1/*
2 * WPA Supplicant / Configuration backend: text file
3 * Copyright (c) 2003-2008, Jouni Malinen <j@w1.fi>
4 *
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
8 *
9 * Alternatively, this software may be distributed under the terms of BSD
10 * license.
11 *
12 * See README and COPYING for more details.
13 *
14 * This file implements a configuration backend for text files. All the
15 * configuration information is stored in a text file that uses a format
16 * described in the sample configuration file, wpa_supplicant.conf.
17 */
18
19#include "includes.h"
20
21#include "common.h"
22#include "config.h"
23#include "base64.h"
24#include "uuid.h"
25#include "eap_peer/eap_methods.h"
26
27
28/**
29 * wpa_config_get_line - Read the next configuration file line
30 * @s: Buffer for the line
31 * @size: The buffer length
32 * @stream: File stream to read from
33 * @line: Pointer to a variable storing the file line number
34 * @_pos: Buffer for the pointer to the beginning of data on the text line or
35 * %NULL if not needed (returned value used instead)
36 * Returns: Pointer to the beginning of data on the text line or %NULL if no
37 * more text lines are available.
38 *
39 * This function reads the next non-empty line from the configuration file and
40 * removes comments. The returned string is guaranteed to be null-terminated.
41 */
42static char * wpa_config_get_line(char *s, int size, FILE *stream, int *line,
43				  char **_pos)
44{
45	char *pos, *end, *sstart;
46
47	while (fgets(s, size, stream)) {
48		(*line)++;
49		s[size - 1] = '\0';
50		pos = s;
51
52		/* Skip white space from the beginning of line. */
53		while (*pos == ' ' || *pos == '\t' || *pos == '\r')
54			pos++;
55
56		/* Skip comment lines and empty lines */
57		if (*pos == '#' || *pos == '\n' || *pos == '\0')
58			continue;
59
60		/*
61		 * Remove # comments unless they are within a double quoted
62		 * string.
63		 */
64		sstart = os_strchr(pos, '"');
65		if (sstart)
66			sstart = os_strrchr(sstart + 1, '"');
67		if (!sstart)
68			sstart = pos;
69		end = os_strchr(sstart, '#');
70		if (end)
71			*end-- = '\0';
72		else
73			end = pos + os_strlen(pos) - 1;
74
75		/* Remove trailing white space. */
76		while (end > pos &&
77		       (*end == '\n' || *end == ' ' || *end == '\t' ||
78			*end == '\r'))
79			*end-- = '\0';
80
81		if (*pos == '\0')
82			continue;
83
84		if (_pos)
85			*_pos = pos;
86		return pos;
87	}
88
89	if (_pos)
90		*_pos = NULL;
91	return NULL;
92}
93
94
95static int wpa_config_validate_network(struct wpa_ssid *ssid, int line)
96{
97	int errors = 0;
98
99	if (ssid->passphrase) {
100		if (ssid->psk_set) {
101			wpa_printf(MSG_ERROR, "Line %d: both PSK and "
102				   "passphrase configured.", line);
103			errors++;
104		}
105		wpa_config_update_psk(ssid);
106	}
107
108	if ((ssid->key_mgmt & (WPA_KEY_MGMT_PSK | WPA_KEY_MGMT_FT_PSK |
109			       WPA_KEY_MGMT_PSK_SHA256)) &&
110	    !ssid->psk_set) {
111		wpa_printf(MSG_ERROR, "Line %d: WPA-PSK accepted for key "
112			   "management, but no PSK configured.", line);
113		errors++;
114	}
115
116	if ((ssid->group_cipher & WPA_CIPHER_CCMP) &&
117	    !(ssid->pairwise_cipher & WPA_CIPHER_CCMP) &&
118	    !(ssid->pairwise_cipher & WPA_CIPHER_NONE)) {
119		/* Group cipher cannot be stronger than the pairwise cipher. */
120		wpa_printf(MSG_DEBUG, "Line %d: removed CCMP from group cipher"
121			   " list since it was not allowed for pairwise "
122			   "cipher", line);
123		ssid->group_cipher &= ~WPA_CIPHER_CCMP;
124	}
125
126	return errors;
127}
128
129
130static struct wpa_ssid * wpa_config_read_network(FILE *f, int *line, int id)
131{
132	struct wpa_ssid *ssid;
133	int errors = 0, end = 0;
134	char buf[256], *pos, *pos2;
135
136	wpa_printf(MSG_MSGDUMP, "Line: %d - start of a new network block",
137		   *line);
138	ssid = os_zalloc(sizeof(*ssid));
139	if (ssid == NULL)
140		return NULL;
141	ssid->id = id;
142
143	wpa_config_set_network_defaults(ssid);
144
145	while (wpa_config_get_line(buf, sizeof(buf), f, line, &pos)) {
146		if (os_strcmp(pos, "}") == 0) {
147			end = 1;
148			break;
149		}
150
151		pos2 = os_strchr(pos, '=');
152		if (pos2 == NULL) {
153			wpa_printf(MSG_ERROR, "Line %d: Invalid SSID line "
154				   "'%s'.", *line, pos);
155			errors++;
156			continue;
157		}
158
159		*pos2++ = '\0';
160		if (*pos2 == '"') {
161			if (os_strchr(pos2 + 1, '"') == NULL) {
162				wpa_printf(MSG_ERROR, "Line %d: invalid "
163					   "quotation '%s'.", *line, pos2);
164				errors++;
165				continue;
166			}
167		}
168
169		if (wpa_config_set(ssid, pos, pos2, *line) < 0)
170			errors++;
171	}
172
173	if (!end) {
174		wpa_printf(MSG_ERROR, "Line %d: network block was not "
175			   "terminated properly.", *line);
176		errors++;
177	}
178
179	errors += wpa_config_validate_network(ssid, *line);
180
181	if (errors) {
182		wpa_config_free_ssid(ssid);
183		ssid = NULL;
184	}
185
186	return ssid;
187}
188
189
190#ifndef CONFIG_NO_CONFIG_BLOBS
191static struct wpa_config_blob * wpa_config_read_blob(FILE *f, int *line,
192						     const char *name)
193{
194	struct wpa_config_blob *blob;
195	char buf[256], *pos;
196	unsigned char *encoded = NULL, *nencoded;
197	int end = 0;
198	size_t encoded_len = 0, len;
199
200	wpa_printf(MSG_MSGDUMP, "Line: %d - start of a new named blob '%s'",
201		   *line, name);
202
203	while (wpa_config_get_line(buf, sizeof(buf), f, line, &pos)) {
204		if (os_strcmp(pos, "}") == 0) {
205			end = 1;
206			break;
207		}
208
209		len = os_strlen(pos);
210		nencoded = os_realloc(encoded, encoded_len + len);
211		if (nencoded == NULL) {
212			wpa_printf(MSG_ERROR, "Line %d: not enough memory for "
213				   "blob", *line);
214			os_free(encoded);
215			return NULL;
216		}
217		encoded = nencoded;
218		os_memcpy(encoded + encoded_len, pos, len);
219		encoded_len += len;
220	}
221
222	if (!end) {
223		wpa_printf(MSG_ERROR, "Line %d: blob was not terminated "
224			   "properly", *line);
225		os_free(encoded);
226		return NULL;
227	}
228
229	blob = os_zalloc(sizeof(*blob));
230	if (blob == NULL) {
231		os_free(encoded);
232		return NULL;
233	}
234	blob->name = os_strdup(name);
235	blob->data = base64_decode(encoded, encoded_len, &blob->len);
236	os_free(encoded);
237
238	if (blob->name == NULL || blob->data == NULL) {
239		wpa_config_free_blob(blob);
240		return NULL;
241	}
242
243	return blob;
244}
245
246
247static int wpa_config_process_blob(struct wpa_config *config, FILE *f,
248				   int *line, char *bname)
249{
250	char *name_end;
251	struct wpa_config_blob *blob;
252
253	name_end = os_strchr(bname, '=');
254	if (name_end == NULL) {
255		wpa_printf(MSG_ERROR, "Line %d: no blob name terminator",
256			   *line);
257		return -1;
258	}
259	*name_end = '\0';
260
261	blob = wpa_config_read_blob(f, line, bname);
262	if (blob == NULL) {
263		wpa_printf(MSG_ERROR, "Line %d: failed to read blob %s",
264			   *line, bname);
265		return -1;
266	}
267	wpa_config_set_blob(config, blob);
268	return 0;
269}
270#endif /* CONFIG_NO_CONFIG_BLOBS */
271
272
273struct global_parse_data {
274	char *name;
275	int (*parser)(const struct global_parse_data *data,
276		      struct wpa_config *config, int line, const char *value);
277	void *param1, *param2, *param3;
278};
279
280
281static int wpa_config_parse_int(const struct global_parse_data *data,
282				struct wpa_config *config, int line,
283				const char *pos)
284{
285	int *dst;
286	dst = (int *) (((u8 *) config) + (long) data->param1);
287	*dst = atoi(pos);
288	wpa_printf(MSG_DEBUG, "%s=%d", data->name, *dst);
289
290	if (data->param2 && *dst < (long) data->param2) {
291		wpa_printf(MSG_ERROR, "Line %d: too small %s (value=%d "
292			   "min_value=%ld)", line, data->name, *dst,
293			   (long) data->param2);
294		*dst = (long) data->param2;
295		return -1;
296	}
297
298	if (data->param3 && *dst > (long) data->param3) {
299		wpa_printf(MSG_ERROR, "Line %d: too large %s (value=%d "
300			   "max_value=%ld)", line, data->name, *dst,
301			   (long) data->param3);
302		*dst = (long) data->param3;
303		return -1;
304	}
305
306	return 0;
307}
308
309
310static int wpa_config_parse_str(const struct global_parse_data *data,
311				struct wpa_config *config, int line,
312				const char *pos)
313{
314	size_t len;
315	char **dst, *tmp;
316
317	len = os_strlen(pos);
318	if (data->param2 && len < (size_t) data->param2) {
319		wpa_printf(MSG_ERROR, "Line %d: too short %s (len=%lu "
320			   "min_len=%ld)", line, data->name,
321			   (unsigned long) len, (long) data->param2);
322		return -1;
323	}
324
325	if (data->param3 && len > (size_t) data->param3) {
326		wpa_printf(MSG_ERROR, "Line %d: too long %s (len=%lu "
327			   "max_len=%ld)", line, data->name,
328			   (unsigned long) len, (long) data->param3);
329		return -1;
330	}
331
332	tmp = os_strdup(pos);
333	if (tmp == NULL)
334		return -1;
335
336	dst = (char **) (((u8 *) config) + (long) data->param1);
337	os_free(*dst);
338	*dst = tmp;
339	wpa_printf(MSG_DEBUG, "%s='%s'", data->name, *dst);
340
341	return 0;
342}
343
344
345static int wpa_config_process_country(const struct global_parse_data *data,
346				      struct wpa_config *config, int line,
347				      const char *pos)
348{
349	if (!pos[0] || !pos[1]) {
350		wpa_printf(MSG_DEBUG, "Invalid country set");
351		return -1;
352	}
353	config->country[0] = pos[0];
354	config->country[1] = pos[1];
355	wpa_printf(MSG_DEBUG, "country='%c%c'",
356		   config->country[0], config->country[1]);
357	return 0;
358}
359
360
361static int wpa_config_process_load_dynamic_eap(
362	const struct global_parse_data *data, struct wpa_config *config,
363	int line, const char *so)
364{
365	int ret;
366	wpa_printf(MSG_DEBUG, "load_dynamic_eap=%s", so);
367	ret = eap_peer_method_load(so);
368	if (ret == -2) {
369		wpa_printf(MSG_DEBUG, "This EAP type was already loaded - not "
370			   "reloading.");
371	} else if (ret) {
372		wpa_printf(MSG_ERROR, "Line %d: Failed to load dynamic EAP "
373			   "method '%s'.", line, so);
374		return -1;
375	}
376
377	return 0;
378}
379
380
381#ifdef CONFIG_WPS
382
383static int wpa_config_process_uuid(const struct global_parse_data *data,
384				   struct wpa_config *config, int line,
385				   const char *pos)
386{
387	char buf[40];
388	if (uuid_str2bin(pos, config->uuid)) {
389		wpa_printf(MSG_ERROR, "Line %d: invalid UUID", line);
390		return -1;
391	}
392	uuid_bin2str(config->uuid, buf, sizeof(buf));
393	wpa_printf(MSG_DEBUG, "uuid=%s", buf);
394	return 0;
395}
396
397
398static int wpa_config_process_os_version(const struct global_parse_data *data,
399					 struct wpa_config *config, int line,
400					 const char *pos)
401{
402	if (hexstr2bin(pos, config->os_version, 4)) {
403		wpa_printf(MSG_ERROR, "Line %d: invalid os_version", line);
404		return -1;
405	}
406	wpa_printf(MSG_DEBUG, "os_version=%08x",
407		   WPA_GET_BE32(config->os_version));
408	return 0;
409}
410
411#endif /* CONFIG_WPS */
412
413
414#ifdef OFFSET
415#undef OFFSET
416#endif /* OFFSET */
417/* OFFSET: Get offset of a variable within the wpa_config structure */
418#define OFFSET(v) ((void *) &((struct wpa_config *) 0)->v)
419
420#define FUNC(f) #f, wpa_config_process_ ## f, OFFSET(f), NULL, NULL
421#define FUNC_NO_VAR(f) #f, wpa_config_process_ ## f, NULL, NULL, NULL
422#define _INT(f) #f, wpa_config_parse_int, OFFSET(f)
423#define INT(f) _INT(f), NULL, NULL
424#define INT_RANGE(f, min, max) _INT(f), (void *) min, (void *) max
425#define _STR(f) #f, wpa_config_parse_str, OFFSET(f)
426#define STR(f) _STR(f), NULL, NULL
427#define STR_RANGE(f, min, max) _STR(f), (void *) min, (void *) max
428
429static const struct global_parse_data global_fields[] = {
430#ifdef CONFIG_CTRL_IFACE
431	{ STR(ctrl_interface) },
432	{ STR(ctrl_interface_group) } /* deprecated */,
433#endif /* CONFIG_CTRL_IFACE */
434	{ INT_RANGE(eapol_version, 1, 2) },
435	{ INT(ap_scan) },
436	{ INT(fast_reauth) },
437#ifdef EAP_TLS_OPENSSL
438	{ STR(opensc_engine_path) },
439	{ STR(pkcs11_engine_path) },
440	{ STR(pkcs11_module_path) },
441#endif /* EAP_TLS_OPENSSL */
442	{ STR(driver_param) },
443	{ INT(dot11RSNAConfigPMKLifetime) },
444	{ INT(dot11RSNAConfigPMKReauthThreshold) },
445	{ INT(dot11RSNAConfigSATimeout) },
446#ifndef CONFIG_NO_CONFIG_WRITE
447	{ INT(update_config) },
448#endif /* CONFIG_NO_CONFIG_WRITE */
449	{ FUNC_NO_VAR(load_dynamic_eap) },
450#ifdef CONFIG_WPS
451	{ FUNC(uuid) },
452	{ STR_RANGE(device_name, 0, 32) },
453	{ STR_RANGE(manufacturer, 0, 64) },
454	{ STR_RANGE(model_name, 0, 32) },
455	{ STR_RANGE(model_number, 0, 32) },
456	{ STR_RANGE(serial_number, 0, 32) },
457	{ STR(device_type) },
458	{ FUNC(os_version) },
459	{ INT_RANGE(wps_cred_processing, 0, 2) },
460#endif /* CONFIG_WPS */
461	{ FUNC(country) }
462};
463
464#undef FUNC
465#undef _INT
466#undef INT
467#undef INT_RANGE
468#undef _STR
469#undef STR
470#undef STR_RANGE
471#define NUM_GLOBAL_FIELDS (sizeof(global_fields) / sizeof(global_fields[0]))
472
473
474static int wpa_config_process_global(struct wpa_config *config, char *pos,
475				     int line)
476{
477	size_t i;
478	int ret = 0;
479
480	for (i = 0; i < NUM_GLOBAL_FIELDS; i++) {
481		const struct global_parse_data *field = &global_fields[i];
482		size_t flen = os_strlen(field->name);
483		if (os_strncmp(pos, field->name, flen) != 0 ||
484		    pos[flen] != '=')
485			continue;
486
487		if (field->parser(field, config, line, pos + flen + 1)) {
488			wpa_printf(MSG_ERROR, "Line %d: failed to "
489				   "parse '%s'.", line, pos);
490			ret = -1;
491		}
492		break;
493	}
494	if (i == NUM_GLOBAL_FIELDS) {
495		wpa_printf(MSG_ERROR, "Line %d: unknown global field '%s'.",
496			   line, pos);
497		ret = -1;
498	}
499
500	return ret;
501}
502
503
504struct wpa_config * wpa_config_read(const char *name)
505{
506	FILE *f;
507	char buf[256], *pos;
508	int errors = 0, line = 0;
509	struct wpa_ssid *ssid, *tail = NULL, *head = NULL;
510	struct wpa_config *config;
511	int id = 0;
512
513	config = wpa_config_alloc_empty(NULL, NULL);
514	if (config == NULL)
515		return NULL;
516	wpa_printf(MSG_DEBUG, "Reading configuration file '%s'", name);
517	f = fopen(name, "r");
518	if (f == NULL) {
519		os_free(config);
520		return NULL;
521	}
522
523	while (wpa_config_get_line(buf, sizeof(buf), f, &line, &pos)) {
524		if (os_strcmp(pos, "network={") == 0) {
525			ssid = wpa_config_read_network(f, &line, id++);
526			if (ssid == NULL) {
527				wpa_printf(MSG_ERROR, "Line %d: failed to "
528					   "parse network block.", line);
529				errors++;
530				continue;
531			}
532			if (head == NULL) {
533				head = tail = ssid;
534			} else {
535				tail->next = ssid;
536				tail = ssid;
537			}
538			if (wpa_config_add_prio_network(config, ssid)) {
539				wpa_printf(MSG_ERROR, "Line %d: failed to add "
540					   "network block to priority list.",
541					   line);
542				errors++;
543				continue;
544			}
545#ifndef CONFIG_NO_CONFIG_BLOBS
546		} else if (os_strncmp(pos, "blob-base64-", 12) == 0) {
547			if (wpa_config_process_blob(config, f, &line, pos + 12)
548			    < 0) {
549				errors++;
550				continue;
551			}
552#endif /* CONFIG_NO_CONFIG_BLOBS */
553		} else if (wpa_config_process_global(config, pos, line) < 0) {
554			wpa_printf(MSG_ERROR, "Line %d: Invalid configuration "
555				   "line '%s'.", line, pos);
556			errors++;
557			continue;
558		}
559	}
560
561	fclose(f);
562
563	config->ssid = head;
564	wpa_config_debug_dump_networks(config);
565
566	if (errors) {
567		wpa_config_free(config);
568		config = NULL;
569		head = NULL;
570	}
571
572	return config;
573}
574
575
576#ifndef CONFIG_NO_CONFIG_WRITE
577
578static void write_str(FILE *f, const char *field, struct wpa_ssid *ssid)
579{
580	char *value = wpa_config_get(ssid, field);
581	if (value == NULL)
582		return;
583	fprintf(f, "\t%s=%s\n", field, value);
584	os_free(value);
585}
586
587
588static void write_int(FILE *f, const char *field, int value, int def)
589{
590	if (value == def)
591		return;
592	fprintf(f, "\t%s=%d\n", field, value);
593}
594
595
596static void write_bssid(FILE *f, struct wpa_ssid *ssid)
597{
598	char *value = wpa_config_get(ssid, "bssid");
599	if (value == NULL)
600		return;
601	fprintf(f, "\tbssid=%s\n", value);
602	os_free(value);
603}
604
605
606static void write_psk(FILE *f, struct wpa_ssid *ssid)
607{
608	char *value = wpa_config_get(ssid, "psk");
609	if (value == NULL)
610		return;
611	fprintf(f, "\tpsk=%s\n", value);
612	os_free(value);
613}
614
615
616static void write_proto(FILE *f, struct wpa_ssid *ssid)
617{
618	char *value;
619
620	if (ssid->proto == DEFAULT_PROTO)
621		return;
622
623	value = wpa_config_get(ssid, "proto");
624	if (value == NULL)
625		return;
626	if (value[0])
627		fprintf(f, "\tproto=%s\n", value);
628	os_free(value);
629}
630
631
632static void write_key_mgmt(FILE *f, struct wpa_ssid *ssid)
633{
634	char *value;
635
636	if (ssid->key_mgmt == DEFAULT_KEY_MGMT)
637		return;
638
639	value = wpa_config_get(ssid, "key_mgmt");
640	if (value == NULL)
641		return;
642	if (value[0])
643		fprintf(f, "\tkey_mgmt=%s\n", value);
644	os_free(value);
645}
646
647
648static void write_pairwise(FILE *f, struct wpa_ssid *ssid)
649{
650	char *value;
651
652	if (ssid->pairwise_cipher == DEFAULT_PAIRWISE)
653		return;
654
655	value = wpa_config_get(ssid, "pairwise");
656	if (value == NULL)
657		return;
658	if (value[0])
659		fprintf(f, "\tpairwise=%s\n", value);
660	os_free(value);
661}
662
663
664static void write_group(FILE *f, struct wpa_ssid *ssid)
665{
666	char *value;
667
668	if (ssid->group_cipher == DEFAULT_GROUP)
669		return;
670
671	value = wpa_config_get(ssid, "group");
672	if (value == NULL)
673		return;
674	if (value[0])
675		fprintf(f, "\tgroup=%s\n", value);
676	os_free(value);
677}
678
679
680static void write_auth_alg(FILE *f, struct wpa_ssid *ssid)
681{
682	char *value;
683
684	if (ssid->auth_alg == 0)
685		return;
686
687	value = wpa_config_get(ssid, "auth_alg");
688	if (value == NULL)
689		return;
690	if (value[0])
691		fprintf(f, "\tauth_alg=%s\n", value);
692	os_free(value);
693}
694
695
696#ifdef IEEE8021X_EAPOL
697static void write_eap(FILE *f, struct wpa_ssid *ssid)
698{
699	char *value;
700
701	value = wpa_config_get(ssid, "eap");
702	if (value == NULL)
703		return;
704
705	if (value[0])
706		fprintf(f, "\teap=%s\n", value);
707	os_free(value);
708}
709#endif /* IEEE8021X_EAPOL */
710
711
712static void write_wep_key(FILE *f, int idx, struct wpa_ssid *ssid)
713{
714	char field[20], *value;
715	int res;
716
717	res = os_snprintf(field, sizeof(field), "wep_key%d", idx);
718	if (res < 0 || (size_t) res >= sizeof(field))
719		return;
720	value = wpa_config_get(ssid, field);
721	if (value) {
722		fprintf(f, "\t%s=%s\n", field, value);
723		os_free(value);
724	}
725}
726
727
728static void wpa_config_write_network(FILE *f, struct wpa_ssid *ssid)
729{
730	int i;
731
732#define STR(t) write_str(f, #t, ssid)
733#define INT(t) write_int(f, #t, ssid->t, 0)
734#define INTe(t) write_int(f, #t, ssid->eap.t, 0)
735#define INT_DEF(t, def) write_int(f, #t, ssid->t, def)
736#define INT_DEFe(t, def) write_int(f, #t, ssid->eap.t, def)
737
738	STR(ssid);
739	INT(scan_ssid);
740	write_bssid(f, ssid);
741	write_psk(f, ssid);
742	write_proto(f, ssid);
743	write_key_mgmt(f, ssid);
744	write_pairwise(f, ssid);
745	write_group(f, ssid);
746	write_auth_alg(f, ssid);
747#ifdef IEEE8021X_EAPOL
748	write_eap(f, ssid);
749	STR(identity);
750	STR(anonymous_identity);
751	STR(password);
752	STR(ca_cert);
753	STR(ca_path);
754	STR(client_cert);
755	STR(private_key);
756	STR(private_key_passwd);
757	STR(dh_file);
758	STR(subject_match);
759	STR(altsubject_match);
760	STR(ca_cert2);
761	STR(ca_path2);
762	STR(client_cert2);
763	STR(private_key2);
764	STR(private_key2_passwd);
765	STR(dh_file2);
766	STR(subject_match2);
767	STR(altsubject_match2);
768	STR(phase1);
769	STR(phase2);
770	STR(pcsc);
771	STR(pin);
772	STR(engine_id);
773	STR(key_id);
774	STR(cert_id);
775	STR(ca_cert_id);
776	STR(key2_id);
777	STR(pin2);
778	STR(engine2_id);
779	STR(cert2_id);
780	STR(ca_cert2_id);
781	INTe(engine);
782	INTe(engine2);
783	INT_DEF(eapol_flags, DEFAULT_EAPOL_FLAGS);
784#endif /* IEEE8021X_EAPOL */
785	for (i = 0; i < 4; i++)
786		write_wep_key(f, i, ssid);
787	INT(wep_tx_keyidx);
788	INT(priority);
789#ifdef IEEE8021X_EAPOL
790	INT_DEF(eap_workaround, DEFAULT_EAP_WORKAROUND);
791	STR(pac_file);
792	INT_DEFe(fragment_size, DEFAULT_FRAGMENT_SIZE);
793#endif /* IEEE8021X_EAPOL */
794	INT(mode);
795	INT(proactive_key_caching);
796	INT(disabled);
797	INT(peerkey);
798#ifdef CONFIG_IEEE80211W
799	INT(ieee80211w);
800#endif /* CONFIG_IEEE80211W */
801	STR(id_str);
802
803#undef STR
804#undef INT
805#undef INT_DEF
806}
807
808
809#ifndef CONFIG_NO_CONFIG_BLOBS
810static int wpa_config_write_blob(FILE *f, struct wpa_config_blob *blob)
811{
812	unsigned char *encoded;
813
814	encoded = base64_encode(blob->data, blob->len, NULL);
815	if (encoded == NULL)
816		return -1;
817
818	fprintf(f, "\nblob-base64-%s={\n%s}\n", blob->name, encoded);
819	os_free(encoded);
820	return 0;
821}
822#endif /* CONFIG_NO_CONFIG_BLOBS */
823
824
825static void wpa_config_write_global(FILE *f, struct wpa_config *config)
826{
827#ifdef CONFIG_CTRL_IFACE
828	if (config->ctrl_interface)
829		fprintf(f, "ctrl_interface=%s\n", config->ctrl_interface);
830	if (config->ctrl_interface_group)
831		fprintf(f, "ctrl_interface_group=%s\n",
832			config->ctrl_interface_group);
833#endif /* CONFIG_CTRL_IFACE */
834	if (config->eapol_version != DEFAULT_EAPOL_VERSION)
835		fprintf(f, "eapol_version=%d\n", config->eapol_version);
836	if (config->ap_scan != DEFAULT_AP_SCAN)
837		fprintf(f, "ap_scan=%d\n", config->ap_scan);
838	if (config->fast_reauth != DEFAULT_FAST_REAUTH)
839		fprintf(f, "fast_reauth=%d\n", config->fast_reauth);
840#ifdef EAP_TLS_OPENSSL
841	if (config->opensc_engine_path)
842		fprintf(f, "opensc_engine_path=%s\n",
843			config->opensc_engine_path);
844	if (config->pkcs11_engine_path)
845		fprintf(f, "pkcs11_engine_path=%s\n",
846			config->pkcs11_engine_path);
847	if (config->pkcs11_module_path)
848		fprintf(f, "pkcs11_module_path=%s\n",
849			config->pkcs11_module_path);
850#endif /* EAP_TLS_OPENSSL */
851	if (config->driver_param)
852		fprintf(f, "driver_param=%s\n", config->driver_param);
853	if (config->dot11RSNAConfigPMKLifetime)
854		fprintf(f, "dot11RSNAConfigPMKLifetime=%d\n",
855			config->dot11RSNAConfigPMKLifetime);
856	if (config->dot11RSNAConfigPMKReauthThreshold)
857		fprintf(f, "dot11RSNAConfigPMKReauthThreshold=%d\n",
858			config->dot11RSNAConfigPMKReauthThreshold);
859	if (config->dot11RSNAConfigSATimeout)
860		fprintf(f, "dot11RSNAConfigSATimeout=%d\n",
861			config->dot11RSNAConfigSATimeout);
862	if (config->update_config)
863		fprintf(f, "update_config=%d\n", config->update_config);
864#ifdef CONFIG_WPS
865	if (!is_nil_uuid(config->uuid)) {
866		char buf[40];
867		uuid_bin2str(config->uuid, buf, sizeof(buf));
868		fprintf(f, "uuid=%s\n", buf);
869	}
870	if (config->device_name)
871		fprintf(f, "device_name=%s\n", config->device_name);
872	if (config->manufacturer)
873		fprintf(f, "manufacturer=%s\n", config->manufacturer);
874	if (config->model_name)
875		fprintf(f, "model_name=%s\n", config->model_name);
876	if (config->model_number)
877		fprintf(f, "model_number=%s\n", config->model_number);
878	if (config->serial_number)
879		fprintf(f, "serial_number=%s\n", config->serial_number);
880	if (config->device_type)
881		fprintf(f, "device_type=%s\n", config->device_type);
882	if (WPA_GET_BE32(config->os_version))
883		fprintf(f, "os_version=%08x\n",
884			WPA_GET_BE32(config->os_version));
885	if (config->wps_cred_processing)
886		fprintf(f, "wps_cred_processing=%d\n",
887			config->wps_cred_processing);
888#endif /* CONFIG_WPS */
889	if (config->country[0] && config->country[1]) {
890		fprintf(f, "country=%c%c\n",
891			config->country[0], config->country[1]);
892	}
893}
894
895#endif /* CONFIG_NO_CONFIG_WRITE */
896
897
898int wpa_config_write(const char *name, struct wpa_config *config)
899{
900#ifndef CONFIG_NO_CONFIG_WRITE
901	FILE *f;
902	struct wpa_ssid *ssid;
903#ifndef CONFIG_NO_CONFIG_BLOBS
904	struct wpa_config_blob *blob;
905#endif /* CONFIG_NO_CONFIG_BLOBS */
906	int ret = 0;
907
908	wpa_printf(MSG_DEBUG, "Writing configuration file '%s'", name);
909
910	f = fopen(name, "w");
911	if (f == NULL) {
912		wpa_printf(MSG_DEBUG, "Failed to open '%s' for writing", name);
913		return -1;
914	}
915
916	wpa_config_write_global(f, config);
917
918	for (ssid = config->ssid; ssid; ssid = ssid->next) {
919		if (ssid->key_mgmt == WPA_KEY_MGMT_WPS)
920			continue; /* do not save temporary WPS networks */
921		fprintf(f, "\nnetwork={\n");
922		wpa_config_write_network(f, ssid);
923		fprintf(f, "}\n");
924	}
925
926#ifndef CONFIG_NO_CONFIG_BLOBS
927	for (blob = config->blobs; blob; blob = blob->next) {
928		ret = wpa_config_write_blob(f, blob);
929		if (ret)
930			break;
931	}
932#endif /* CONFIG_NO_CONFIG_BLOBS */
933
934	fclose(f);
935
936	wpa_printf(MSG_DEBUG, "Configuration file '%s' written %ssuccessfully",
937		   name, ret ? "un" : "");
938	return ret;
939#else /* CONFIG_NO_CONFIG_WRITE */
940	return -1;
941#endif /* CONFIG_NO_CONFIG_WRITE */
942}
943