一、WPA_SUPPLICANT简介
1. 什么是wpa_supplicant
wpa_supplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows with support for WPA and WPA2 (IEEE 802.11i / RSN). It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the wlan driver.
wpa_supplicant is designed to be a "daemon" program that runs in the background and acts as the backend component controlling the wireless connection. wpa_supplicant supports separate frontend programs and a text-based frontend (wpa_cli) and a GUI (wpa_gui) are included with wpa_supplicant.
wpa_supplicant uses a flexible build configuration that can be used to select which features are included. This allows minimal code size (from ca. 50 kB binary for WPA/WPA2-Personal and 130 kB binary for WPA/WPA2-Enterprise without debugging code to 450 kB with most features and full debugging support; these example sizes are from a build for x86 target).
2. 支持的WPA/IEEE 802.11i feature
WPA-PSK ("WPA-Personal")WPA with EAP (e.g., with RADIUS authentication server) ("WPA-Enterprise")key management for CCMP, TKIP, WEP104, WEP40WPA and full IEEE 802.11i/RSN/WPA2RSN: PMKSA caching, pre-authenticationIEEE 802.11rIEEE 802.11wWi-Fi Protected Setup (WPS)
3. 支持的无线无线网卡和驱动
Linux drivers that support nl80211/cfg80211 (most new drivers)Linux drivers that support Linux Wireless Extensions v19 or newer with WPA/WPA2 extensionsWired Ethernet driversBSD net80211 layer (e.g., Atheros driver) (FreeBSD 6-CURRENT and NetBSD current)Windows NDIS drivers (Windows; at least XP and 2000, others not tested)
4. WPA如何和AP建立联系
wpa_supplicant requests the kernel driver to scan neighboring BSSeswpa_supplicant selects a BSS based on its configurationwpa_supplicant requests the kernel driver to associate with the chosen BSSif WPA-EAP: integrated IEEE 802.1X Supplicant completes EAP authentication with the authentication server (proxied by the Authenticator in the AP)If WPA-EAP: master key is received from the IEEE 802.1X SupplicantIf WPA-PSK: wpa_supplicant uses PSK as the master session keywpa_supplicant completes WPA 4-Way Handshake and Group Key Handshake with the Authenticator (AP). WPA2 has integrated the initial Group Key Handshake into the 4-Way Handshake.wpa_supplicant configures encryption keys for unicast and broadcastnormal data packets can be transmitted and received
二、移植wpa_supplicant和wifi驱动的步骤
1. 将厂商提供的HAL代码复制到hardware目录下，并修改Makefile
例如：realteck、broadcom、ti、qcomm等。
2. 修改ANDROID_SDK /device/<soc_vendor_name>/<board_name>/目录下的BoardConfig.mk
例如：
BOARD_WIFI_VENDOR := realtek
ifeq ($(BOARD_WIFI_VENDOR), realtek)
WPA_SUPPLICANT_VERSION := VER_0_8_X
BOARD_WPA_SUPPLICANT_DRIVER := NL80211
CONFIG_DRIVER_WEXT :=y
BOARD_WPA_SUPPLICANT_PRIVATE_LIB := lib_driver_cmd_rtl
BOARD_HOSTAPD_DRIVER := NL80211
BOARD_HOSTAPD_PRIVATE_LIB := lib_driver_cmd_rtl
BOARD_WLAN_DEVICE := rtl8192cu
#BOARD_WLAN_DEVICE := rtl8192du
#BOARD_WLAN_DEVICE := rtl8192ce
#BOARD_WLAN_DEVICE := rtl8192de
#BOARD_WLAN_DEVICE := rtl8723as
#BOARD_WLAN_DEVICE := rtl8723au
#BOARD_WLAN_DEVICE := rtl8189es
#BOARD_WLAN_DEVICE := rtl8723bs
#BOARD_WLAN_DEVICE := rtl8723bu
WIFI_DRIVER_MODULE_NAME := "wlan"
WIFI_DRIVER_MODULE_PATH := "/system/lib/modules/wlan.ko"
WIFI_DRIVER_MODULE_ARG := "ifname=wlan0 if2name=p2p0"
endif
3. 修改ANDROID_SDK/device/<soc_vendor_name>/<board_name>/目录下的init.xxx.rc
例如：
service rtw_suppl_con /system/bin/wpa_supplicant \
-ip2p0 -Dnl80211 -c/data/misc/wifi/p2p_supplicant.conf \
-e/data/misc/wifi/entropy.bin -N \
-iwlan0 -Dnl80211 -c/data/misc/wifi/wpa_supplicant.conf \
-O/data/misc/wifi/sockets \
-g@android:wpa_wlan0
class main
socket wpa_wlan0 dgram 660 wifi wifi
disabled
oneshot
service rtw_suppl /system/bin/wpa_supplicant \
-iwlan0 -Dnl80211 -c/data/misc/wifi/wpa_supplicant.conf \
-O/data/misc/wifi/sockets \
-e/data/misc/wifi/entropy.bin
-g@android:wpa_wlan0
class main
socket wpa_wlan0 dgram 660 wifi wifi
disabled
service dhcpcd_wlan0 /system/bin/dhcpcd -aABDKL
class main
disabled
oneshot
service dhcpcd_p2p /system/bin/dhcpcd -aABKL
class main
disabled
oneshot
service iprenew_wlan0 /system/bin/dhcpcd -n
class main
disabled
oneshot
service iprenew_p2p /system/bin/dhcpcd -n
class main
disabled
oneshot
4. 修改ANDROID_SDK/device/<soc_vendor_name>/<board_name>/目录下的device.mk
例如：
PRODUCT_COPY_FILES += \
frameworks/native/data/etc/android.hardware.wifi.xml:system/etc/permissions/android.hardware.
wifi.xml
PRODUCT_COPY_FILES += \
frameworks/native/data/etc/android.hardware.wifi.direct.xml:system/etc/permissions/android.hard
ware.wifi.direct.xml
PRODUCT_PROPERTY_OVERRIDES += \
wifi.interface=wlan0
5. 修改ANDROID_SDK/frameworks/base/core/res/res/values/config.xml，配置wifi网络属性
array translatable="false" name="networkAttributes"> "wifi,1,1,1,-1,true" "bluetooth,7,7,0,-1,true" "ethernet,9,9,2,-1,true"</STRING-array>
array translatable="false" name="radioAttributes"> "1,1" "7,1" "9,1" </STRING-array>
array translatable="false" name="config_tether_wifi_regexs"> "wlan0" </STRING-array>
array translatable="false" name="config_tether_upstream_types"> 1 9 </INTEGER-array>
6. 将厂商提供的WPA_SUPPLICANT替换到ANDROID_SDK/external/wpa_suppliant_8目录下
7. 编译wifi驱动，将驱动配置成模块加载的方式，将生成的ko文件存放到BoardConfig.mk里面设置的ko文件路径下，并确认驱动模块名称一致
三、常用调试命令和技巧
1. 调试命令
通过wpa_cli命令可以检测wpa_supplicant的运行状态
- PING：心跳检测命令。客户端用它判断WPAS是否工作正常。WPAS收到”PING”命令后需要回复“PONG”。
- MIB：客户端用该命令获取设备的MIB信息。
- STATUS：客户端用该命令来获取WPAS的工作状态。
- ADD_NETWORK：为WPAS添加一个新的无线网络。它将返回此新无线网络的id（从0开始）。注意：此network id非常重要，客户端后续将通过它来指明自己想操作的无线网络。
- SET_NETWORK <network id> <variable> <value>：network id是无线网络的id。此命令用于设置指定无线网络的信息。其中variable为参数名，value为参数的值。
- ENABLE_NETWORK <network id>：使能某个无线网络。此命令最终将促使WPAS发起一系列操作以加入该无线网络。
2. 调试技巧
可以在wpa_supplicant里面增加一些log来跟踪指令的下发流程。
通过在命令行终端输入getprop init.svc.wpa_servername 来检查wpa_supplicant进程是否在运行。
wpa_supplicant起来后，可以通过查看wpa_cli ping或者wpa_cli status来检测wpa_suppliant通道是否正常。
检查/system/etc/wifi/wpa_supplicant.conf和/data/misc/wifi/wpa_supplicant.conf中ctrl_interface是否正确。
检查/dev/socket/wpa_wlan0、/data/misc/wifi/sockets/wlan0、/data/misc/wifi/sockets/p2p、wpa_ctrl_*等节点是否成功创建。
通过lsmod检查驱动模块是否成功加载。
通过查看/sys/class/rfkill/目录下是否生成rfkill*节点判断驱动加载过程是否OK。
来源：oschina
链接：https://my.oschina.net/u/4309066/blog/3411575