package/hostapd/files/hostapd.sh

   1 hostapd_setup_vif() {
   2         local vif="$1"
   3         local driver="$2"
   4         local hostapd_cfg=
   5
   6         # Examples:
   7         # psk-mixed/tkip        => WPA1+2 PSK, TKIP
   8         # wpa-psk2/tkip+aes     => WPA2 PSK, CCMP+TKIP
   9         # wpa2/tkip+aes         => WPA2 RADIUS, CCMP+TKIP
  10         # ...
  11
  12         # TODO: move this parsing function somewhere generic, so that
  13         # later it can be reused by drivers that don't use hostapd
  14
  15         # crypto defaults: WPA2 vs WPA1
  16         case "$enc" in
  17                 wpa2*|WPA2*|*PSK2*|*psk2*)
  18                         wpa=2
  19                         crypto="CCMP"
  20                 ;;
  21                 *mixed*)
  22                         wpa=3
  23                         crypto="CCMP TKIP"
  24                 ;;
  25                 *)
  26                         wpa=1
  27                         crypto="TKIP"
  28                 ;;
  29         esac
  30
  31         # explicit override for crypto setting
  32         case "$enc" in
  33                 *tkip+aes|*TKIP+AES|*tkip+ccmp|*TKIP+CCMP) crypto="CCMP TKIP";;
  34                 *tkip|*TKIP) crypto="TKIP";;
  35                 *aes|*AES|*ccmp|*CCMP) crypto="CCMP";;
  36         esac
  37
  38         # use crypto/auth settings for building the hostapd config
  39         case "$enc" in
  40                 *psk*|*PSK*)
  41                         config_get psk "$vif" key
  42                         if [ ${#psk} -eq 64 ]; then
  43                                 append hostapd_cfg "wpa_psk=$psk" "$N"
  44                         else
  45                                 append hostapd_cfg "wpa_passphrase=$psk" "$N"
  46                         fi
  47                 ;;
  48                 *wpa*|*WPA*)
  49                         # required fields? formats?
  50                         # hostapd is particular, maybe a default configuration for failures
  51                         config_get server "$vif" server
  52                         append hostapd_cfg "auth_server_addr=$server" "$N"
  53                         config_get port "$vif" port
  54                         port=${port:-1812}
  55                         append hostapd_cfg "auth_server_port=$port" "$N"
  56                         config_get secret "$vif" key
  57                         append hostapd_cfg "auth_server_shared_secret=$secret" "$N"
  58                         config_get nasid "$vif" nasid
  59                         append hostapd_cfg "nas_identifier=$nasid" "$N"
  60                         append hostapd_cfg "eapol_key_index_workaround=1" "$N"
  61                         append hostapd_cfg "radius_acct_interim_interval=300" "$N"
  62                         append hostapd_cfg "ieee8021x=1" "$N"
  63                         append hostapd_cfg "auth_algs=1" "$N"
  64                         append hostapd_cfg "wpa_key_mgmt=WPA-EAP" "$N"
  65                         append hostapd_cfg "wpa_group_rekey=300" "$N"
  66                         append hostapd_cfg "wpa_gmk_rekey=640" "$N"
  67                 ;;
  68                 *)
  69                         wpa=0
  70                         crypto=
  71                 ;;
  72         esac
  73         config_get ifname "$vif" ifname
  74         config_get bridge "$vif" bridge
  75         config_get ssid "$vif" ssid
  76         config_get device "$vif" device
  77         config_get channel "$device" channel
  78         config_get hwmode "$device" hwmode
  79         config_get country "$device" country
  80         case "$hwmode" in
  81                 11a) hwmode=a;;
  82                 11b) hwmode=b;;
  83                 11g) hwmode=g;;
  84                 11n)
  85                         hwmode=g
  86                         append hostapd_cfg "ieee80211n=1" "$N"
  87                         config_get ht_capab "$device" ht_capab
  88                 ;;
  89                 *)
  90                         hwmode=
  91                         [ "$channel" -gt 14 ] && hwmode=a
  92                 ;;
  93         esac
  94         cat > /var/run/hostapd-$ifname.conf <<EOF
  95 ctrl_interface=/var/run/hostapd-$ifname
  96 driver=$driver
  97 interface=$ifname
  98 hw_mode=${hwmode:-g}
  99 channel=$channel
 100 ${bridge:+bridge=$bridge}
 101 ssid=$ssid
 102 debug=0
 103 wpa=$wpa
 104 ${crypto:+wpa_pairwise=$crypto}
 105 ${country:+country_code=$country}
 106 ${ht_capab:+ht_capab=$ht_capab}
 107 $hostapd_cfg
 108 EOF
 109         hostapd -P /var/run/wifi-$ifname.pid -B /var/run/hostapd-$ifname.conf
 110 }
 111