]> git.ipfire.org Git - people/pmueller/ipfire-2.x.git/blob - html/cgi-bin/wlanap.cgi
Fix permissions of openvpn lease database.
[people/pmueller/ipfire-2.x.git] / html / cgi-bin / wlanap.cgi
1 #!/usr/bin/perl
2 ###############################################################################
3 # #
4 # IPFire.org - A linux based firewall #
5 # Copyright (C) 2009 Michael Tremer & Christian Schmidt #
6 # #
7 # This program is free software: you can redistribute it and/or modify #
8 # it under the terms of the GNU General Public License as published by #
9 # the Free Software Foundation, either version 3 of the License, or #
10 # (at your option) any later version. #
11 # #
12 # This program is distributed in the hope that it will be useful, #
13 # but WITHOUT ANY WARRANTY; without even the implied warranty of #
14 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
15 # GNU General Public License for more details. #
16 # #
17 # You should have received a copy of the GNU General Public License #
18 # along with this program. If not, see <http://www.gnu.org/licenses/>. #
19 # #
20 ###############################################################################
21 #
22 # WLAN AP cgi based on wlanap.cgi written by Markus Hoffmann & Olaf Westrik
23 #
24
25 use strict;
26
27 # enable only the following on debugging purpose
28 #use warnings;
29 #use CGI::Carp 'fatalsToBrowser';
30
31 require '/var/ipfire/general-functions.pl';
32 require '/var/ipfire/lang.pl';
33 require '/var/ipfire/header.pl';
34
35 my $debug = 0;
36 my $status = '';
37 my $errormessage = '';
38 my $status_started = "<td align='center' width='75%' bgcolor='${Header::colourgreen}'><font color='white'><b>$Lang::tr{'running'}</b></font></td></tr>";
39 my $status_stopped = "<td align='center' width='75%' bgcolor='${Header::colourred}'><font color='white'><b>$Lang::tr{'stopped'}</b></font></td></tr>";
40
41 # get rid of used only once warnings
42 my @onlyonce = ( $Header::colourgreen, $Header::colourred );
43 undef @onlyonce;
44
45 my %selected=();
46 my %checked=();
47 my %color = ();
48 my %mainsettings = ();
49 my %netsettings=();
50 my %wlanapsettings=();
51 my $channel = '';
52 my $txpower = '';
53
54 &General::readhash("${General::swroot}/main/settings", \%mainsettings);
55 &General::readhash("/srv/web/ipfire/html/themes/".$mainsettings{'THEME'}."/include/colors.txt", \%color);
56 &General::readhash("/var/ipfire/ethernet/settings", \%netsettings);
57
58 $wlanapsettings{'APMODE'} = 'on';
59 $wlanapsettings{'ACTION'} = '';
60 $wlanapsettings{'MACMODE'} = '0';
61 $wlanapsettings{'INTERFACE'} = '';
62 $wlanapsettings{'SSID'} = 'IPFire';
63 $wlanapsettings{'HIDESSID'} = 'off';
64 $wlanapsettings{'ENC'} = 'wpa2'; # none / wpa1 /wpa2
65 $wlanapsettings{'TXPOWER'} = 'auto';
66 $wlanapsettings{'CHANNEL'} = '05';
67 $wlanapsettings{'HW_MODE'} = 'g';
68 $wlanapsettings{'PWD'} = 'IPFire-2.x';
69 $wlanapsettings{'SYSLOGLEVEL'} = '0';
70 $wlanapsettings{'DEBUG'} = '4';
71 $wlanapsettings{'DRIVER'} = 'MADWIFI';
72
73 &General::readhash("/var/ipfire/wlanap/settings", \%wlanapsettings);
74 &Header::getcgihash(\%wlanapsettings);
75
76 my @macs = $wlanapsettings{'MACS'};
77
78 delete $wlanapsettings{'__CGI__'};
79 delete $wlanapsettings{'x'};
80 delete $wlanapsettings{'y'};
81 delete $wlanapsettings{'MACS'};
82 delete $wlanapsettings{'ACCEPT_MACS'};
83 delete $wlanapsettings{'DENY_MACS'};
84
85 &Header::showhttpheaders();
86
87 if ( $wlanapsettings{'ACTION'} eq "$Lang::tr{'save'}" ){
88 # verify WPA Passphrase, must be 8 .. 63 characters
89 if ( (length($wlanapsettings{'PWD'}) < 8) || (length($wlanapsettings{'PWD'}) > 63) ){
90 $errormessage .= "Invalid length in WPA Passphrase. Must be between 8 and 63 characters.<br />";
91 }
92
93 if ( $errormessage eq '' ){
94 &General::writehash("/var/ipfire/wlanap/settings", \%wlanapsettings);
95 &WriteConfig_hostapd();
96
97 system("/usr/local/bin/wlanapctrl restart >/dev/null 2>&1");
98 }
99 }elsif ( $wlanapsettings{'ACTION'} eq "$Lang::tr{'interface'}" ){
100 &General::writehash("/var/ipfire/wlanap/settings", \%wlanapsettings);
101 }elsif ( $wlanapsettings{'ACTION'} eq 'Start' ){
102 system("/usr/local/bin/wlanapctrl start >/dev/null 2>&1");
103 }elsif ( $wlanapsettings{'ACTION'} eq 'Stop' ){
104 system("/usr/local/bin/wlanapctrl stop >/dev/null 2>&1");
105 }elsif ( $wlanapsettings{'ACTION'} eq 'Restart' ){
106 system("/usr/local/bin/wlanapctrl restart >/dev/null 2>&1");
107 }
108
109 &Header::openpage('WLAN', 1, '', '');
110 &Header::openbigbox('100%', 'left', '', $errormessage);
111
112 if ( $errormessage ){
113 &Header::openbox('100%', 'center', $Lang::tr{'error messages'});
114 print "<class name='base'>$errormessage\n";
115 print "&nbsp;</class>\n";
116 &Header::closebox();
117 }
118
119
120 # Found this usefull piece of code in BlockOutTraffic AddOn 8-)
121 # fwrules.cgi
122 ###############
123 # DEBUG DEBUG
124 if ( $debug ){
125 &Header::openbox('100%', 'center', 'DEBUG');
126 my $debugCount = 0;
127 foreach my $line (sort keys %wlanapsettings) {
128 print "$line = '$wlanapsettings{$line}'<br />\n";
129 $debugCount++;
130 }
131 print "&nbsp;Count: $debugCount\n";
132 &Header::closebox();
133 }
134 # DEBUG DEBUG
135 ###############
136
137 #
138 # Driver and status detection
139 #
140 my $wlan_card_status = 'dummy';
141 my $wlan_ap_status = '';
142 my $message = "";
143
144 $selected{'INTERFACE'}{'green0'} = '';
145 $selected{'INTERFACE'}{'blue0'} = '';
146 $selected{'ENC'}{$wlanapsettings{'INTERFACE'}} = "selected='selected'";
147
148 if ( ($wlanapsettings{'INTERFACE'} eq '') ){
149 $message = "No WLan Interface selected.";
150 &Header::openbox('100%', 'center', "WLAN AP");
151 print <<END
152 $message<br />
153 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
154 <select name='INTERFACE'>
155 <option value='green0' $selected{'INTERFACE'}{'green0'}>green0</option>
156 END
157 ;
158 if ( $netsettings{'BLUE_DEV'} ne ''){
159 print "<option value='blue0' $selected{'INTERFACE'}{'blue0'}>blue0</option>";
160 }
161 print <<END
162 </select>
163 <br />
164 <input type='hidden' name='ACTION' value='$Lang::tr{'interface'}' />
165 <input type='image' alt='$Lang::tr{'save'}' title='$Lang::tr{'save'}' src='/images/media-floppy.png' /></form>
166 END
167 ;
168 &Header::closebox();
169 &Header::closebigbox();
170 &Header::closepage();
171 exit;
172 }else{
173 my $cmd_out = `/usr/sbin/iwconfig $wlanapsettings{'INTERFACE'} 2>/dev/null`;
174
175 if ( $cmd_out eq '' ){
176 $message = "Interface is not a WLAN card.";
177 $wlan_card_status = '';
178 }else{
179 $cmd_out = `/sbin/ifconfig | /bin/grep $wlanapsettings{'INTERFACE'}`;
180 if ( $cmd_out eq '' ){
181 $wlan_card_status = 'down';
182 }else{
183 $wlan_card_status = 'up';
184 $cmd_out = `/usr/sbin/iwconfig $wlanapsettings{'INTERFACE'} | /bin/grep "Mode:Master"`;
185 if ( $cmd_out ne '' ){
186 $wlan_ap_status = 'up';
187 }
188 }
189 }
190 }
191
192 $checked{'HIDESSID'}{'off'} = '';
193 $checked{'HIDESSID'}{'on'} = '';
194 $checked{'HIDESSID'}{$wlanapsettings{'HIDESSID'}} = "checked='checked'";
195
196 $selected{'ENC'}{$wlanapsettings{'ENC'}} = "selected='selected'";
197 $selected{'CHANNEL'}{$wlanapsettings{'CHANNEL'}} = "selected='selected'";
198 $selected{'TXPOWER'}{$wlanapsettings{'TXPOWER'}} = "selected='selected'";
199 $selected{'HW_MODE'}{$wlanapsettings{'HW_MODE'}} = "selected='selected'";
200 $selected{'MACMODE'}{$wlanapsettings{'MACMODE'}} = "selected='selected'";
201
202 my @channellist_cmd = `iwlist $wlanapsettings{'INTERFACE'} channel`;
203 # get available channels
204
205 my @temp;
206 foreach (@channellist_cmd){
207 $_ =~ /(.*)Channel (\d+)(.*):/;
208 $channel = $2;chomp $channel;
209 if ( $channel =~ /\d+/ ){push(@temp,$channel);}
210 }
211 my @channellist = @temp;
212
213 my @txpower_cmd = `iwlist $wlanapsettings{'INTERFACE'} txpower`;
214 # get available channels
215
216 my @temp;
217 foreach (@txpower_cmd){
218 $_ =~ /(\s)(\d+)(\s)dBm(\s)(.*)(\W)(\d+)(.*)/;
219 $txpower = $7;chomp $txpower;
220 if ( $txpower =~ /\d+/ ){push(@temp,$txpower."mW");}
221 }
222 my @txpower = @temp;
223 push(@txpower,"auto");
224
225 $selected{'SYSLOGLEVEL'}{$wlanapsettings{'SYSLOGLEVEL'}} = "selected='selected'";
226 $selected{'DEBUG'}{$wlanapsettings{'DEBUG'}} = "selected='selected'";
227
228 #
229 # Status box
230 #
231 &Header::openbox('100%', 'center', "WLAN AP");
232 print <<END
233 <table width='95%' cellspacing='0'>
234 <tr><td bgcolor='$color{'color20'}' colspan='2' align='left'><b>WLAN Services</b></td></tr>
235 END
236 ;
237 if ( $wlan_card_status ne '' ){
238 print "<tr><td class='base'>WLAN card ($wlanapsettings{'DRIVER'})</td>";
239 print $wlan_card_status eq 'up' ? $status_started : $status_stopped;
240 print "<tr><td class='base'>Access Point</td>";
241 print $wlan_ap_status eq 'up' ? $status_started : $status_stopped;
242 }else{
243 print "<tr><td colspan='2' class='base'><b>$message</b></td></tr>";
244 }
245 print "</table>";
246
247 print <<END
248 <br />
249 <table width='95%' cellspacing='0'>
250 <tr><td align='left' width='40%' />
251 <td align='center' ><form method='post' action='$ENV{'SCRIPT_NAME'}'><input type='hidden' name='ACTION' value='Start' /><input type='image' alt='Start' title='Start' src='/images/go-up.png' /></form></td>
252 <td align='center' ><form method='post' action='$ENV{'SCRIPT_NAME'}'><input type='hidden' name='ACTION' value='Stop' /><input type='image' alt='Stop' title='Stop' src='/images/go-down.png' /></form></td>
253 <td align='center' ><form method='post' action='$ENV{'SCRIPT_NAME'}'><input type='hidden' name='ACTION' value='Restart' /><input type='image' alt='Restart' title='Restart' src='/images/view-refresh.png' /></form></td></tr>
254 </table>
255 END
256 ;
257
258 if ( $wlan_card_status eq '' ){
259 &Header::closebox();
260 &Header::closebigbox();
261 &Header::closepage();
262 exit 0;
263 }
264 print <<END
265 <br />
266 <form method='post' action='$ENV{'SCRIPT_NAME'}'>
267 <table width='95%' cellspacing='0'>
268 <tr><td bgcolor='$color{'color20'}' colspan='4' align='left'><b>WLAN Settings</b>
269 <tr><td width='25%' class='base'>SSID:&nbsp;</td><td class='base' colspan='3'><input type='text' name='SSID' size='40' value='$wlanapsettings{'SSID'}' /></td></tr>
270 <tr><td width='25%' class='base'>Disable SSID broadcast:&nbsp;</td><td class='base' colspan='3'>on <input type='radio' name='HIDESSID' value='on' $checked{'HIDESSID'}{'on'} />/
271 <input type='radio' name='HIDESSID' value='off' $checked{'HIDESSID'}{'off'} /> off</td></tr>
272 <tr><td width='25%' class='base'>HW Mode:&nbsp;</td><td class='base' colspan='3'>
273 <select name='HW_MODE'>
274 <option value='a' $selected{'HW_MODE'}{'a'}>a</option>
275 <option value='b' $selected{'HW_MODE'}{'b'}>b</option>
276 <option value='g' $selected{'HW_MODE'}{'g'}>g</option>
277 <option value='n' $selected{'HW_MODE'}{'n'}>n</option>
278 </select>
279 </td></tr>
280
281 <tr><td width='25%' class='base'>Encryption:&nbsp;</td><td class='base' colspan='3'>
282 <select name='ENC'>
283 <option value='none' $selected{'ENC'}{'none'}>none</option>
284 <option value='wpa1' $selected{'ENC'}{'wpa1'}>wpa1</option>
285 <option value='wpa2' $selected{'ENC'}{'wpa2'}>wpa2</option>
286 </select>
287 </td></tr>
288 <tr><td width='25%' class='base'>Channel:&nbsp;</td><td class='base' colspan='3'>
289 <select name='CHANNEL'>
290 END
291 ;
292 foreach $channel (@channellist){
293 print "<option $selected{'CHANNEL'}{$channel}>$channel</option>";
294 }
295
296 print <<END
297 </select></td></tr>
298 <tr><td width='25%' class='base'>Tx Power:&nbsp;</td><td class='base' colspan='3'><select name='TXPOWER'>
299 END
300 ;
301 foreach $txpower (@txpower){
302 print "<option $selected{'TXPOWER'}{$txpower}>$txpower</option>&nbsp;dBm";
303 }
304 print <<END
305 </select></td></tr>
306 <tr><td width='25%' class='base'>Passphrase:&nbsp;</td><td class='base' colspan='3'><input type='text' name='PWD' size='63' value='$wlanapsettings{'PWD'}' /></td></tr>
307 <tr><td width='25%' class='base'>Loglevel (hostapd):&nbsp;</td><td class='base' width='25%'>
308 <select name='SYSLOGLEVEL'>
309 <option value='0' $selected{'SYSLOGLEVEL'}{'0'}>0 (verbose)</option>
310 <option value='1' $selected{'SYSLOGLEVEL'}{'1'}>1 (debugging)</option>
311 <option value='2' $selected{'SYSLOGLEVEL'}{'2'}>2 (informations)</option>
312 <option value='3' $selected{'SYSLOGLEVEL'}{'3'}>3 (notifications)</option>
313 <option value='4' $selected{'SYSLOGLEVEL'}{'4'}>4 (warnings)</option>
314 </select>
315 </td>
316 <td width='25%' class='base'>Debuglevel (hostapd):&nbsp;</td><td class='base' width='25%'>
317 <select name='DEBUG'>
318 <option value='0' $selected{'DEBUG'}{'0'}>0 (verbose)</option>
319 <option value='1' $selected{'DEBUG'}{'1'}>1 (debugging)</option>
320 <option value='2' $selected{'DEBUG'}{'2'}>2 (informations)</option>
321 <option value='3' $selected{'DEBUG'}{'3'}>3 (notifications)</option>
322 <option value='4' $selected{'DEBUG'}{'4'}>4 (warnings)</option>
323 </select>
324 </td></tr>
325 </table>
326 END
327 ;
328 if ( $wlanapsettings{'INTERFACE'} =~ /green0/ ){
329 print <<END
330 <br />
331 <table width='95%' cellspacing='0'>
332 <td width='25%' class='base'>Mac Filter:&nbsp;</td><td class='base' width='25%'>
333 <select name='MACMODE'>
334 <option value='0' $selected{'MACMODE'}{'0'}>0 (off)</option>
335 <option value='1' $selected{'MACMODE'}{'1'}>1 (Accept MACs)</option>
336 <option value='2' $selected{'MACMODE'}{'2'}>2 (Deny MACs)</option>
337 </select>
338 </td><td colspan='2'>Mac Adress List (one per line)<br /><textarea name='MACS' cols='20' rows='5' wrap='off'>
339 END
340 ;
341 print `cat /var/ipfire/wlanap/macfile`;
342 print <<END
343 </textarea></td>
344 </table>
345 END
346 ;
347 }
348 print <<END
349 <br />
350 <table width='10%' cellspacing='0'>
351 <tr><td align='center'><form method='post' action='$ENV{'SCRIPT_NAME'}'>
352 <input type='hidden' name='ACTION' value=$Lang::tr{'save'} />
353 <input type='image' alt='$Lang::tr{'save'}' title='$Lang::tr{'save'}' src='/images/media-floppy.png' /></form></td>
354 </tr>
355 </table>
356 END
357 ;
358
359 if ( $wlanapsettings{'DRIVER'} eq 'MADWIFI' ){
360 $status = `wlanconfig $wlanapsettings{'INTERFACE'} list`;
361 }
362 if ( $wlanapsettings{'DRIVER'} eq 'NL80211' ){
363 $status = `iw dev $wlanapsettings{'INTERFACE'} station dump`;
364 }
365 print <<END
366 <br />
367 <table width='95%' cellspacing='0'>
368 <tr><td bgcolor='$color{'color20'}' colspan='2' align='left'><b>WLAN Status</b></td></tr>
369 <tr><td><pre>@channellist_cmd</pre></td><td><pre>@txpower_cmd</pre></td></tr>
370 <tr><td colspan='2'><pre>$status</pre></td></tr>
371 </table>
372 END
373 ;
374 &Header::closebox();
375 print "</form>";
376 &Header::closebigbox();
377 &Header::closepage();
378
379 sub WriteConfig_hostapd{
380 $wlanapsettings{'DRIVER_HOSTAPD'} = lc($wlanapsettings{'DRIVER'});
381
382 open (CONFIGFILE, ">/var/ipfire/wlanap/hostapd.conf");
383 print CONFIGFILE <<END
384 ######################### basic hostapd configuration ##########################
385 #
386 interface=$wlanapsettings{'INTERFACE'}
387 driver=$wlanapsettings{'DRIVER_HOSTAPD'}
388 channel=$wlanapsettings{'CHANNEL'}
389 END
390 ;
391 if ( $wlanapsettings{'HW_MODE'} eq 'n' ){
392 print CONFIGFILE <<END
393 hw_mode=g
394 ieee80211n=1
395 END
396 ;
397
398 }else{
399 print CONFIGFILE <<END
400 hw_mode=$wlanapsettings{'HW_MODE'}
401 END
402 ;
403
404 }
405
406 print CONFIGFILE <<END
407 logger_syslog=-1
408 logger_syslog_level=$wlanapsettings{'SYSLOGLEVEL'}
409 logger_stdout=-1
410 logger_stdout_level=$wlanapsettings{'DEBUG'}
411 dump_file=/tmp/hostapd.dump
412 auth_algs=1
413 ctrl_interface=/var/run/hostapd
414 ctrl_interface_group=0
415 END
416 ;
417 if ( $wlanapsettings{'HIDESSID'} eq 'on' ){
418 print CONFIGFILE <<END
419 ssid=$wlanapsettings{'SSID'}
420 ignore_broadcast_ssid=2
421 END
422 ;
423
424 }else{
425 print CONFIGFILE <<END
426 ssid=$wlanapsettings{'SSID'}
427 ignore_broadcast_ssid=0
428 END
429 ;
430
431 }
432
433 if ( $wlanapsettings{'ENC'} eq 'wpa1'){
434 print CONFIGFILE <<END
435 ######################### wpa hostapd configuration ############################
436 #
437 wpa=1
438 wpa_passphrase=$wlanapsettings{'PWD'}
439 wpa_key_mgmt=WPA-PSK
440 wpa_pairwise=CCMP TKIP
441 END
442 ;
443 }elsif ( $wlanapsettings{'ENC'} eq 'wpa2'){
444 print CONFIGFILE <<END
445 ######################### wpa hostapd configuration ############################
446 #
447 wpa=2
448 wpa_passphrase=$wlanapsettings{'PWD'}
449 wpa_key_mgmt=WPA-PSK
450 wpa_pairwise=CCMP TKIP
451 END
452 ;
453 }
454 close CONFIGFILE;
455
456 open (MACFILE, ">/var/ipfire/wlanap/macfile");
457 foreach(@macs){
458 $_ =~ s/\r//gi;
459 chomp($_);
460 if ( $_ ne "" ){print MACFILE $_;}
461 }
462 close MACFILE;
463 }