/*

* ============================================================================

*  Name        : ./accesssec/eapol/eapol_framework/wapi_common/src/wapi_wlan_authentication.cpp

*  Part of     : WAPI / WAPI       *** Info from the SWAD

*  Description : WAPI authentication

*  Version     : %version: 18.1.1 % << Don't touch! Updated by Synergy at check-out.

*

*  Copyright © 2001-2009 Nokia.  All rights reserved.

*  This material, including documentation and any related computer

*  programs, is protected by copyright controlled by Nokia.  All

*  rights are reserved.  Copying, including reproducing, storing,

*  adapting or translating, any or all of this material requires the

*  prior written consent of Nokia.  This material also contains

*  confidential information which may not be disclosed to others

*  without the prior written consent of Nokia.

* ============================================================================

* Template version: 4.1.1

*/

// This is enumeration of WAPI source code.

#if defined(USE_EAP_MINIMUM_RELEASE_TRACES)

	#undef EAP_FILE_NUMBER_ENUM

	#define EAP_FILE_NUMBER_ENUM 20001 

	#undef EAP_FILE_NUMBER_DATE 

	#define EAP_FILE_NUMBER_DATE 1127594498 

#endif //#if defined(USE_EAP_MINIMUM_RELEASE_TRACES)

// INCLUDE FILES

#include "eap_am_memory.h"

#include "eap_am_tools.h"

#include "eap_variable_data.h"

#include "eap_tools.h"

#include "abs_eap_am_mutex.h"

#include "wapi_wlan_authentication.h"

#include "eapol_ethernet_header.h"

#include "wapi_ethernet_core.h"

#include "eap_crypto_api.h"

#include "eap_header_string.h"

#include "abs_eap_state_notification.h"

#include "eapol_session_key.h"

#include "eap_buffer.h"

#include "eap_config.h"

#include "eap_array_algorithms.h"

#include "eap_state_notification.h"

#include "eap_automatic_variable.h"

// LOCAL CONSTANTS

enum wapi_am_core_timer_id_e

{

	WAPI_WLAN_AUTHENTICATION_TIMER_FAILED_COMPLETELY_ID,

	WAPI_WLAN_AUTHENTICATION_TIMER_THIS_AP_FAILED_ID,

	WAPI_WLAN_AUTHENTICATION_TIMER_NO_RESPONSE_ID,

	WAPI_WLAN_AUTHENTICATION_TIMER_AUTHENTICATION_CANCELLED_ID

};

#if defined(USE_WAPI_WLAN_AUTHENTICATION_MUTEX)

	#define WAUTH_ENTER_MUTEX(tools) { tools->enter_global_mutex(); }

	#define WAUTH_LEAVE_MUTEX(tools) { tools->leave_global_mutex(); }

#else

	#define WAUTH_ENTER_MUTEX(tools)

	#define WAUTH_LEAVE_MUTEX(tools)

#endif //#if defined(USE_WAPI_WLAN_AUTHENTICATION_MUTEX)

// ================= MEMBER FUNCTIONS =======================

EAP_FUNC_EXPORT wapi_wlan_authentication_c * wapi_wlan_authentication_c::new_wapi_wlan_authentication(

	abs_eap_am_tools_c * const tools,

	abs_wapi_wlan_authentication_c * const partner,

	const bool is_client_when_true,

	const abs_eapol_wlan_database_reference_if_c * const wlan_database_reference

	)

{

	EAP_TRACE_DEBUG(

		tools, 

		TRACE_FLAGS_DEFAULT, 

		(EAPL("partner calls: wapi_wlan_authentication_c::new_wapi_wlan_authentication()\n")));

	EAP_TRACE_RETURN_STRING(tools, "returns to partner: wapi_wlan_authentication_c::new_wapi_wlan_authentication()");

	wapi_am_wlan_authentication_c * m_am_wauth = wapi_am_wlan_authentication_c::new_wapi_am_wlan_authentication(

		tools,

		is_client_when_true,

		wlan_database_reference);

	if (m_am_wauth == 0

		|| m_am_wauth->get_is_valid() == false)

	{

		// ERROR.

		if (m_am_wauth != 0)

		{

			EAP_TRACE_DEBUG(

				tools,

				TRACE_FLAGS_ALWAYS|TRACE_FLAGS_DEFAULT, 

				(EAPL("calls: wapi_wlan_authentication_c::new_eapol_wlan_authentication(): m_am_wauth->shutdown(): %s.\n"),

				(is_client_when_true == true) ? "client": "server"));

			m_am_wauth->shutdown();

			delete m_am_wauth;

			m_am_wauth = 0;

		}

		return 0;

	}

	wapi_wlan_authentication_c * wauth = new wapi_wlan_authentication_c(tools, partner, m_am_wauth, is_client_when_true);

	if (wauth == 0

		|| wauth->get_is_valid() == false)

	{

		// ERROR.

		if (wauth != 0)

		{

			wauth->shutdown();

			delete wauth;

		}

		return 0;

	}

	EAP_TRACE_DEBUG(

		tools,

		TRACE_FLAGS_ALWAYS|TRACE_FLAGS_DEFAULT, 

		(EAPL("calls: wapi_wlan_authentication_c::new_wapi_wlan_authentication(): m_am_wauth->set_am_partner(): %s.\n"),

		(is_client_when_true == true) ? "client": "server"));

	m_am_wauth->set_am_partner(

		wauth );

	return wauth;

}	

//--------------------------------------------------

EAP_FUNC_EXPORT wapi_wlan_authentication_c::wapi_wlan_authentication_c(

	abs_eap_am_tools_c * const tools,

	abs_wapi_wlan_authentication_c * const partner,

	wapi_am_wlan_authentication_c * const am_wauth, ///< wapi_wlan_authentication_c must always delete the am_wauth object.

	const bool is_client_when_true)

: m_partner(partner)

, m_am_wauth(am_wauth)

, m_ethernet_core(0)

, m_am_tools(tools)

, m_preshared_key(tools)

, m_authentication_type(eapol_key_authentication_type_none)

, m_802_11_authentication_mode(eapol_key_802_11_authentication_mode_none)

, m_received_WAPI_IE(tools)

, m_sent_WAPI_IE(tools)

, m_group_key_cipher_suite(eapol_RSNA_key_header_c::eapol_RSNA_cipher_none)

, m_pairwise_key_cipher_suite(eapol_RSNA_key_header_c::eapol_RSNA_cipher_none)

, m_authentication_counter(0u)

, m_successful_authentications(0u)

, m_failed_authentications(0u)

, m_is_valid(false)

, m_is_client(is_client_when_true)

, m_shutdown_was_called(false)

#if defined(USE_EAP_ERROR_TESTS)

, m_error_probability(0u)

, m_randomly_drop_packets_probability(0u)

, m_generate_multiple_error_packets(0u)

, m_enable_random_errors(false)

, m_randomly_drop_packets(false)

, m_manipulate_ethernet_header(false)

, m_send_original_packet_first(false)

#endif //#if defined(USE_EAP_ERROR_TESTS)

{

	EAP_TRACE_DEBUG(

		m_am_tools, 

		TRACE_FLAGS_DEFAULT, 

		(EAPL("starts: wapi_wlan_authentication_c::wapi_wlan_authentication_c(): %s, this = 0x%08x => 0x%08x, compiled %s %s.\n"),

		(m_is_client == true) ? "client": "server",

		this,

		dynamic_cast<abs_eap_base_timer_c *>(this),

		__DATE__,

		__TIME__));

	EAP_TRACE_RETURN_STRING(m_am_tools, "returns: wapi_wlan_authentication_c::wapi_wlan_authentication_c()");

	if (m_am_wauth == 0

		|| m_am_wauth->get_is_valid() == false)

	{

		// ERROR.

		if (m_am_wauth != 0)

		{

			EAP_TRACE_DEBUG(

				m_am_tools,

				TRACE_FLAGS_ALWAYS|TRACE_FLAGS_DEFAULT, 

				(EAPL("calls: wapi_wlan_authentication_c::wapi_wlan_authentication_c(): m_am_wauth->shutdown(): %s.\n"),

				(is_client_when_true == true) ? "client": "server"));

			m_am_wauth->shutdown();

			delete am_wauth;

		}

		return;

	}

	if (m_am_tools == 0

		|| m_am_tools->get_is_valid() == false)

	{

		// ERROR.

		if (m_am_wauth != 0)

		{

			EAP_TRACE_DEBUG(

				m_am_tools,

				TRACE_FLAGS_ALWAYS|TRACE_FLAGS_DEFAULT, 

				(EAPL("calls: wapi_wlan_authentication_c::wapi_wlan_authentication_c(): m_am_wauth->shutdown(): %s.\n"),

				(is_client_when_true == true) ? "client": "server"));

			m_am_wauth->shutdown();

			delete am_wauth;

		}

		return;

	}

	m_is_valid = true;

}	

//--------------------------------------------------

EAP_FUNC_EXPORT wapi_wlan_authentication_c::~wapi_wlan_authentication_c()

{

	EAP_TRACE_DEBUG(

		m_am_tools, 

		TRACE_FLAGS_DEFAULT, 

		(EAPL("partner calls: wapi_wlan_authentication_c::~wapi_wlan_authentication_c(): this = 0x%08x\n"),

		this));

	EAP_TRACE_RETURN_STRING(m_am_tools, "returns to partner: wapi_wlan_authentication_c::~wapi_wlan_authentication_c()");

	EAP_ASSERT(m_shutdown_was_called == true);

}

//--------------------------------------------------

//

EAP_FUNC_EXPORT eap_status_e wapi_wlan_authentication_c::shutdown()

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("partner calls: wapi_wlan_authentication_c::shutdown(); %s, m_shutdown_was_called=%d\n"),

		(m_is_client == true) ? "client": "server",

		m_shutdown_was_called));

	EAP_TRACE_RETURN_STRING(m_am_tools, "returns to partner: wapi_wlan_authentication_c::shutdown()");

	if (m_shutdown_was_called == true)

	{

		// Shutdown was already called once.

		return EAP_STATUS_RETURN(m_am_tools, eap_status_ok);

	}

	m_shutdown_was_called = true;

	// Cancel timer	

	cancel_all_timers();

	// Delete upper stack if it still exists

	if (m_ethernet_core != 0)

	{

		WAUTH_ENTER_MUTEX(m_am_tools);

		EAP_TRACE_DEBUG(

			m_am_tools,

			TRACE_FLAGS_ALWAYS|TRACE_FLAGS_DEFAULT, 

			(EAPL("calls eapol: wapi_wlan_authentication_c::shutdown(): m_ethernet_core->shutdown(): %s.\n"),

			(m_is_client == true) ? "client": "server"));

		eap_status_e status = m_ethernet_core->shutdown();

		EAP_UNREFERENCED_PARAMETER(status);

		EAP_TRACE_DEBUG(

			m_am_tools,

			TRACE_FLAGS_ALWAYS|TRACE_FLAGS_DEFAULT, 

			(EAPL("returns from eapol: wapi_wlan_authentication_c::shutdown(): m_ethernet_core->shutdown(): %s, status = %s.\n"),

			(m_is_client == true) ? "client": "server",

			eap_status_string_c::get_status_string(status)));

		WAUTH_LEAVE_MUTEX(m_am_tools);

		delete m_ethernet_core;

		m_ethernet_core = 0;

	}

	// Print some statistics

	if (m_is_client)

	{

		EAP_TRACE_ALWAYS(

			m_am_tools,

			TRACE_FLAGS_ALWAYS|TRACE_TEST_VECTORS,

			(EAPL("wapi_wlan_authentication_c::shutdown(): client authentication SUCCESS %d, FAILED %d, count %d\n"),

			m_successful_authentications,

			m_failed_authentications,

			m_authentication_counter));	

	}

	else

	{

		EAP_TRACE_ALWAYS(

			m_am_tools,

			TRACE_FLAGS_ALWAYS|TRACE_TEST_VECTORS,

			(EAPL("wapi_wlan_authentication_c::shutdown(): server authentication SUCCESS %d, FAILED %d, count %d\n"),

			m_successful_authentications,

			m_failed_authentications,

			m_authentication_counter));

	}

	if (m_am_wauth != 0)

	{

		EAP_TRACE_DEBUG(

			m_am_tools,

			TRACE_FLAGS_ALWAYS|TRACE_FLAGS_DEFAULT, 

			(EAPL("calls: wapi_wlan_authentication_c::shutdown(): m_am_wauth->shutdown(): %s.\n"),

			(m_is_client == true) ? "client": "server"));

		m_am_wauth->shutdown();

		delete m_am_wauth;

		m_am_wauth = 0;

	}

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("WAUTH EXITING.\n")));

	EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

	return eap_status_ok;

}

//--------------------------------------------------

//

eap_status_e wapi_wlan_authentication_c::cancel_all_authentication_sessions()

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);	

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("wapi_wlan_authentication_c::cancel_all_authentication_sessions(): %s\n"),

		(m_is_client == true) ? "client": "server"));

	eap_status_e status(eap_status_process_general_error);

	if (m_ethernet_core != 0)

	{

		WAUTH_ENTER_MUTEX(m_am_tools);

		EAP_TRACE_DEBUG(

			m_am_tools,

			TRACE_FLAGS_ALWAYS|TRACE_FLAGS_DEFAULT, 

			(EAPL("calls eapol: wapi_wlan_authentication_c::cancel_all_authentication_sessions(): m_ethernet_core->cancel_all_authentication_sessions(): %s.\n"),

			(m_is_client == true) ? "client": "server"));

		status = m_ethernet_core->cancel_all_authentication_sessions();

		EAP_TRACE_DEBUG(

			m_am_tools,

			TRACE_FLAGS_ALWAYS|TRACE_FLAGS_DEFAULT, 

			(EAPL("returns from eapol: wapi_wlan_authentication_c::cancel_all_authentication_sessions(): m_ethernet_core->cancel_all_authentication_sessions(): %s, status = %s.\n"),

			(m_is_client == true) ? "client": "server",

			eap_status_string_c::get_status_string(status)));

		WAUTH_LEAVE_MUTEX(m_am_tools);

	}

	else

	{

		EAP_TRACE_DEBUG(

			m_am_tools,

			TRACE_FLAGS_DEFAULT,

			(EAPL("wapi_wlan_authentication_c::cancel_all_authentication_sessions(): Stack did not exists.\n")));

		status = eap_status_process_general_error;

	}

	EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);	

	return EAP_STATUS_RETURN(m_am_tools, status);

}

//--------------------------------------------------

//

EAP_FUNC_EXPORT eap_status_e wapi_wlan_authentication_c::start_authentication(

	const eap_variable_data_c * const SSID,

	const eapol_key_authentication_type_e selected_eapol_key_authentication_type,

	const eap_variable_data_c * const preshared_key,

	const bool WAPI_override_enabled,

	const eap_am_network_id_c * const receive_network_id ///< source includes remote address, destination includes local address.

	)

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);	

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("partner calls: wapi_wlan_authentication_c::start_authentication(): %s\n"),

		(m_is_client == true) ? "client": "server"));

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("Starting authentication, selected_eapol_key_authentication_type = %d.\n"),

		selected_eapol_key_authentication_type));

	EAP_TRACE_RETURN_STRING(m_am_tools, "returns to partner: wapi_wlan_authentication_c::start_authentication()");

	eap_status_e status(eap_status_ok);

	status = cancel_all_authentication_sessions();

	if (status != eap_status_ok)

	{

		(void) EAP_STATUS_RETURN(m_am_tools, status);

	}

	m_authentication_type = selected_eapol_key_authentication_type;

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_ALWAYS|TRACE_FLAGS_DEFAULT, 

		(EAPL("calls: wapi_wlan_authentication_c::start_authentication(): m_am_wauth->set_wlan_parameters(): %s.\n"),

		(m_is_client == true) ? "client": "server"));

	status = m_am_wauth->set_wlan_parameters(

		SSID,

		WAPI_override_enabled,

		preshared_key,

		m_authentication_type);

	if (status != eap_status_ok)

	{

		(void) disassociation(0); // Note we have no addresses yet.

		(void) wapi_indication(

			0, // Note we have no addresses yet.

			eapol_wlan_authentication_state_failed_completely);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_ALWAYS|TRACE_FLAGS_DEFAULT, 

		(EAPL("calls: wapi_wlan_authentication_c::start_authentication(): m_am_wauth->reset_wapi_configuration(): %s.\n"),

		(m_is_client == true) ? "client": "server"));

	status = m_am_wauth->reset_wapi_configuration();

	if (status != eap_status_ok)

	{

		(void) disassociation(0); // Note we have no addresses yet.

		(void) wapi_indication(

			0, // Note we have no addresses yet.

			eapol_wlan_authentication_state_failed_completely);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_ALWAYS|TRACE_FLAGS_DEFAULT, 

		(EAPL("calls: wapi_wlan_authentication_c::start_authentication(): m_am_wauth->get_wlan_configuration(): %s.\n"),

		(m_is_client == true) ? "client": "server"));

	status = m_am_wauth->get_wlan_configuration(

		&m_preshared_key);

	if (status != eap_status_ok)

	{

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	// Start new authentication from scratch.

	// WAPI uses always open 802.11 mode.

	m_802_11_authentication_mode = eapol_key_802_11_authentication_mode_open;

	// USE_WAPI_CORE needs to be defined in the common code the

	// get this if compiled

	if( m_authentication_type == eapol_key_authentication_type_WAI_PSK )

	{

		EAP_TRACE_ALWAYS(

			m_am_tools,

			TRACE_FLAGS_ALWAYS|TRACE_FLAGS_DEFAULT, 

			(EAPL("start_authentication(): Trying auth mode OPEN and WAI-PSK.\n")));

	}

	else

	{

		EAP_TRACE_ALWAYS(

			m_am_tools,

			TRACE_FLAGS_ALWAYS|TRACE_FLAGS_DEFAULT, 

			(EAPL("start_authentication(): Trying auth mode OPEN and WAI certificates.\n")));

	}

	WAUTH_ENTER_MUTEX(m_am_tools);

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_ALWAYS|TRACE_FLAGS_DEFAULT, 

		(EAPL("calls eapol: wapi_wlan_authentication_c::start_authentication(): m_ethernet_core->create_state(): %s.\n"),

		(m_is_client == true) ? "client": "server"));

	status = m_ethernet_core->create_state(

		receive_network_id,

		m_authentication_type

		);

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_ALWAYS|TRACE_FLAGS_DEFAULT, 

		(EAPL("returns from eapol: wapi_wlan_authentication_c::start_authentication(): m_ethernet_core->create_state(): %s, status = %s.\n"),

		(m_is_client == true) ? "client": "server",

		eap_status_string_c::get_status_string(status)));

	WAUTH_LEAVE_MUTEX(m_am_tools);

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_ALWAYS|TRACE_FLAGS_DEFAULT, 

		(EAPL("calls partner: wapi_wlan_authentication_c::start_authentication(): m_partner->associate(%d).\n"),

		m_802_11_authentication_mode));

	status = m_partner->associate(m_802_11_authentication_mode);

	(void)EAP_STATUS_RETURN(m_am_tools, status);

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_ALWAYS|TRACE_FLAGS_DEFAULT, 

		(EAPL("returns from partner: wapi_wlan_authentication_c::start_authentication(): %s: m_partner->associate(): status = %s\n"),

		 (m_is_client == true) ? "client": "server",

		 eap_status_string_c::get_status_string(status)));