mirror of
https://github.com/vanhoefm/fragattacks.git
synced 2024-11-25 08:48:31 -05:00
5eb513c3ba
The way autolink support is implementing in Doxygen is a bit inconvenient with wpa_supplicant being recognized as something that would always be linked to struct wpa_supplicant. In addition, number of links were not really noticed automatically. To get this working more robustly and without having to use the %wpa_supplicant workaround (which had its own issues, e.g., with titles), disable autolinking and use explicit \ref commands instead. This is also updating some of the obsolete notes to point to correct file names, etc. changes in the source code tree. Signed-off-by: Jouni Malinen <j@w1.fi>
1055 lines
33 KiB
Plaintext
1055 lines
33 KiB
Plaintext
/**
|
|
\page ctrl_iface_page wpa_supplicant control interface
|
|
|
|
wpa_supplicant implements a control interface that can be used by
|
|
external programs to control the operations of the wpa_supplicant
|
|
daemon and to get status information and event notifications. There is
|
|
a small C library, in a form of a single C file, \ref wpa_ctrl.c, that
|
|
provides helper functions to facilitate the use of the control
|
|
interface. External programs can link this file into them and then use
|
|
the library functions documented in \ref wpa_ctrl.h to interact with
|
|
wpa_supplicant. This library can also be used with C++. \ref wpa_cli.c and
|
|
wpa_gui are example programs using this library.
|
|
|
|
There are multiple mechanisms for inter-process communication. For
|
|
example, Linux version of wpa_supplicant is using UNIX domain sockets
|
|
for the control interface and Windows version UDP sockets. The use of
|
|
the functions defined in \ref wpa_ctrl.h can be used to hide the details of
|
|
the used IPC from external programs.
|
|
|
|
|
|
\section using_ctrl_iface Using the control interface
|
|
|
|
External programs, e.g., a GUI or a configuration utility, that need to
|
|
communicate with wpa_supplicant should link in \ref wpa_ctrl.c. This
|
|
allows them to use helper functions to open connection to the control
|
|
interface with \ref wpa_ctrl_open() and to send commands with
|
|
\ref wpa_ctrl_request().
|
|
|
|
wpa_supplicant uses the control interface for two types of communication:
|
|
commands and unsolicited event messages. Commands are a pair of
|
|
messages, a request from the external program and a response from
|
|
wpa_supplicant. These can be executed using \ref wpa_ctrl_request().
|
|
Unsolicited event messages are sent by wpa_supplicant to the control
|
|
interface connection without specific request from the external program
|
|
for receiving each message. However, the external program needs to
|
|
attach to the control interface with \ref wpa_ctrl_attach() to receive these
|
|
unsolicited messages.
|
|
|
|
If the control interface connection is used both for commands and
|
|
unsolicited event messages, there is potential for receiving an
|
|
unsolicited message between the command request and response.
|
|
\ref wpa_ctrl_request() caller will need to supply a callback, msg_cb,
|
|
for processing these messages. Often it is easier to open two
|
|
control interface connections by calling \ref wpa_ctrl_open() twice and
|
|
then use one of the connections for commands and the other one for
|
|
unsolicited messages. This way command request/response pairs will
|
|
not be broken by unsolicited messages. wpa_cli is an example of how
|
|
to use only one connection for both purposes and wpa_gui demonstrates
|
|
how to use two separate connections.
|
|
|
|
Once the control interface connection is not needed anymore, it should
|
|
be closed by calling \ref wpa_ctrl_close(). If the connection was used for
|
|
unsolicited event messages, it should be first detached by calling
|
|
\ref wpa_ctrl_detach().
|
|
|
|
|
|
\section ctrl_iface_cmds Control interface commands
|
|
|
|
Following commands can be used with \ref wpa_ctrl_request():
|
|
|
|
\subsection ctrl_iface_PING PING
|
|
|
|
This command can be used to test whether wpa_supplicant is replying
|
|
to the control interface commands. The expected reply is \c PONG if the
|
|
connection is open and wpa_supplicant is processing commands.
|
|
|
|
|
|
\subsection ctrl_iface_MIB MIB
|
|
|
|
Request a list of MIB variables (dot1x, dot11). The output is a text
|
|
block with each line in \c variable=value format. For example:
|
|
|
|
\verbatim
|
|
dot11RSNAOptionImplemented=TRUE
|
|
dot11RSNAPreauthenticationImplemented=TRUE
|
|
dot11RSNAEnabled=FALSE
|
|
dot11RSNAPreauthenticationEnabled=FALSE
|
|
dot11RSNAConfigVersion=1
|
|
dot11RSNAConfigPairwiseKeysSupported=5
|
|
dot11RSNAConfigGroupCipherSize=128
|
|
dot11RSNAConfigPMKLifetime=43200
|
|
dot11RSNAConfigPMKReauthThreshold=70
|
|
dot11RSNAConfigNumberOfPTKSAReplayCounters=1
|
|
dot11RSNAConfigSATimeout=60
|
|
dot11RSNAAuthenticationSuiteSelected=00-50-f2-2
|
|
dot11RSNAPairwiseCipherSelected=00-50-f2-4
|
|
dot11RSNAGroupCipherSelected=00-50-f2-4
|
|
dot11RSNAPMKIDUsed=
|
|
dot11RSNAAuthenticationSuiteRequested=00-50-f2-2
|
|
dot11RSNAPairwiseCipherRequested=00-50-f2-4
|
|
dot11RSNAGroupCipherRequested=00-50-f2-4
|
|
dot11RSNAConfigNumberOfGTKSAReplayCounters=0
|
|
dot11RSNA4WayHandshakeFailures=0
|
|
dot1xSuppPaeState=5
|
|
dot1xSuppHeldPeriod=60
|
|
dot1xSuppAuthPeriod=30
|
|
dot1xSuppStartPeriod=30
|
|
dot1xSuppMaxStart=3
|
|
dot1xSuppSuppControlledPortStatus=Authorized
|
|
dot1xSuppBackendPaeState=2
|
|
dot1xSuppEapolFramesRx=0
|
|
dot1xSuppEapolFramesTx=440
|
|
dot1xSuppEapolStartFramesTx=2
|
|
dot1xSuppEapolLogoffFramesTx=0
|
|
dot1xSuppEapolRespFramesTx=0
|
|
dot1xSuppEapolReqIdFramesRx=0
|
|
dot1xSuppEapolReqFramesRx=0
|
|
dot1xSuppInvalidEapolFramesRx=0
|
|
dot1xSuppEapLengthErrorFramesRx=0
|
|
dot1xSuppLastEapolFrameVersion=0
|
|
dot1xSuppLastEapolFrameSource=00:00:00:00:00:00
|
|
\endverbatim
|
|
|
|
|
|
\subsection ctrl_iface_STATUS STATUS
|
|
|
|
Request current WPA/EAPOL/EAP status information. The output is a text
|
|
block with each line in \c variable=value format. For example:
|
|
|
|
\verbatim
|
|
bssid=02:00:01:02:03:04
|
|
ssid=test network
|
|
pairwise_cipher=CCMP
|
|
group_cipher=CCMP
|
|
key_mgmt=WPA-PSK
|
|
wpa_state=COMPLETED
|
|
ip_address=192.168.1.21
|
|
Supplicant PAE state=AUTHENTICATED
|
|
suppPortStatus=Authorized
|
|
EAP state=SUCCESS
|
|
\endverbatim
|
|
|
|
|
|
\subsection ctrl_iface_STATUS-VERBOSE STATUS-VERBOSE
|
|
|
|
Same as STATUS, but with more verbosity (i.e., more \c variable=value pairs).
|
|
|
|
\verbatim
|
|
bssid=02:00:01:02:03:04
|
|
ssid=test network
|
|
id=0
|
|
pairwise_cipher=CCMP
|
|
group_cipher=CCMP
|
|
key_mgmt=WPA-PSK
|
|
wpa_state=COMPLETED
|
|
ip_address=192.168.1.21
|
|
Supplicant PAE state=AUTHENTICATED
|
|
suppPortStatus=Authorized
|
|
heldPeriod=60
|
|
authPeriod=30
|
|
startPeriod=30
|
|
maxStart=3
|
|
portControl=Auto
|
|
Supplicant Backend state=IDLE
|
|
EAP state=SUCCESS
|
|
reqMethod=0
|
|
methodState=NONE
|
|
decision=COND_SUCC
|
|
ClientTimeout=60
|
|
\endverbatim
|
|
|
|
|
|
\subsection ctrl_iface_PMKSA PMKSA
|
|
|
|
Show PMKSA cache
|
|
|
|
\verbatim
|
|
Index / AA / PMKID / expiration (in seconds) / opportunistic
|
|
1 / 02:00:01:02:03:04 / 000102030405060708090a0b0c0d0e0f / 41362 / 0
|
|
2 / 02:00:01:33:55:77 / 928389281928383b34afb34ba4212345 / 362 / 1
|
|
\endverbatim
|
|
|
|
|
|
\subsection ctrl_iface_SET SET <variable> <value>
|
|
|
|
Set variables:
|
|
- EAPOL::heldPeriod
|
|
- EAPOL::authPeriod
|
|
- EAPOL::startPeriod
|
|
- EAPOL::maxStart
|
|
- dot11RSNAConfigPMKLifetime
|
|
- dot11RSNAConfigPMKReauthThreshold
|
|
- dot11RSNAConfigSATimeout
|
|
|
|
Example command:
|
|
\verbatim
|
|
SET EAPOL::heldPeriod 45
|
|
\endverbatim
|
|
|
|
|
|
\subsection ctrl_iface_LOGON LOGON
|
|
|
|
IEEE 802.1X EAPOL state machine logon.
|
|
|
|
|
|
\subsection ctrl_iface_LOGOFF LOGOFF
|
|
|
|
IEEE 802.1X EAPOL state machine logoff.
|
|
|
|
|
|
\subsection ctrl_iface_REASSOCIATE REASSOCIATE
|
|
|
|
Force reassociation.
|
|
|
|
|
|
\subsection ctrl_iface_RECONNECT RECONNECT
|
|
|
|
Connect if disconnected (i.e., like \c REASSOCIATE, but only connect
|
|
if in disconnected state).
|
|
|
|
|
|
\subsection ctrl_iface_PREAUTH PREAUTH <BSSID>
|
|
|
|
Start pre-authentication with the given BSSID.
|
|
|
|
|
|
\subsection ctrl_iface_ATTACH ATTACH
|
|
|
|
Attach the connection as a monitor for unsolicited events. This can
|
|
be done with \ref wpa_ctrl_attach().
|
|
|
|
|
|
\subsection ctrl_iface_DETACH DETACH
|
|
|
|
Detach the connection as a monitor for unsolicited events. This can
|
|
be done with \ref wpa_ctrl_detach().
|
|
|
|
|
|
\subsection ctrl_iface_LEVEL LEVEL <debug level>
|
|
|
|
Change debug level.
|
|
|
|
|
|
\subsection ctrl_iface_RECONFIGURE RECONFIGURE
|
|
|
|
Force wpa_supplicant to re-read its configuration data.
|
|
|
|
|
|
\subsection ctrl_iface_TERMINATE TERMINATE
|
|
|
|
Terminate wpa_supplicant process.
|
|
|
|
|
|
\subsection ctrl_iface_BSSID BSSID <network id> <BSSID>
|
|
|
|
Set preferred BSSID for a network. Network id can be received from the
|
|
\c LIST_NETWORKS command output.
|
|
|
|
|
|
\subsection ctrl_iface_LIST_NETWORKS LIST_NETWORKS
|
|
|
|
List configured networks.
|
|
|
|
\verbatim
|
|
network id / ssid / bssid / flags
|
|
0 example network any [CURRENT]
|
|
\endverbatim
|
|
|
|
(note: fields are separated with tabs)
|
|
|
|
|
|
\subsection ctrl_iface_DISCONNECT DISCONNECT
|
|
|
|
Disconnect and wait for \c REASSOCIATE or \c RECONNECT command before
|
|
connecting.
|
|
|
|
|
|
\subsection ctrl_iface_SCAN SCAN
|
|
|
|
Request a new BSS scan.
|
|
|
|
|
|
\subsection ctrl_iface_SCAN_RESULTS SCAN_RESULTS
|
|
|
|
Get the latest scan results.
|
|
|
|
\verbatim
|
|
bssid / frequency / signal level / flags / ssid
|
|
00:09:5b:95:e0:4e 2412 208 [WPA-PSK-CCMP] jkm private
|
|
02:55:24:33:77:a3 2462 187 [WPA-PSK-TKIP] testing
|
|
00:09:5b:95:e0:4f 2412 209 jkm guest
|
|
\endverbatim
|
|
|
|
(note: fields are separated with tabs)
|
|
|
|
|
|
\subsection ctrl_iface_BSS BSS
|
|
|
|
Get detailed per-BSS scan results. \c BSS command can be used to
|
|
iterate through scan results one BSS at a time and to fetch all
|
|
information from the found BSSes. This provides access to the same
|
|
data that is available through \c SCAN_RESULTS but in a way that
|
|
avoids problems with large number of scan results not fitting in the
|
|
ctrl_iface messages.
|
|
|
|
There are two options for selecting the BSS with the \c BSS command:
|
|
"BSS <idx>" requests information for the BSS identified by the index
|
|
(0 .. size-1) in the scan results table and "BSS <BSSID>" requests
|
|
information for the given BSS (based on BSSID in 00:01:02:03:04:05
|
|
format).
|
|
|
|
BSS information is presented in following format. Please note that new
|
|
fields may be added to this field=value data, so the ctrl_iface user
|
|
should be prepared to ignore values it does not understand.
|
|
|
|
\verbatim
|
|
bssid=00:09:5b:95:e0:4e
|
|
freq=2412
|
|
beacon_int=0
|
|
capabilities=0x0011
|
|
qual=51
|
|
noise=161
|
|
level=212
|
|
tsf=0000000000000000
|
|
ie=000b6a6b6d2070726976617465010180dd180050f20101000050f20401000050f20401000050f2020000
|
|
ssid=jkm private
|
|
\endverbatim
|
|
|
|
|
|
|
|
\subsection ctrl_iface_SELECT_NETWORK SELECT_NETWORK <network id>
|
|
|
|
Select a network (disable others). Network id can be received from the
|
|
\c LIST_NETWORKS command output.
|
|
|
|
|
|
\subsection ctrl_iface_ENABLE_NETWORK ENABLE_NETWORK <network id>
|
|
|
|
Enable a network. Network id can be received from the
|
|
\c LIST_NETWORKS command output. Special network id \c all can be
|
|
used to enable all network.
|
|
|
|
|
|
\subsection ctrl_iface_DISABLE_NETWORK DISABLE_NETWORK <network id>
|
|
|
|
Disable a network. Network id can be received from the
|
|
\c LIST_NETWORKS command output. Special network id \c all can be
|
|
used to disable all network.
|
|
|
|
|
|
\subsection ctrl_iface_ADD_NETWORK ADD_NETWORK
|
|
|
|
Add a new network. This command creates a new network with empty
|
|
configuration. The new network is disabled and once it has been
|
|
configured it can be enabled with \c ENABLE_NETWORK command. \c ADD_NETWORK
|
|
returns the network id of the new network or FAIL on failure.
|
|
|
|
|
|
\subsection ctrl_iface_REMOVE_NETWORK REMOVE_NETWORK <network id>
|
|
|
|
Remove a network. Network id can be received from the
|
|
\c LIST_NETWORKS command output. Special network id \c all can be
|
|
used to remove all network.
|
|
|
|
|
|
\subsection ctrl_iface_SET_NETWORK SET_NETWORK <network id> <variable> <value>
|
|
|
|
Set network variables. Network id can be received from the
|
|
\c LIST_NETWORKS command output.
|
|
|
|
This command uses the same variables and data formats as the
|
|
configuration file. See example wpa_supplicant.conf for more details.
|
|
|
|
- ssid (network name, SSID)
|
|
- psk (WPA passphrase or pre-shared key)
|
|
- key_mgmt (key management protocol)
|
|
- identity (EAP identity)
|
|
- password (EAP password)
|
|
- ...
|
|
|
|
|
|
\subsection ctrl_iface_GET_NETWORK GET_NETWORK <network id> <variable>
|
|
|
|
Get network variables. Network id can be received from the
|
|
\c LIST_NETWORKS command output.
|
|
|
|
|
|
\subsection ctrl_iface_SAVE_CONFIG SAVE_CONFIG
|
|
|
|
Save the current configuration.
|
|
|
|
|
|
\subsection ctrl_iface_P2P_FIND P2P_FIND
|
|
|
|
Start P2P device discovery. Optional parameter can be used to specify
|
|
the duration for the discovery in seconds (e.g., "P2P_FIND 5"). If the
|
|
duration is not specified, discovery will be started for indefinite
|
|
time, i.e., until it is terminated by P2P_STOP_FIND or P2P_CONNECT (to
|
|
start group formation with a discovered peer).
|
|
|
|
The default search type is to first run a full scan of all channels
|
|
and then continue scanning only social channels (1, 6, 11). This
|
|
behavior can be changed by specifying a different search type: social
|
|
(e.g., "P2P_FIND 5 type=social") will skip the initial full scan and
|
|
only search social channels; progressive (e.g., "P2P_FIND
|
|
type=progressive") starts with a full scan and then searches
|
|
progressively through all channels one channel at the time with the
|
|
social channel scans. Progressive device discovery can be used to find
|
|
new groups (and groups that were not found during the initial scan,
|
|
e.g., due to the GO being asleep) over time without adding
|
|
considerable extra delay for every Search state round.
|
|
|
|
|
|
\subsection ctrl_iface_P2P_STOP_FIND P2P_STOP_FIND
|
|
|
|
Stop ongoing P2P device discovery or other operation (connect, listen
|
|
mode).
|
|
|
|
|
|
\subsection ctrl_iface_P2P_CONNECT P2P_CONNECT
|
|
|
|
Start P2P group formation with a discovered P2P peer. This includes
|
|
group owner negotiation, group interface setup, provisioning, and
|
|
establishing data connection.
|
|
|
|
P2P_CONNECT <peer device address> <pbc|pin|PIN#>
|
|
[label|display|keypad] [persistent] [join|auth] [go_intent=<0..15>]
|
|
|
|
Start P2P group formation with a discovered P2P peer. This includes
|
|
optional group owner negotiation, group interface setup, provisioning,
|
|
and establishing data connection.
|
|
|
|
The <pbc|pin|PIN#> parameter specifies the WPS provisioning
|
|
method. "pbc" string starts pushbutton method, "pin" string start PIN
|
|
method using an automatically generated PIN (which will be returned as
|
|
the command return code), PIN# means that a pre-selected PIN can be
|
|
used (e.g., 12345670). [label|display|keypad] is used with PIN method
|
|
to specify which PIN is used (label=PIN from local label,
|
|
display=dynamically generated random PIN from local display,
|
|
keypad=PIN entered from peer device label or display). "persistent"
|
|
parameter can be used to request a persistent group to be formed.
|
|
|
|
"join" indicates that this is a command to join an existing group as a
|
|
client. It skips the GO Negotiation part.
|
|
|
|
"auth" indicates that the WPS parameters are authorized for the peer
|
|
device without actually starting GO Negotiation (i.e., the peer is
|
|
expected to initiate GO Negotiation). This is mainly for testing
|
|
purposes.
|
|
|
|
The optional "go_intent" parameter can be used to override the default
|
|
GO Intent value.
|
|
|
|
|
|
\subsection ctrl_iface_P2P_LISTEN P2P_LISTEN
|
|
|
|
Start Listen-only state. Optional parameter can be used to specify the
|
|
duration for the Listen operation in seconds. This command may not
|
|
be of that much use during normal operations and is mainly designed
|
|
for testing. It can also be used to keep the device discoverable
|
|
without having to maintain a group.
|
|
|
|
|
|
\subsection ctrl_iface_P2P_GROUP_REMOVE P2P_GROUP_REMOVE
|
|
|
|
Terminate a P2P group. If a new virtual network interface was used for
|
|
the group, it will also be removed. The network interface name of the
|
|
group interface is used as a parameter for this command.
|
|
|
|
|
|
\subsection ctrl_iface_P2P_GROUP_ADD P2P_GROUP_ADD
|
|
|
|
Set up a P2P group owner manually (i.e., without group owner
|
|
negotiation with a specific peer). This is also known as autonomous
|
|
GO. Optional persistent=<network id> can be used to specify restart of
|
|
a persistent group.
|
|
|
|
|
|
\subsection ctrl_iface_P2P_PROV_DISC P2P_PROV_DISC
|
|
|
|
Send P2P provision discovery request to the specified peer. The
|
|
parameters for this command are the P2P device address of the peer and
|
|
the desired configuration method. For example, "P2P_PROV_DISC
|
|
02:01:02:03:04:05 display" would request the peer to display a PIN for
|
|
us and "P2P_PROV_DISC 02:01:02:03:04:05 keypad" would request the peer
|
|
to enter a PIN that we display.
|
|
|
|
|
|
\subsection ctrl_iface_P2P_GET_PASSPHRASE P2P_GET_PASSPHRASE
|
|
|
|
Get the passphrase for a group (only available when acting as a GO).
|
|
|
|
|
|
\subsection ctrl_iface_P2P_SERV_DISC_REQ P2P_SERV_DISC_REQ
|
|
|
|
Schedule a P2P service discovery request. The parameters for this
|
|
command are the device address of the peer device (or 00:00:00:00:00:00
|
|
for wildcard query that is sent to every discovered P2P peer that
|
|
supports service discovery) and P2P Service Query TLV(s) as hexdump.
|
|
For example, "P2P_SERV_DISC_REQ 00:00:00:00:00:00 02000001" schedules
|
|
a request for listing all supported service discovery protocols and
|
|
requests this to be sent to all discovered peers. The pending requests
|
|
are sent during device discovery (see \ref ctrl_iface_P2P_FIND).
|
|
|
|
This command returns an identifier for the pending query (e.g.,
|
|
"1f77628") that can be used to cancel the request. Directed requests
|
|
will be automatically removed when the specified peer has replied to
|
|
it.
|
|
|
|
|
|
\subsection ctrl_iface_P2P_SERV_DISC_CANCEL_REQ P2P_SERV_DISC_CANCEL_REQ
|
|
|
|
Cancel a pending P2P service discovery request. This command takes a
|
|
single parameter: identifier for the pending query (the value returned
|
|
by \ref ctrl_iface_P2P_SERV_DISC_REQ), e.g.,
|
|
"P2P_SERV_DISC_CANCEL_REQ 1f77628".
|
|
|
|
|
|
\subsection ctrl_iface_P2P_SERV_DISC_RESP P2P_SERV_DISC_RESP
|
|
|
|
Reply to a service discovery query. This command takes following
|
|
parameters: frequency in MHz, destination address, dialog token,
|
|
response TLV(s). The first three parameters are copied from the
|
|
request event. For example,
|
|
"P2P_SERV_DISC_RESP 2437 02:40:61:c2:f3:b7 1 0300000101".
|
|
|
|
|
|
\subsection ctrl_iface_P2P_SERVICE_UPDATE P2P_SERVICE_UPDATE
|
|
|
|
Indicate that local services have changed. This is used to increment
|
|
the P2P service indicator value so that peers know when previously
|
|
cached information may have changed.
|
|
|
|
|
|
\subsection ctrl_iface_P2P_SERV_DISC_EXTERNAL P2P_SERV_DISC_EXTERNAL
|
|
|
|
Configure external processing of P2P service requests: 0 (default) =
|
|
no external processing of requests (i.e., internal code will reject
|
|
each request), 1 = external processing of requests (external program
|
|
is responsible for replying to service discovery requests with
|
|
\ref ctrl_iface_P2P_SERV_DISC_RESP).
|
|
|
|
|
|
\subsection ctrl_iface_P2P_REJECT P2P_REJECT
|
|
|
|
Reject connection attempt from a peer (specified with a device
|
|
address). This is a mechanism to reject a pending GO Negotiation with
|
|
a peer and request to automatically block any further connection or
|
|
discovery of the peer.
|
|
|
|
|
|
\subsection ctrl_iface_P2P_INVITE P2P_INVITE
|
|
|
|
Invite a peer to join a group or to (re)start a persistent group.
|
|
|
|
|
|
\subsection ctrl_iface_P2P_PEER P2P_PEER
|
|
|
|
Fetch information about a discovered peer. This command takes in an
|
|
argument specifying which peer to select: P2P Device Address of the
|
|
peer, "FIRST" to indicate the first peer in the list, or "NEXT-<P2P
|
|
Device Address>" to indicate the entry following the specified peer
|
|
(to allow for iterating through the list).
|
|
|
|
|
|
\subsection ctrl_iface_P2P_EXT_LISTEN P2P_EXT_LISTEN
|
|
|
|
Enable/disable extended listen timing. Without parameters, this
|
|
command disables extended listen timing. When enabling the feature,
|
|
two parameters are used: availibility period and availability interval
|
|
(both in milliseconds and with range of 1-65535).
|
|
|
|
|
|
\section ctrl_iface_interactive Interactive requests
|
|
|
|
If wpa_supplicant needs additional information during authentication
|
|
(e.g., password), it will use a specific prefix, \c CTRL-REQ-
|
|
(\a WPA_CTRL_REQ macro) in an unsolicited event message. An external
|
|
program, e.g., a GUI, can provide such information by using
|
|
\c CTRL-RSP- (\a WPA_CTRL_RSP macro) prefix in a command with matching
|
|
field name.
|
|
|
|
The following fields can be requested in this way from the user:
|
|
- IDENTITY (EAP identity/user name)
|
|
- PASSWORD (EAP password)
|
|
- NEW_PASSWORD (New password if the server is requesting password change)
|
|
- PIN (PIN code for accessing a SIM or smartcard)
|
|
- OTP (one-time password; like password, but the value is used only once)
|
|
- PASSPHRASE (passphrase for a private key file)
|
|
|
|
\verbatim
|
|
CTRL-REQ-<field name>-<network id>-<human readable text>
|
|
CTRL-RSP-<field name>-<network id>-<value>
|
|
\endverbatim
|
|
|
|
For example, request from wpa_supplicant:
|
|
\verbatim
|
|
CTRL-REQ-PASSWORD-1-Password needed for SSID test-network
|
|
\endverbatim
|
|
|
|
And a matching reply from the GUI:
|
|
\verbatim
|
|
CTRL-RSP-PASSWORD-1-secret
|
|
\endverbatim
|
|
|
|
|
|
\subsection ctrl_iface_GET_CAPABILITY GET_CAPABILITY <option> [strict]
|
|
|
|
Get list of supported functionality (eap, pairwise, group,
|
|
proto). Supported functionality is shown as space separate lists of
|
|
values used in the same format as in wpa_supplicant configuration.
|
|
If optional argument, 'strict', is added, only the values that the
|
|
driver claims to explicitly support are included. Without this, all
|
|
available capabilities are included if the driver does not provide
|
|
a mechanism for querying capabilities.
|
|
|
|
Example request/reply pairs:
|
|
|
|
\verbatim
|
|
GET_CAPABILITY eap
|
|
AKA FAST GTC LEAP MD5 MSCHAPV2 OTP PAX PEAP PSK SIM TLS TTLS
|
|
\endverbatim
|
|
|
|
\verbatim
|
|
GET_CAPABILITY pairwise
|
|
CCMP TKIP NONE
|
|
\endverbatim
|
|
|
|
\verbatim
|
|
GET_CAPABILITY pairwise strict
|
|
\endverbatim
|
|
|
|
\verbatim
|
|
GET_CAPABILITY group
|
|
CCMP TKIP WEP104 WEP40
|
|
\endverbatim
|
|
|
|
\verbatim
|
|
GET_CAPABILITY key_mgmt
|
|
WPA-PSK WPA-EAP IEEE8021X NONE
|
|
\endverbatim
|
|
|
|
\verbatim
|
|
GET_CAPABILITY proto
|
|
RSN WPA
|
|
\endverbatim
|
|
|
|
\verbatim
|
|
GET_CAPABILITY auth_alg
|
|
OPEN SHARED LEAP
|
|
\endverbatim
|
|
|
|
|
|
\subsection ctrl_iface_AP_SCAN AP_SCAN <ap_scan value>
|
|
|
|
Change ap_scan value:
|
|
0 = no scanning,
|
|
1 = wpa_supplicant requests scans and uses scan results to select the AP,
|
|
2 = wpa_supplicant does not use scanning and just requests driver to
|
|
associate and take care of AP selection
|
|
|
|
|
|
\subsection ctrl_iface_INTERFACES INTERFACES
|
|
|
|
List configured interfaces.
|
|
|
|
\verbatim
|
|
wlan0
|
|
eth0
|
|
\endverbatim
|
|
|
|
|
|
\section ctrl_iface_events Control interface events
|
|
|
|
wpa_supplicant generates number messages based on events like
|
|
connection or a completion of a task. These are available to external
|
|
programs that attach to receive unsolicited messages over the control
|
|
interface with \ref wpa_ctrl_attach().
|
|
|
|
The event messages will be delivered over the attach control interface
|
|
as text strings that start with the priority level of the message and
|
|
a fixed prefix text as defined in \ref wpa_ctrl.h. After this, optional
|
|
additional information may be included depending on the event
|
|
message. For example, following event message is delivered when new
|
|
scan results are available:
|
|
|
|
\verbatim
|
|
<2>CTRL-EVENT-SCAN-RESULTS
|
|
\endverbatim
|
|
|
|
Following priority levels are used:
|
|
- 0 = MSGDUMP
|
|
- 1 = DEBUG
|
|
- 2 = INFO
|
|
- 3 = WARNING
|
|
- 4 = ERROR
|
|
|
|
By default, any priority level greater than equal to 2 (INFO) are
|
|
delivered over the attached control interface. LEVEL command can be
|
|
used to set the level of messages which will be delivered. It should
|
|
be noted that there are many debug messages that do not include any
|
|
particulat prefix and are subject to change. They may be used for
|
|
debug information, but can usually be ignored by external programs.
|
|
|
|
In most cases, the external program can skip over the priority field
|
|
in the beginning of the event message and then compare the following
|
|
text to the event strings from \ref wpa_ctrl.h that the program is
|
|
interested in processing.
|
|
|
|
Following subsections describe the most common event notifications
|
|
generated by wpa_supplicant.
|
|
|
|
\subsection ctrl_iface_event_CTRL_REQ CTRL-REQ-
|
|
|
|
WPA_CTRL_REQ: Request information from a user. See
|
|
\ref ctrl_iface_interactive "Interactive requests" sections for more
|
|
details.
|
|
|
|
\subsection ctrl_iface_event_CONNECTED CTRL-EVENT-CONNECTED
|
|
|
|
WPA_EVENT_CONNECTED: Indicate successfully completed authentication
|
|
and that the data connection is now enabled.
|
|
|
|
\subsection ctrl_iface_event_DISCONNECTED CTRL-EVENT-DISCONNECTED
|
|
|
|
WPA_EVENT_DISCONNECTED: Disconnected, data connection is not available
|
|
|
|
\subsection ctrl_iface_event_TERMINATING CTRL-EVENT-TERMINATING
|
|
|
|
WPA_EVENT_TERMINATING: wpa_supplicant is exiting
|
|
|
|
\subsection ctrl_iface_event_PASSWORD_CHANGED CTRL-EVENT-PASSWORD-CHANGED
|
|
|
|
WPA_EVENT_PASSWORD_CHANGED: Password change was completed successfully
|
|
|
|
\subsection ctrl_iface_event_EAP_NOTIFICATION CTRL-EVENT-EAP-NOTIFICATION
|
|
|
|
WPA_EVENT_EAP_NOTIFICATION: EAP-Request/Notification received
|
|
|
|
\subsection ctrl_iface_event_EAP_STARTED CTRL-EVENT-EAP-STARTED
|
|
|
|
WPA_EVENT_EAP_STARTED: EAP authentication started (EAP-Request/Identity
|
|
received)
|
|
|
|
\subsection ctrl_iface_event_EAP_METHOD CTRL-EVENT-EAP-METHOD
|
|
|
|
WPA_EVENT_EAP_METHOD: EAP method selected
|
|
|
|
\subsection ctrl_iface_event_EAP_SUCCESS CTRL-EVENT-EAP-SUCCESS
|
|
|
|
WPA_EVENT_EAP_SUCCESS: EAP authentication completed successfully
|
|
|
|
\subsection ctrl_iface_event_EAP_FAILURE CTRL-EVENT-EAP-FAILURE
|
|
|
|
WPA_EVENT_EAP_FAILURE: EAP authentication failed (EAP-Failure received)
|
|
|
|
\subsection ctrl_iface_event_SCAN_RESULTS CTRL-EVENT-SCAN-RESULTS
|
|
|
|
WPA_EVENT_SCAN_RESULTS: New scan results available
|
|
|
|
\subsection ctrl_iface_event_BSS_ADDED CTRL-EVENT-BSS-ADDED
|
|
|
|
WPA_EVENT_BSS_ADDED: A new BSS entry was added. The event prefix is
|
|
followed by the BSS entry id and BSSID.
|
|
|
|
\verbatim
|
|
CTRL-EVENT-BSS-ADDED 34 00:11:22:33:44:55
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_BSS_REMOVED CTRL-EVENT-BSS-REMOVED
|
|
|
|
WPA_EVENT_BSS_REMOVED: A BSS entry was removed. The event prefix is
|
|
followed by BSS entry id and BSSID.
|
|
|
|
\verbatim
|
|
CTRL-EVENT-BSS-REMOVED 34 00:11:22:33:44:55
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_WPS_OVERLAP_DETECTED WPS-OVERLAP-DETECTED
|
|
|
|
WPS_EVENT_OVERLAP: WPS overlap detected in PBC mode
|
|
|
|
\subsection ctrl_iface_event_WPS_AP_AVAILABLE_PBC WPS-AP-AVAILABLE-PBC
|
|
|
|
WPS_EVENT_AP_AVAILABLE_PBC: Available WPS AP with active PBC found in
|
|
scan results.
|
|
|
|
\subsection ctrl_iface_event_WPS_AP_AVAILABLE_PIN WPS-AP-AVAILABLE-PIN
|
|
|
|
WPS_EVENT_AP_AVAILABLE_PIN: Available WPS AP with recently selected PIN
|
|
registrar found in scan results.
|
|
|
|
\subsection ctrl_iface_event_WPS_AP_AVAILABLE WPS-AP-AVAILABLE
|
|
|
|
WPS_EVENT_AP_AVAILABLE: Available WPS AP found in scan results
|
|
|
|
\subsection ctrl_iface_event_WPS_CRED_RECEIVED WPS-CRED-RECEIVED
|
|
|
|
WPS_EVENT_CRED_RECEIVED: A new credential received
|
|
|
|
\subsection ctrl_iface_event_WPS_M2D WPS-M2D
|
|
|
|
WPS_EVENT_M2D: M2D received
|
|
|
|
\subsection ctrl_iface_event_WPS_FAIL
|
|
|
|
WPS_EVENT_FAIL: WPS registration failed after M2/M2D
|
|
|
|
\subsection ctrl_iface_event_WPS_SUCCESS WPS-SUCCESS
|
|
|
|
WPS_EVENT_SUCCESS: WPS registration completed successfully
|
|
|
|
\subsection ctrl_iface_event_WPS_TIMEOUT WPS-TIMEOUT
|
|
|
|
WPS_EVENT_TIMEOUT: WPS enrollment attempt timed out and was terminated
|
|
|
|
\subsection ctrl_iface_event_WPS_ENROLLEE_SEEN WPS-ENROLLEE-SEEN
|
|
|
|
WPS_EVENT_ENROLLEE_SEEN: WPS Enrollee was detected (used in AP mode).
|
|
The event prefix is followed by MAC addr, UUID-E, pri dev type,
|
|
config methods, dev passwd id, request type, [dev name].
|
|
|
|
\verbatim
|
|
WPS-ENROLLEE-SEEN 02:00:00:00:01:00
|
|
572cf82f-c957-5653-9b16-b5cfb298abf1 1-0050F204-1 0x80 4 1
|
|
[Wireless Client]
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_WPS_ER_AP_ADD WPS-ER-AP-ADD
|
|
|
|
WPS_EVENT_ER_AP_ADD: WPS ER discovered an AP
|
|
|
|
\verbatim
|
|
WPS-ER-AP-ADD 87654321-9abc-def0-1234-56789abc0002 02:11:22:33:44:55
|
|
pri_dev_type=6-0050F204-1 wps_state=1 |Very friendly name|Company|
|
|
Long description of the model|WAP|http://w1.fi/|http://w1.fi/hostapd/
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_WPS_ER_AP_REMOVE WPS-ER-AP-REMOVE
|
|
|
|
WPS_EVENT_ER_AP_REMOVE: WPS ER removed an AP entry
|
|
|
|
\verbatim
|
|
WPS-ER-AP-REMOVE 87654321-9abc-def0-1234-56789abc0002
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_WPS_ER_ENROLLEE_ADD WPS-ER-ENROLLEE-ADD
|
|
|
|
WPS_EVENT_ER_ENROLLEE_ADD: WPS ER discovered a new Enrollee
|
|
|
|
\verbatim
|
|
WPS-ER-ENROLLEE-ADD 2b7093f1-d6fb-5108-adbb-bea66bb87333
|
|
02:66:a0:ee:17:27 M1=1 config_methods=0x14d dev_passwd_id=0
|
|
pri_dev_type=1-0050F204-1
|
|
|Wireless Client|Company|cmodel|123|12345|
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_WPS_ER_ENROLLEE_REMOVE WPS-ER-ENROLLEE-REMOVE
|
|
|
|
WPS_EVENT_ER_ENROLLEE_REMOVE: WPS ER removed an Enrollee entry
|
|
|
|
\verbatim
|
|
WPS-ER-ENROLLEE-REMOVE 2b7093f1-d6fb-5108-adbb-bea66bb87333
|
|
02:66:a0:ee:17:27
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_WPS_PIN_NEEDED WPS-PIN-NEEDED
|
|
|
|
WPS_EVENT_PIN_NEEDED: PIN is needed to complete provisioning with an
|
|
Enrollee. This is followed by information about the Enrollee (UUID,
|
|
MAC address, device name, manufacturer, model name, model number,
|
|
serial number, primary device type).
|
|
\verbatim
|
|
WPS-PIN-NEEDED 5a02a5fa-9199-5e7c-bc46-e183d3cb32f7 02:2a:c4:18:5b:f3
|
|
[Wireless Client|Company|cmodel|123|12345|1-0050F204-1]
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_WPS_NEW_AP_SETTINGS WPS-NEW-AP-SETTINGS
|
|
|
|
WPS_EVENT_NEW_AP_SETTINGS: New AP settings were received
|
|
|
|
\subsection ctrl_iface_event_WPS_REG_SUCCESS WPS-REG-SUCCESS
|
|
|
|
WPS_EVENT_REG_SUCCESS: WPS provisioning was completed successfully
|
|
(AP/Registrar)
|
|
|
|
\subsection ctrl_iface_event_WPS_AP_SETUP_LOCKED WPS-AP-SETUP-LOCKED
|
|
|
|
WPS_EVENT_AP_SETUP_LOCKED: AP changed into setup locked state due to
|
|
multiple failed configuration attempts using the AP PIN.
|
|
|
|
\subsection ctrl_iface_event_AP_STA_CONNECTED AP-STA-CONNECTED
|
|
|
|
AP_STA_CONNECTED: A station associated with us (AP mode event). The
|
|
event prefix is followed by the MAC address of the station.
|
|
|
|
\verbatim
|
|
AP-STA-CONNECTED 02:2a:c4:18:5b:f3
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_AP_STA_DISCONNECTED AP-STA-DISCONNECTED
|
|
|
|
AP_STA_DISCONNECTED: A station disassociated (AP mode event)
|
|
|
|
\verbatim
|
|
AP-STA-DISCONNECTED 02:2a:c4:18:5b:f3
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_P2P_EVENT_DEVICE_FOUND P2P-DEVICE-FOUND
|
|
|
|
P2P_EVENT_DEVICE_FOUND: Indication of a discovered P2P device with
|
|
information about that device.
|
|
|
|
\verbatim
|
|
P2P-DEVICE-FOUND 02:b5:64:63:30:63 p2p_dev_addr=02:b5:64:63:30:63
|
|
pri_dev_type=1-0050f204-1 name='Wireless Client' config_methods=0x84
|
|
dev_capab=0x21 group_capab=0x0
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_P2P_EVENT_GO_NEG_REQUEST P2P-GO-NEG-REQUEST
|
|
|
|
P2P_EVENT_GO_NEG_REQUEST: A P2P device requested GO negotiation, but we
|
|
were not ready to start the negotiation.
|
|
|
|
\verbatim
|
|
P2P-GO-NEG-REQUEST 02:40:61:c2:f3:b7 dev_passwd_id=4
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_P2P_EVENT_GO_NEG_SUCCESS P2P-GO-NEG-SUCCESS
|
|
|
|
P2P_EVENT_GO_NEG_SUCCESS: Indication of successfully complete group
|
|
owner negotiation.
|
|
|
|
\subsection ctrl_iface_event_P2P_EVENT_GO_NEG_FAILURE P2P-GO-NEG-FAILURE
|
|
|
|
P2P_EVENT_GO_NEG_FAILURE: Indication of failed group owner negotiation.
|
|
|
|
\subsection ctrl_iface_event_P2P_EVENT_GROUP_FORMATION_SUCCESS P2P-GROUP-FORMATION-SUCCESS
|
|
|
|
P2P_EVENT_GROUP_FORMATION_SUCCESS: Indication that P2P group formation
|
|
has been completed successfully.
|
|
|
|
\subsection ctrl_iface_event_P2P_EVENT_GROUP_FORMATION_FAILURE P2P-GROUP-FORMATION-FAILURE
|
|
|
|
P2P_EVENT_GROUP_FORMATION_FAILURE: Indication that P2P group formation
|
|
failed (e.g., due to provisioning failure or timeout).
|
|
|
|
\subsection ctrl_iface_event_P2P_EVENT_GROUP_STARTED P2P-GROUP-STARTED
|
|
|
|
P2P_EVENT_GROUP_STARTED: Indication of a new P2P group having been
|
|
started. Additional parameters: network interface name for the group,
|
|
role (GO/client), SSID. The passphrase used in the group is also
|
|
indicated here if known (on GO) or PSK (on client). If the group is a
|
|
persistent one, a flag indicating that is included.
|
|
|
|
\verbatim
|
|
P2P-GROUP-STARTED wlan0-p2p-0 GO ssid="DIRECT-3F Testing"
|
|
passphrase="12345678" go_dev_addr=02:40:61:c2:f3:b7 [PERSISTENT]
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_P2P_EVENT_GROUP_REMOVED P2P-GROUP-REMOVED
|
|
|
|
P2P_EVENT_GROUP_REMOVED: Indication of a P2P group having been removed.
|
|
Additional parameters: network interface name for the group, role
|
|
(GO/client).
|
|
|
|
\verbatim
|
|
P2P-GROUP-REMOVED wlan0-p2p-0 GO
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_P2P_EVENT_PROV_DISC_SHOW_PIN P2P-PROV-DISC-SHOW-PIN
|
|
|
|
P2P_EVENT_PROV_DISC_SHOW_PIN: Request from the peer for us to display
|
|
a PIN that will be entered on the peer. The following parameters are
|
|
included after the event prefix: peer_address PIN. The PIN is a
|
|
random PIN generated for this connection. P2P_CONNECT command can be
|
|
used to accept the request with the same PIN configured for the
|
|
connection.
|
|
|
|
\verbatim
|
|
P2P-PROV-DISC-SHOW-PIN 02:40:61:c2:f3:b7 12345670
|
|
p2p_dev_addr=02:40:61:c2:f3:b7 pri_dev_type=1-0050F204-1 name='Test'
|
|
config_methods=0x188 dev_capab=0x21 group_capab=0x0
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_P2P_EVENT_PROV_DISC_ENTER_PIN P2P-PROV-DISC-ENTER-PIN
|
|
|
|
P2P_EVENT_PROV_DISC_ENTER_PIN: Request from the peer for us to enter a
|
|
PIN displayed on the peer. The following parameter is included after
|
|
the event prefix: peer address.
|
|
|
|
\verbatim
|
|
P2P-PROV-DISC-ENTER-PIN 02:40:61:c2:f3:b7 p2p_dev_addr=02:40:61:c2:f3:b7
|
|
pri_dev_type=1-0050F204-1 name='Test' config_methods=0x188
|
|
dev_capab=0x21 group_capab=0x0
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_P2P_EVENT_PROV_DISC_PBC_REQ P2P-PROV-DISC-PBC-REQ
|
|
|
|
P2P_EVENT_PROV_DISC_PBC_REQ: Request from the peer for us to connect
|
|
using PBC. The following parameters are included after the event prefix:
|
|
peer_address. P2P_CONNECT command can be used to accept the request.
|
|
|
|
\verbatim
|
|
P2P-PROV-DISC-PBC-REQ 02:40:61:c2:f3:b7 p2p_dev_addr=02:40:61:c2:f3:b7
|
|
pri_dev_type=1-0050F204-1 name='Test' config_methods=0x188
|
|
dev_capab=0x21 group_capab=0x0
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_P2P_EVENT_PROV_DISC_PBC_RESP P2P-PROV-DISC-PBC-RESP
|
|
|
|
P2P_EVENT_PROV_DISC_PBC_RESP: The peer accepted our provision discovery
|
|
request to connect using PBC. The following parameters are included
|
|
after the event prefix: peer_address. P2P_CONNECT command can be used to
|
|
start GO Negotiation after this.
|
|
|
|
\verbatim
|
|
P2P-PROV-DISC-PBC-RESP 02:40:61:c2:f3:b7
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_P2P_EVENT_SERV_DISC_REQ P2P-SERV-DISC-REQ
|
|
|
|
P2P-SERV-DISC-REQ: Indicate reception of a P2P service discovery
|
|
request. The following parameters are included after the event prefix:
|
|
frequency in MHz, source address, dialog token, Service Update
|
|
Indicator, Service Query TLV(s) as hexdump.
|
|
|
|
\verbatim
|
|
P2P-SERV-DISC-REQ 2412 02:40:61:c2:f3:b7 0 0 02000001
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_P2P_EVENT_SERV_DISC_RESP P2P-SERV-DISC-RESP
|
|
|
|
P2P-SERV-DISC-RESP: Indicate reception of a P2P service discovery
|
|
response. The following parameters are included after the event prefix:
|
|
source address, Service Update Indicator, Service Response TLV(s) as
|
|
hexdump.
|
|
|
|
\verbatim
|
|
P2P-SERV-DISC-RESP 02:40:61:c2:f3:b7 0 0300000101
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_P2P_EVENT_INVITATION_RECEIVED P2P-INVITATION-RECEIVED
|
|
|
|
P2P-INVITATION-RECEIVED: Indicate reception of a P2P Invitation
|
|
Request. For persistent groups, the parameter after the event prefix
|
|
indicates which network block includes the persistent group data.
|
|
|
|
\verbatim
|
|
P2P-INVITATION-RECEIVED sa=02:40:61:c2:f3:b7 persistent=0
|
|
\endverbatim
|
|
|
|
\subsection ctrl_iface_event_P2P_EVENT_INVITATION_RESULT P2P-INVITATION-RESULT
|
|
|
|
P2P-INVITATION-RESULT: Indicate result of a P2P invitation that was
|
|
requested with \ref ctrl_iface_P2P_INVITE. The parameter
|
|
status=<value> shows the status code returned by the peer (or -1 on
|
|
local failure or timeout).
|
|
|
|
\verbatim
|
|
P2P-INVITATION-RESULT status=1
|
|
\endverbatim
|
|
|
|
*/
|