->priv->client_cert_file); - dst->priv->ca_cert_file = g_strdup (self->priv->ca_cert_file); - - nm_ap_security_copy_properties (NM_AP_SECURITY (self), NM_AP_SECURITY (dst)); - - return NM_AP_SECURITY (dst); -} - - -static void -nm_ap_security_wpa_eap_init (NMAPSecurityWPA_EAP * self) -{ - self->priv = NM_AP_SECURITY_WPA_EAP_GET_PRIVATE (self); - self->priv->eap_method = NM_EAP_METHOD_TLS; - self->priv->wpa_version = IW_AUTH_WPA_VERSION_WPA; - self->priv->key_mgmt = IW_AUTH_KEY_MGMT_802_1X; - self->priv->identity = NULL; - self->priv->passwd = NULL; - self->priv->anon_identity = NULL; - self->priv->private_key_passwd = NULL; - self->priv->private_key_file = NULL; - self->priv->client_cert_file = NULL; - self->priv->ca_cert_file = NULL; -} - - -static void -nm_ap_security_wpa_eap_class_init (NMAPSecurityWPA_EAPClass *klass) -{ - GObjectClass *object_class = G_OBJECT_CLASS (klass); - NMAPSecurityClass *par_class = NM_AP_SECURITY_CLASS (klass); - - par_class->copy_constructor_func = real_copy_constructor; - par_class->serialize_func = real_serialize; - par_class->write_supplicant_config_func = real_write_supplicant_config; - par_class->get_default_capabilities_func = real_get_default_capabilities; - par_class->get_authentication_required_func = real_get_authentication_required; - - g_type_class_add_private (object_class, sizeof (NMAPSecurityWPA_EAPPrivate)); -} - - -GType -nm_ap_security_wpa_eap_get_type (void) -{ - static GType type = 0; - if (type == 0) { - static const GTypeInfo info = { - sizeof (NMAPSecurityWPA_EAPClass), - NULL, /* base_init */ - NULL, /* base_finalize */ - (GClassInitFunc) nm_ap_security_wpa_eap_class_init, - NULL, /* class_finalize */ - NULL, /* class_data */ - sizeof (NMAPSecurityWPA_EAP), - 0, /* n_preallocs */ - (GInstanceInitFunc) nm_ap_security_wpa_eap_init, - NULL /* value_table */ - }; - type = g_type_register_static (NM_TYPE_AP_SECURITY, - "NMAPSecurityWPA_EAP", - &info, 0); - } - return type; -} |