2 * WPA Supplicant / Configuration backend: text file
3 * Copyright (c) 2003-2012, Jouni Malinen <j@w1.fi>
5 * This software may be distributed under the terms of the BSD license.
6 * See README for more details.
8 * This file implements a configuration backend for text files. All the
9 * configuration information is stored in a text file that uses a format
10 * described in the sample configuration file, wpa_supplicant.conf.
23 #include "eap_peer/eap_methods.h"
24 #include "eap_peer/eap.h"
27 static int newline_terminated(const char *buf
, size_t buflen
)
29 size_t len
= os_strlen(buf
);
32 if (len
== buflen
- 1 && buf
[buflen
- 1] != '\r' &&
39 static void skip_line_end(FILE *stream
)
42 while (fgets(buf
, sizeof(buf
), stream
)) {
43 buf
[sizeof(buf
) - 1] = '\0';
44 if (newline_terminated(buf
, sizeof(buf
)))
51 * wpa_config_get_line - Read the next configuration file line
52 * @s: Buffer for the line
53 * @size: The buffer length
54 * @stream: File stream to read from
55 * @line: Pointer to a variable storing the file line number
56 * @_pos: Buffer for the pointer to the beginning of data on the text line or
57 * %NULL if not needed (returned value used instead)
58 * Returns: Pointer to the beginning of data on the text line or %NULL if no
59 * more text lines are available.
61 * This function reads the next non-empty line from the configuration file and
62 * removes comments. The returned string is guaranteed to be null-terminated.
64 static char * wpa_config_get_line(char *s
, int size
, FILE *stream
, int *line
,
67 char *pos
, *end
, *sstart
;
69 while (fgets(s
, size
, stream
)) {
72 if (!newline_terminated(s
, size
)) {
74 * The line was truncated - skip rest of it to avoid
75 * confusing error messages.
77 wpa_printf(MSG_INFO
, "Long line in configuration file "
79 skip_line_end(stream
);
83 /* Skip white space from the beginning of line. */
84 while (*pos
== ' ' || *pos
== '\t' || *pos
== '\r')
87 /* Skip comment lines and empty lines */
88 if (*pos
== '#' || *pos
== '\n' || *pos
== '\0')
92 * Remove # comments unless they are within a double quoted
95 sstart
= os_strchr(pos
, '"');
97 sstart
= os_strrchr(sstart
+ 1, '"');
100 end
= os_strchr(sstart
, '#');
104 end
= pos
+ os_strlen(pos
) - 1;
106 /* Remove trailing white space. */
108 (*end
== '\n' || *end
== ' ' || *end
== '\t' ||
126 static int wpa_config_validate_network(struct wpa_ssid
*ssid
, int line
)
130 if (ssid
->passphrase
) {
132 wpa_printf(MSG_ERROR
, "Line %d: both PSK and "
133 "passphrase configured.", line
);
136 wpa_config_update_psk(ssid
);
139 if ((ssid
->group_cipher
& WPA_CIPHER_CCMP
) &&
140 !(ssid
->pairwise_cipher
& WPA_CIPHER_CCMP
) &&
141 !(ssid
->pairwise_cipher
& WPA_CIPHER_NONE
)) {
142 /* Group cipher cannot be stronger than the pairwise cipher. */
143 wpa_printf(MSG_DEBUG
, "Line %d: removed CCMP from group cipher"
144 " list since it was not allowed for pairwise "
146 ssid
->group_cipher
&= ~WPA_CIPHER_CCMP
;
149 if (ssid
->mode
== WPAS_MODE_MESH
&&
150 (ssid
->key_mgmt
!= WPA_KEY_MGMT_NONE
&&
151 ssid
->key_mgmt
!= WPA_KEY_MGMT_SAE
)) {
152 wpa_printf(MSG_ERROR
,
153 "Line %d: key_mgmt for mesh network should be open or SAE",
162 static struct wpa_ssid
* wpa_config_read_network(FILE *f
, int *line
, int id
)
164 struct wpa_ssid
*ssid
;
165 int errors
= 0, end
= 0;
166 char buf
[2000], *pos
, *pos2
;
168 wpa_printf(MSG_MSGDUMP
, "Line: %d - start of a new network block",
170 ssid
= os_zalloc(sizeof(*ssid
));
173 dl_list_init(&ssid
->psk_list
);
176 wpa_config_set_network_defaults(ssid
);
178 while (wpa_config_get_line(buf
, sizeof(buf
), f
, line
, &pos
)) {
179 if (os_strcmp(pos
, "}") == 0) {
184 pos2
= os_strchr(pos
, '=');
186 wpa_printf(MSG_ERROR
, "Line %d: Invalid SSID line "
187 "'%s'.", *line
, pos
);
194 if (os_strchr(pos2
+ 1, '"') == NULL
) {
195 wpa_printf(MSG_ERROR
, "Line %d: invalid "
196 "quotation '%s'.", *line
, pos2
);
202 if (wpa_config_set(ssid
, pos
, pos2
, *line
) < 0)
207 wpa_printf(MSG_ERROR
, "Line %d: network block was not "
208 "terminated properly.", *line
);
212 errors
+= wpa_config_validate_network(ssid
, *line
);
215 wpa_config_free_ssid(ssid
);
223 static struct wpa_cred
* wpa_config_read_cred(FILE *f
, int *line
, int id
)
225 struct wpa_cred
*cred
;
226 int errors
= 0, end
= 0;
227 char buf
[256], *pos
, *pos2
;
229 wpa_printf(MSG_MSGDUMP
, "Line: %d - start of a new cred block", *line
);
230 cred
= os_zalloc(sizeof(*cred
));
234 cred
->sim_num
= DEFAULT_USER_SELECTED_SIM
;
236 while (wpa_config_get_line(buf
, sizeof(buf
), f
, line
, &pos
)) {
237 if (os_strcmp(pos
, "}") == 0) {
242 pos2
= os_strchr(pos
, '=');
244 wpa_printf(MSG_ERROR
, "Line %d: Invalid cred line "
245 "'%s'.", *line
, pos
);
252 if (os_strchr(pos2
+ 1, '"') == NULL
) {
253 wpa_printf(MSG_ERROR
, "Line %d: invalid "
254 "quotation '%s'.", *line
, pos2
);
260 if (wpa_config_set_cred(cred
, pos
, pos2
, *line
) < 0)
265 wpa_printf(MSG_ERROR
, "Line %d: cred block was not "
266 "terminated properly.", *line
);
271 wpa_config_free_cred(cred
);
279 #ifndef CONFIG_NO_CONFIG_BLOBS
280 static struct wpa_config_blob
* wpa_config_read_blob(FILE *f
, int *line
,
283 struct wpa_config_blob
*blob
;
285 unsigned char *encoded
= NULL
, *nencoded
;
287 size_t encoded_len
= 0, len
;
289 wpa_printf(MSG_MSGDUMP
, "Line: %d - start of a new named blob '%s'",
292 while (wpa_config_get_line(buf
, sizeof(buf
), f
, line
, &pos
)) {
293 if (os_strcmp(pos
, "}") == 0) {
298 len
= os_strlen(pos
);
299 nencoded
= os_realloc(encoded
, encoded_len
+ len
);
300 if (nencoded
== NULL
) {
301 wpa_printf(MSG_ERROR
, "Line %d: not enough memory for "
307 os_memcpy(encoded
+ encoded_len
, pos
, len
);
312 wpa_printf(MSG_ERROR
, "Line %d: blob was not terminated "
318 blob
= os_zalloc(sizeof(*blob
));
323 blob
->name
= os_strdup(name
);
324 blob
->data
= base64_decode(encoded
, encoded_len
, &blob
->len
);
327 if (blob
->name
== NULL
|| blob
->data
== NULL
) {
328 wpa_config_free_blob(blob
);
336 static int wpa_config_process_blob(struct wpa_config
*config
, FILE *f
,
337 int *line
, char *bname
)
340 struct wpa_config_blob
*blob
;
342 name_end
= os_strchr(bname
, '=');
343 if (name_end
== NULL
) {
344 wpa_printf(MSG_ERROR
, "Line %d: no blob name terminator",
350 blob
= wpa_config_read_blob(f
, line
, bname
);
352 wpa_printf(MSG_ERROR
, "Line %d: failed to read blob %s",
356 wpa_config_set_blob(config
, blob
);
359 #endif /* CONFIG_NO_CONFIG_BLOBS */
362 struct wpa_config
* wpa_config_read(const char *name
, struct wpa_config
*cfgp
)
366 int errors
= 0, line
= 0;
367 struct wpa_ssid
*ssid
, *tail
, *head
;
368 struct wpa_cred
*cred
, *cred_tail
, *cred_head
;
369 struct wpa_config
*config
;
378 config
= wpa_config_alloc_empty(NULL
, NULL
);
379 if (config
== NULL
) {
380 wpa_printf(MSG_ERROR
, "Failed to allocate config file "
384 tail
= head
= config
->ssid
;
385 while (tail
&& tail
->next
)
387 cred_tail
= cred_head
= config
->cred
;
388 while (cred_tail
&& cred_tail
->next
)
389 cred_tail
= cred_tail
->next
;
391 wpa_printf(MSG_DEBUG
, "Reading configuration file '%s'", name
);
392 f
= fopen(name
, "r");
394 wpa_printf(MSG_ERROR
, "Failed to open config file '%s', "
395 "error: %s", name
, strerror(errno
));
400 while (wpa_config_get_line(buf
, sizeof(buf
), f
, &line
, &pos
)) {
401 if (os_strcmp(pos
, "network={") == 0) {
402 ssid
= wpa_config_read_network(f
, &line
, id
++);
404 wpa_printf(MSG_ERROR
, "Line %d: failed to "
405 "parse network block.", line
);
415 if (wpa_config_add_prio_network(config
, ssid
)) {
416 wpa_printf(MSG_ERROR
, "Line %d: failed to add "
417 "network block to priority list.",
422 } else if (os_strcmp(pos
, "cred={") == 0) {
423 cred
= wpa_config_read_cred(f
, &line
, cred_id
++);
425 wpa_printf(MSG_ERROR
, "Line %d: failed to "
426 "parse cred block.", line
);
430 if (cred_head
== NULL
) {
431 cred_head
= cred_tail
= cred
;
433 cred_tail
->next
= cred
;
436 #ifndef CONFIG_NO_CONFIG_BLOBS
437 } else if (os_strncmp(pos
, "blob-base64-", 12) == 0) {
438 if (wpa_config_process_blob(config
, f
, &line
, pos
+ 12)
440 wpa_printf(MSG_ERROR
, "Line %d: failed to "
441 "process blob.", line
);
445 #endif /* CONFIG_NO_CONFIG_BLOBS */
446 } else if (wpa_config_process_global(config
, pos
, line
) < 0) {
447 wpa_printf(MSG_ERROR
, "Line %d: Invalid configuration "
448 "line '%s'.", line
, pos
);
457 wpa_config_debug_dump_networks(config
);
458 config
->cred
= cred_head
;
460 #ifndef WPA_IGNORE_CONFIG_ERRORS
462 wpa_config_free(config
);
466 #endif /* WPA_IGNORE_CONFIG_ERRORS */
472 #ifndef CONFIG_NO_CONFIG_WRITE
474 static void write_str(FILE *f
, const char *field
, struct wpa_ssid
*ssid
)
476 char *value
= wpa_config_get(ssid
, field
);
479 fprintf(f
, "\t%s=%s\n", field
, value
);
484 static void write_int(FILE *f
, const char *field
, int value
, int def
)
488 fprintf(f
, "\t%s=%d\n", field
, value
);
492 static void write_bssid(FILE *f
, struct wpa_ssid
*ssid
)
494 char *value
= wpa_config_get(ssid
, "bssid");
497 fprintf(f
, "\tbssid=%s\n", value
);
502 static void write_psk(FILE *f
, struct wpa_ssid
*ssid
)
506 if (ssid
->mem_only_psk
)
509 value
= wpa_config_get(ssid
, "psk");
512 fprintf(f
, "\tpsk=%s\n", value
);
517 static void write_proto(FILE *f
, struct wpa_ssid
*ssid
)
521 if (ssid
->proto
== DEFAULT_PROTO
)
524 value
= wpa_config_get(ssid
, "proto");
528 fprintf(f
, "\tproto=%s\n", value
);
533 static void write_key_mgmt(FILE *f
, struct wpa_ssid
*ssid
)
537 if (ssid
->key_mgmt
== DEFAULT_KEY_MGMT
)
540 value
= wpa_config_get(ssid
, "key_mgmt");
544 fprintf(f
, "\tkey_mgmt=%s\n", value
);
549 static void write_pairwise(FILE *f
, struct wpa_ssid
*ssid
)
553 if (ssid
->pairwise_cipher
== DEFAULT_PAIRWISE
)
556 value
= wpa_config_get(ssid
, "pairwise");
560 fprintf(f
, "\tpairwise=%s\n", value
);
565 static void write_group(FILE *f
, struct wpa_ssid
*ssid
)
569 if (ssid
->group_cipher
== DEFAULT_GROUP
)
572 value
= wpa_config_get(ssid
, "group");
576 fprintf(f
, "\tgroup=%s\n", value
);
581 static void write_auth_alg(FILE *f
, struct wpa_ssid
*ssid
)
585 if (ssid
->auth_alg
== 0)
588 value
= wpa_config_get(ssid
, "auth_alg");
592 fprintf(f
, "\tauth_alg=%s\n", value
);
597 #ifdef IEEE8021X_EAPOL
598 static void write_eap(FILE *f
, struct wpa_ssid
*ssid
)
602 value
= wpa_config_get(ssid
, "eap");
607 fprintf(f
, "\teap=%s\n", value
);
610 #endif /* IEEE8021X_EAPOL */
613 static void write_wep_key(FILE *f
, int idx
, struct wpa_ssid
*ssid
)
615 char field
[20], *value
;
618 res
= os_snprintf(field
, sizeof(field
), "wep_key%d", idx
);
619 if (os_snprintf_error(sizeof(field
), res
))
621 value
= wpa_config_get(ssid
, field
);
623 fprintf(f
, "\t%s=%s\n", field
, value
);
631 static void write_go_p2p_dev_addr(FILE *f
, struct wpa_ssid
*ssid
)
633 char *value
= wpa_config_get(ssid
, "go_p2p_dev_addr");
636 fprintf(f
, "\tgo_p2p_dev_addr=%s\n", value
);
640 static void write_p2p_client_list(FILE *f
, struct wpa_ssid
*ssid
)
642 char *value
= wpa_config_get(ssid
, "p2p_client_list");
645 fprintf(f
, "\tp2p_client_list=%s\n", value
);
650 static void write_psk_list(FILE *f
, struct wpa_ssid
*ssid
)
652 struct psk_list_entry
*psk
;
653 char hex
[32 * 2 + 1];
655 dl_list_for_each(psk
, &ssid
->psk_list
, struct psk_list_entry
, list
) {
656 wpa_snprintf_hex(hex
, sizeof(hex
), psk
->psk
, sizeof(psk
->psk
));
657 fprintf(f
, "\tpsk_list=%s" MACSTR
"-%s\n",
658 psk
->p2p
? "P2P-" : "", MAC2STR(psk
->addr
), hex
);
662 #endif /* CONFIG_P2P */
665 static void wpa_config_write_network(FILE *f
, struct wpa_ssid
*ssid
)
669 #define STR(t) write_str(f, #t, ssid)
670 #define INT(t) write_int(f, #t, ssid->t, 0)
671 #define INTe(t) write_int(f, #t, ssid->eap.t, 0)
672 #define INT_DEF(t, def) write_int(f, #t, ssid->t, def)
673 #define INT_DEFe(t, def) write_int(f, #t, ssid->eap.t, def)
677 write_bssid(f
, ssid
);
678 write_str(f
, "bssid_blacklist", ssid
);
679 write_str(f
, "bssid_whitelist", ssid
);
682 write_proto(f
, ssid
);
683 write_key_mgmt(f
, ssid
);
684 INT_DEF(bg_scan_period
, DEFAULT_BG_SCAN_PERIOD
);
685 write_pairwise(f
, ssid
);
686 write_group(f
, ssid
);
687 write_auth_alg(f
, ssid
);
691 #ifdef IEEE8021X_EAPOL
694 STR(anonymous_identity
);
700 STR(private_key_passwd
);
703 STR(altsubject_match
);
704 STR(domain_suffix_match
);
710 STR(private_key2_passwd
);
713 STR(altsubject_match2
);
714 STR(domain_suffix_match2
);
731 INT_DEF(eapol_flags
, DEFAULT_EAPOL_FLAGS
);
732 STR(openssl_ciphers
);
734 #endif /* IEEE8021X_EAPOL */
735 for (i
= 0; i
< 4; i
++)
736 write_wep_key(f
, i
, ssid
);
739 #ifdef IEEE8021X_EAPOL
740 INT_DEF(eap_workaround
, DEFAULT_EAP_WORKAROUND
);
742 INT_DEFe(fragment_size
, DEFAULT_FRAGMENT_SIZE
);
744 INT_DEFe(sim_num
, DEFAULT_USER_SELECTED_SIM
);
745 #endif /* IEEE8021X_EAPOL */
750 write_int(f
, "proactive_key_caching", ssid
->proactive_key_caching
, -1);
754 INT(max_oper_chwidth
);
755 #ifdef CONFIG_IEEE80211W
756 write_int(f
, "ieee80211w", ssid
->ieee80211w
,
757 MGMT_FRAME_PROTECTION_DEFAULT
);
758 #endif /* CONFIG_IEEE80211W */
761 write_go_p2p_dev_addr(f
, ssid
);
762 write_p2p_client_list(f
, ssid
);
763 write_psk_list(f
, ssid
);
764 #endif /* CONFIG_P2P */
765 INT(ap_max_inactivity
);
770 #endif /* CONFIG_MACSEC */
772 INT(update_identifier
);
773 #endif /* CONFIG_HS20 */
774 write_int(f
, "mac_addr", ssid
->mac_addr
, -1);
776 STR(mesh_basic_rates
);
777 INT_DEF(dot11MeshMaxRetries
, DEFAULT_MESH_MAX_RETRIES
);
778 INT_DEF(dot11MeshRetryTimeout
, DEFAULT_MESH_RETRY_TIMEOUT
);
779 INT_DEF(dot11MeshConfirmTimeout
, DEFAULT_MESH_CONFIRM_TIMEOUT
);
780 INT_DEF(dot11MeshHoldingTimeout
, DEFAULT_MESH_HOLDING_TIMEOUT
);
781 #endif /* CONFIG_MESH */
783 INT(ignore_broadcast_ssid
);
784 #ifdef CONFIG_HT_OVERRIDES
785 INT_DEF(disable_ht
, DEFAULT_DISABLE_HT
);
786 INT_DEF(disable_ht40
, DEFAULT_DISABLE_HT40
);
787 INT_DEF(disable_sgi
, DEFAULT_DISABLE_SGI
);
788 INT_DEF(disable_ldpc
, DEFAULT_DISABLE_LDPC
);
789 INT(ht40_intolerant
);
790 INT_DEF(disable_max_amsdu
, DEFAULT_DISABLE_MAX_AMSDU
);
791 INT_DEF(ampdu_factor
, DEFAULT_AMPDU_FACTOR
);
792 INT_DEF(ampdu_density
, DEFAULT_AMPDU_DENSITY
);
794 #endif /* CONFIG_HT_OVERRIDES */
795 #ifdef CONFIG_VHT_OVERRIDES
799 INT_DEF(vht_rx_mcs_nss_1
, -1);
800 INT_DEF(vht_rx_mcs_nss_2
, -1);
801 INT_DEF(vht_rx_mcs_nss_3
, -1);
802 INT_DEF(vht_rx_mcs_nss_4
, -1);
803 INT_DEF(vht_rx_mcs_nss_5
, -1);
804 INT_DEF(vht_rx_mcs_nss_6
, -1);
805 INT_DEF(vht_rx_mcs_nss_7
, -1);
806 INT_DEF(vht_rx_mcs_nss_8
, -1);
807 INT_DEF(vht_tx_mcs_nss_1
, -1);
808 INT_DEF(vht_tx_mcs_nss_2
, -1);
809 INT_DEF(vht_tx_mcs_nss_3
, -1);
810 INT_DEF(vht_tx_mcs_nss_4
, -1);
811 INT_DEF(vht_tx_mcs_nss_5
, -1);
812 INT_DEF(vht_tx_mcs_nss_6
, -1);
813 INT_DEF(vht_tx_mcs_nss_7
, -1);
814 INT_DEF(vht_tx_mcs_nss_8
, -1);
815 #endif /* CONFIG_VHT_OVERRIDES */
823 static void wpa_config_write_cred(FILE *f
, struct wpa_cred
*cred
)
828 fprintf(f
, "\tpriority=%d\n", cred
->priority
);
830 fprintf(f
, "\tpcsc=%d\n", cred
->pcsc
);
832 fprintf(f
, "\trealm=\"%s\"\n", cred
->realm
);
834 fprintf(f
, "\tusername=\"%s\"\n", cred
->username
);
835 if (cred
->password
&& cred
->ext_password
)
836 fprintf(f
, "\tpassword=ext:%s\n", cred
->password
);
837 else if (cred
->password
)
838 fprintf(f
, "\tpassword=\"%s\"\n", cred
->password
);
840 fprintf(f
, "\tca_cert=\"%s\"\n", cred
->ca_cert
);
841 if (cred
->client_cert
)
842 fprintf(f
, "\tclient_cert=\"%s\"\n", cred
->client_cert
);
843 if (cred
->private_key
)
844 fprintf(f
, "\tprivate_key=\"%s\"\n", cred
->private_key
);
845 if (cred
->private_key_passwd
)
846 fprintf(f
, "\tprivate_key_passwd=\"%s\"\n",
847 cred
->private_key_passwd
);
849 fprintf(f
, "\timsi=\"%s\"\n", cred
->imsi
);
851 fprintf(f
, "\tmilenage=\"%s\"\n", cred
->milenage
);
852 for (i
= 0; i
< cred
->num_domain
; i
++)
853 fprintf(f
, "\tdomain=\"%s\"\n", cred
->domain
[i
]);
854 if (cred
->domain_suffix_match
)
855 fprintf(f
, "\tdomain_suffix_match=\"%s\"\n",
856 cred
->domain_suffix_match
);
857 if (cred
->roaming_consortium_len
) {
858 fprintf(f
, "\troaming_consortium=");
859 for (i
= 0; i
< cred
->roaming_consortium_len
; i
++)
860 fprintf(f
, "%02x", cred
->roaming_consortium
[i
]);
863 if (cred
->eap_method
) {
865 name
= eap_get_name(cred
->eap_method
[0].vendor
,
866 cred
->eap_method
[0].method
);
868 fprintf(f
, "\teap=%s\n", name
);
871 fprintf(f
, "\tphase1=\"%s\"\n", cred
->phase1
);
873 fprintf(f
, "\tphase2=\"%s\"\n", cred
->phase2
);
874 if (cred
->excluded_ssid
) {
876 for (i
= 0; i
< cred
->num_excluded_ssid
; i
++) {
877 struct excluded_ssid
*e
= &cred
->excluded_ssid
[i
];
878 fprintf(f
, "\texcluded_ssid=");
879 for (j
= 0; j
< e
->ssid_len
; j
++)
880 fprintf(f
, "%02x", e
->ssid
[j
]);
884 if (cred
->roaming_partner
) {
885 for (i
= 0; i
< cred
->num_roaming_partner
; i
++) {
886 struct roaming_partner
*p
= &cred
->roaming_partner
[i
];
887 fprintf(f
, "\troaming_partner=\"%s,%d,%u,%s\"\n",
888 p
->fqdn
, p
->exact_match
, p
->priority
,
892 if (cred
->update_identifier
)
893 fprintf(f
, "\tupdate_identifier=%d\n", cred
->update_identifier
);
895 if (cred
->provisioning_sp
)
896 fprintf(f
, "\tprovisioning_sp=\"%s\"\n", cred
->provisioning_sp
);
897 if (cred
->sp_priority
)
898 fprintf(f
, "\tsp_priority=%d\n", cred
->sp_priority
);
900 if (cred
->min_dl_bandwidth_home
)
901 fprintf(f
, "\tmin_dl_bandwidth_home=%u\n",
902 cred
->min_dl_bandwidth_home
);
903 if (cred
->min_ul_bandwidth_home
)
904 fprintf(f
, "\tmin_ul_bandwidth_home=%u\n",
905 cred
->min_ul_bandwidth_home
);
906 if (cred
->min_dl_bandwidth_roaming
)
907 fprintf(f
, "\tmin_dl_bandwidth_roaming=%u\n",
908 cred
->min_dl_bandwidth_roaming
);
909 if (cred
->min_ul_bandwidth_roaming
)
910 fprintf(f
, "\tmin_ul_bandwidth_roaming=%u\n",
911 cred
->min_ul_bandwidth_roaming
);
913 if (cred
->max_bss_load
)
914 fprintf(f
, "\tmax_bss_load=%u\n",
918 fprintf(f
, "\tocsp=%d\n", cred
->ocsp
);
920 if (cred
->num_req_conn_capab
) {
921 for (i
= 0; i
< cred
->num_req_conn_capab
; i
++) {
924 fprintf(f
, "\treq_conn_capab=%u",
925 cred
->req_conn_capab_proto
[i
]);
926 ports
= cred
->req_conn_capab_port
[i
];
929 for (j
= 0; ports
[j
] != -1; j
++) {
930 fprintf(f
, "%s%d", j
> 0 ? "," : ":",
938 if (cred
->required_roaming_consortium_len
) {
939 fprintf(f
, "\trequired_roaming_consortium=");
940 for (i
= 0; i
< cred
->required_roaming_consortium_len
; i
++)
942 cred
->required_roaming_consortium
[i
]);
946 if (cred
->sim_num
!= DEFAULT_USER_SELECTED_SIM
)
947 fprintf(f
, "\tsim_num=%d\n", cred
->sim_num
);
951 #ifndef CONFIG_NO_CONFIG_BLOBS
952 static int wpa_config_write_blob(FILE *f
, struct wpa_config_blob
*blob
)
954 unsigned char *encoded
;
956 encoded
= base64_encode(blob
->data
, blob
->len
, NULL
);
960 fprintf(f
, "\nblob-base64-%s={\n%s}\n", blob
->name
, encoded
);
964 #endif /* CONFIG_NO_CONFIG_BLOBS */
967 static void write_global_bin(FILE *f
, const char *field
,
968 const struct wpabuf
*val
)
976 fprintf(f
, "%s=", field
);
977 pos
= wpabuf_head(val
);
978 for (i
= 0; i
< wpabuf_len(val
); i
++)
979 fprintf(f
, "%02X", *pos
++);
984 static void wpa_config_write_global(FILE *f
, struct wpa_config
*config
)
986 #ifdef CONFIG_CTRL_IFACE
987 if (config
->ctrl_interface
)
988 fprintf(f
, "ctrl_interface=%s\n", config
->ctrl_interface
);
989 if (config
->ctrl_interface_group
)
990 fprintf(f
, "ctrl_interface_group=%s\n",
991 config
->ctrl_interface_group
);
992 #endif /* CONFIG_CTRL_IFACE */
993 if (config
->eapol_version
!= DEFAULT_EAPOL_VERSION
)
994 fprintf(f
, "eapol_version=%d\n", config
->eapol_version
);
995 if (config
->ap_scan
!= DEFAULT_AP_SCAN
)
996 fprintf(f
, "ap_scan=%d\n", config
->ap_scan
);
997 if (config
->disable_scan_offload
)
998 fprintf(f
, "disable_scan_offload=%d\n",
999 config
->disable_scan_offload
);
1000 if (config
->fast_reauth
!= DEFAULT_FAST_REAUTH
)
1001 fprintf(f
, "fast_reauth=%d\n", config
->fast_reauth
);
1002 if (config
->opensc_engine_path
)
1003 fprintf(f
, "opensc_engine_path=%s\n",
1004 config
->opensc_engine_path
);
1005 if (config
->pkcs11_engine_path
)
1006 fprintf(f
, "pkcs11_engine_path=%s\n",
1007 config
->pkcs11_engine_path
);
1008 if (config
->pkcs11_module_path
)
1009 fprintf(f
, "pkcs11_module_path=%s\n",
1010 config
->pkcs11_module_path
);
1011 if (config
->openssl_ciphers
)
1012 fprintf(f
, "openssl_ciphers=%s\n", config
->openssl_ciphers
);
1013 if (config
->pcsc_reader
)
1014 fprintf(f
, "pcsc_reader=%s\n", config
->pcsc_reader
);
1015 if (config
->pcsc_pin
)
1016 fprintf(f
, "pcsc_pin=%s\n", config
->pcsc_pin
);
1017 if (config
->driver_param
)
1018 fprintf(f
, "driver_param=%s\n", config
->driver_param
);
1019 if (config
->dot11RSNAConfigPMKLifetime
)
1020 fprintf(f
, "dot11RSNAConfigPMKLifetime=%u\n",
1021 config
->dot11RSNAConfigPMKLifetime
);
1022 if (config
->dot11RSNAConfigPMKReauthThreshold
)
1023 fprintf(f
, "dot11RSNAConfigPMKReauthThreshold=%u\n",
1024 config
->dot11RSNAConfigPMKReauthThreshold
);
1025 if (config
->dot11RSNAConfigSATimeout
)
1026 fprintf(f
, "dot11RSNAConfigSATimeout=%u\n",
1027 config
->dot11RSNAConfigSATimeout
);
1028 if (config
->update_config
)
1029 fprintf(f
, "update_config=%d\n", config
->update_config
);
1031 if (!is_nil_uuid(config
->uuid
)) {
1033 uuid_bin2str(config
->uuid
, buf
, sizeof(buf
));
1034 fprintf(f
, "uuid=%s\n", buf
);
1036 if (config
->device_name
)
1037 fprintf(f
, "device_name=%s\n", config
->device_name
);
1038 if (config
->manufacturer
)
1039 fprintf(f
, "manufacturer=%s\n", config
->manufacturer
);
1040 if (config
->model_name
)
1041 fprintf(f
, "model_name=%s\n", config
->model_name
);
1042 if (config
->model_number
)
1043 fprintf(f
, "model_number=%s\n", config
->model_number
);
1044 if (config
->serial_number
)
1045 fprintf(f
, "serial_number=%s\n", config
->serial_number
);
1047 char _buf
[WPS_DEV_TYPE_BUFSIZE
], *buf
;
1048 buf
= wps_dev_type_bin2str(config
->device_type
,
1049 _buf
, sizeof(_buf
));
1050 if (os_strcmp(buf
, "0-00000000-0") != 0)
1051 fprintf(f
, "device_type=%s\n", buf
);
1053 if (WPA_GET_BE32(config
->os_version
))
1054 fprintf(f
, "os_version=%08x\n",
1055 WPA_GET_BE32(config
->os_version
));
1056 if (config
->config_methods
)
1057 fprintf(f
, "config_methods=%s\n", config
->config_methods
);
1058 if (config
->wps_cred_processing
)
1059 fprintf(f
, "wps_cred_processing=%d\n",
1060 config
->wps_cred_processing
);
1061 if (config
->wps_vendor_ext_m1
) {
1062 int i
, len
= wpabuf_len(config
->wps_vendor_ext_m1
);
1063 const u8
*p
= wpabuf_head_u8(config
->wps_vendor_ext_m1
);
1065 fprintf(f
, "wps_vendor_ext_m1=");
1066 for (i
= 0; i
< len
; i
++)
1067 fprintf(f
, "%02x", *p
++);
1071 #endif /* CONFIG_WPS */
1073 if (config
->p2p_listen_reg_class
)
1074 fprintf(f
, "p2p_listen_reg_class=%d\n",
1075 config
->p2p_listen_reg_class
);
1076 if (config
->p2p_listen_channel
)
1077 fprintf(f
, "p2p_listen_channel=%d\n",
1078 config
->p2p_listen_channel
);
1079 if (config
->p2p_oper_reg_class
)
1080 fprintf(f
, "p2p_oper_reg_class=%d\n",
1081 config
->p2p_oper_reg_class
);
1082 if (config
->p2p_oper_channel
)
1083 fprintf(f
, "p2p_oper_channel=%d\n", config
->p2p_oper_channel
);
1084 if (config
->p2p_go_intent
!= DEFAULT_P2P_GO_INTENT
)
1085 fprintf(f
, "p2p_go_intent=%d\n", config
->p2p_go_intent
);
1086 if (config
->p2p_ssid_postfix
)
1087 fprintf(f
, "p2p_ssid_postfix=%s\n", config
->p2p_ssid_postfix
);
1088 if (config
->persistent_reconnect
)
1089 fprintf(f
, "persistent_reconnect=%d\n",
1090 config
->persistent_reconnect
);
1091 if (config
->p2p_intra_bss
!= DEFAULT_P2P_INTRA_BSS
)
1092 fprintf(f
, "p2p_intra_bss=%d\n", config
->p2p_intra_bss
);
1093 if (config
->p2p_group_idle
)
1094 fprintf(f
, "p2p_group_idle=%d\n", config
->p2p_group_idle
);
1095 if (config
->p2p_passphrase_len
)
1096 fprintf(f
, "p2p_passphrase_len=%u\n",
1097 config
->p2p_passphrase_len
);
1098 if (config
->p2p_pref_chan
) {
1100 fprintf(f
, "p2p_pref_chan=");
1101 for (i
= 0; i
< config
->num_p2p_pref_chan
; i
++) {
1102 fprintf(f
, "%s%u:%u", i
> 0 ? "," : "",
1103 config
->p2p_pref_chan
[i
].op_class
,
1104 config
->p2p_pref_chan
[i
].chan
);
1108 if (config
->p2p_no_go_freq
.num
) {
1109 char *val
= freq_range_list_str(&config
->p2p_no_go_freq
);
1111 fprintf(f
, "p2p_no_go_freq=%s\n", val
);
1115 if (config
->p2p_add_cli_chan
)
1116 fprintf(f
, "p2p_add_cli_chan=%d\n", config
->p2p_add_cli_chan
);
1117 if (config
->p2p_optimize_listen_chan
!=
1118 DEFAULT_P2P_OPTIMIZE_LISTEN_CHAN
)
1119 fprintf(f
, "p2p_optimize_listen_chan=%d\n",
1120 config
->p2p_optimize_listen_chan
);
1121 if (config
->p2p_go_ht40
)
1122 fprintf(f
, "p2p_go_ht40=%d\n", config
->p2p_go_ht40
);
1123 if (config
->p2p_go_vht
)
1124 fprintf(f
, "p2p_go_vht=%d\n", config
->p2p_go_vht
);
1125 if (config
->p2p_go_ctwindow
!= DEFAULT_P2P_GO_CTWINDOW
)
1126 fprintf(f
, "p2p_go_ctwindow=%d\n", config
->p2p_go_ctwindow
);
1127 if (config
->p2p_disabled
)
1128 fprintf(f
, "p2p_disabled=%d\n", config
->p2p_disabled
);
1129 if (config
->p2p_no_group_iface
)
1130 fprintf(f
, "p2p_no_group_iface=%d\n",
1131 config
->p2p_no_group_iface
);
1132 if (config
->p2p_ignore_shared_freq
)
1133 fprintf(f
, "p2p_ignore_shared_freq=%d\n",
1134 config
->p2p_ignore_shared_freq
);
1135 if (config
->p2p_cli_probe
)
1136 fprintf(f
, "p2p_cli_probe=%d\n", config
->p2p_cli_probe
);
1137 if (config
->p2p_go_freq_change_policy
!= DEFAULT_P2P_GO_FREQ_MOVE
)
1138 fprintf(f
, "p2p_go_freq_change_policy=%u\n",
1139 config
->p2p_go_freq_change_policy
);
1140 #endif /* CONFIG_P2P */
1141 if (config
->country
[0] && config
->country
[1]) {
1142 fprintf(f
, "country=%c%c\n",
1143 config
->country
[0], config
->country
[1]);
1145 if (config
->bss_max_count
!= DEFAULT_BSS_MAX_COUNT
)
1146 fprintf(f
, "bss_max_count=%u\n", config
->bss_max_count
);
1147 if (config
->bss_expiration_age
!= DEFAULT_BSS_EXPIRATION_AGE
)
1148 fprintf(f
, "bss_expiration_age=%u\n",
1149 config
->bss_expiration_age
);
1150 if (config
->bss_expiration_scan_count
!=
1151 DEFAULT_BSS_EXPIRATION_SCAN_COUNT
)
1152 fprintf(f
, "bss_expiration_scan_count=%u\n",
1153 config
->bss_expiration_scan_count
);
1154 if (config
->filter_ssids
)
1155 fprintf(f
, "filter_ssids=%d\n", config
->filter_ssids
);
1156 if (config
->max_num_sta
!= DEFAULT_MAX_NUM_STA
)
1157 fprintf(f
, "max_num_sta=%u\n", config
->max_num_sta
);
1158 if (config
->disassoc_low_ack
)
1159 fprintf(f
, "disassoc_low_ack=%d\n", config
->disassoc_low_ack
);
1162 fprintf(f
, "hs20=1\n");
1163 #endif /* CONFIG_HS20 */
1164 #ifdef CONFIG_INTERWORKING
1165 if (config
->interworking
)
1166 fprintf(f
, "interworking=%d\n", config
->interworking
);
1167 if (!is_zero_ether_addr(config
->hessid
))
1168 fprintf(f
, "hessid=" MACSTR
"\n", MAC2STR(config
->hessid
));
1169 if (config
->access_network_type
!= DEFAULT_ACCESS_NETWORK_TYPE
)
1170 fprintf(f
, "access_network_type=%d\n",
1171 config
->access_network_type
);
1172 #endif /* CONFIG_INTERWORKING */
1173 if (config
->pbc_in_m1
)
1174 fprintf(f
, "pbc_in_m1=%d\n", config
->pbc_in_m1
);
1175 if (config
->wps_nfc_pw_from_config
) {
1176 if (config
->wps_nfc_dev_pw_id
)
1177 fprintf(f
, "wps_nfc_dev_pw_id=%d\n",
1178 config
->wps_nfc_dev_pw_id
);
1179 write_global_bin(f
, "wps_nfc_dh_pubkey",
1180 config
->wps_nfc_dh_pubkey
);
1181 write_global_bin(f
, "wps_nfc_dh_privkey",
1182 config
->wps_nfc_dh_privkey
);
1183 write_global_bin(f
, "wps_nfc_dev_pw", config
->wps_nfc_dev_pw
);
1186 if (config
->ext_password_backend
)
1187 fprintf(f
, "ext_password_backend=%s\n",
1188 config
->ext_password_backend
);
1189 if (config
->p2p_go_max_inactivity
!= DEFAULT_P2P_GO_MAX_INACTIVITY
)
1190 fprintf(f
, "p2p_go_max_inactivity=%d\n",
1191 config
->p2p_go_max_inactivity
);
1192 if (config
->auto_interworking
)
1193 fprintf(f
, "auto_interworking=%d\n",
1194 config
->auto_interworking
);
1196 fprintf(f
, "okc=%d\n", config
->okc
);
1198 fprintf(f
, "pmf=%d\n", config
->pmf
);
1199 if (config
->dtim_period
)
1200 fprintf(f
, "dtim_period=%d\n", config
->dtim_period
);
1201 if (config
->beacon_int
)
1202 fprintf(f
, "beacon_int=%d\n", config
->beacon_int
);
1204 if (config
->sae_groups
) {
1206 fprintf(f
, "sae_groups=");
1207 for (i
= 0; config
->sae_groups
[i
] >= 0; i
++) {
1208 fprintf(f
, "%s%d", i
> 0 ? " " : "",
1209 config
->sae_groups
[i
]);
1214 if (config
->ap_vendor_elements
) {
1215 int i
, len
= wpabuf_len(config
->ap_vendor_elements
);
1216 const u8
*p
= wpabuf_head_u8(config
->ap_vendor_elements
);
1218 fprintf(f
, "ap_vendor_elements=");
1219 for (i
= 0; i
< len
; i
++)
1220 fprintf(f
, "%02x", *p
++);
1225 if (config
->ignore_old_scan_res
)
1226 fprintf(f
, "ignore_old_scan_res=%d\n",
1227 config
->ignore_old_scan_res
);
1229 if (config
->freq_list
&& config
->freq_list
[0]) {
1231 fprintf(f
, "freq_list=");
1232 for (i
= 0; config
->freq_list
[i
]; i
++) {
1233 fprintf(f
, "%s%d", i
> 0 ? " " : "",
1234 config
->freq_list
[i
]);
1238 if (config
->scan_cur_freq
!= DEFAULT_SCAN_CUR_FREQ
)
1239 fprintf(f
, "scan_cur_freq=%d\n", config
->scan_cur_freq
);
1241 if (config
->sched_scan_interval
)
1242 fprintf(f
, "sched_scan_interval=%u\n",
1243 config
->sched_scan_interval
);
1245 if (config
->external_sim
)
1246 fprintf(f
, "external_sim=%d\n", config
->external_sim
);
1248 if (config
->tdls_external_control
)
1249 fprintf(f
, "tdls_external_control=%d\n",
1250 config
->tdls_external_control
);
1252 if (config
->wowlan_triggers
)
1253 fprintf(f
, "wowlan_triggers=%s\n",
1254 config
->wowlan_triggers
);
1257 fprintf(f
, "bgscan=\"%s\"\n", config
->bgscan
);
1259 if (config
->p2p_search_delay
!= DEFAULT_P2P_SEARCH_DELAY
)
1260 fprintf(f
, "p2p_search_delay=%u\n",
1261 config
->p2p_search_delay
);
1263 if (config
->mac_addr
)
1264 fprintf(f
, "mac_addr=%d\n", config
->mac_addr
);
1266 if (config
->rand_addr_lifetime
!= DEFAULT_RAND_ADDR_LIFETIME
)
1267 fprintf(f
, "rand_addr_lifetime=%u\n",
1268 config
->rand_addr_lifetime
);
1270 if (config
->preassoc_mac_addr
)
1271 fprintf(f
, "preassoc_mac_addr=%d\n", config
->preassoc_mac_addr
);
1273 if (config
->key_mgmt_offload
!= DEFAULT_KEY_MGMT_OFFLOAD
)
1274 fprintf(f
, "key_mgmt_offload=%d\n", config
->key_mgmt_offload
);
1276 if (config
->user_mpm
!= DEFAULT_USER_MPM
)
1277 fprintf(f
, "user_mpm=%d\n", config
->user_mpm
);
1279 if (config
->max_peer_links
!= DEFAULT_MAX_PEER_LINKS
)
1280 fprintf(f
, "max_peer_links=%d\n", config
->max_peer_links
);
1282 if (config
->cert_in_cb
!= DEFAULT_CERT_IN_CB
)
1283 fprintf(f
, "cert_in_cb=%d\n", config
->cert_in_cb
);
1285 if (config
->mesh_max_inactivity
!= DEFAULT_MESH_MAX_INACTIVITY
)
1286 fprintf(f
, "mesh_max_inactivity=%d\n",
1287 config
->mesh_max_inactivity
);
1289 if (config
->dot11RSNASAERetransPeriod
!=
1290 DEFAULT_DOT11_RSNA_SAE_RETRANS_PERIOD
)
1291 fprintf(f
, "dot11RSNASAERetransPeriod=%d\n",
1292 config
->dot11RSNASAERetransPeriod
);
1294 if (config
->passive_scan
)
1295 fprintf(f
, "passive_scan=%d\n", config
->passive_scan
);
1297 if (config
->reassoc_same_bss_optim
)
1298 fprintf(f
, "reassoc_same_bss_optim=%d\n",
1299 config
->reassoc_same_bss_optim
);
1301 if (config
->wps_priority
)
1302 fprintf(f
, "wps_priority=%d\n", config
->wps_priority
);
1304 if (config
->wpa_rsc_relaxation
!= DEFAULT_WPA_RSC_RELAXATION
)
1305 fprintf(f
, "wpa_rsc_relaxation=%d\n",
1306 config
->wpa_rsc_relaxation
);
1308 if (config
->sched_scan_plans
)
1309 fprintf(f
, "sched_scan_plans=%s\n", config
->sched_scan_plans
);
1312 #endif /* CONFIG_NO_CONFIG_WRITE */
1315 int wpa_config_write(const char *name
, struct wpa_config
*config
)
1317 #ifndef CONFIG_NO_CONFIG_WRITE
1319 struct wpa_ssid
*ssid
;
1320 struct wpa_cred
*cred
;
1321 #ifndef CONFIG_NO_CONFIG_BLOBS
1322 struct wpa_config_blob
*blob
;
1323 #endif /* CONFIG_NO_CONFIG_BLOBS */
1325 const char *orig_name
= name
;
1326 int tmp_len
= os_strlen(name
) + 5; /* allow space for .tmp suffix */
1327 char *tmp_name
= os_malloc(tmp_len
);
1330 os_snprintf(tmp_name
, tmp_len
, "%s.tmp", name
);
1334 wpa_printf(MSG_DEBUG
, "Writing configuration file '%s'", name
);
1336 f
= fopen(name
, "w");
1338 wpa_printf(MSG_DEBUG
, "Failed to open '%s' for writing", name
);
1343 wpa_config_write_global(f
, config
);
1345 for (cred
= config
->cred
; cred
; cred
= cred
->next
) {
1346 if (cred
->temporary
)
1348 fprintf(f
, "\ncred={\n");
1349 wpa_config_write_cred(f
, cred
);
1353 for (ssid
= config
->ssid
; ssid
; ssid
= ssid
->next
) {
1354 if (ssid
->key_mgmt
== WPA_KEY_MGMT_WPS
|| ssid
->temporary
)
1355 continue; /* do not save temporary networks */
1356 if (wpa_key_mgmt_wpa_psk(ssid
->key_mgmt
) && !ssid
->psk_set
&&
1358 continue; /* do not save invalid network */
1359 fprintf(f
, "\nnetwork={\n");
1360 wpa_config_write_network(f
, ssid
);
1364 #ifndef CONFIG_NO_CONFIG_BLOBS
1365 for (blob
= config
->blobs
; blob
; blob
= blob
->next
) {
1366 ret
= wpa_config_write_blob(f
, blob
);
1370 #endif /* CONFIG_NO_CONFIG_BLOBS */
1380 chmod_ret
= chmod(tmp_name
,
1381 S_IRUSR
| S_IWUSR
| S_IRGRP
| S_IWGRP
);
1382 #endif /* ANDROID */
1383 if (chmod_ret
!= 0 || rename(tmp_name
, orig_name
) != 0)
1389 wpa_printf(MSG_DEBUG
, "Configuration file '%s' written %ssuccessfully",
1390 orig_name
, ret
? "un" : "");
1392 #else /* CONFIG_NO_CONFIG_WRITE */
1394 #endif /* CONFIG_NO_CONFIG_WRITE */