2 * WPA Supplicant / Configuration backend: text file
3 * Copyright (c) 2003-2012, Jouni Malinen <j@w1.fi>
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
8 * This file implements a configuration backend for text files. All the
9 * configuration information is stored in a text file that uses a format
10 * described in the sample configuration file, wpa_supplicant.conf.
23 #include "eap_peer/eap_methods.h"
24 #include "eap_peer/eap.h"
27 static int newline_terminated(const char *buf
, size_t buflen
)
29 size_t len
= os_strlen(buf
);
32 if (len
== buflen
- 1 && buf
[buflen
- 1] != '\r' &&
39 static void skip_line_end(FILE *stream
)
42 while (fgets(buf
, sizeof(buf
), stream
)) {
43 buf
[sizeof(buf
) - 1] = '\0';
44 if (newline_terminated(buf
, sizeof(buf
)))
51 * wpa_config_get_line - Read the next configuration file line
52 * @s: Buffer for the line
53 * @size: The buffer length
54 * @stream: File stream to read from
55 * @line: Pointer to a variable storing the file line number
56 * @_pos: Buffer for the pointer to the beginning of data on the text line or
57 * %NULL if not needed (returned value used instead)
58 * Returns: Pointer to the beginning of data on the text line or %NULL if no
59 * more text lines are available.
61 * This function reads the next non-empty line from the configuration file and
62 * removes comments. The returned string is guaranteed to be null-terminated.
64 static char * wpa_config_get_line(char *s
, int size
, FILE *stream
, int *line
,
67 char *pos
, *end
, *sstart
;
69 while (fgets(s
, size
, stream
)) {
72 if (!newline_terminated(s
, size
)) {
74 * The line was truncated - skip rest of it to avoid
75 * confusing error messages.
77 wpa_printf(MSG_INFO
, "Long line in configuration file "
79 skip_line_end(stream
);
83 /* Skip white space from the beginning of line. */
84 while (*pos
== ' ' || *pos
== '\t' || *pos
== '\r')
87 /* Skip comment lines and empty lines */
88 if (*pos
== '#' || *pos
== '\n' || *pos
== '\0')
92 * Remove # comments unless they are within a double quoted
95 sstart
= os_strchr(pos
, '"');
97 sstart
= os_strrchr(sstart
+ 1, '"');
100 end
= os_strchr(sstart
, '#');
104 end
= pos
+ os_strlen(pos
) - 1;
106 /* Remove trailing white space. */
108 (*end
== '\n' || *end
== ' ' || *end
== '\t' ||
126 static int wpa_config_validate_network(struct wpa_ssid
*ssid
, int line
)
130 if (ssid
->passphrase
) {
132 wpa_printf(MSG_ERROR
, "Line %d: both PSK and "
133 "passphrase configured.", line
);
136 wpa_config_update_psk(ssid
);
139 if ((ssid
->group_cipher
& WPA_CIPHER_CCMP
) &&
140 !(ssid
->pairwise_cipher
& WPA_CIPHER_CCMP
) &&
141 !(ssid
->pairwise_cipher
& WPA_CIPHER_NONE
)) {
142 /* Group cipher cannot be stronger than the pairwise cipher. */
143 wpa_printf(MSG_DEBUG
, "Line %d: removed CCMP from group cipher"
144 " list since it was not allowed for pairwise "
146 ssid
->group_cipher
&= ~WPA_CIPHER_CCMP
;
149 if (ssid
->mode
== WPAS_MODE_MESH
&&
150 (ssid
->key_mgmt
!= WPA_KEY_MGMT_NONE
&&
151 ssid
->key_mgmt
!= WPA_KEY_MGMT_SAE
)) {
152 wpa_printf(MSG_ERROR
,
153 "Line %d: key_mgmt for mesh network should be open or SAE",
162 static struct wpa_ssid
* wpa_config_read_network(FILE *f
, int *line
, int id
)
164 struct wpa_ssid
*ssid
;
165 int errors
= 0, end
= 0;
166 char buf
[2000], *pos
, *pos2
;
168 wpa_printf(MSG_MSGDUMP
, "Line: %d - start of a new network block",
170 ssid
= os_zalloc(sizeof(*ssid
));
173 dl_list_init(&ssid
->psk_list
);
176 wpa_config_set_network_defaults(ssid
);
178 while (wpa_config_get_line(buf
, sizeof(buf
), f
, line
, &pos
)) {
179 if (os_strcmp(pos
, "}") == 0) {
184 pos2
= os_strchr(pos
, '=');
186 wpa_printf(MSG_ERROR
, "Line %d: Invalid SSID line "
187 "'%s'.", *line
, pos
);
194 if (os_strchr(pos2
+ 1, '"') == NULL
) {
195 wpa_printf(MSG_ERROR
, "Line %d: invalid "
196 "quotation '%s'.", *line
, pos2
);
202 if (wpa_config_set(ssid
, pos
, pos2
, *line
) < 0)
207 wpa_printf(MSG_ERROR
, "Line %d: network block was not "
208 "terminated properly.", *line
);
212 errors
+= wpa_config_validate_network(ssid
, *line
);
215 wpa_config_free_ssid(ssid
);
223 static struct wpa_cred
* wpa_config_read_cred(FILE *f
, int *line
, int id
)
225 struct wpa_cred
*cred
;
226 int errors
= 0, end
= 0;
227 char buf
[256], *pos
, *pos2
;
229 wpa_printf(MSG_MSGDUMP
, "Line: %d - start of a new cred block", *line
);
230 cred
= os_zalloc(sizeof(*cred
));
234 cred
->sim_num
= DEFAULT_USER_SELECTED_SIM
;
236 while (wpa_config_get_line(buf
, sizeof(buf
), f
, line
, &pos
)) {
237 if (os_strcmp(pos
, "}") == 0) {
242 pos2
= os_strchr(pos
, '=');
244 wpa_printf(MSG_ERROR
, "Line %d: Invalid cred line "
245 "'%s'.", *line
, pos
);
252 if (os_strchr(pos2
+ 1, '"') == NULL
) {
253 wpa_printf(MSG_ERROR
, "Line %d: invalid "
254 "quotation '%s'.", *line
, pos2
);
260 if (wpa_config_set_cred(cred
, pos
, pos2
, *line
) < 0)
265 wpa_printf(MSG_ERROR
, "Line %d: cred block was not "
266 "terminated properly.", *line
);
271 wpa_config_free_cred(cred
);
279 #ifndef CONFIG_NO_CONFIG_BLOBS
280 static struct wpa_config_blob
* wpa_config_read_blob(FILE *f
, int *line
,
283 struct wpa_config_blob
*blob
;
285 unsigned char *encoded
= NULL
, *nencoded
;
287 size_t encoded_len
= 0, len
;
289 wpa_printf(MSG_MSGDUMP
, "Line: %d - start of a new named blob '%s'",
292 while (wpa_config_get_line(buf
, sizeof(buf
), f
, line
, &pos
)) {
293 if (os_strcmp(pos
, "}") == 0) {
298 len
= os_strlen(pos
);
299 nencoded
= os_realloc(encoded
, encoded_len
+ len
);
300 if (nencoded
== NULL
) {
301 wpa_printf(MSG_ERROR
, "Line %d: not enough memory for "
307 os_memcpy(encoded
+ encoded_len
, pos
, len
);
312 wpa_printf(MSG_ERROR
, "Line %d: blob was not terminated "
318 blob
= os_zalloc(sizeof(*blob
));
323 blob
->name
= os_strdup(name
);
324 blob
->data
= base64_decode(encoded
, encoded_len
, &blob
->len
);
327 if (blob
->name
== NULL
|| blob
->data
== NULL
) {
328 wpa_config_free_blob(blob
);
336 static int wpa_config_process_blob(struct wpa_config
*config
, FILE *f
,
337 int *line
, char *bname
)
340 struct wpa_config_blob
*blob
;
342 name_end
= os_strchr(bname
, '=');
343 if (name_end
== NULL
) {
344 wpa_printf(MSG_ERROR
, "Line %d: no blob name terminator",
350 blob
= wpa_config_read_blob(f
, line
, bname
);
352 wpa_printf(MSG_ERROR
, "Line %d: failed to read blob %s",
356 wpa_config_set_blob(config
, blob
);
359 #endif /* CONFIG_NO_CONFIG_BLOBS */
362 struct wpa_config
* wpa_config_read(const char *name
, struct wpa_config
*cfgp
)
366 int errors
= 0, line
= 0;
367 struct wpa_ssid
*ssid
, *tail
, *head
;
368 struct wpa_cred
*cred
, *cred_tail
, *cred_head
;
369 struct wpa_config
*config
;
378 config
= wpa_config_alloc_empty(NULL
, NULL
);
379 if (config
== NULL
) {
380 wpa_printf(MSG_ERROR
, "Failed to allocate config file "
384 tail
= head
= config
->ssid
;
385 while (tail
&& tail
->next
)
387 cred_tail
= cred_head
= config
->cred
;
388 while (cred_tail
&& cred_tail
->next
)
389 cred_tail
= cred_tail
->next
;
391 wpa_printf(MSG_DEBUG
, "Reading configuration file '%s'", name
);
392 f
= fopen(name
, "r");
394 wpa_printf(MSG_ERROR
, "Failed to open config file '%s', "
395 "error: %s", name
, strerror(errno
));
400 while (wpa_config_get_line(buf
, sizeof(buf
), f
, &line
, &pos
)) {
401 if (os_strcmp(pos
, "network={") == 0) {
402 ssid
= wpa_config_read_network(f
, &line
, id
++);
404 wpa_printf(MSG_ERROR
, "Line %d: failed to "
405 "parse network block.", line
);
415 if (wpa_config_add_prio_network(config
, ssid
)) {
416 wpa_printf(MSG_ERROR
, "Line %d: failed to add "
417 "network block to priority list.",
422 } else if (os_strcmp(pos
, "cred={") == 0) {
423 cred
= wpa_config_read_cred(f
, &line
, cred_id
++);
425 wpa_printf(MSG_ERROR
, "Line %d: failed to "
426 "parse cred block.", line
);
430 if (cred_head
== NULL
) {
431 cred_head
= cred_tail
= cred
;
433 cred_tail
->next
= cred
;
436 #ifndef CONFIG_NO_CONFIG_BLOBS
437 } else if (os_strncmp(pos
, "blob-base64-", 12) == 0) {
438 if (wpa_config_process_blob(config
, f
, &line
, pos
+ 12)
440 wpa_printf(MSG_ERROR
, "Line %d: failed to "
441 "process blob.", line
);
445 #endif /* CONFIG_NO_CONFIG_BLOBS */
446 } else if (wpa_config_process_global(config
, pos
, line
) < 0) {
447 wpa_printf(MSG_ERROR
, "Line %d: Invalid configuration "
448 "line '%s'.", line
, pos
);
457 wpa_config_debug_dump_networks(config
);
458 config
->cred
= cred_head
;
460 #ifndef WPA_IGNORE_CONFIG_ERRORS
462 wpa_config_free(config
);
466 #endif /* WPA_IGNORE_CONFIG_ERRORS */
472 #ifndef CONFIG_NO_CONFIG_WRITE
474 static void write_str(FILE *f
, const char *field
, struct wpa_ssid
*ssid
)
476 char *value
= wpa_config_get(ssid
, field
);
479 fprintf(f
, "\t%s=%s\n", field
, value
);
484 static void write_int(FILE *f
, const char *field
, int value
, int def
)
488 fprintf(f
, "\t%s=%d\n", field
, value
);
492 static void write_bssid(FILE *f
, struct wpa_ssid
*ssid
)
494 char *value
= wpa_config_get(ssid
, "bssid");
497 fprintf(f
, "\tbssid=%s\n", value
);
502 static void write_psk(FILE *f
, struct wpa_ssid
*ssid
)
506 if (ssid
->mem_only_psk
)
509 value
= wpa_config_get(ssid
, "psk");
512 fprintf(f
, "\tpsk=%s\n", value
);
517 static void write_proto(FILE *f
, struct wpa_ssid
*ssid
)
521 if (ssid
->proto
== DEFAULT_PROTO
)
524 value
= wpa_config_get(ssid
, "proto");
528 fprintf(f
, "\tproto=%s\n", value
);
533 static void write_key_mgmt(FILE *f
, struct wpa_ssid
*ssid
)
537 if (ssid
->key_mgmt
== DEFAULT_KEY_MGMT
)
540 value
= wpa_config_get(ssid
, "key_mgmt");
544 fprintf(f
, "\tkey_mgmt=%s\n", value
);
549 static void write_pairwise(FILE *f
, struct wpa_ssid
*ssid
)
553 if (ssid
->pairwise_cipher
== DEFAULT_PAIRWISE
)
556 value
= wpa_config_get(ssid
, "pairwise");
560 fprintf(f
, "\tpairwise=%s\n", value
);
565 static void write_group(FILE *f
, struct wpa_ssid
*ssid
)
569 if (ssid
->group_cipher
== DEFAULT_GROUP
)
572 value
= wpa_config_get(ssid
, "group");
576 fprintf(f
, "\tgroup=%s\n", value
);
581 static void write_auth_alg(FILE *f
, struct wpa_ssid
*ssid
)
585 if (ssid
->auth_alg
== 0)
588 value
= wpa_config_get(ssid
, "auth_alg");
592 fprintf(f
, "\tauth_alg=%s\n", value
);
597 #ifdef IEEE8021X_EAPOL
598 static void write_eap(FILE *f
, struct wpa_ssid
*ssid
)
602 value
= wpa_config_get(ssid
, "eap");
607 fprintf(f
, "\teap=%s\n", value
);
610 #endif /* IEEE8021X_EAPOL */
613 static void write_wep_key(FILE *f
, int idx
, struct wpa_ssid
*ssid
)
615 char field
[20], *value
;
618 res
= os_snprintf(field
, sizeof(field
), "wep_key%d", idx
);
619 if (os_snprintf_error(sizeof(field
), res
))
621 value
= wpa_config_get(ssid
, field
);
623 fprintf(f
, "\t%s=%s\n", field
, value
);
631 static void write_go_p2p_dev_addr(FILE *f
, struct wpa_ssid
*ssid
)
633 char *value
= wpa_config_get(ssid
, "go_p2p_dev_addr");
636 fprintf(f
, "\tgo_p2p_dev_addr=%s\n", value
);
640 static void write_p2p_client_list(FILE *f
, struct wpa_ssid
*ssid
)
642 char *value
= wpa_config_get(ssid
, "p2p_client_list");
645 fprintf(f
, "\tp2p_client_list=%s\n", value
);
650 static void write_psk_list(FILE *f
, struct wpa_ssid
*ssid
)
652 struct psk_list_entry
*psk
;
653 char hex
[32 * 2 + 1];
655 dl_list_for_each(psk
, &ssid
->psk_list
, struct psk_list_entry
, list
) {
656 wpa_snprintf_hex(hex
, sizeof(hex
), psk
->psk
, sizeof(psk
->psk
));
657 fprintf(f
, "\tpsk_list=%s" MACSTR
"-%s\n",
658 psk
->p2p
? "P2P-" : "", MAC2STR(psk
->addr
), hex
);
662 #endif /* CONFIG_P2P */
665 static void wpa_config_write_network(FILE *f
, struct wpa_ssid
*ssid
)
669 #define STR(t) write_str(f, #t, ssid)
670 #define INT(t) write_int(f, #t, ssid->t, 0)
671 #define INTe(t) write_int(f, #t, ssid->eap.t, 0)
672 #define INT_DEF(t, def) write_int(f, #t, ssid->t, def)
673 #define INT_DEFe(t, def) write_int(f, #t, ssid->eap.t, def)
677 write_bssid(f
, ssid
);
678 write_str(f
, "bssid_blacklist", ssid
);
679 write_str(f
, "bssid_whitelist", ssid
);
682 write_proto(f
, ssid
);
683 write_key_mgmt(f
, ssid
);
684 INT_DEF(bg_scan_period
, DEFAULT_BG_SCAN_PERIOD
);
685 write_pairwise(f
, ssid
);
686 write_group(f
, ssid
);
687 write_auth_alg(f
, ssid
);
691 #ifdef IEEE8021X_EAPOL
694 STR(anonymous_identity
);
700 STR(private_key_passwd
);
703 STR(altsubject_match
);
704 STR(domain_suffix_match
);
710 STR(private_key2_passwd
);
713 STR(altsubject_match2
);
714 STR(domain_suffix_match2
);
731 INT_DEF(eapol_flags
, DEFAULT_EAPOL_FLAGS
);
732 STR(openssl_ciphers
);
734 #endif /* IEEE8021X_EAPOL */
735 for (i
= 0; i
< 4; i
++)
736 write_wep_key(f
, i
, ssid
);
739 #ifdef IEEE8021X_EAPOL
740 INT_DEF(eap_workaround
, DEFAULT_EAP_WORKAROUND
);
742 INT_DEFe(fragment_size
, DEFAULT_FRAGMENT_SIZE
);
744 INT_DEFe(sim_num
, DEFAULT_USER_SELECTED_SIM
);
745 #endif /* IEEE8021X_EAPOL */
752 #endif /* CONFIG_ACS */
753 write_int(f
, "proactive_key_caching", ssid
->proactive_key_caching
, -1);
757 INT(max_oper_chwidth
);
759 #ifdef CONFIG_IEEE80211W
760 write_int(f
, "ieee80211w", ssid
->ieee80211w
,
761 MGMT_FRAME_PROTECTION_DEFAULT
);
762 #endif /* CONFIG_IEEE80211W */
765 write_go_p2p_dev_addr(f
, ssid
);
766 write_p2p_client_list(f
, ssid
);
767 write_psk_list(f
, ssid
);
768 #endif /* CONFIG_P2P */
769 INT(ap_max_inactivity
);
774 #endif /* CONFIG_MACSEC */
776 INT(update_identifier
);
777 #endif /* CONFIG_HS20 */
778 write_int(f
, "mac_addr", ssid
->mac_addr
, -1);
780 STR(mesh_basic_rates
);
781 INT_DEF(dot11MeshMaxRetries
, DEFAULT_MESH_MAX_RETRIES
);
782 INT_DEF(dot11MeshRetryTimeout
, DEFAULT_MESH_RETRY_TIMEOUT
);
783 INT_DEF(dot11MeshConfirmTimeout
, DEFAULT_MESH_CONFIRM_TIMEOUT
);
784 INT_DEF(dot11MeshHoldingTimeout
, DEFAULT_MESH_HOLDING_TIMEOUT
);
785 #endif /* CONFIG_MESH */
787 INT(ignore_broadcast_ssid
);
788 #ifdef CONFIG_HT_OVERRIDES
789 INT_DEF(disable_ht
, DEFAULT_DISABLE_HT
);
790 INT_DEF(disable_ht40
, DEFAULT_DISABLE_HT40
);
791 INT_DEF(disable_sgi
, DEFAULT_DISABLE_SGI
);
792 INT_DEF(disable_ldpc
, DEFAULT_DISABLE_LDPC
);
793 INT(ht40_intolerant
);
794 INT_DEF(disable_max_amsdu
, DEFAULT_DISABLE_MAX_AMSDU
);
795 INT_DEF(ampdu_factor
, DEFAULT_AMPDU_FACTOR
);
796 INT_DEF(ampdu_density
, DEFAULT_AMPDU_DENSITY
);
798 #endif /* CONFIG_HT_OVERRIDES */
799 #ifdef CONFIG_VHT_OVERRIDES
803 INT_DEF(vht_rx_mcs_nss_1
, -1);
804 INT_DEF(vht_rx_mcs_nss_2
, -1);
805 INT_DEF(vht_rx_mcs_nss_3
, -1);
806 INT_DEF(vht_rx_mcs_nss_4
, -1);
807 INT_DEF(vht_rx_mcs_nss_5
, -1);
808 INT_DEF(vht_rx_mcs_nss_6
, -1);
809 INT_DEF(vht_rx_mcs_nss_7
, -1);
810 INT_DEF(vht_rx_mcs_nss_8
, -1);
811 INT_DEF(vht_tx_mcs_nss_1
, -1);
812 INT_DEF(vht_tx_mcs_nss_2
, -1);
813 INT_DEF(vht_tx_mcs_nss_3
, -1);
814 INT_DEF(vht_tx_mcs_nss_4
, -1);
815 INT_DEF(vht_tx_mcs_nss_5
, -1);
816 INT_DEF(vht_tx_mcs_nss_6
, -1);
817 INT_DEF(vht_tx_mcs_nss_7
, -1);
818 INT_DEF(vht_tx_mcs_nss_8
, -1);
819 #endif /* CONFIG_VHT_OVERRIDES */
827 static void wpa_config_write_cred(FILE *f
, struct wpa_cred
*cred
)
832 fprintf(f
, "\tpriority=%d\n", cred
->priority
);
834 fprintf(f
, "\tpcsc=%d\n", cred
->pcsc
);
836 fprintf(f
, "\trealm=\"%s\"\n", cred
->realm
);
838 fprintf(f
, "\tusername=\"%s\"\n", cred
->username
);
839 if (cred
->password
&& cred
->ext_password
)
840 fprintf(f
, "\tpassword=ext:%s\n", cred
->password
);
841 else if (cred
->password
)
842 fprintf(f
, "\tpassword=\"%s\"\n", cred
->password
);
844 fprintf(f
, "\tca_cert=\"%s\"\n", cred
->ca_cert
);
845 if (cred
->client_cert
)
846 fprintf(f
, "\tclient_cert=\"%s\"\n", cred
->client_cert
);
847 if (cred
->private_key
)
848 fprintf(f
, "\tprivate_key=\"%s\"\n", cred
->private_key
);
849 if (cred
->private_key_passwd
)
850 fprintf(f
, "\tprivate_key_passwd=\"%s\"\n",
851 cred
->private_key_passwd
);
853 fprintf(f
, "\timsi=\"%s\"\n", cred
->imsi
);
855 fprintf(f
, "\tmilenage=\"%s\"\n", cred
->milenage
);
856 for (i
= 0; i
< cred
->num_domain
; i
++)
857 fprintf(f
, "\tdomain=\"%s\"\n", cred
->domain
[i
]);
858 if (cred
->domain_suffix_match
)
859 fprintf(f
, "\tdomain_suffix_match=\"%s\"\n",
860 cred
->domain_suffix_match
);
861 if (cred
->roaming_consortium_len
) {
862 fprintf(f
, "\troaming_consortium=");
863 for (i
= 0; i
< cred
->roaming_consortium_len
; i
++)
864 fprintf(f
, "%02x", cred
->roaming_consortium
[i
]);
867 if (cred
->eap_method
) {
869 name
= eap_get_name(cred
->eap_method
[0].vendor
,
870 cred
->eap_method
[0].method
);
872 fprintf(f
, "\teap=%s\n", name
);
875 fprintf(f
, "\tphase1=\"%s\"\n", cred
->phase1
);
877 fprintf(f
, "\tphase2=\"%s\"\n", cred
->phase2
);
878 if (cred
->excluded_ssid
) {
880 for (i
= 0; i
< cred
->num_excluded_ssid
; i
++) {
881 struct excluded_ssid
*e
= &cred
->excluded_ssid
[i
];
882 fprintf(f
, "\texcluded_ssid=");
883 for (j
= 0; j
< e
->ssid_len
; j
++)
884 fprintf(f
, "%02x", e
->ssid
[j
]);
888 if (cred
->roaming_partner
) {
889 for (i
= 0; i
< cred
->num_roaming_partner
; i
++) {
890 struct roaming_partner
*p
= &cred
->roaming_partner
[i
];
891 fprintf(f
, "\troaming_partner=\"%s,%d,%u,%s\"\n",
892 p
->fqdn
, p
->exact_match
, p
->priority
,
896 if (cred
->update_identifier
)
897 fprintf(f
, "\tupdate_identifier=%d\n", cred
->update_identifier
);
899 if (cred
->provisioning_sp
)
900 fprintf(f
, "\tprovisioning_sp=\"%s\"\n", cred
->provisioning_sp
);
901 if (cred
->sp_priority
)
902 fprintf(f
, "\tsp_priority=%d\n", cred
->sp_priority
);
904 if (cred
->min_dl_bandwidth_home
)
905 fprintf(f
, "\tmin_dl_bandwidth_home=%u\n",
906 cred
->min_dl_bandwidth_home
);
907 if (cred
->min_ul_bandwidth_home
)
908 fprintf(f
, "\tmin_ul_bandwidth_home=%u\n",
909 cred
->min_ul_bandwidth_home
);
910 if (cred
->min_dl_bandwidth_roaming
)
911 fprintf(f
, "\tmin_dl_bandwidth_roaming=%u\n",
912 cred
->min_dl_bandwidth_roaming
);
913 if (cred
->min_ul_bandwidth_roaming
)
914 fprintf(f
, "\tmin_ul_bandwidth_roaming=%u\n",
915 cred
->min_ul_bandwidth_roaming
);
917 if (cred
->max_bss_load
)
918 fprintf(f
, "\tmax_bss_load=%u\n",
922 fprintf(f
, "\tocsp=%d\n", cred
->ocsp
);
924 if (cred
->num_req_conn_capab
) {
925 for (i
= 0; i
< cred
->num_req_conn_capab
; i
++) {
928 fprintf(f
, "\treq_conn_capab=%u",
929 cred
->req_conn_capab_proto
[i
]);
930 ports
= cred
->req_conn_capab_port
[i
];
933 for (j
= 0; ports
[j
] != -1; j
++) {
934 fprintf(f
, "%s%d", j
> 0 ? "," : ":",
942 if (cred
->required_roaming_consortium_len
) {
943 fprintf(f
, "\trequired_roaming_consortium=");
944 for (i
= 0; i
< cred
->required_roaming_consortium_len
; i
++)
946 cred
->required_roaming_consortium
[i
]);
950 if (cred
->sim_num
!= DEFAULT_USER_SELECTED_SIM
)
951 fprintf(f
, "\tsim_num=%d\n", cred
->sim_num
);
955 #ifndef CONFIG_NO_CONFIG_BLOBS
956 static int wpa_config_write_blob(FILE *f
, struct wpa_config_blob
*blob
)
958 unsigned char *encoded
;
960 encoded
= base64_encode(blob
->data
, blob
->len
, NULL
);
964 fprintf(f
, "\nblob-base64-%s={\n%s}\n", blob
->name
, encoded
);
968 #endif /* CONFIG_NO_CONFIG_BLOBS */
971 static void write_global_bin(FILE *f
, const char *field
,
972 const struct wpabuf
*val
)
980 fprintf(f
, "%s=", field
);
981 pos
= wpabuf_head(val
);
982 for (i
= 0; i
< wpabuf_len(val
); i
++)
983 fprintf(f
, "%02X", *pos
++);
988 static void wpa_config_write_global(FILE *f
, struct wpa_config
*config
)
990 #ifdef CONFIG_CTRL_IFACE
991 if (config
->ctrl_interface
)
992 fprintf(f
, "ctrl_interface=%s\n", config
->ctrl_interface
);
993 if (config
->ctrl_interface_group
)
994 fprintf(f
, "ctrl_interface_group=%s\n",
995 config
->ctrl_interface_group
);
996 #endif /* CONFIG_CTRL_IFACE */
997 if (config
->eapol_version
!= DEFAULT_EAPOL_VERSION
)
998 fprintf(f
, "eapol_version=%d\n", config
->eapol_version
);
999 if (config
->ap_scan
!= DEFAULT_AP_SCAN
)
1000 fprintf(f
, "ap_scan=%d\n", config
->ap_scan
);
1001 if (config
->disable_scan_offload
)
1002 fprintf(f
, "disable_scan_offload=%d\n",
1003 config
->disable_scan_offload
);
1004 if (config
->fast_reauth
!= DEFAULT_FAST_REAUTH
)
1005 fprintf(f
, "fast_reauth=%d\n", config
->fast_reauth
);
1006 if (config
->opensc_engine_path
)
1007 fprintf(f
, "opensc_engine_path=%s\n",
1008 config
->opensc_engine_path
);
1009 if (config
->pkcs11_engine_path
)
1010 fprintf(f
, "pkcs11_engine_path=%s\n",
1011 config
->pkcs11_engine_path
);
1012 if (config
->pkcs11_module_path
)
1013 fprintf(f
, "pkcs11_module_path=%s\n",
1014 config
->pkcs11_module_path
);
1015 if (config
->openssl_ciphers
)
1016 fprintf(f
, "openssl_ciphers=%s\n", config
->openssl_ciphers
);
1017 if (config
->pcsc_reader
)
1018 fprintf(f
, "pcsc_reader=%s\n", config
->pcsc_reader
);
1019 if (config
->pcsc_pin
)
1020 fprintf(f
, "pcsc_pin=%s\n", config
->pcsc_pin
);
1021 if (config
->driver_param
)
1022 fprintf(f
, "driver_param=%s\n", config
->driver_param
);
1023 if (config
->dot11RSNAConfigPMKLifetime
)
1024 fprintf(f
, "dot11RSNAConfigPMKLifetime=%u\n",
1025 config
->dot11RSNAConfigPMKLifetime
);
1026 if (config
->dot11RSNAConfigPMKReauthThreshold
)
1027 fprintf(f
, "dot11RSNAConfigPMKReauthThreshold=%u\n",
1028 config
->dot11RSNAConfigPMKReauthThreshold
);
1029 if (config
->dot11RSNAConfigSATimeout
)
1030 fprintf(f
, "dot11RSNAConfigSATimeout=%u\n",
1031 config
->dot11RSNAConfigSATimeout
);
1032 if (config
->update_config
)
1033 fprintf(f
, "update_config=%d\n", config
->update_config
);
1035 if (!is_nil_uuid(config
->uuid
)) {
1037 uuid_bin2str(config
->uuid
, buf
, sizeof(buf
));
1038 fprintf(f
, "uuid=%s\n", buf
);
1040 if (config
->device_name
)
1041 fprintf(f
, "device_name=%s\n", config
->device_name
);
1042 if (config
->manufacturer
)
1043 fprintf(f
, "manufacturer=%s\n", config
->manufacturer
);
1044 if (config
->model_name
)
1045 fprintf(f
, "model_name=%s\n", config
->model_name
);
1046 if (config
->model_number
)
1047 fprintf(f
, "model_number=%s\n", config
->model_number
);
1048 if (config
->serial_number
)
1049 fprintf(f
, "serial_number=%s\n", config
->serial_number
);
1051 char _buf
[WPS_DEV_TYPE_BUFSIZE
], *buf
;
1052 buf
= wps_dev_type_bin2str(config
->device_type
,
1053 _buf
, sizeof(_buf
));
1054 if (os_strcmp(buf
, "0-00000000-0") != 0)
1055 fprintf(f
, "device_type=%s\n", buf
);
1057 if (WPA_GET_BE32(config
->os_version
))
1058 fprintf(f
, "os_version=%08x\n",
1059 WPA_GET_BE32(config
->os_version
));
1060 if (config
->config_methods
)
1061 fprintf(f
, "config_methods=%s\n", config
->config_methods
);
1062 if (config
->wps_cred_processing
)
1063 fprintf(f
, "wps_cred_processing=%d\n",
1064 config
->wps_cred_processing
);
1065 if (config
->wps_vendor_ext_m1
) {
1066 int i
, len
= wpabuf_len(config
->wps_vendor_ext_m1
);
1067 const u8
*p
= wpabuf_head_u8(config
->wps_vendor_ext_m1
);
1069 fprintf(f
, "wps_vendor_ext_m1=");
1070 for (i
= 0; i
< len
; i
++)
1071 fprintf(f
, "%02x", *p
++);
1075 #endif /* CONFIG_WPS */
1077 if (config
->p2p_listen_reg_class
)
1078 fprintf(f
, "p2p_listen_reg_class=%d\n",
1079 config
->p2p_listen_reg_class
);
1080 if (config
->p2p_listen_channel
)
1081 fprintf(f
, "p2p_listen_channel=%d\n",
1082 config
->p2p_listen_channel
);
1083 if (config
->p2p_oper_reg_class
)
1084 fprintf(f
, "p2p_oper_reg_class=%d\n",
1085 config
->p2p_oper_reg_class
);
1086 if (config
->p2p_oper_channel
)
1087 fprintf(f
, "p2p_oper_channel=%d\n", config
->p2p_oper_channel
);
1088 if (config
->p2p_go_intent
!= DEFAULT_P2P_GO_INTENT
)
1089 fprintf(f
, "p2p_go_intent=%d\n", config
->p2p_go_intent
);
1090 if (config
->p2p_ssid_postfix
)
1091 fprintf(f
, "p2p_ssid_postfix=%s\n", config
->p2p_ssid_postfix
);
1092 if (config
->persistent_reconnect
)
1093 fprintf(f
, "persistent_reconnect=%d\n",
1094 config
->persistent_reconnect
);
1095 if (config
->p2p_intra_bss
!= DEFAULT_P2P_INTRA_BSS
)
1096 fprintf(f
, "p2p_intra_bss=%d\n", config
->p2p_intra_bss
);
1097 if (config
->p2p_group_idle
)
1098 fprintf(f
, "p2p_group_idle=%d\n", config
->p2p_group_idle
);
1099 if (config
->p2p_passphrase_len
)
1100 fprintf(f
, "p2p_passphrase_len=%u\n",
1101 config
->p2p_passphrase_len
);
1102 if (config
->p2p_pref_chan
) {
1104 fprintf(f
, "p2p_pref_chan=");
1105 for (i
= 0; i
< config
->num_p2p_pref_chan
; i
++) {
1106 fprintf(f
, "%s%u:%u", i
> 0 ? "," : "",
1107 config
->p2p_pref_chan
[i
].op_class
,
1108 config
->p2p_pref_chan
[i
].chan
);
1112 if (config
->p2p_no_go_freq
.num
) {
1113 char *val
= freq_range_list_str(&config
->p2p_no_go_freq
);
1115 fprintf(f
, "p2p_no_go_freq=%s\n", val
);
1119 if (config
->p2p_add_cli_chan
)
1120 fprintf(f
, "p2p_add_cli_chan=%d\n", config
->p2p_add_cli_chan
);
1121 if (config
->p2p_optimize_listen_chan
!=
1122 DEFAULT_P2P_OPTIMIZE_LISTEN_CHAN
)
1123 fprintf(f
, "p2p_optimize_listen_chan=%d\n",
1124 config
->p2p_optimize_listen_chan
);
1125 if (config
->p2p_go_ht40
)
1126 fprintf(f
, "p2p_go_ht40=%d\n", config
->p2p_go_ht40
);
1127 if (config
->p2p_go_vht
)
1128 fprintf(f
, "p2p_go_vht=%d\n", config
->p2p_go_vht
);
1129 if (config
->p2p_go_ctwindow
!= DEFAULT_P2P_GO_CTWINDOW
)
1130 fprintf(f
, "p2p_go_ctwindow=%d\n", config
->p2p_go_ctwindow
);
1131 if (config
->p2p_disabled
)
1132 fprintf(f
, "p2p_disabled=%d\n", config
->p2p_disabled
);
1133 if (config
->p2p_no_group_iface
)
1134 fprintf(f
, "p2p_no_group_iface=%d\n",
1135 config
->p2p_no_group_iface
);
1136 if (config
->p2p_ignore_shared_freq
)
1137 fprintf(f
, "p2p_ignore_shared_freq=%d\n",
1138 config
->p2p_ignore_shared_freq
);
1139 if (config
->p2p_cli_probe
)
1140 fprintf(f
, "p2p_cli_probe=%d\n", config
->p2p_cli_probe
);
1141 if (config
->p2p_go_freq_change_policy
!= DEFAULT_P2P_GO_FREQ_MOVE
)
1142 fprintf(f
, "p2p_go_freq_change_policy=%u\n",
1143 config
->p2p_go_freq_change_policy
);
1144 if (WPA_GET_BE32(config
->ip_addr_go
))
1145 fprintf(f
, "ip_addr_go=%u.%u.%u.%u\n",
1146 config
->ip_addr_go
[0], config
->ip_addr_go
[1],
1147 config
->ip_addr_go
[2], config
->ip_addr_go
[3]);
1148 if (WPA_GET_BE32(config
->ip_addr_mask
))
1149 fprintf(f
, "ip_addr_mask=%u.%u.%u.%u\n",
1150 config
->ip_addr_mask
[0], config
->ip_addr_mask
[1],
1151 config
->ip_addr_mask
[2], config
->ip_addr_mask
[3]);
1152 if (WPA_GET_BE32(config
->ip_addr_start
))
1153 fprintf(f
, "ip_addr_start=%u.%u.%u.%u\n",
1154 config
->ip_addr_start
[0], config
->ip_addr_start
[1],
1155 config
->ip_addr_start
[2], config
->ip_addr_start
[3]);
1156 if (WPA_GET_BE32(config
->ip_addr_end
))
1157 fprintf(f
, "ip_addr_end=%u.%u.%u.%u\n",
1158 config
->ip_addr_end
[0], config
->ip_addr_end
[1],
1159 config
->ip_addr_end
[2], config
->ip_addr_end
[3]);
1160 #endif /* CONFIG_P2P */
1161 if (config
->country
[0] && config
->country
[1]) {
1162 fprintf(f
, "country=%c%c\n",
1163 config
->country
[0], config
->country
[1]);
1165 if (config
->bss_max_count
!= DEFAULT_BSS_MAX_COUNT
)
1166 fprintf(f
, "bss_max_count=%u\n", config
->bss_max_count
);
1167 if (config
->bss_expiration_age
!= DEFAULT_BSS_EXPIRATION_AGE
)
1168 fprintf(f
, "bss_expiration_age=%u\n",
1169 config
->bss_expiration_age
);
1170 if (config
->bss_expiration_scan_count
!=
1171 DEFAULT_BSS_EXPIRATION_SCAN_COUNT
)
1172 fprintf(f
, "bss_expiration_scan_count=%u\n",
1173 config
->bss_expiration_scan_count
);
1174 if (config
->filter_ssids
)
1175 fprintf(f
, "filter_ssids=%d\n", config
->filter_ssids
);
1176 if (config
->max_num_sta
!= DEFAULT_MAX_NUM_STA
)
1177 fprintf(f
, "max_num_sta=%u\n", config
->max_num_sta
);
1178 if (config
->disassoc_low_ack
)
1179 fprintf(f
, "disassoc_low_ack=%d\n", config
->disassoc_low_ack
);
1182 fprintf(f
, "hs20=1\n");
1183 #endif /* CONFIG_HS20 */
1184 #ifdef CONFIG_INTERWORKING
1185 if (config
->interworking
)
1186 fprintf(f
, "interworking=%d\n", config
->interworking
);
1187 if (!is_zero_ether_addr(config
->hessid
))
1188 fprintf(f
, "hessid=" MACSTR
"\n", MAC2STR(config
->hessid
));
1189 if (config
->access_network_type
!= DEFAULT_ACCESS_NETWORK_TYPE
)
1190 fprintf(f
, "access_network_type=%d\n",
1191 config
->access_network_type
);
1192 #endif /* CONFIG_INTERWORKING */
1193 if (config
->pbc_in_m1
)
1194 fprintf(f
, "pbc_in_m1=%d\n", config
->pbc_in_m1
);
1195 if (config
->wps_nfc_pw_from_config
) {
1196 if (config
->wps_nfc_dev_pw_id
)
1197 fprintf(f
, "wps_nfc_dev_pw_id=%d\n",
1198 config
->wps_nfc_dev_pw_id
);
1199 write_global_bin(f
, "wps_nfc_dh_pubkey",
1200 config
->wps_nfc_dh_pubkey
);
1201 write_global_bin(f
, "wps_nfc_dh_privkey",
1202 config
->wps_nfc_dh_privkey
);
1203 write_global_bin(f
, "wps_nfc_dev_pw", config
->wps_nfc_dev_pw
);
1206 if (config
->ext_password_backend
)
1207 fprintf(f
, "ext_password_backend=%s\n",
1208 config
->ext_password_backend
);
1209 if (config
->p2p_go_max_inactivity
!= DEFAULT_P2P_GO_MAX_INACTIVITY
)
1210 fprintf(f
, "p2p_go_max_inactivity=%d\n",
1211 config
->p2p_go_max_inactivity
);
1212 if (config
->auto_interworking
)
1213 fprintf(f
, "auto_interworking=%d\n",
1214 config
->auto_interworking
);
1216 fprintf(f
, "okc=%d\n", config
->okc
);
1218 fprintf(f
, "pmf=%d\n", config
->pmf
);
1219 if (config
->dtim_period
)
1220 fprintf(f
, "dtim_period=%d\n", config
->dtim_period
);
1221 if (config
->beacon_int
)
1222 fprintf(f
, "beacon_int=%d\n", config
->beacon_int
);
1224 if (config
->sae_groups
) {
1226 fprintf(f
, "sae_groups=");
1227 for (i
= 0; config
->sae_groups
[i
] >= 0; i
++) {
1228 fprintf(f
, "%s%d", i
> 0 ? " " : "",
1229 config
->sae_groups
[i
]);
1234 if (config
->ap_vendor_elements
) {
1235 int i
, len
= wpabuf_len(config
->ap_vendor_elements
);
1236 const u8
*p
= wpabuf_head_u8(config
->ap_vendor_elements
);
1238 fprintf(f
, "ap_vendor_elements=");
1239 for (i
= 0; i
< len
; i
++)
1240 fprintf(f
, "%02x", *p
++);
1245 if (config
->ignore_old_scan_res
)
1246 fprintf(f
, "ignore_old_scan_res=%d\n",
1247 config
->ignore_old_scan_res
);
1249 if (config
->freq_list
&& config
->freq_list
[0]) {
1251 fprintf(f
, "freq_list=");
1252 for (i
= 0; config
->freq_list
[i
]; i
++) {
1253 fprintf(f
, "%s%d", i
> 0 ? " " : "",
1254 config
->freq_list
[i
]);
1258 if (config
->scan_cur_freq
!= DEFAULT_SCAN_CUR_FREQ
)
1259 fprintf(f
, "scan_cur_freq=%d\n", config
->scan_cur_freq
);
1261 if (config
->sched_scan_interval
)
1262 fprintf(f
, "sched_scan_interval=%u\n",
1263 config
->sched_scan_interval
);
1265 if (config
->external_sim
)
1266 fprintf(f
, "external_sim=%d\n", config
->external_sim
);
1268 if (config
->tdls_external_control
)
1269 fprintf(f
, "tdls_external_control=%d\n",
1270 config
->tdls_external_control
);
1272 if (config
->wowlan_triggers
)
1273 fprintf(f
, "wowlan_triggers=%s\n",
1274 config
->wowlan_triggers
);
1277 fprintf(f
, "bgscan=\"%s\"\n", config
->bgscan
);
1279 if (config
->p2p_search_delay
!= DEFAULT_P2P_SEARCH_DELAY
)
1280 fprintf(f
, "p2p_search_delay=%u\n",
1281 config
->p2p_search_delay
);
1283 if (config
->mac_addr
)
1284 fprintf(f
, "mac_addr=%d\n", config
->mac_addr
);
1286 if (config
->rand_addr_lifetime
!= DEFAULT_RAND_ADDR_LIFETIME
)
1287 fprintf(f
, "rand_addr_lifetime=%u\n",
1288 config
->rand_addr_lifetime
);
1290 if (config
->preassoc_mac_addr
)
1291 fprintf(f
, "preassoc_mac_addr=%d\n", config
->preassoc_mac_addr
);
1293 if (config
->key_mgmt_offload
!= DEFAULT_KEY_MGMT_OFFLOAD
)
1294 fprintf(f
, "key_mgmt_offload=%d\n", config
->key_mgmt_offload
);
1296 if (config
->user_mpm
!= DEFAULT_USER_MPM
)
1297 fprintf(f
, "user_mpm=%d\n", config
->user_mpm
);
1299 if (config
->max_peer_links
!= DEFAULT_MAX_PEER_LINKS
)
1300 fprintf(f
, "max_peer_links=%d\n", config
->max_peer_links
);
1302 if (config
->cert_in_cb
!= DEFAULT_CERT_IN_CB
)
1303 fprintf(f
, "cert_in_cb=%d\n", config
->cert_in_cb
);
1305 if (config
->mesh_max_inactivity
!= DEFAULT_MESH_MAX_INACTIVITY
)
1306 fprintf(f
, "mesh_max_inactivity=%d\n",
1307 config
->mesh_max_inactivity
);
1309 if (config
->dot11RSNASAERetransPeriod
!=
1310 DEFAULT_DOT11_RSNA_SAE_RETRANS_PERIOD
)
1311 fprintf(f
, "dot11RSNASAERetransPeriod=%d\n",
1312 config
->dot11RSNASAERetransPeriod
);
1314 if (config
->passive_scan
)
1315 fprintf(f
, "passive_scan=%d\n", config
->passive_scan
);
1317 if (config
->reassoc_same_bss_optim
)
1318 fprintf(f
, "reassoc_same_bss_optim=%d\n",
1319 config
->reassoc_same_bss_optim
);
1321 if (config
->wps_priority
)
1322 fprintf(f
, "wps_priority=%d\n", config
->wps_priority
);
1324 if (config
->wpa_rsc_relaxation
!= DEFAULT_WPA_RSC_RELAXATION
)
1325 fprintf(f
, "wpa_rsc_relaxation=%d\n",
1326 config
->wpa_rsc_relaxation
);
1328 if (config
->sched_scan_plans
)
1329 fprintf(f
, "sched_scan_plans=%s\n", config
->sched_scan_plans
);
1332 if (config
->non_pref_chan
)
1333 fprintf(f
, "non_pref_chan=%s\n", config
->non_pref_chan
);
1334 #endif /* CONFIG_MBO */
1338 #endif /* CONFIG_NO_CONFIG_WRITE */
1341 int wpa_config_write(const char *name
, struct wpa_config
*config
)
1343 #ifndef CONFIG_NO_CONFIG_WRITE
1345 struct wpa_ssid
*ssid
;
1346 struct wpa_cred
*cred
;
1347 #ifndef CONFIG_NO_CONFIG_BLOBS
1348 struct wpa_config_blob
*blob
;
1349 #endif /* CONFIG_NO_CONFIG_BLOBS */
1351 const char *orig_name
= name
;
1352 int tmp_len
= os_strlen(name
) + 5; /* allow space for .tmp suffix */
1353 char *tmp_name
= os_malloc(tmp_len
);
1356 os_snprintf(tmp_name
, tmp_len
, "%s.tmp", name
);
1360 wpa_printf(MSG_DEBUG
, "Writing configuration file '%s'", name
);
1362 f
= fopen(name
, "w");
1364 wpa_printf(MSG_DEBUG
, "Failed to open '%s' for writing", name
);
1369 wpa_config_write_global(f
, config
);
1371 for (cred
= config
->cred
; cred
; cred
= cred
->next
) {
1372 if (cred
->temporary
)
1374 fprintf(f
, "\ncred={\n");
1375 wpa_config_write_cred(f
, cred
);
1379 for (ssid
= config
->ssid
; ssid
; ssid
= ssid
->next
) {
1380 if (ssid
->key_mgmt
== WPA_KEY_MGMT_WPS
|| ssid
->temporary
)
1381 continue; /* do not save temporary networks */
1382 if (wpa_key_mgmt_wpa_psk(ssid
->key_mgmt
) && !ssid
->psk_set
&&
1384 continue; /* do not save invalid network */
1385 fprintf(f
, "\nnetwork={\n");
1386 wpa_config_write_network(f
, ssid
);
1390 #ifndef CONFIG_NO_CONFIG_BLOBS
1391 for (blob
= config
->blobs
; blob
; blob
= blob
->next
) {
1392 ret
= wpa_config_write_blob(f
, blob
);
1396 #endif /* CONFIG_NO_CONFIG_BLOBS */
1406 chmod_ret
= chmod(tmp_name
,
1407 S_IRUSR
| S_IWUSR
| S_IRGRP
| S_IWGRP
);
1408 #endif /* ANDROID */
1409 if (chmod_ret
!= 0 || rename(tmp_name
, orig_name
) != 0)
1415 wpa_printf(MSG_DEBUG
, "Configuration file '%s' written %ssuccessfully",
1416 orig_name
, ret
? "un" : "");
1418 #else /* CONFIG_NO_CONFIG_WRITE */
1420 #endif /* CONFIG_NO_CONFIG_WRITE */