83 lines
1.9 KiB
C
83 lines
1.9 KiB
C
#include "cw.h"
|
|
#include "cfg.h"
|
|
#include "dbg.h"
|
|
|
|
|
|
|
|
static int get_psk(struct cw_Conn *conn, const char *username, uint8_t ** psk,
|
|
unsigned int *len)
|
|
{
|
|
char key[CW_CFG_MAX_KEY_LEN];
|
|
cw_Val_t *result;
|
|
sprintf(key, "%s/%s", "psk", username);
|
|
stop();
|
|
// result = cw_ktv_get(conn->local_cfg, key, CW_TYPE_BSTR16);
|
|
if (result == NULL) {
|
|
if (conn->dtls_psk != NULL) {
|
|
*psk = bstr16_data(conn->dtls_psk);
|
|
*len = bstr16_len(conn->dtls_psk);
|
|
return 1;
|
|
}
|
|
return 0;
|
|
}
|
|
|
|
if (result == NULL)
|
|
return 0;
|
|
*psk = result->type->data(result);
|
|
*len = result->type->len(result);
|
|
return 1;
|
|
}
|
|
|
|
|
|
/**
|
|
* @brief Setup DTLS parameters from config
|
|
* @param conn
|
|
* @param cfg
|
|
* @param prefix
|
|
* @param default_cipher
|
|
* @return
|
|
*/
|
|
int cw_setup_dtls(struct cw_Conn *conn, cw_Cfg_t * cfg, const char *prefix,
|
|
char *default_cipher)
|
|
{
|
|
char key[CW_CFG_MAX_KEY_LEN];
|
|
const char *ssl_cert, *ssl_key;
|
|
uint8_t security;
|
|
|
|
security = 0;
|
|
|
|
sprintf(key, "%s/%s", prefix, "ssl-cipher");
|
|
conn->dtls_cipher = cw_cfg_get(cfg, key, default_cipher);
|
|
|
|
sprintf(key, "%s/%s", prefix, "ssl-psk");
|
|
conn->dtls_psk = (bstr16_t)cw_cfg_get(cfg, key, NULL);
|
|
|
|
sprintf(key, "%s/%s", prefix, "ssl-psk-enable");
|
|
conn->dtls_psk_enable = cw_cfg_get_bool(cfg, key, 0);
|
|
|
|
if (conn->dtls_psk_enable) {
|
|
security |= CAPWAP_FLAG_AC_SECURITY_S;
|
|
}
|
|
|
|
|
|
|
|
sprintf(key, "%s/%s", prefix, "ssl-certfile");
|
|
ssl_cert = cw_cfg_get(cfg, key, NULL);
|
|
sprintf(key, "%s/%s", prefix, "ssl-keyfile");
|
|
ssl_key = cw_cfg_get(cfg, key, NULL);
|
|
|
|
if (ssl_cert != NULL && ssl_key != NULL) {
|
|
conn->dtls_cert_file = ssl_cert;
|
|
conn->dtls_key_file = ssl_key;
|
|
sprintf(key, "%s/%s", prefix, "ssl-keypass");
|
|
conn->dtls_key_pass = cw_cfg_get(cfg, key, NULL);
|
|
security |= CAPWAP_FLAG_AC_SECURITY_X;
|
|
}
|
|
|
|
sprintf(key, "%s/%s", prefix, "ssl-dhbits");
|
|
conn->dtls_dhbits = cw_cfg_get_word(cfg, key, 1024);
|
|
|
|
conn->dtls_get_psk = get_psk;
|
|
return security;
|
|
}
|