372 lines
13 KiB
C
372 lines
13 KiB
C
/* -*- Mode: C; tab-width: 4; indent-tabs-mode: t; c-basic-offset: 4 -*- */
|
|
/* vim: set ft=c ts=4 sts=4 sw=4 noexpandtab smartindent: */
|
|
|
|
/* EAP-FAST authentication method (RFC4851)
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License along
|
|
* with this program; if not, write to the Free Software Foundation, Inc.,
|
|
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*
|
|
* Copyright 2012 - 2014 Red Hat, Inc.
|
|
*/
|
|
|
|
#include <glib/gi18n.h>
|
|
|
|
#include "eap-method.h"
|
|
#include "eap-method-fast.h"
|
|
#include "eap-method-simple.h"
|
|
#include "helpers.h"
|
|
#include "ui-helpers.h"
|
|
#include "wireless-security.h"
|
|
|
|
#define I_NAME_COLUMN 0
|
|
#define I_ID_COLUMN 1
|
|
|
|
struct _EAPMethodFAST {
|
|
GtkGrid parent;
|
|
|
|
GtkEntry *anon_identity_entry;
|
|
GtkLabel *anon_identity_label;
|
|
GtkComboBox *inner_auth_combo;
|
|
GtkLabel *inner_auth_label;
|
|
GtkListStore *inner_auth_model;
|
|
GtkBox *inner_auth_box;
|
|
GtkFileChooserButton *pac_file_button;
|
|
GtkLabel *pac_file_label;
|
|
GtkCheckButton *pac_provision_check;
|
|
GtkComboBox *pac_provision_combo;
|
|
|
|
EAPMethodSimple *em_gtc;
|
|
EAPMethodSimple *em_mschap_v2;
|
|
|
|
gboolean is_editor;
|
|
};
|
|
|
|
static void eap_method_iface_init (EAPMethodInterface *);
|
|
|
|
G_DEFINE_TYPE_WITH_CODE (EAPMethodFAST, eap_method_fast, GTK_TYPE_GRID,
|
|
G_IMPLEMENT_INTERFACE (eap_method_get_type (), eap_method_iface_init))
|
|
|
|
static EAPMethod *
|
|
get_inner_method (EAPMethodFAST *self)
|
|
{
|
|
GtkTreeIter iter;
|
|
g_autofree gchar *id = NULL;
|
|
|
|
if (!gtk_combo_box_get_active_iter (self->inner_auth_combo, &iter))
|
|
return NULL;
|
|
gtk_tree_model_get (GTK_TREE_MODEL (self->inner_auth_model), &iter, I_ID_COLUMN, &id, -1);
|
|
|
|
if (strcmp (id, "gtc") == 0)
|
|
return EAP_METHOD (self->em_gtc);
|
|
if (strcmp (id, "mschapv2") == 0)
|
|
return EAP_METHOD (self->em_mschap_v2);
|
|
|
|
return NULL;
|
|
}
|
|
|
|
static gboolean
|
|
validate (EAPMethod *parent, GError **error)
|
|
{
|
|
EAPMethodFAST *self = (EAPMethodFAST *) parent;
|
|
const char *file;
|
|
gboolean provisioning;
|
|
gboolean valid = TRUE;
|
|
|
|
provisioning = gtk_toggle_button_get_active (GTK_TOGGLE_BUTTON (self->pac_provision_check));
|
|
file = gtk_file_chooser_get_filename (GTK_FILE_CHOOSER (self->pac_file_button));
|
|
if (!provisioning && !file) {
|
|
widget_set_error (GTK_WIDGET (self->pac_file_button));
|
|
g_set_error_literal (error, NMA_ERROR, NMA_ERROR_GENERIC, _("missing EAP-FAST PAC file"));
|
|
valid = FALSE;
|
|
} else
|
|
widget_unset_error (GTK_WIDGET (self->pac_file_button));
|
|
|
|
return eap_method_validate (get_inner_method (self), valid ? error : NULL) && valid;
|
|
}
|
|
|
|
static void
|
|
add_to_size_group (EAPMethod *parent, GtkSizeGroup *group)
|
|
{
|
|
EAPMethodFAST *self = (EAPMethodFAST *) parent;
|
|
|
|
gtk_size_group_add_widget (group, GTK_WIDGET (self->anon_identity_label));
|
|
gtk_size_group_add_widget (group, GTK_WIDGET (self->pac_file_label));
|
|
gtk_size_group_add_widget (group, GTK_WIDGET (self->pac_provision_check));
|
|
gtk_size_group_add_widget (group, GTK_WIDGET (self->inner_auth_label));
|
|
|
|
eap_method_add_to_size_group (EAP_METHOD (self->em_gtc), group);
|
|
eap_method_add_to_size_group (EAP_METHOD (self->em_mschap_v2), group);
|
|
}
|
|
|
|
static void
|
|
fill_connection (EAPMethod *parent, NMConnection *connection, NMSettingSecretFlags flags)
|
|
{
|
|
EAPMethodFAST *self = (EAPMethodFAST *) parent;
|
|
NMSetting8021x *s_8021x;
|
|
const char *text;
|
|
char *filename;
|
|
gboolean enabled;
|
|
int pac_provisioning = 0;
|
|
|
|
s_8021x = nm_connection_get_setting_802_1x (connection);
|
|
g_assert (s_8021x);
|
|
|
|
nm_setting_802_1x_add_eap_method (s_8021x, "fast");
|
|
|
|
text = gtk_entry_get_text (self->anon_identity_entry);
|
|
if (text && strlen (text))
|
|
g_object_set (s_8021x, NM_SETTING_802_1X_ANONYMOUS_IDENTITY, text, NULL);
|
|
|
|
filename = gtk_file_chooser_get_filename (GTK_FILE_CHOOSER (self->pac_file_button));
|
|
g_object_set (s_8021x, NM_SETTING_802_1X_PAC_FILE, filename, NULL);
|
|
|
|
enabled = gtk_toggle_button_get_active (GTK_TOGGLE_BUTTON (self->pac_provision_check));
|
|
|
|
if (!enabled)
|
|
g_object_set (G_OBJECT (s_8021x), NM_SETTING_802_1X_PHASE1_FAST_PROVISIONING, "0", NULL);
|
|
else {
|
|
pac_provisioning = gtk_combo_box_get_active (self->pac_provision_combo);
|
|
|
|
switch (pac_provisioning) {
|
|
case 0: /* Anonymous */
|
|
g_object_set (G_OBJECT (s_8021x), NM_SETTING_802_1X_PHASE1_FAST_PROVISIONING, "1", NULL);
|
|
break;
|
|
case 1: /* Authenticated */
|
|
g_object_set (G_OBJECT (s_8021x), NM_SETTING_802_1X_PHASE1_FAST_PROVISIONING, "2", NULL);
|
|
break;
|
|
case 2: /* Both - anonymous and authenticated */
|
|
g_object_set (G_OBJECT (s_8021x), NM_SETTING_802_1X_PHASE1_FAST_PROVISIONING, "3", NULL);
|
|
break;
|
|
default: /* Should not happen */
|
|
g_object_set (G_OBJECT (s_8021x), NM_SETTING_802_1X_PHASE1_FAST_PROVISIONING, "1", NULL);
|
|
break;
|
|
}
|
|
}
|
|
|
|
eap_method_fill_connection (get_inner_method (self), connection, flags);
|
|
}
|
|
|
|
static void
|
|
inner_auth_combo_changed_cb (EAPMethodFAST *self)
|
|
{
|
|
EAPMethod *inner_method;
|
|
GList *elt, *children;
|
|
|
|
children = gtk_container_get_children (GTK_CONTAINER (self->inner_auth_box));
|
|
for (elt = children; elt; elt = g_list_next (elt))
|
|
gtk_container_remove (GTK_CONTAINER (self->inner_auth_box), GTK_WIDGET (elt->data));
|
|
|
|
inner_method = get_inner_method (self);
|
|
gtk_container_add (GTK_CONTAINER (self->inner_auth_box), g_object_ref (GTK_WIDGET (inner_method)));
|
|
|
|
eap_method_emit_changed (EAP_METHOD (self));
|
|
}
|
|
|
|
static void
|
|
update_secrets (EAPMethod *parent, NMConnection *connection)
|
|
{
|
|
EAPMethodFAST *self = (EAPMethodFAST *) parent;
|
|
|
|
eap_method_update_secrets (EAP_METHOD (self->em_gtc), connection);
|
|
eap_method_update_secrets (EAP_METHOD (self->em_mschap_v2), connection);
|
|
}
|
|
|
|
static GtkWidget *
|
|
get_default_field (EAPMethod *parent)
|
|
{
|
|
EAPMethodFAST *self = (EAPMethodFAST *) parent;
|
|
return GTK_WIDGET (self->anon_identity_entry);
|
|
}
|
|
|
|
static const gchar *
|
|
get_password_flags_name (EAPMethod *parent)
|
|
{
|
|
return NM_SETTING_802_1X_PASSWORD;
|
|
}
|
|
|
|
static void
|
|
pac_toggled_cb (EAPMethodFAST *self)
|
|
{
|
|
gboolean enabled = FALSE;
|
|
|
|
enabled = gtk_toggle_button_get_active (GTK_TOGGLE_BUTTON (self->pac_provision_check));
|
|
gtk_widget_set_sensitive (GTK_WIDGET (self->pac_provision_combo), enabled);
|
|
|
|
eap_method_emit_changed (EAP_METHOD (self));
|
|
}
|
|
|
|
static void
|
|
changed_cb (EAPMethodFAST *self)
|
|
{
|
|
eap_method_emit_changed (EAP_METHOD (self));
|
|
}
|
|
|
|
static void
|
|
eap_method_fast_init (EAPMethodFAST *self)
|
|
{
|
|
gtk_widget_init_template (GTK_WIDGET (self));
|
|
}
|
|
|
|
static void
|
|
eap_method_fast_class_init (EAPMethodFASTClass *klass)
|
|
{
|
|
GtkWidgetClass *widget_class = GTK_WIDGET_CLASS (klass);
|
|
|
|
gtk_widget_class_set_template_from_resource (widget_class, "/org/gnome/ControlCenter/network/eap-method-fast.ui");
|
|
|
|
gtk_widget_class_bind_template_child (widget_class, EAPMethodFAST, anon_identity_entry);
|
|
gtk_widget_class_bind_template_child (widget_class, EAPMethodFAST, anon_identity_label);
|
|
gtk_widget_class_bind_template_child (widget_class, EAPMethodFAST, inner_auth_combo);
|
|
gtk_widget_class_bind_template_child (widget_class, EAPMethodFAST, inner_auth_label);
|
|
gtk_widget_class_bind_template_child (widget_class, EAPMethodFAST, inner_auth_model);
|
|
gtk_widget_class_bind_template_child (widget_class, EAPMethodFAST, inner_auth_box);
|
|
gtk_widget_class_bind_template_child (widget_class, EAPMethodFAST, pac_file_button);
|
|
gtk_widget_class_bind_template_child (widget_class, EAPMethodFAST, pac_file_label);
|
|
gtk_widget_class_bind_template_child (widget_class, EAPMethodFAST, pac_provision_check);
|
|
gtk_widget_class_bind_template_child (widget_class, EAPMethodFAST, pac_provision_combo);
|
|
}
|
|
|
|
static void
|
|
eap_method_iface_init (EAPMethodInterface *iface)
|
|
{
|
|
iface->validate = validate;
|
|
iface->add_to_size_group = add_to_size_group;
|
|
iface->fill_connection = fill_connection;
|
|
iface->update_secrets = update_secrets;
|
|
iface->get_default_field = get_default_field;
|
|
iface->get_password_flags_name = get_password_flags_name;
|
|
}
|
|
|
|
EAPMethodFAST *
|
|
eap_method_fast_new (WirelessSecurity *ws_parent,
|
|
NMConnection *connection,
|
|
gboolean is_editor,
|
|
gboolean secrets_only)
|
|
{
|
|
EAPMethodFAST *self;
|
|
GtkFileFilter *filter;
|
|
NMSetting8021x *s_8021x = NULL;
|
|
const char *filename;
|
|
gboolean provisioning_enabled = TRUE;
|
|
EAPMethodSimpleFlags simple_flags;
|
|
const gchar *phase2_auth = NULL;
|
|
GtkTreeIter iter;
|
|
|
|
self = g_object_new (eap_method_fast_get_type (), NULL);
|
|
self->is_editor = is_editor;
|
|
|
|
if (connection)
|
|
s_8021x = nm_connection_get_setting_802_1x (connection);
|
|
|
|
gtk_combo_box_set_active (self->pac_provision_combo, 0);
|
|
if (s_8021x) {
|
|
const char *fast_prov;
|
|
|
|
fast_prov = nm_setting_802_1x_get_phase1_fast_provisioning (s_8021x);
|
|
if (fast_prov) {
|
|
if (!strcmp (fast_prov, "0"))
|
|
provisioning_enabled = FALSE;
|
|
else if (!strcmp (fast_prov, "1"))
|
|
gtk_combo_box_set_active (self->pac_provision_combo, 0);
|
|
else if (!strcmp (fast_prov, "2"))
|
|
gtk_combo_box_set_active (self->pac_provision_combo, 1);
|
|
else if (!strcmp (fast_prov, "3"))
|
|
gtk_combo_box_set_active (self->pac_provision_combo, 2);
|
|
}
|
|
}
|
|
gtk_widget_set_sensitive (GTK_WIDGET (self->pac_provision_combo), provisioning_enabled);
|
|
g_signal_connect_swapped (self->pac_provision_combo, "changed", G_CALLBACK (changed_cb), self);
|
|
|
|
gtk_toggle_button_set_active (GTK_TOGGLE_BUTTON (self->pac_provision_check), provisioning_enabled);
|
|
g_signal_connect_swapped (self->pac_provision_check, "toggled", G_CALLBACK (pac_toggled_cb), self);
|
|
|
|
if (s_8021x && nm_setting_802_1x_get_anonymous_identity (s_8021x))
|
|
gtk_entry_set_text (self->anon_identity_entry, nm_setting_802_1x_get_anonymous_identity (s_8021x));
|
|
g_signal_connect_swapped (self->anon_identity_entry, "changed", G_CALLBACK (changed_cb), self);
|
|
|
|
gtk_file_chooser_set_local_only (GTK_FILE_CHOOSER (self->pac_file_button), TRUE);
|
|
gtk_file_chooser_button_set_title (self->pac_file_button,
|
|
_("Choose a PAC file"));
|
|
g_signal_connect_swapped (self->pac_file_button, "selection-changed", G_CALLBACK (changed_cb), self);
|
|
|
|
filter = gtk_file_filter_new ();
|
|
gtk_file_filter_add_pattern (filter, "*.pac");
|
|
gtk_file_filter_set_name (filter, _("PAC files (*.pac)"));
|
|
gtk_file_chooser_add_filter (GTK_FILE_CHOOSER (self->pac_file_button), filter);
|
|
filter = gtk_file_filter_new ();
|
|
gtk_file_filter_add_pattern (filter, "*");
|
|
gtk_file_filter_set_name (filter, _("All files"));
|
|
gtk_file_chooser_add_filter (GTK_FILE_CHOOSER (self->pac_file_button), filter);
|
|
|
|
if (connection && s_8021x) {
|
|
filename = nm_setting_802_1x_get_pac_file (s_8021x);
|
|
if (filename)
|
|
gtk_file_chooser_set_filename (GTK_FILE_CHOOSER (self->pac_file_button), filename);
|
|
}
|
|
|
|
simple_flags = EAP_METHOD_SIMPLE_FLAG_PHASE2;
|
|
if (self->is_editor)
|
|
simple_flags |= EAP_METHOD_SIMPLE_FLAG_IS_EDITOR;
|
|
if (secrets_only)
|
|
simple_flags |= EAP_METHOD_SIMPLE_FLAG_SECRETS_ONLY;
|
|
|
|
self->em_gtc = eap_method_simple_new (ws_parent,
|
|
connection,
|
|
EAP_METHOD_SIMPLE_TYPE_GTC,
|
|
simple_flags);
|
|
gtk_widget_show (GTK_WIDGET (self->em_gtc));
|
|
g_signal_connect_object (self->em_gtc, "changed", G_CALLBACK (eap_method_emit_changed), self, G_CONNECT_SWAPPED);
|
|
|
|
self->em_mschap_v2 = eap_method_simple_new (ws_parent,
|
|
connection,
|
|
EAP_METHOD_SIMPLE_TYPE_MSCHAP_V2,
|
|
simple_flags);
|
|
gtk_widget_show (GTK_WIDGET (self->em_mschap_v2));
|
|
g_signal_connect_object (self->em_mschap_v2, "changed", G_CALLBACK (eap_method_emit_changed), self, G_CONNECT_SWAPPED);
|
|
|
|
if (s_8021x) {
|
|
if (nm_setting_802_1x_get_phase2_auth (s_8021x))
|
|
phase2_auth = nm_setting_802_1x_get_phase2_auth (s_8021x);
|
|
else if (nm_setting_802_1x_get_phase2_autheap (s_8021x))
|
|
phase2_auth = nm_setting_802_1x_get_phase2_autheap (s_8021x);
|
|
}
|
|
if (phase2_auth == NULL)
|
|
phase2_auth = "gtc";
|
|
|
|
if (gtk_tree_model_get_iter_first (GTK_TREE_MODEL (self->inner_auth_model), &iter)) {
|
|
do {
|
|
g_autofree gchar *id = NULL;
|
|
gtk_tree_model_get (GTK_TREE_MODEL (self->inner_auth_model), &iter, I_ID_COLUMN, &id, -1);
|
|
if (strcmp (id, phase2_auth) == 0)
|
|
gtk_combo_box_set_active_iter (self->inner_auth_combo, &iter);
|
|
} while (gtk_tree_model_iter_next (GTK_TREE_MODEL (self->inner_auth_model), &iter));
|
|
}
|
|
|
|
g_signal_connect_swapped (self->inner_auth_combo, "changed", G_CALLBACK (inner_auth_combo_changed_cb), self);
|
|
inner_auth_combo_changed_cb (self);
|
|
|
|
if (secrets_only) {
|
|
gtk_widget_hide (GTK_WIDGET (self->anon_identity_label));
|
|
gtk_widget_hide (GTK_WIDGET (self->anon_identity_entry));
|
|
gtk_widget_hide (GTK_WIDGET (self->pac_provision_check));
|
|
gtk_widget_hide (GTK_WIDGET (self->pac_provision_combo));
|
|
gtk_widget_hide (GTK_WIDGET (self->pac_file_label));
|
|
gtk_widget_hide (GTK_WIDGET (self->pac_file_button));
|
|
gtk_widget_hide (GTK_WIDGET (self->inner_auth_label));
|
|
gtk_widget_hide (GTK_WIDGET (self->inner_auth_combo));
|
|
}
|
|
|
|
return self;
|
|
}
|
|
|