Examples with WifiEnterpriseConfig android.net.wifi.WifiEnterpriseConfig used on opensource projects

Example 36 with WifiEnterpriseConfig

use of android.net.wifi.WifiEnterpriseConfig in project android_frameworks_base by crdroidandroid.

the class ConfigBuilder method buildConfig.

public static WifiConfiguration buildConfig(HomeSP homeSP, X509Certificate caCert, List<X509Certificate> clientChain, PrivateKey key) throws IOException, GeneralSecurityException {
    Credential credential = homeSP.getCredential();
    WifiConfiguration config;
    EAP.EAPMethodID eapMethodID = credential.getEAPMethod().getEAPMethodID();
    switch(eapMethodID) {
        case EAP_TTLS:
            if (key != null || clientChain != null) {
                Log.w(TAG, "Client cert and/or key included with EAP-TTLS profile");
            }
            config = buildTTLSConfig(homeSP);
            break;
        case EAP_TLS:
            config = buildTLSConfig(homeSP, clientChain, key);
            break;
        case EAP_AKA:
        case EAP_AKAPrim:
        case EAP_SIM:
            if (key != null || clientChain != null || caCert != null) {
                Log.i(TAG, "Client/CA cert and/or key included with " + eapMethodID + " profile");
            }
            config = buildSIMConfig(homeSP);
            break;
        default:
            throw new IOException("Unsupported EAP Method: " + eapMethodID);
    }
    WifiEnterpriseConfig enterpriseConfig = config.enterpriseConfig;
    enterpriseConfig.setCaCertificate(caCert);
    enterpriseConfig.setAnonymousIdentity("anonymous@" + credential.getRealm());
    return config;
}

Example 37 with WifiEnterpriseConfig

use of android.net.wifi.WifiEnterpriseConfig in project android_frameworks_base by crdroidandroid.

the class ConfigBuilder method buildTLSConfig.

private static WifiConfiguration buildTLSConfig(HomeSP homeSP, List<X509Certificate> clientChain, PrivateKey clientKey) throws IOException, GeneralSecurityException {
    Credential credential = homeSP.getCredential();
    X509Certificate clientCertificate = null;
    if (clientKey == null || clientChain == null) {
        throw new IOException("No key and/or cert passed for EAP-TLS");
    }
    if (credential.getCertType() != Credential.CertType.x509v3) {
        throw new IOException("Invalid certificate type for TLS: " + credential.getCertType());
    }
    byte[] reference = credential.getFingerPrint();
    MessageDigest digester = MessageDigest.getInstance("SHA-256");
    for (X509Certificate certificate : clientChain) {
        digester.reset();
        byte[] fingerprint = digester.digest(certificate.getEncoded());
        if (Arrays.equals(reference, fingerprint)) {
            clientCertificate = certificate;
            break;
        }
    }
    if (clientCertificate == null) {
        throw new IOException("No certificate in chain matches supplied fingerprint");
    }
    String alias = Base64.encodeToString(reference, Base64.DEFAULT);
    WifiConfiguration config = buildBaseConfiguration(homeSP);
    WifiEnterpriseConfig enterpriseConfig = config.enterpriseConfig;
    enterpriseConfig.setClientCertificateAlias(alias);
    enterpriseConfig.setClientKeyEntry(clientKey, clientCertificate);
    return config;
}

Example 38 with WifiEnterpriseConfig

use of android.net.wifi.WifiEnterpriseConfig in project android_frameworks_base by crdroidandroid.

the class WifiNetworkAdapter method updateNetwork.

public void updateNetwork(HomeSP homeSP, X509Certificate caCert, List<X509Certificate> clientCerts, PrivateKey privateKey) throws IOException, GeneralSecurityException {
    WifiConfiguration config = getWifiConfig(homeSP);
    if (config == null) {
        throw new IOException("Failed to find matching network config");
    }
    Log.d(OSUManager.TAG, "Found matching config " + config.networkId + ", updating");
    WifiEnterpriseConfig enterpriseConfig = config.enterpriseConfig;
    WifiConfiguration newConfig = ConfigBuilder.buildConfig(homeSP, caCert != null ? caCert : enterpriseConfig.getCaCertificate(), clientCerts, privateKey);
    newConfig.networkId = config.networkId;
    WifiManager wifiManager = (WifiManager) mContext.getSystemService(Context.WIFI_SERVICE);
    wifiManager.save(newConfig, null);
    wifiManager.saveConfiguration();
}

Example 39 with WifiEnterpriseConfig

use of android.net.wifi.WifiEnterpriseConfig in project android_packages_apps_Settings by omnirom.

the class WifiConfigController method showSecurityFields.

private void showSecurityFields() {
    if (mAccessPointSecurity == AccessPoint.SECURITY_NONE) {
        mView.findViewById(R.id.security_fields).setVisibility(View.GONE);
        return;
    }
    mView.findViewById(R.id.security_fields).setVisibility(View.VISIBLE);
    if (mPasswordView == null) {
        mPasswordView = (TextView) mView.findViewById(R.id.password);
        mPasswordView.addTextChangedListener(this);
        mPasswordView.setOnEditorActionListener(this);
        mPasswordView.setOnKeyListener(this);
        ((CheckBox) mView.findViewById(R.id.show_password)).setOnCheckedChangeListener(this);
        if (mAccessPoint != null && mAccessPoint.isSaved()) {
            mPasswordView.setHint(R.string.wifi_unchanged);
        }
    }
    if (mAccessPointSecurity != AccessPoint.SECURITY_EAP) {
        mView.findViewById(R.id.eap).setVisibility(View.GONE);
        return;
    }
    mView.findViewById(R.id.eap).setVisibility(View.VISIBLE);
    if (mEapMethodSpinner == null) {
        mEapMethodSpinner = (Spinner) mView.findViewById(R.id.method);
        mEapMethodSpinner.setOnItemSelectedListener(this);
        if (Utils.isWifiOnly(mContext) || !mContext.getResources().getBoolean(com.android.internal.R.bool.config_eap_sim_based_auth_supported)) {
            String[] eapMethods = mContext.getResources().getStringArray(R.array.eap_method_without_sim_auth);
            ArrayAdapter<String> spinnerAdapter = new ArrayAdapter<String>(mContext, android.R.layout.simple_spinner_item, eapMethods);
            spinnerAdapter.setDropDownViewResource(android.R.layout.simple_spinner_dropdown_item);
            mEapMethodSpinner.setAdapter(spinnerAdapter);
        }
        mPhase2Spinner = (Spinner) mView.findViewById(R.id.phase2);
        mPhase2Spinner.setOnItemSelectedListener(this);
        mEapCaCertSpinner = (Spinner) mView.findViewById(R.id.ca_cert);
        mEapCaCertSpinner.setOnItemSelectedListener(this);
        mEapDomainView = (TextView) mView.findViewById(R.id.domain);
        mEapDomainView.addTextChangedListener(this);
        mEapUserCertSpinner = (Spinner) mView.findViewById(R.id.user_cert);
        mEapUserCertSpinner.setOnItemSelectedListener(this);
        mEapIdentityView = (TextView) mView.findViewById(R.id.identity);
        mEapAnonymousView = (TextView) mView.findViewById(R.id.anonymous);
        if (mAccessPoint != null && mAccessPoint.isCarrierAp()) {
            mEapMethodSpinner.setSelection(mAccessPoint.getCarrierApEapType());
        }
        loadCertificates(mEapCaCertSpinner, Credentials.CA_CERTIFICATE, mDoNotValidateEapServerString, false, true);
        loadCertificates(mEapUserCertSpinner, Credentials.USER_PRIVATE_KEY, mDoNotProvideEapUserCertString, false, false);
        // Modifying an existing network
        if (mAccessPoint != null && mAccessPoint.isSaved()) {
            WifiEnterpriseConfig enterpriseConfig = mAccessPoint.getConfig().enterpriseConfig;
            int eapMethod = enterpriseConfig.getEapMethod();
            int phase2Method = enterpriseConfig.getPhase2Method();
            mEapMethodSpinner.setSelection(eapMethod);
            showEapFieldsByMethod(eapMethod);
            switch(eapMethod) {
                case Eap.PEAP:
                    switch(phase2Method) {
                        case Phase2.NONE:
                            mPhase2Spinner.setSelection(WIFI_PEAP_PHASE2_NONE);
                            break;
                        case Phase2.MSCHAPV2:
                            mPhase2Spinner.setSelection(WIFI_PEAP_PHASE2_MSCHAPV2);
                            break;
                        case Phase2.GTC:
                            mPhase2Spinner.setSelection(WIFI_PEAP_PHASE2_GTC);
                            break;
                        case Phase2.SIM:
                            mPhase2Spinner.setSelection(WIFI_PEAP_PHASE2_SIM);
                            break;
                        case Phase2.AKA:
                            mPhase2Spinner.setSelection(WIFI_PEAP_PHASE2_AKA);
                            break;
                        case Phase2.AKA_PRIME:
                            mPhase2Spinner.setSelection(WIFI_PEAP_PHASE2_AKA_PRIME);
                            break;
                        default:
                            Log.e(TAG, "Invalid phase 2 method " + phase2Method);
                            break;
                    }
                    break;
                default:
                    mPhase2Spinner.setSelection(phase2Method);
                    break;
            }
            if (!TextUtils.isEmpty(enterpriseConfig.getCaPath())) {
                setSelection(mEapCaCertSpinner, mUseSystemCertsString);
            } else {
                String[] caCerts = enterpriseConfig.getCaCertificateAliases();
                if (caCerts == null) {
                    setSelection(mEapCaCertSpinner, mDoNotValidateEapServerString);
                } else if (caCerts.length == 1) {
                    setSelection(mEapCaCertSpinner, caCerts[0]);
                } else {
                    // Reload the cert spinner with an extra "multiple certificates added" item.
                    loadCertificates(mEapCaCertSpinner, Credentials.CA_CERTIFICATE, mDoNotValidateEapServerString, true, true);
                    setSelection(mEapCaCertSpinner, mMultipleCertSetString);
                }
            }
            mEapDomainView.setText(enterpriseConfig.getDomainSuffixMatch());
            String userCert = enterpriseConfig.getClientCertificateAlias();
            if (TextUtils.isEmpty(userCert)) {
                setSelection(mEapUserCertSpinner, mDoNotProvideEapUserCertString);
            } else {
                setSelection(mEapUserCertSpinner, userCert);
            }
            mEapIdentityView.setText(enterpriseConfig.getIdentity());
            mEapAnonymousView.setText(enterpriseConfig.getAnonymousIdentity());
        } else {
            mPhase2Spinner = (Spinner) mView.findViewById(R.id.phase2);
            showEapFieldsByMethod(mEapMethodSpinner.getSelectedItemPosition());
        }
    } else {
        showEapFieldsByMethod(mEapMethodSpinner.getSelectedItemPosition());
    }
}

Example 40 with WifiEnterpriseConfig

use of android.net.wifi.WifiEnterpriseConfig in project android_packages_apps_Settings by crdroidandroid.

the class WifiConfigController method showSecurityFields.

private void showSecurityFields() {
    if (mAccessPointSecurity == AccessPoint.SECURITY_NONE) {
        mView.findViewById(R.id.security_fields).setVisibility(View.GONE);
        return;
    }
    mView.findViewById(R.id.security_fields).setVisibility(View.VISIBLE);
    if (mPasswordView == null) {
        mPasswordView = (TextView) mView.findViewById(R.id.password);
        mPasswordView.addTextChangedListener(this);
        mPasswordView.setOnEditorActionListener(this);
        mPasswordView.setOnKeyListener(this);
        ((CheckBox) mView.findViewById(R.id.show_password)).setOnCheckedChangeListener(this);
        if (mAccessPoint != null && mAccessPoint.isSaved()) {
            mPasswordView.setHint(R.string.wifi_unchanged);
        }
    }
    if (mAccessPointSecurity != AccessPoint.SECURITY_EAP) {
        mView.findViewById(R.id.eap).setVisibility(View.GONE);
        return;
    }
    mView.findViewById(R.id.eap).setVisibility(View.VISIBLE);
    if (mEapMethodSpinner == null) {
        mEapMethodSpinner = (Spinner) mView.findViewById(R.id.method);
        mEapMethodSpinner.setOnItemSelectedListener(this);
        if (Utils.isWifiOnly(mContext) || !mContext.getResources().getBoolean(com.android.internal.R.bool.config_eap_sim_based_auth_supported)) {
            String[] eapMethods = mContext.getResources().getStringArray(R.array.eap_method_without_sim_auth);
            ArrayAdapter<String> spinnerAdapter = new ArrayAdapter<String>(mContext, android.R.layout.simple_spinner_item, eapMethods);
            spinnerAdapter.setDropDownViewResource(android.R.layout.simple_spinner_dropdown_item);
            mEapMethodSpinner.setAdapter(spinnerAdapter);
        }
        mPhase2Spinner = (Spinner) mView.findViewById(R.id.phase2);
        mPhase2Spinner.setOnItemSelectedListener(this);
        mEapCaCertSpinner = (Spinner) mView.findViewById(R.id.ca_cert);
        mEapCaCertSpinner.setOnItemSelectedListener(this);
        mEapDomainView = (TextView) mView.findViewById(R.id.domain);
        mEapDomainView.addTextChangedListener(this);
        mEapUserCertSpinner = (Spinner) mView.findViewById(R.id.user_cert);
        mEapUserCertSpinner.setOnItemSelectedListener(this);
        mEapIdentityView = (TextView) mView.findViewById(R.id.identity);
        mEapAnonymousView = (TextView) mView.findViewById(R.id.anonymous);
        if (mAccessPoint != null && mAccessPoint.isCarrierAp()) {
            mEapMethodSpinner.setSelection(mAccessPoint.getCarrierApEapType());
        }
        loadCertificates(mEapCaCertSpinner, Credentials.CA_CERTIFICATE, mDoNotValidateEapServerString, false, true);
        loadCertificates(mEapUserCertSpinner, Credentials.USER_PRIVATE_KEY, mDoNotProvideEapUserCertString, false, false);
        // Modifying an existing network
        if (mAccessPoint != null && mAccessPoint.isSaved()) {
            WifiEnterpriseConfig enterpriseConfig = mAccessPoint.getConfig().enterpriseConfig;
            int eapMethod = enterpriseConfig.getEapMethod();
            int phase2Method = enterpriseConfig.getPhase2Method();
            mEapMethodSpinner.setSelection(eapMethod);
            showEapFieldsByMethod(eapMethod);
            switch(eapMethod) {
                case Eap.PEAP:
                    switch(phase2Method) {
                        case Phase2.NONE:
                            mPhase2Spinner.setSelection(WIFI_PEAP_PHASE2_NONE);
                            break;
                        case Phase2.MSCHAPV2:
                            mPhase2Spinner.setSelection(WIFI_PEAP_PHASE2_MSCHAPV2);
                            break;
                        case Phase2.GTC:
                            mPhase2Spinner.setSelection(WIFI_PEAP_PHASE2_GTC);
                            break;
                        case Phase2.SIM:
                            mPhase2Spinner.setSelection(WIFI_PEAP_PHASE2_SIM);
                            break;
                        case Phase2.AKA:
                            mPhase2Spinner.setSelection(WIFI_PEAP_PHASE2_AKA);
                            break;
                        case Phase2.AKA_PRIME:
                            mPhase2Spinner.setSelection(WIFI_PEAP_PHASE2_AKA_PRIME);
                            break;
                        default:
                            Log.e(TAG, "Invalid phase 2 method " + phase2Method);
                            break;
                    }
                    break;
                default:
                    mPhase2Spinner.setSelection(phase2Method);
                    break;
            }
            if (!TextUtils.isEmpty(enterpriseConfig.getCaPath())) {
                setSelection(mEapCaCertSpinner, mUseSystemCertsString);
            } else {
                String[] caCerts = enterpriseConfig.getCaCertificateAliases();
                if (caCerts == null) {
                    setSelection(mEapCaCertSpinner, mDoNotValidateEapServerString);
                } else if (caCerts.length == 1) {
                    setSelection(mEapCaCertSpinner, caCerts[0]);
                } else {
                    // Reload the cert spinner with an extra "multiple certificates added" item.
                    loadCertificates(mEapCaCertSpinner, Credentials.CA_CERTIFICATE, mDoNotValidateEapServerString, true, true);
                    setSelection(mEapCaCertSpinner, mMultipleCertSetString);
                }
            }
            mEapDomainView.setText(enterpriseConfig.getDomainSuffixMatch());
            String userCert = enterpriseConfig.getClientCertificateAlias();
            if (TextUtils.isEmpty(userCert)) {
                setSelection(mEapUserCertSpinner, mDoNotProvideEapUserCertString);
            } else {
                setSelection(mEapUserCertSpinner, userCert);
            }
            mEapIdentityView.setText(enterpriseConfig.getIdentity());
            mEapAnonymousView.setText(enterpriseConfig.getAnonymousIdentity());
        } else {
            mPhase2Spinner = (Spinner) mView.findViewById(R.id.phase2);
            showEapFieldsByMethod(mEapMethodSpinner.getSelectedItemPosition());
        }
    } else {
        showEapFieldsByMethod(mEapMethodSpinner.getSelectedItemPosition());
    }
}