2 * WPA Supplicant / Configuration backend: text file
3 * Copyright (c) 2003-2012, Jouni Malinen <j@w1.fi>
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
8 * This file implements a configuration backend for text files. All the
9 * configuration information is stored in a text file that uses a format
10 * described in the sample configuration file, wpa_supplicant.conf.
23 #include "eap_peer/eap_methods.h"
24 #include "eap_peer/eap.h"
27 static int newline_terminated(const char *buf
, size_t buflen
)
29 size_t len
= os_strlen(buf
);
32 if (len
== buflen
- 1 && buf
[buflen
- 1] != '\r' &&
39 static void skip_line_end(FILE *stream
)
42 while (fgets(buf
, sizeof(buf
), stream
)) {
43 buf
[sizeof(buf
) - 1] = '\0';
44 if (newline_terminated(buf
, sizeof(buf
)))
51 * wpa_config_get_line - Read the next configuration file line
52 * @s: Buffer for the line
53 * @size: The buffer length
54 * @stream: File stream to read from
55 * @line: Pointer to a variable storing the file line number
56 * @_pos: Buffer for the pointer to the beginning of data on the text line or
57 * %NULL if not needed (returned value used instead)
58 * Returns: Pointer to the beginning of data on the text line or %NULL if no
59 * more text lines are available.
61 * This function reads the next non-empty line from the configuration file and
62 * removes comments. The returned string is guaranteed to be null-terminated.
64 static char * wpa_config_get_line(char *s
, int size
, FILE *stream
, int *line
,
67 char *pos
, *end
, *sstart
;
69 while (fgets(s
, size
, stream
)) {
72 if (!newline_terminated(s
, size
)) {
74 * The line was truncated - skip rest of it to avoid
75 * confusing error messages.
77 wpa_printf(MSG_INFO
, "Long line in configuration file "
79 skip_line_end(stream
);
83 /* Skip white space from the beginning of line. */
84 while (*pos
== ' ' || *pos
== '\t' || *pos
== '\r')
87 /* Skip comment lines and empty lines */
88 if (*pos
== '#' || *pos
== '\n' || *pos
== '\0')
92 * Remove # comments unless they are within a double quoted
95 sstart
= os_strchr(pos
, '"');
97 sstart
= os_strrchr(sstart
+ 1, '"');
100 end
= os_strchr(sstart
, '#');
104 end
= pos
+ os_strlen(pos
) - 1;
106 /* Remove trailing white space. */
108 (*end
== '\n' || *end
== ' ' || *end
== '\t' ||
126 static int wpa_config_validate_network(struct wpa_ssid
*ssid
, int line
)
130 if (ssid
->passphrase
) {
132 wpa_printf(MSG_ERROR
, "Line %d: both PSK and "
133 "passphrase configured.", line
);
136 wpa_config_update_psk(ssid
);
139 if ((ssid
->group_cipher
& WPA_CIPHER_CCMP
) &&
140 !(ssid
->pairwise_cipher
& WPA_CIPHER_CCMP
) &&
141 !(ssid
->pairwise_cipher
& WPA_CIPHER_NONE
)) {
142 /* Group cipher cannot be stronger than the pairwise cipher. */
143 wpa_printf(MSG_DEBUG
, "Line %d: removed CCMP from group cipher"
144 " list since it was not allowed for pairwise "
146 ssid
->group_cipher
&= ~WPA_CIPHER_CCMP
;
149 if (ssid
->mode
== WPAS_MODE_MESH
&&
150 (ssid
->key_mgmt
!= WPA_KEY_MGMT_NONE
&&
151 ssid
->key_mgmt
!= WPA_KEY_MGMT_SAE
)) {
152 wpa_printf(MSG_ERROR
,
153 "Line %d: key_mgmt for mesh network should be open or SAE",
162 static struct wpa_ssid
* wpa_config_read_network(FILE *f
, int *line
, int id
)
164 struct wpa_ssid
*ssid
;
165 int errors
= 0, end
= 0;
166 char buf
[2000], *pos
, *pos2
;
168 wpa_printf(MSG_MSGDUMP
, "Line: %d - start of a new network block",
170 ssid
= os_zalloc(sizeof(*ssid
));
173 dl_list_init(&ssid
->psk_list
);
176 wpa_config_set_network_defaults(ssid
);
178 while (wpa_config_get_line(buf
, sizeof(buf
), f
, line
, &pos
)) {
179 if (os_strcmp(pos
, "}") == 0) {
184 pos2
= os_strchr(pos
, '=');
186 wpa_printf(MSG_ERROR
, "Line %d: Invalid SSID line "
187 "'%s'.", *line
, pos
);
194 if (os_strchr(pos2
+ 1, '"') == NULL
) {
195 wpa_printf(MSG_ERROR
, "Line %d: invalid "
196 "quotation '%s'.", *line
, pos2
);
202 if (wpa_config_set(ssid
, pos
, pos2
, *line
) < 0)
207 wpa_printf(MSG_ERROR
, "Line %d: network block was not "
208 "terminated properly.", *line
);
212 errors
+= wpa_config_validate_network(ssid
, *line
);
215 wpa_config_free_ssid(ssid
);
223 static struct wpa_cred
* wpa_config_read_cred(FILE *f
, int *line
, int id
)
225 struct wpa_cred
*cred
;
226 int errors
= 0, end
= 0;
227 char buf
[256], *pos
, *pos2
;
229 wpa_printf(MSG_MSGDUMP
, "Line: %d - start of a new cred block", *line
);
230 cred
= os_zalloc(sizeof(*cred
));
234 cred
->sim_num
= DEFAULT_USER_SELECTED_SIM
;
236 while (wpa_config_get_line(buf
, sizeof(buf
), f
, line
, &pos
)) {
237 if (os_strcmp(pos
, "}") == 0) {
242 pos2
= os_strchr(pos
, '=');
244 wpa_printf(MSG_ERROR
, "Line %d: Invalid cred line "
245 "'%s'.", *line
, pos
);
252 if (os_strchr(pos2
+ 1, '"') == NULL
) {
253 wpa_printf(MSG_ERROR
, "Line %d: invalid "
254 "quotation '%s'.", *line
, pos2
);
260 if (wpa_config_set_cred(cred
, pos
, pos2
, *line
) < 0)
265 wpa_printf(MSG_ERROR
, "Line %d: cred block was not "
266 "terminated properly.", *line
);
271 wpa_config_free_cred(cred
);
279 #ifndef CONFIG_NO_CONFIG_BLOBS
280 static struct wpa_config_blob
* wpa_config_read_blob(FILE *f
, int *line
,
283 struct wpa_config_blob
*blob
;
285 unsigned char *encoded
= NULL
, *nencoded
;
287 size_t encoded_len
= 0, len
;
289 wpa_printf(MSG_MSGDUMP
, "Line: %d - start of a new named blob '%s'",
292 while (wpa_config_get_line(buf
, sizeof(buf
), f
, line
, &pos
)) {
293 if (os_strcmp(pos
, "}") == 0) {
298 len
= os_strlen(pos
);
299 nencoded
= os_realloc(encoded
, encoded_len
+ len
);
300 if (nencoded
== NULL
) {
301 wpa_printf(MSG_ERROR
, "Line %d: not enough memory for "
307 os_memcpy(encoded
+ encoded_len
, pos
, len
);
312 wpa_printf(MSG_ERROR
, "Line %d: blob was not terminated "
318 blob
= os_zalloc(sizeof(*blob
));
323 blob
->name
= os_strdup(name
);
324 blob
->data
= base64_decode(encoded
, encoded_len
, &blob
->len
);
327 if (blob
->name
== NULL
|| blob
->data
== NULL
) {
328 wpa_config_free_blob(blob
);
336 static int wpa_config_process_blob(struct wpa_config
*config
, FILE *f
,
337 int *line
, char *bname
)
340 struct wpa_config_blob
*blob
;
342 name_end
= os_strchr(bname
, '=');
343 if (name_end
== NULL
) {
344 wpa_printf(MSG_ERROR
, "Line %d: no blob name terminator",
350 blob
= wpa_config_read_blob(f
, line
, bname
);
352 wpa_printf(MSG_ERROR
, "Line %d: failed to read blob %s",
356 wpa_config_set_blob(config
, blob
);
359 #endif /* CONFIG_NO_CONFIG_BLOBS */
362 struct wpa_config
* wpa_config_read(const char *name
, struct wpa_config
*cfgp
)
366 int errors
= 0, line
= 0;
367 struct wpa_ssid
*ssid
, *tail
, *head
;
368 struct wpa_cred
*cred
, *cred_tail
, *cred_head
;
369 struct wpa_config
*config
;
378 config
= wpa_config_alloc_empty(NULL
, NULL
);
379 if (config
== NULL
) {
380 wpa_printf(MSG_ERROR
, "Failed to allocate config file "
384 tail
= head
= config
->ssid
;
385 while (tail
&& tail
->next
)
387 cred_tail
= cred_head
= config
->cred
;
388 while (cred_tail
&& cred_tail
->next
)
389 cred_tail
= cred_tail
->next
;
391 wpa_printf(MSG_DEBUG
, "Reading configuration file '%s'", name
);
392 f
= fopen(name
, "r");
394 wpa_printf(MSG_ERROR
, "Failed to open config file '%s', "
395 "error: %s", name
, strerror(errno
));
400 while (wpa_config_get_line(buf
, sizeof(buf
), f
, &line
, &pos
)) {
401 if (os_strcmp(pos
, "network={") == 0) {
402 ssid
= wpa_config_read_network(f
, &line
, id
++);
404 wpa_printf(MSG_ERROR
, "Line %d: failed to "
405 "parse network block.", line
);
415 if (wpa_config_add_prio_network(config
, ssid
)) {
416 wpa_printf(MSG_ERROR
, "Line %d: failed to add "
417 "network block to priority list.",
422 } else if (os_strcmp(pos
, "cred={") == 0) {
423 cred
= wpa_config_read_cred(f
, &line
, cred_id
++);
425 wpa_printf(MSG_ERROR
, "Line %d: failed to "
426 "parse cred block.", line
);
430 if (cred_head
== NULL
) {
431 cred_head
= cred_tail
= cred
;
433 cred_tail
->next
= cred
;
436 #ifndef CONFIG_NO_CONFIG_BLOBS
437 } else if (os_strncmp(pos
, "blob-base64-", 12) == 0) {
438 if (wpa_config_process_blob(config
, f
, &line
, pos
+ 12)
440 wpa_printf(MSG_ERROR
, "Line %d: failed to "
441 "process blob.", line
);
445 #endif /* CONFIG_NO_CONFIG_BLOBS */
446 } else if (wpa_config_process_global(config
, pos
, line
) < 0) {
447 wpa_printf(MSG_ERROR
, "Line %d: Invalid configuration "
448 "line '%s'.", line
, pos
);
457 wpa_config_debug_dump_networks(config
);
458 config
->cred
= cred_head
;
460 #ifndef WPA_IGNORE_CONFIG_ERRORS
462 wpa_config_free(config
);
466 #endif /* WPA_IGNORE_CONFIG_ERRORS */
472 #ifndef CONFIG_NO_CONFIG_WRITE
474 static void write_str(FILE *f
, const char *field
, struct wpa_ssid
*ssid
)
476 char *value
= wpa_config_get(ssid
, field
);
479 fprintf(f
, "\t%s=%s\n", field
, value
);
484 static void write_int(FILE *f
, const char *field
, int value
, int def
)
488 fprintf(f
, "\t%s=%d\n", field
, value
);
492 static void write_bssid(FILE *f
, struct wpa_ssid
*ssid
)
494 char *value
= wpa_config_get(ssid
, "bssid");
497 fprintf(f
, "\tbssid=%s\n", value
);
502 static void write_psk(FILE *f
, struct wpa_ssid
*ssid
)
506 if (ssid
->mem_only_psk
)
509 value
= wpa_config_get(ssid
, "psk");
512 fprintf(f
, "\tpsk=%s\n", value
);
517 static void write_proto(FILE *f
, struct wpa_ssid
*ssid
)
521 if (ssid
->proto
== DEFAULT_PROTO
)
524 value
= wpa_config_get(ssid
, "proto");
528 fprintf(f
, "\tproto=%s\n", value
);
533 static void write_key_mgmt(FILE *f
, struct wpa_ssid
*ssid
)
537 if (ssid
->key_mgmt
== DEFAULT_KEY_MGMT
)
540 value
= wpa_config_get(ssid
, "key_mgmt");
544 fprintf(f
, "\tkey_mgmt=%s\n", value
);
549 static void write_pairwise(FILE *f
, struct wpa_ssid
*ssid
)
553 if (ssid
->pairwise_cipher
== DEFAULT_PAIRWISE
)
556 value
= wpa_config_get(ssid
, "pairwise");
560 fprintf(f
, "\tpairwise=%s\n", value
);
565 static void write_group(FILE *f
, struct wpa_ssid
*ssid
)
569 if (ssid
->group_cipher
== DEFAULT_GROUP
)
572 value
= wpa_config_get(ssid
, "group");
576 fprintf(f
, "\tgroup=%s\n", value
);
581 static void write_auth_alg(FILE *f
, struct wpa_ssid
*ssid
)
585 if (ssid
->auth_alg
== 0)
588 value
= wpa_config_get(ssid
, "auth_alg");
592 fprintf(f
, "\tauth_alg=%s\n", value
);
597 #ifdef IEEE8021X_EAPOL
598 static void write_eap(FILE *f
, struct wpa_ssid
*ssid
)
602 value
= wpa_config_get(ssid
, "eap");
607 fprintf(f
, "\teap=%s\n", value
);
610 #endif /* IEEE8021X_EAPOL */
613 static void write_wep_key(FILE *f
, int idx
, struct wpa_ssid
*ssid
)
615 char field
[20], *value
;
618 res
= os_snprintf(field
, sizeof(field
), "wep_key%d", idx
);
619 if (os_snprintf_error(sizeof(field
), res
))
621 value
= wpa_config_get(ssid
, field
);
623 fprintf(f
, "\t%s=%s\n", field
, value
);
631 static void write_go_p2p_dev_addr(FILE *f
, struct wpa_ssid
*ssid
)
633 char *value
= wpa_config_get(ssid
, "go_p2p_dev_addr");
636 fprintf(f
, "\tgo_p2p_dev_addr=%s\n", value
);
640 static void write_p2p_client_list(FILE *f
, struct wpa_ssid
*ssid
)
642 char *value
= wpa_config_get(ssid
, "p2p_client_list");
645 fprintf(f
, "\tp2p_client_list=%s\n", value
);
650 static void write_psk_list(FILE *f
, struct wpa_ssid
*ssid
)
652 struct psk_list_entry
*psk
;
653 char hex
[32 * 2 + 1];
655 dl_list_for_each(psk
, &ssid
->psk_list
, struct psk_list_entry
, list
) {
656 wpa_snprintf_hex(hex
, sizeof(hex
), psk
->psk
, sizeof(psk
->psk
));
657 fprintf(f
, "\tpsk_list=%s" MACSTR
"-%s\n",
658 psk
->p2p
? "P2P-" : "", MAC2STR(psk
->addr
), hex
);
662 #endif /* CONFIG_P2P */
665 static void wpa_config_write_network(FILE *f
, struct wpa_ssid
*ssid
)
669 #define STR(t) write_str(f, #t, ssid)
670 #define INT(t) write_int(f, #t, ssid->t, 0)
671 #define INTe(t) write_int(f, #t, ssid->eap.t, 0)
672 #define INT_DEF(t, def) write_int(f, #t, ssid->t, def)
673 #define INT_DEFe(t, def) write_int(f, #t, ssid->eap.t, def)
677 write_bssid(f
, ssid
);
678 write_str(f
, "bssid_blacklist", ssid
);
679 write_str(f
, "bssid_whitelist", ssid
);
682 write_proto(f
, ssid
);
683 write_key_mgmt(f
, ssid
);
684 INT_DEF(bg_scan_period
, DEFAULT_BG_SCAN_PERIOD
);
685 write_pairwise(f
, ssid
);
686 write_group(f
, ssid
);
687 write_auth_alg(f
, ssid
);
691 #ifdef IEEE8021X_EAPOL
694 STR(anonymous_identity
);
700 STR(private_key_passwd
);
703 STR(altsubject_match
);
704 STR(domain_suffix_match
);
710 STR(private_key2_passwd
);
713 STR(altsubject_match2
);
714 STR(domain_suffix_match2
);
731 INT_DEF(eapol_flags
, DEFAULT_EAPOL_FLAGS
);
732 STR(openssl_ciphers
);
734 #endif /* IEEE8021X_EAPOL */
735 for (i
= 0; i
< 4; i
++)
736 write_wep_key(f
, i
, ssid
);
739 #ifdef IEEE8021X_EAPOL
740 INT_DEF(eap_workaround
, DEFAULT_EAP_WORKAROUND
);
742 INT_DEFe(fragment_size
, DEFAULT_FRAGMENT_SIZE
);
744 INT_DEFe(sim_num
, DEFAULT_USER_SELECTED_SIM
);
745 #endif /* IEEE8021X_EAPOL */
750 write_int(f
, "proactive_key_caching", ssid
->proactive_key_caching
, -1);
754 #ifdef CONFIG_IEEE80211W
755 write_int(f
, "ieee80211w", ssid
->ieee80211w
,
756 MGMT_FRAME_PROTECTION_DEFAULT
);
757 #endif /* CONFIG_IEEE80211W */
760 write_go_p2p_dev_addr(f
, ssid
);
761 write_p2p_client_list(f
, ssid
);
762 write_psk_list(f
, ssid
);
763 #endif /* CONFIG_P2P */
764 INT(ap_max_inactivity
);
769 #endif /* CONFIG_MACSEC */
771 INT(update_identifier
);
772 #endif /* CONFIG_HS20 */
773 write_int(f
, "mac_addr", ssid
->mac_addr
, -1);
775 STR(mesh_basic_rates
);
776 INT_DEF(dot11MeshMaxRetries
, DEFAULT_MESH_MAX_RETRIES
);
777 INT_DEF(dot11MeshRetryTimeout
, DEFAULT_MESH_RETRY_TIMEOUT
);
778 INT_DEF(dot11MeshConfirmTimeout
, DEFAULT_MESH_CONFIRM_TIMEOUT
);
779 INT_DEF(dot11MeshHoldingTimeout
, DEFAULT_MESH_HOLDING_TIMEOUT
);
780 #endif /* CONFIG_MESH */
782 INT(ignore_broadcast_ssid
);
783 #ifdef CONFIG_HT_OVERRIDES
784 INT_DEF(disable_ht
, DEFAULT_DISABLE_HT
);
785 INT_DEF(disable_ht40
, DEFAULT_DISABLE_HT40
);
786 INT_DEF(disable_sgi
, DEFAULT_DISABLE_SGI
);
787 INT_DEF(disable_ldpc
, DEFAULT_DISABLE_LDPC
);
788 INT(ht40_intolerant
);
789 INT_DEF(disable_max_amsdu
, DEFAULT_DISABLE_MAX_AMSDU
);
790 INT_DEF(ampdu_factor
, DEFAULT_AMPDU_FACTOR
);
791 INT_DEF(ampdu_density
, DEFAULT_AMPDU_DENSITY
);
793 #endif /* CONFIG_HT_OVERRIDES */
794 #ifdef CONFIG_VHT_OVERRIDES
798 INT_DEF(vht_rx_mcs_nss_1
, -1);
799 INT_DEF(vht_rx_mcs_nss_2
, -1);
800 INT_DEF(vht_rx_mcs_nss_3
, -1);
801 INT_DEF(vht_rx_mcs_nss_4
, -1);
802 INT_DEF(vht_rx_mcs_nss_5
, -1);
803 INT_DEF(vht_rx_mcs_nss_6
, -1);
804 INT_DEF(vht_rx_mcs_nss_7
, -1);
805 INT_DEF(vht_rx_mcs_nss_8
, -1);
806 INT_DEF(vht_tx_mcs_nss_1
, -1);
807 INT_DEF(vht_tx_mcs_nss_2
, -1);
808 INT_DEF(vht_tx_mcs_nss_3
, -1);
809 INT_DEF(vht_tx_mcs_nss_4
, -1);
810 INT_DEF(vht_tx_mcs_nss_5
, -1);
811 INT_DEF(vht_tx_mcs_nss_6
, -1);
812 INT_DEF(vht_tx_mcs_nss_7
, -1);
813 INT_DEF(vht_tx_mcs_nss_8
, -1);
814 #endif /* CONFIG_VHT_OVERRIDES */
822 static void wpa_config_write_cred(FILE *f
, struct wpa_cred
*cred
)
827 fprintf(f
, "\tpriority=%d\n", cred
->priority
);
829 fprintf(f
, "\tpcsc=%d\n", cred
->pcsc
);
831 fprintf(f
, "\trealm=\"%s\"\n", cred
->realm
);
833 fprintf(f
, "\tusername=\"%s\"\n", cred
->username
);
834 if (cred
->password
&& cred
->ext_password
)
835 fprintf(f
, "\tpassword=ext:%s\n", cred
->password
);
836 else if (cred
->password
)
837 fprintf(f
, "\tpassword=\"%s\"\n", cred
->password
);
839 fprintf(f
, "\tca_cert=\"%s\"\n", cred
->ca_cert
);
840 if (cred
->client_cert
)
841 fprintf(f
, "\tclient_cert=\"%s\"\n", cred
->client_cert
);
842 if (cred
->private_key
)
843 fprintf(f
, "\tprivate_key=\"%s\"\n", cred
->private_key
);
844 if (cred
->private_key_passwd
)
845 fprintf(f
, "\tprivate_key_passwd=\"%s\"\n",
846 cred
->private_key_passwd
);
848 fprintf(f
, "\timsi=\"%s\"\n", cred
->imsi
);
850 fprintf(f
, "\tmilenage=\"%s\"\n", cred
->milenage
);
851 for (i
= 0; i
< cred
->num_domain
; i
++)
852 fprintf(f
, "\tdomain=\"%s\"\n", cred
->domain
[i
]);
853 if (cred
->domain_suffix_match
)
854 fprintf(f
, "\tdomain_suffix_match=\"%s\"\n",
855 cred
->domain_suffix_match
);
856 if (cred
->roaming_consortium_len
) {
857 fprintf(f
, "\troaming_consortium=");
858 for (i
= 0; i
< cred
->roaming_consortium_len
; i
++)
859 fprintf(f
, "%02x", cred
->roaming_consortium
[i
]);
862 if (cred
->eap_method
) {
864 name
= eap_get_name(cred
->eap_method
[0].vendor
,
865 cred
->eap_method
[0].method
);
867 fprintf(f
, "\teap=%s\n", name
);
870 fprintf(f
, "\tphase1=\"%s\"\n", cred
->phase1
);
872 fprintf(f
, "\tphase2=\"%s\"\n", cred
->phase2
);
873 if (cred
->excluded_ssid
) {
875 for (i
= 0; i
< cred
->num_excluded_ssid
; i
++) {
876 struct excluded_ssid
*e
= &cred
->excluded_ssid
[i
];
877 fprintf(f
, "\texcluded_ssid=");
878 for (j
= 0; j
< e
->ssid_len
; j
++)
879 fprintf(f
, "%02x", e
->ssid
[j
]);
883 if (cred
->roaming_partner
) {
884 for (i
= 0; i
< cred
->num_roaming_partner
; i
++) {
885 struct roaming_partner
*p
= &cred
->roaming_partner
[i
];
886 fprintf(f
, "\troaming_partner=\"%s,%d,%u,%s\"\n",
887 p
->fqdn
, p
->exact_match
, p
->priority
,
891 if (cred
->update_identifier
)
892 fprintf(f
, "\tupdate_identifier=%d\n", cred
->update_identifier
);
894 if (cred
->provisioning_sp
)
895 fprintf(f
, "\tprovisioning_sp=\"%s\"\n", cred
->provisioning_sp
);
896 if (cred
->sp_priority
)
897 fprintf(f
, "\tsp_priority=%d\n", cred
->sp_priority
);
899 if (cred
->min_dl_bandwidth_home
)
900 fprintf(f
, "\tmin_dl_bandwidth_home=%u\n",
901 cred
->min_dl_bandwidth_home
);
902 if (cred
->min_ul_bandwidth_home
)
903 fprintf(f
, "\tmin_ul_bandwidth_home=%u\n",
904 cred
->min_ul_bandwidth_home
);
905 if (cred
->min_dl_bandwidth_roaming
)
906 fprintf(f
, "\tmin_dl_bandwidth_roaming=%u\n",
907 cred
->min_dl_bandwidth_roaming
);
908 if (cred
->min_ul_bandwidth_roaming
)
909 fprintf(f
, "\tmin_ul_bandwidth_roaming=%u\n",
910 cred
->min_ul_bandwidth_roaming
);
912 if (cred
->max_bss_load
)
913 fprintf(f
, "\tmax_bss_load=%u\n",
917 fprintf(f
, "\tocsp=%d\n", cred
->ocsp
);
919 if (cred
->num_req_conn_capab
) {
920 for (i
= 0; i
< cred
->num_req_conn_capab
; i
++) {
923 fprintf(f
, "\treq_conn_capab=%u",
924 cred
->req_conn_capab_proto
[i
]);
925 ports
= cred
->req_conn_capab_port
[i
];
928 for (j
= 0; ports
[j
] != -1; j
++) {
929 fprintf(f
, "%s%d", j
> 0 ? "," : ":",
937 if (cred
->required_roaming_consortium_len
) {
938 fprintf(f
, "\trequired_roaming_consortium=");
939 for (i
= 0; i
< cred
->required_roaming_consortium_len
; i
++)
941 cred
->required_roaming_consortium
[i
]);
945 if (cred
->sim_num
!= DEFAULT_USER_SELECTED_SIM
)
946 fprintf(f
, "\tsim_num=%d\n", cred
->sim_num
);
950 #ifndef CONFIG_NO_CONFIG_BLOBS
951 static int wpa_config_write_blob(FILE *f
, struct wpa_config_blob
*blob
)
953 unsigned char *encoded
;
955 encoded
= base64_encode(blob
->data
, blob
->len
, NULL
);
959 fprintf(f
, "\nblob-base64-%s={\n%s}\n", blob
->name
, encoded
);
963 #endif /* CONFIG_NO_CONFIG_BLOBS */
966 static void write_global_bin(FILE *f
, const char *field
,
967 const struct wpabuf
*val
)
975 fprintf(f
, "%s=", field
);
976 pos
= wpabuf_head(val
);
977 for (i
= 0; i
< wpabuf_len(val
); i
++)
978 fprintf(f
, "%02X", *pos
++);
983 static void wpa_config_write_global(FILE *f
, struct wpa_config
*config
)
985 #ifdef CONFIG_CTRL_IFACE
986 if (config
->ctrl_interface
)
987 fprintf(f
, "ctrl_interface=%s\n", config
->ctrl_interface
);
988 if (config
->ctrl_interface_group
)
989 fprintf(f
, "ctrl_interface_group=%s\n",
990 config
->ctrl_interface_group
);
991 #endif /* CONFIG_CTRL_IFACE */
992 if (config
->eapol_version
!= DEFAULT_EAPOL_VERSION
)
993 fprintf(f
, "eapol_version=%d\n", config
->eapol_version
);
994 if (config
->ap_scan
!= DEFAULT_AP_SCAN
)
995 fprintf(f
, "ap_scan=%d\n", config
->ap_scan
);
996 if (config
->disable_scan_offload
)
997 fprintf(f
, "disable_scan_offload=%d\n",
998 config
->disable_scan_offload
);
999 if (config
->fast_reauth
!= DEFAULT_FAST_REAUTH
)
1000 fprintf(f
, "fast_reauth=%d\n", config
->fast_reauth
);
1001 if (config
->opensc_engine_path
)
1002 fprintf(f
, "opensc_engine_path=%s\n",
1003 config
->opensc_engine_path
);
1004 if (config
->pkcs11_engine_path
)
1005 fprintf(f
, "pkcs11_engine_path=%s\n",
1006 config
->pkcs11_engine_path
);
1007 if (config
->pkcs11_module_path
)
1008 fprintf(f
, "pkcs11_module_path=%s\n",
1009 config
->pkcs11_module_path
);
1010 if (config
->openssl_ciphers
)
1011 fprintf(f
, "openssl_ciphers=%s\n", config
->openssl_ciphers
);
1012 if (config
->pcsc_reader
)
1013 fprintf(f
, "pcsc_reader=%s\n", config
->pcsc_reader
);
1014 if (config
->pcsc_pin
)
1015 fprintf(f
, "pcsc_pin=%s\n", config
->pcsc_pin
);
1016 if (config
->driver_param
)
1017 fprintf(f
, "driver_param=%s\n", config
->driver_param
);
1018 if (config
->dot11RSNAConfigPMKLifetime
)
1019 fprintf(f
, "dot11RSNAConfigPMKLifetime=%u\n",
1020 config
->dot11RSNAConfigPMKLifetime
);
1021 if (config
->dot11RSNAConfigPMKReauthThreshold
)
1022 fprintf(f
, "dot11RSNAConfigPMKReauthThreshold=%u\n",
1023 config
->dot11RSNAConfigPMKReauthThreshold
);
1024 if (config
->dot11RSNAConfigSATimeout
)
1025 fprintf(f
, "dot11RSNAConfigSATimeout=%u\n",
1026 config
->dot11RSNAConfigSATimeout
);
1027 if (config
->update_config
)
1028 fprintf(f
, "update_config=%d\n", config
->update_config
);
1030 if (!is_nil_uuid(config
->uuid
)) {
1032 uuid_bin2str(config
->uuid
, buf
, sizeof(buf
));
1033 fprintf(f
, "uuid=%s\n", buf
);
1035 if (config
->device_name
)
1036 fprintf(f
, "device_name=%s\n", config
->device_name
);
1037 if (config
->manufacturer
)
1038 fprintf(f
, "manufacturer=%s\n", config
->manufacturer
);
1039 if (config
->model_name
)
1040 fprintf(f
, "model_name=%s\n", config
->model_name
);
1041 if (config
->model_number
)
1042 fprintf(f
, "model_number=%s\n", config
->model_number
);
1043 if (config
->serial_number
)
1044 fprintf(f
, "serial_number=%s\n", config
->serial_number
);
1046 char _buf
[WPS_DEV_TYPE_BUFSIZE
], *buf
;
1047 buf
= wps_dev_type_bin2str(config
->device_type
,
1048 _buf
, sizeof(_buf
));
1049 if (os_strcmp(buf
, "0-00000000-0") != 0)
1050 fprintf(f
, "device_type=%s\n", buf
);
1052 if (WPA_GET_BE32(config
->os_version
))
1053 fprintf(f
, "os_version=%08x\n",
1054 WPA_GET_BE32(config
->os_version
));
1055 if (config
->config_methods
)
1056 fprintf(f
, "config_methods=%s\n", config
->config_methods
);
1057 if (config
->wps_cred_processing
)
1058 fprintf(f
, "wps_cred_processing=%d\n",
1059 config
->wps_cred_processing
);
1060 if (config
->wps_vendor_ext_m1
) {
1061 int i
, len
= wpabuf_len(config
->wps_vendor_ext_m1
);
1062 const u8
*p
= wpabuf_head_u8(config
->wps_vendor_ext_m1
);
1064 fprintf(f
, "wps_vendor_ext_m1=");
1065 for (i
= 0; i
< len
; i
++)
1066 fprintf(f
, "%02x", *p
++);
1070 #endif /* CONFIG_WPS */
1072 if (config
->p2p_listen_reg_class
)
1073 fprintf(f
, "p2p_listen_reg_class=%d\n",
1074 config
->p2p_listen_reg_class
);
1075 if (config
->p2p_listen_channel
)
1076 fprintf(f
, "p2p_listen_channel=%d\n",
1077 config
->p2p_listen_channel
);
1078 if (config
->p2p_oper_reg_class
)
1079 fprintf(f
, "p2p_oper_reg_class=%d\n",
1080 config
->p2p_oper_reg_class
);
1081 if (config
->p2p_oper_channel
)
1082 fprintf(f
, "p2p_oper_channel=%d\n", config
->p2p_oper_channel
);
1083 if (config
->p2p_go_intent
!= DEFAULT_P2P_GO_INTENT
)
1084 fprintf(f
, "p2p_go_intent=%d\n", config
->p2p_go_intent
);
1085 if (config
->p2p_ssid_postfix
)
1086 fprintf(f
, "p2p_ssid_postfix=%s\n", config
->p2p_ssid_postfix
);
1087 if (config
->persistent_reconnect
)
1088 fprintf(f
, "persistent_reconnect=%d\n",
1089 config
->persistent_reconnect
);
1090 if (config
->p2p_intra_bss
!= DEFAULT_P2P_INTRA_BSS
)
1091 fprintf(f
, "p2p_intra_bss=%d\n", config
->p2p_intra_bss
);
1092 if (config
->p2p_group_idle
)
1093 fprintf(f
, "p2p_group_idle=%d\n", config
->p2p_group_idle
);
1094 if (config
->p2p_passphrase_len
)
1095 fprintf(f
, "p2p_passphrase_len=%u\n",
1096 config
->p2p_passphrase_len
);
1097 if (config
->p2p_pref_chan
) {
1099 fprintf(f
, "p2p_pref_chan=");
1100 for (i
= 0; i
< config
->num_p2p_pref_chan
; i
++) {
1101 fprintf(f
, "%s%u:%u", i
> 0 ? "," : "",
1102 config
->p2p_pref_chan
[i
].op_class
,
1103 config
->p2p_pref_chan
[i
].chan
);
1107 if (config
->p2p_no_go_freq
.num
) {
1108 char *val
= freq_range_list_str(&config
->p2p_no_go_freq
);
1110 fprintf(f
, "p2p_no_go_freq=%s\n", val
);
1114 if (config
->p2p_add_cli_chan
)
1115 fprintf(f
, "p2p_add_cli_chan=%d\n", config
->p2p_add_cli_chan
);
1116 if (config
->p2p_optimize_listen_chan
!=
1117 DEFAULT_P2P_OPTIMIZE_LISTEN_CHAN
)
1118 fprintf(f
, "p2p_optimize_listen_chan=%d\n",
1119 config
->p2p_optimize_listen_chan
);
1120 if (config
->p2p_go_ht40
)
1121 fprintf(f
, "p2p_go_ht40=%d\n", config
->p2p_go_ht40
);
1122 if (config
->p2p_go_vht
)
1123 fprintf(f
, "p2p_go_vht=%d\n", config
->p2p_go_vht
);
1124 if (config
->p2p_go_ctwindow
!= DEFAULT_P2P_GO_CTWINDOW
)
1125 fprintf(f
, "p2p_go_ctwindow=%d\n", config
->p2p_go_ctwindow
);
1126 if (config
->p2p_disabled
)
1127 fprintf(f
, "p2p_disabled=%d\n", config
->p2p_disabled
);
1128 if (config
->p2p_no_group_iface
)
1129 fprintf(f
, "p2p_no_group_iface=%d\n",
1130 config
->p2p_no_group_iface
);
1131 if (config
->p2p_ignore_shared_freq
)
1132 fprintf(f
, "p2p_ignore_shared_freq=%d\n",
1133 config
->p2p_ignore_shared_freq
);
1134 if (config
->p2p_cli_probe
)
1135 fprintf(f
, "p2p_cli_probe=%d\n", config
->p2p_cli_probe
);
1136 if (config
->p2p_go_freq_change_policy
!= DEFAULT_P2P_GO_FREQ_MOVE
)
1137 fprintf(f
, "p2p_go_freq_change_policy=%u\n",
1138 config
->p2p_go_freq_change_policy
);
1139 #endif /* CONFIG_P2P */
1140 if (config
->country
[0] && config
->country
[1]) {
1141 fprintf(f
, "country=%c%c\n",
1142 config
->country
[0], config
->country
[1]);
1144 if (config
->bss_max_count
!= DEFAULT_BSS_MAX_COUNT
)
1145 fprintf(f
, "bss_max_count=%u\n", config
->bss_max_count
);
1146 if (config
->bss_expiration_age
!= DEFAULT_BSS_EXPIRATION_AGE
)
1147 fprintf(f
, "bss_expiration_age=%u\n",
1148 config
->bss_expiration_age
);
1149 if (config
->bss_expiration_scan_count
!=
1150 DEFAULT_BSS_EXPIRATION_SCAN_COUNT
)
1151 fprintf(f
, "bss_expiration_scan_count=%u\n",
1152 config
->bss_expiration_scan_count
);
1153 if (config
->filter_ssids
)
1154 fprintf(f
, "filter_ssids=%d\n", config
->filter_ssids
);
1155 if (config
->max_num_sta
!= DEFAULT_MAX_NUM_STA
)
1156 fprintf(f
, "max_num_sta=%u\n", config
->max_num_sta
);
1157 if (config
->disassoc_low_ack
)
1158 fprintf(f
, "disassoc_low_ack=%d\n", config
->disassoc_low_ack
);
1161 fprintf(f
, "hs20=1\n");
1162 #endif /* CONFIG_HS20 */
1163 #ifdef CONFIG_INTERWORKING
1164 if (config
->interworking
)
1165 fprintf(f
, "interworking=%d\n", config
->interworking
);
1166 if (!is_zero_ether_addr(config
->hessid
))
1167 fprintf(f
, "hessid=" MACSTR
"\n", MAC2STR(config
->hessid
));
1168 if (config
->access_network_type
!= DEFAULT_ACCESS_NETWORK_TYPE
)
1169 fprintf(f
, "access_network_type=%d\n",
1170 config
->access_network_type
);
1171 #endif /* CONFIG_INTERWORKING */
1172 if (config
->pbc_in_m1
)
1173 fprintf(f
, "pbc_in_m1=%d\n", config
->pbc_in_m1
);
1174 if (config
->wps_nfc_pw_from_config
) {
1175 if (config
->wps_nfc_dev_pw_id
)
1176 fprintf(f
, "wps_nfc_dev_pw_id=%d\n",
1177 config
->wps_nfc_dev_pw_id
);
1178 write_global_bin(f
, "wps_nfc_dh_pubkey",
1179 config
->wps_nfc_dh_pubkey
);
1180 write_global_bin(f
, "wps_nfc_dh_privkey",
1181 config
->wps_nfc_dh_privkey
);
1182 write_global_bin(f
, "wps_nfc_dev_pw", config
->wps_nfc_dev_pw
);
1185 if (config
->ext_password_backend
)
1186 fprintf(f
, "ext_password_backend=%s\n",
1187 config
->ext_password_backend
);
1188 if (config
->p2p_go_max_inactivity
!= DEFAULT_P2P_GO_MAX_INACTIVITY
)
1189 fprintf(f
, "p2p_go_max_inactivity=%d\n",
1190 config
->p2p_go_max_inactivity
);
1191 if (config
->auto_interworking
)
1192 fprintf(f
, "auto_interworking=%d\n",
1193 config
->auto_interworking
);
1195 fprintf(f
, "okc=%d\n", config
->okc
);
1197 fprintf(f
, "pmf=%d\n", config
->pmf
);
1198 if (config
->dtim_period
)
1199 fprintf(f
, "dtim_period=%d\n", config
->dtim_period
);
1200 if (config
->beacon_int
)
1201 fprintf(f
, "beacon_int=%d\n", config
->beacon_int
);
1203 if (config
->sae_groups
) {
1205 fprintf(f
, "sae_groups=");
1206 for (i
= 0; config
->sae_groups
[i
] >= 0; i
++) {
1207 fprintf(f
, "%s%d", i
> 0 ? " " : "",
1208 config
->sae_groups
[i
]);
1213 if (config
->ap_vendor_elements
) {
1214 int i
, len
= wpabuf_len(config
->ap_vendor_elements
);
1215 const u8
*p
= wpabuf_head_u8(config
->ap_vendor_elements
);
1217 fprintf(f
, "ap_vendor_elements=");
1218 for (i
= 0; i
< len
; i
++)
1219 fprintf(f
, "%02x", *p
++);
1224 if (config
->ignore_old_scan_res
)
1225 fprintf(f
, "ignore_old_scan_res=%d\n",
1226 config
->ignore_old_scan_res
);
1228 if (config
->freq_list
&& config
->freq_list
[0]) {
1230 fprintf(f
, "freq_list=");
1231 for (i
= 0; config
->freq_list
[i
]; i
++) {
1232 fprintf(f
, "%s%d", i
> 0 ? " " : "",
1233 config
->freq_list
[i
]);
1237 if (config
->scan_cur_freq
!= DEFAULT_SCAN_CUR_FREQ
)
1238 fprintf(f
, "scan_cur_freq=%d\n", config
->scan_cur_freq
);
1240 if (config
->sched_scan_interval
)
1241 fprintf(f
, "sched_scan_interval=%u\n",
1242 config
->sched_scan_interval
);
1244 if (config
->external_sim
)
1245 fprintf(f
, "external_sim=%d\n", config
->external_sim
);
1247 if (config
->tdls_external_control
)
1248 fprintf(f
, "tdls_external_control=%d\n",
1249 config
->tdls_external_control
);
1251 if (config
->wowlan_triggers
)
1252 fprintf(f
, "wowlan_triggers=%s\n",
1253 config
->wowlan_triggers
);
1256 fprintf(f
, "bgscan=\"%s\"\n", config
->bgscan
);
1258 if (config
->p2p_search_delay
!= DEFAULT_P2P_SEARCH_DELAY
)
1259 fprintf(f
, "p2p_search_delay=%u\n",
1260 config
->p2p_search_delay
);
1262 if (config
->mac_addr
)
1263 fprintf(f
, "mac_addr=%d\n", config
->mac_addr
);
1265 if (config
->rand_addr_lifetime
!= DEFAULT_RAND_ADDR_LIFETIME
)
1266 fprintf(f
, "rand_addr_lifetime=%u\n",
1267 config
->rand_addr_lifetime
);
1269 if (config
->preassoc_mac_addr
)
1270 fprintf(f
, "preassoc_mac_addr=%d\n", config
->preassoc_mac_addr
);
1272 if (config
->key_mgmt_offload
!= DEFAULT_KEY_MGMT_OFFLOAD
)
1273 fprintf(f
, "key_mgmt_offload=%d\n", config
->key_mgmt_offload
);
1275 if (config
->user_mpm
!= DEFAULT_USER_MPM
)
1276 fprintf(f
, "user_mpm=%d\n", config
->user_mpm
);
1278 if (config
->max_peer_links
!= DEFAULT_MAX_PEER_LINKS
)
1279 fprintf(f
, "max_peer_links=%d\n", config
->max_peer_links
);
1281 if (config
->cert_in_cb
!= DEFAULT_CERT_IN_CB
)
1282 fprintf(f
, "cert_in_cb=%d\n", config
->cert_in_cb
);
1284 if (config
->mesh_max_inactivity
!= DEFAULT_MESH_MAX_INACTIVITY
)
1285 fprintf(f
, "mesh_max_inactivity=%d\n",
1286 config
->mesh_max_inactivity
);
1288 if (config
->dot11RSNASAERetransPeriod
!=
1289 DEFAULT_DOT11_RSNA_SAE_RETRANS_PERIOD
)
1290 fprintf(f
, "dot11RSNASAERetransPeriod=%d\n",
1291 config
->dot11RSNASAERetransPeriod
);
1293 if (config
->passive_scan
)
1294 fprintf(f
, "passive_scan=%d\n", config
->passive_scan
);
1296 if (config
->reassoc_same_bss_optim
)
1297 fprintf(f
, "reassoc_same_bss_optim=%d\n",
1298 config
->reassoc_same_bss_optim
);
1300 if (config
->wps_priority
)
1301 fprintf(f
, "wps_priority=%d\n", config
->wps_priority
);
1304 #endif /* CONFIG_NO_CONFIG_WRITE */
1307 int wpa_config_write(const char *name
, struct wpa_config
*config
)
1309 #ifndef CONFIG_NO_CONFIG_WRITE
1311 struct wpa_ssid
*ssid
;
1312 struct wpa_cred
*cred
;
1313 #ifndef CONFIG_NO_CONFIG_BLOBS
1314 struct wpa_config_blob
*blob
;
1315 #endif /* CONFIG_NO_CONFIG_BLOBS */
1317 const char *orig_name
= name
;
1318 int tmp_len
= os_strlen(name
) + 5; /* allow space for .tmp suffix */
1319 char *tmp_name
= os_malloc(tmp_len
);
1322 os_snprintf(tmp_name
, tmp_len
, "%s.tmp", name
);
1326 wpa_printf(MSG_DEBUG
, "Writing configuration file '%s'", name
);
1328 f
= fopen(name
, "w");
1330 wpa_printf(MSG_DEBUG
, "Failed to open '%s' for writing", name
);
1335 wpa_config_write_global(f
, config
);
1337 for (cred
= config
->cred
; cred
; cred
= cred
->next
) {
1338 if (cred
->temporary
)
1340 fprintf(f
, "\ncred={\n");
1341 wpa_config_write_cred(f
, cred
);
1345 for (ssid
= config
->ssid
; ssid
; ssid
= ssid
->next
) {
1346 if (ssid
->key_mgmt
== WPA_KEY_MGMT_WPS
|| ssid
->temporary
)
1347 continue; /* do not save temporary networks */
1348 if (wpa_key_mgmt_wpa_psk(ssid
->key_mgmt
) && !ssid
->psk_set
&&
1350 continue; /* do not save invalid network */
1351 fprintf(f
, "\nnetwork={\n");
1352 wpa_config_write_network(f
, ssid
);
1356 #ifndef CONFIG_NO_CONFIG_BLOBS
1357 for (blob
= config
->blobs
; blob
; blob
= blob
->next
) {
1358 ret
= wpa_config_write_blob(f
, blob
);
1362 #endif /* CONFIG_NO_CONFIG_BLOBS */
1370 chmod_ret
= chmod(tmp_name
,
1371 S_IRUSR
| S_IWUSR
| S_IRGRP
| S_IWGRP
);
1372 #endif /* ANDROID */
1373 if (chmod_ret
!= 0 || rename(tmp_name
, orig_name
) != 0)
1379 wpa_printf(MSG_DEBUG
, "Configuration file '%s' written %ssuccessfully",
1380 orig_name
, ret
? "un" : "");
1382 #else /* CONFIG_NO_CONFIG_WRITE */
1384 #endif /* CONFIG_NO_CONFIG_WRITE */