vpn/vpn-provider.c

   1 /*
   2  *
   3  *  ConnMan VPN daemon
   4  *
   5  *  Copyright (C) 2012  Intel Corporation. All rights reserved.
   6  *
   7  *  This program is free software; you can redistribute it and/or modify
   8  *  it under the terms of the GNU General Public License version 2 as
   9  *  published by the Free Software Foundation.
  10  *
  11  *  This program is distributed in the hope that it will be useful,
  12  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14  *  GNU General Public License for more details.
  15  *
  16  *  You should have received a copy of the GNU General Public License
  17  *  along with this program; if not, write to the Free Software
  18  *  Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
  19  *
  20  */
  21
  22 #ifdef HAVE_CONFIG_H
  23 #include <config.h>
  24 #endif
  25
  26 #include <errno.h>
  27 #include <stdio.h>
  28 #include <string.h>
  29 #include <stdlib.h>
  30 #include <gdbus.h>
  31 #include <connman/log.h>
  32 #include <gweb/gresolv.h>
  33 #include <netdb.h>
  34
  35 #include "../src/connman.h"
  36 #include "connman/agent.h"
  37 #include "connman/vpn-dbus.h"
  38 #include "vpn-provider.h"
  39 #include "vpn.h"
  40
  41 enum {
  42         USER_ROUTES_CHANGED = 0x01,
  43         SERVER_ROUTES_CHANGED = 0x02,
  44 };
  45
  46 static DBusConnection *connection;
  47 static GHashTable *provider_hash;
  48 static GSList *driver_list;
  49 static int configuration_count;
  50 static gboolean handle_routes;
  51
  52 struct vpn_route {
  53         int family;
  54         char *network;
  55         char *netmask;
  56         char *gateway;
  57 };
  58
  59 struct vpn_provider {
  60         int refcount;
  61         int index;
  62         int fd;
  63         enum vpn_provider_state state;
  64         char *path;
  65         char *identifier;
  66         char *name;
  67         char *type;
  68         char *host;
  69         char *domain;
  70         int family;
  71         GHashTable *routes;
  72         struct vpn_provider_driver *driver;
  73         void *driver_data;
  74         GHashTable *setting_strings;
  75         GHashTable *user_routes;
  76         GSList *user_networks;
  77         GResolv *resolv;
  78         char **host_ip;
  79         struct vpn_ipconfig *ipconfig_ipv4;
  80         struct vpn_ipconfig *ipconfig_ipv6;
  81         char **nameservers;
  82         int what_changed;
  83         guint notify_id;
  84 };
  85
  86 static void free_route(gpointer data)
  87 {
  88         struct vpn_route *route = data;
  89
  90         g_free(route->network);
  91         g_free(route->netmask);
  92         g_free(route->gateway);
  93
  94         g_free(route);
  95 }
  96
  97 static void append_route(DBusMessageIter *iter, void *user_data)
  98 {
  99         struct vpn_route *route = user_data;
 100         DBusMessageIter item;
 101         int family = 0;
 102
 103         connman_dbus_dict_open(iter, &item);
 104
 105         if (route == NULL)
 106                 goto empty_dict;
 107
 108         if (route->family == AF_INET)
 109                 family = 4;
 110         else if (route->family == AF_INET6)
 111                 family = 6;
 112
 113         if (family != 0)
 114                 connman_dbus_dict_append_basic(&item, "ProtocolFamily",
 115                                         DBUS_TYPE_INT32, &family);
 116
 117         if (route->network != NULL)
 118                 connman_dbus_dict_append_basic(&item, "Network",
 119                                         DBUS_TYPE_STRING, &route->network);
 120
 121         if (route->netmask != NULL)
 122                 connman_dbus_dict_append_basic(&item, "Netmask",
 123                                         DBUS_TYPE_STRING, &route->netmask);
 124
 125         if (route->gateway != NULL)
 126                 connman_dbus_dict_append_basic(&item, "Gateway",
 127                                         DBUS_TYPE_STRING, &route->gateway);
 128
 129 empty_dict:
 130         connman_dbus_dict_close(iter, &item);
 131 }
 132
 133 static void append_routes(DBusMessageIter *iter, void *user_data)
 134 {
 135         GHashTable *routes = user_data;
 136         GHashTableIter hash;
 137         gpointer value, key;
 138
 139         if (routes == NULL) {
 140                 append_route(iter, NULL);
 141                 return;
 142         }
 143
 144         g_hash_table_iter_init(&hash, routes);
 145
 146         while (g_hash_table_iter_next(&hash, &key, &value) == TRUE) {
 147                 DBusMessageIter dict;
 148
 149                 dbus_message_iter_open_container(iter, DBUS_TYPE_STRUCT, NULL,
 150                                                 &dict);
 151                 append_route(&dict, value);
 152                 dbus_message_iter_close_container(iter, &dict);
 153         }
 154 }
 155
 156 static void send_routes(struct vpn_provider *provider, GHashTable *routes,
 157                         const char *name)
 158 {
 159         connman_dbus_property_changed_array(provider->path,
 160                                         VPN_CONNECTION_INTERFACE,
 161                                         name,
 162                                         DBUS_TYPE_DICT_ENTRY,
 163                                         append_routes,
 164                                         routes);
 165 }
 166
 167 static int provider_property_changed(struct vpn_provider *provider,
 168                                 const char *name)
 169 {
 170         DBG("provider %p name %s", provider, name);
 171
 172         if (g_str_equal(name, "UserRoutes") == TRUE)
 173                 send_routes(provider, provider->user_routes, name);
 174         else if (g_str_equal(name, "ServerRoutes") == TRUE)
 175                 send_routes(provider, provider->routes, name);
 176
 177         return 0;
 178 }
 179
 180 static GSList *read_route_dict(GSList *routes, DBusMessageIter *dicts)
 181 {
 182         DBusMessageIter dict, value, entry;
 183         const char *network, *netmask, *gateway;
 184         struct vpn_route *route;
 185         int family, type;
 186         const char *key;
 187
 188         dbus_message_iter_recurse(dicts, &entry);
 189
 190         network = netmask = gateway = NULL;
 191         family = PF_UNSPEC;
 192
 193         while (dbus_message_iter_get_arg_type(&entry) == DBUS_TYPE_DICT_ENTRY) {
 194
 195                 dbus_message_iter_recurse(&entry, &dict);
 196                 dbus_message_iter_get_basic(&dict, &key);
 197
 198                 dbus_message_iter_next(&dict);
 199                 dbus_message_iter_recurse(&dict, &value);
 200
 201                 type = dbus_message_iter_get_arg_type(&value);
 202
 203                 switch (type) {
 204                 case DBUS_TYPE_STRING:
 205                         if (g_str_equal(key, "ProtocolFamily") == TRUE)
 206                                 dbus_message_iter_get_basic(&value, &family);
 207                         else if (g_str_equal(key, "Network") == TRUE)
 208                                 dbus_message_iter_get_basic(&value, &network);
 209                         else if (g_str_equal(key, "Netmask") == TRUE)
 210                                 dbus_message_iter_get_basic(&value, &netmask);
 211                         else if (g_str_equal(key, "Gateway") == TRUE)
 212                                 dbus_message_iter_get_basic(&value, &gateway);
 213                         break;
 214                 }
 215
 216                 dbus_message_iter_next(&entry);
 217         }
 218
 219         DBG("family %d network %s netmask %s gateway %s", family,
 220                 network, netmask, gateway);
 221
 222         if (network == NULL || netmask == NULL) {
 223                 DBG("Ignoring route as network/netmask is missing");
 224                 return routes;
 225         }
 226
 227         route = g_try_new(struct vpn_route, 1);
 228         if (route == NULL) {
 229                 g_slist_free_full(routes, free_route);
 230                 return NULL;
 231         }
 232
 233         if (family == PF_UNSPEC) {
 234                 family = connman_inet_check_ipaddress(network);
 235                 if (family < 0) {
 236                         DBG("Cannot get address family of %s (%d/%s)", network,
 237                                 family, gai_strerror(family));
 238                         if (strstr(network, ":") != NULL) {
 239                                 DBG("Guessing it is IPv6");
 240                                 family = AF_INET6;
 241                         } else {
 242                                 DBG("Guessing it is IPv4");
 243                                 family = AF_INET;
 244                         }
 245                 }
 246         } else {
 247                 switch (family) {
 248                 case '4':
 249                         family = AF_INET;
 250                         break;
 251                 case '6':
 252                         family = AF_INET6;
 253                         break;
 254                 default:
 255                         family = PF_UNSPEC;
 256                         break;
 257                 }
 258         }
 259
 260         route->family = family;
 261         route->network = g_strdup(network);
 262         route->netmask = g_strdup(netmask);
 263         route->gateway = g_strdup(gateway);
 264
 265         routes = g_slist_prepend(routes, route);
 266         return routes;
 267 }
 268
 269 static GSList *get_user_networks(DBusMessageIter *array)
 270 {
 271         DBusMessageIter entry;
 272         GSList *list = NULL;
 273
 274         while (dbus_message_iter_get_arg_type(array) == DBUS_TYPE_ARRAY) {
 275
 276                 dbus_message_iter_recurse(array, &entry);
 277
 278                 while (dbus_message_iter_get_arg_type(&entry) ==
 279                                                         DBUS_TYPE_STRUCT) {
 280                         DBusMessageIter dicts;
 281
 282                         dbus_message_iter_recurse(&entry, &dicts);
 283
 284                         while (dbus_message_iter_get_arg_type(&dicts) ==
 285                                                         DBUS_TYPE_ARRAY) {
 286
 287                                 list = read_route_dict(list, &dicts);
 288                                 dbus_message_iter_next(&dicts);
 289                         }
 290
 291                         dbus_message_iter_next(&entry);
 292                 }
 293
 294                 dbus_message_iter_next(array);
 295         }
 296
 297         return list;
 298 }
 299
 300 static void set_user_networks(struct vpn_provider *provider, GSList *networks)
 301 {
 302         GSList *list;
 303
 304         for (list = networks; list != NULL; list = g_slist_next(list)) {
 305                 struct vpn_route *route= list->data;
 306
 307                 if (__vpn_provider_append_user_route(provider,
 308                                         route->family, route->network,
 309                                         route->netmask) != 0)
 310                         break;
 311         }
 312 }
 313
 314 static void del_routes(struct vpn_provider *provider)
 315 {
 316         GHashTableIter hash;
 317         gpointer value, key;
 318
 319         g_hash_table_iter_init(&hash, provider->user_routes);
 320         while (handle_routes == TRUE && g_hash_table_iter_next(&hash,
 321                                                 &key, &value) == TRUE) {
 322                 struct vpn_route *route = value;
 323                 if (route->family == AF_INET6) {
 324                         unsigned char prefixlen = atoi(route->netmask);
 325                         connman_inet_del_ipv6_network_route(provider->index,
 326                                                         route->network,
 327                                                         prefixlen);
 328                 } else
 329                         connman_inet_del_host_route(provider->index,
 330                                                 route->network);
 331         }
 332
 333         g_hash_table_remove_all(provider->user_routes);
 334         g_slist_free_full(provider->user_networks, free_route);
 335         provider->user_networks = NULL;
 336 }
 337
 338 static gboolean provider_send_changed(gpointer data)
 339 {
 340         struct vpn_provider *provider = data;
 341
 342         if (provider->what_changed & USER_ROUTES_CHANGED)
 343                 provider_property_changed(provider, "UserRoutes");
 344
 345         if (provider->what_changed & SERVER_ROUTES_CHANGED)
 346                 provider_property_changed(provider, "ServerRoutes");
 347
 348         provider->what_changed = 0;
 349         provider->notify_id = 0;
 350
 351         return FALSE;
 352 }
 353
 354 static void provider_schedule_changed(struct vpn_provider *provider, int flag)
 355 {
 356         if (provider->notify_id != 0)
 357                 g_source_remove(provider->notify_id);
 358
 359         provider->what_changed |= flag;
 360
 361         provider->notify_id = g_timeout_add(100, provider_send_changed,
 362                                                                 provider);
 363 }
 364
 365 static DBusMessage *set_property(DBusConnection *conn, DBusMessage *msg,
 366                                                                 void *data)
 367 {
 368         struct vpn_provider *provider = data;
 369         DBusMessageIter iter, value;
 370         const char *name;
 371         int type;
 372
 373         DBG("conn %p", conn);
 374
 375         if (dbus_message_iter_init(msg, &iter) == FALSE)
 376                 return __connman_error_invalid_arguments(msg);
 377
 378         if (dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_STRING)
 379                 return __connman_error_invalid_arguments(msg);
 380
 381         dbus_message_iter_get_basic(&iter, &name);
 382         dbus_message_iter_next(&iter);
 383
 384         if (dbus_message_iter_get_arg_type(&iter) != DBUS_TYPE_VARIANT)
 385                 return __connman_error_invalid_arguments(msg);
 386
 387         dbus_message_iter_recurse(&iter, &value);
 388
 389         type = dbus_message_iter_get_arg_type(&value);
 390
 391         if (g_str_equal(name, "UserRoutes") == TRUE) {
 392                 GSList *networks;
 393
 394                 if (type != DBUS_TYPE_ARRAY)
 395                         return __connman_error_invalid_arguments(msg);
 396
 397                 networks = get_user_networks(&value);
 398                 if (networks != NULL) {
 399                         del_routes(provider);
 400                         provider->user_networks = networks;
 401                         set_user_networks(provider, provider->user_networks);
 402
 403                         if (handle_routes == FALSE)
 404                                 provider_schedule_changed(provider,
 405                                                         USER_ROUTES_CHANGED);
 406                 }
 407         } else
 408                 return __connman_error_invalid_property(msg);
 409
 410         return g_dbus_create_reply(msg, DBUS_TYPE_INVALID);
 411 }
 412
 413 static DBusMessage *clear_property(DBusConnection *conn, DBusMessage *msg,
 414                                                                 void *data)
 415 {
 416         struct vpn_provider *provider = data;
 417         const char *name;
 418
 419         DBG("conn %p", conn);
 420
 421         dbus_message_get_args(msg, NULL, DBUS_TYPE_STRING, &name,
 422                                                         DBUS_TYPE_INVALID);
 423
 424         if (g_str_equal(name, "UserRoutes") == TRUE) {
 425                 del_routes(provider);
 426
 427                 if (handle_routes == FALSE)
 428                         provider_property_changed(provider, name);
 429         } else {
 430                 return __connman_error_invalid_property(msg);
 431         }
 432
 433         return g_dbus_create_reply(msg, DBUS_TYPE_INVALID);
 434 }
 435
 436 static DBusMessage *do_connect(DBusConnection *conn, DBusMessage *msg,
 437                                                                 void *data)
 438 {
 439         struct vpn_provider *provider = data;
 440         int err;
 441
 442         DBG("conn %p provider %p", conn, provider);
 443
 444         err = __vpn_provider_connect(provider, msg);
 445         if (err < 0)
 446                 return __connman_error_failed(msg, -err);
 447
 448         return NULL;
 449 }
 450
 451 static DBusMessage *do_disconnect(DBusConnection *conn, DBusMessage *msg,
 452                                                                 void *data)
 453 {
 454         struct vpn_provider *provider = data;
 455         int err;
 456
 457         DBG("conn %p provider %p", conn, provider);
 458
 459         err = __vpn_provider_disconnect(provider);
 460         if (err < 0 && err != -EINPROGRESS)
 461                 return __connman_error_failed(msg, -err);
 462
 463         return g_dbus_create_reply(msg, DBUS_TYPE_INVALID);
 464 }
 465
 466 static const GDBusMethodTable connection_methods[] = {
 467         { GDBUS_METHOD("SetProperty",
 468                         GDBUS_ARGS({ "name", "s" }, { "value", "v" }),
 469                         NULL, set_property) },
 470         { GDBUS_METHOD("ClearProperty",
 471                         GDBUS_ARGS({ "name", "s" }), NULL,
 472                         clear_property) },
 473         { GDBUS_ASYNC_METHOD("Connect", NULL, NULL, do_connect) },
 474         { GDBUS_METHOD("Disconnect", NULL, NULL, do_disconnect) },
 475         { },
 476 };
 477
 478 static const GDBusSignalTable connection_signals[] = {
 479         { GDBUS_SIGNAL("PropertyChanged",
 480                         GDBUS_ARGS({ "name", "s" }, { "value", "v" })) },
 481         { },
 482 };
 483
 484 static void resolv_result(GResolvResultStatus status,
 485                                         char **results, gpointer user_data)
 486 {
 487         struct vpn_provider *provider = user_data;
 488
 489         DBG("status %d", status);
 490
 491         if (status == G_RESOLV_RESULT_STATUS_SUCCESS && results != NULL &&
 492                                                 g_strv_length(results) > 0)
 493                 provider->host_ip = g_strdupv(results);
 494
 495         vpn_provider_unref(provider);
 496 }
 497
 498 static void provider_resolv_host_addr(struct vpn_provider *provider)
 499 {
 500         if (provider->host == NULL)
 501                 return;
 502
 503         if (connman_inet_check_ipaddress(provider->host) > 0)
 504                 return;
 505
 506         if (provider->host_ip != NULL)
 507                 return;
 508
 509         /*
 510          * If the hostname is not numeric, try to resolv it. We do not wait
 511          * the result as it might take some time. We will get the result
 512          * before VPN will feed routes to us because VPN client will need
 513          * the IP address also before VPN connection can be established.
 514          */
 515         provider->resolv = g_resolv_new(0);
 516         if (provider->resolv == NULL) {
 517                 DBG("Cannot resolv %s", provider->host);
 518                 return;
 519         }
 520
 521         DBG("Trying to resolv %s", provider->host);
 522
 523         vpn_provider_ref(provider);
 524
 525         g_resolv_lookup_hostname(provider->resolv, provider->host,
 526                                 resolv_result, provider);
 527 }
 528
 529 void __vpn_provider_append_properties(struct vpn_provider *provider,
 530                                                         DBusMessageIter *iter)
 531 {
 532         if (provider->host != NULL)
 533                 connman_dbus_dict_append_basic(iter, "Host",
 534                                         DBUS_TYPE_STRING, &provider->host);
 535
 536         if (provider->domain != NULL)
 537                 connman_dbus_dict_append_basic(iter, "Domain",
 538                                         DBUS_TYPE_STRING, &provider->domain);
 539
 540         if (provider->type != NULL)
 541                 connman_dbus_dict_append_basic(iter, "Type", DBUS_TYPE_STRING,
 542                                                  &provider->type);
 543 }
 544
 545 int __vpn_provider_append_user_route(struct vpn_provider *provider,
 546                         int family, const char *network, const char *netmask)
 547 {
 548         struct vpn_route *route;
 549         char *key = g_strdup_printf("%d/%s/%s", family, network, netmask);
 550
 551         DBG("family %d network %s netmask %s", family, network, netmask);
 552
 553         route = g_hash_table_lookup(provider->user_routes, key);
 554         if (route == NULL) {
 555                 route = g_try_new0(struct vpn_route, 1);
 556                 if (route == NULL) {
 557                         connman_error("out of memory");
 558                         return -ENOMEM;
 559                 }
 560
 561                 route->family = family;
 562                 route->network = g_strdup(network);
 563                 route->netmask = g_strdup(netmask);
 564
 565                 g_hash_table_replace(provider->user_routes, key, route);
 566         } else
 567                 g_free(key);
 568
 569         return 0;
 570 }
 571
 572 static struct vpn_route *get_route(char *route_str)
 573 {
 574         char **elems = g_strsplit(route_str, "/", 0);
 575         char *network, *netmask, *gateway, *family_str;
 576         int family = PF_UNSPEC;
 577         struct vpn_route *route = NULL;
 578
 579         if (elems == NULL)
 580                 return NULL;
 581
 582         family_str = elems[0];
 583
 584         network = elems[1];
 585         if (network == NULL || network[0] == '\0')
 586                 goto out;
 587
 588         netmask = elems[2];
 589         if (netmask == NULL || netmask[0] == '\0')
 590                 goto out;
 591
 592         gateway = elems[3];
 593
 594         route = g_try_new0(struct vpn_route, 1);
 595         if (route == NULL)
 596                 goto out;
 597
 598         if (family_str[0] == '\0' || atoi(family_str) == 0) {
 599                 family = PF_UNSPEC;
 600         } else {
 601                 switch (family_str[0]) {
 602                 case '4':
 603                         family = AF_INET;
 604                         break;
 605                 case '6':
 606                         family = AF_INET6;
 607                         break;
 608                 }
 609         }
 610
 611         if (g_strrstr(network, ":") != NULL) {
 612                 if (family != PF_UNSPEC && family != AF_INET6)
 613                         DBG("You have IPv6 address but you have non IPv6 route");
 614         } else if (g_strrstr(network, ".") != NULL) {
 615                 if (family != PF_UNSPEC && family != AF_INET)
 616                         DBG("You have IPv4 address but you have non IPv4 route");
 617
 618                 if (g_strrstr(netmask, ".") == NULL) {
 619                         /* We have netmask length */
 620                         in_addr_t addr;
 621                         struct in_addr netmask_in;
 622                         unsigned char prefix_len = 32;
 623
 624                         if (netmask != NULL) {
 625                                 char *ptr;
 626                                 long int value = strtol(netmask, &ptr, 10);
 627                                 if (ptr != netmask && *ptr == '\0' &&
 628                                                                 value <= 32)
 629                                         prefix_len = value;
 630                         }
 631
 632                         addr = 0xffffffff << (32 - prefix_len);
 633                         netmask_in.s_addr = htonl(addr);
 634                         netmask = inet_ntoa(netmask_in);
 635
 636                         DBG("network %s netmask %s", network, netmask);
 637                 }
 638         }
 639
 640         if (family == PF_UNSPEC) {
 641                 family = connman_inet_check_ipaddress(network);
 642                 if (family < 0 || family == PF_UNSPEC)
 643                         goto out;
 644         }
 645
 646         route->family = family;
 647         route->network = g_strdup(network);
 648         route->netmask = g_strdup(netmask);
 649         route->gateway = g_strdup(gateway);
 650
 651 out:
 652         g_strfreev(elems);
 653         return route;
 654 }
 655
 656 static GSList *get_routes(gchar **networks)
 657 {
 658         struct vpn_route *route;
 659         GSList *routes = NULL;
 660         int i;
 661
 662         for (i = 0; networks[i] != NULL; i++) {
 663                 route = get_route(networks[i]);
 664                 if (route != NULL)
 665                         routes = g_slist_prepend(routes, route);
 666         }
 667
 668         return routes;
 669 }
 670
 671 static int provider_load_from_keyfile(struct vpn_provider *provider,
 672                 GKeyFile *keyfile)
 673 {
 674         gsize idx = 0;
 675         gchar **settings;
 676         gchar *key, *value;
 677         gsize length, num_user_networks;
 678         gchar **networks = NULL;
 679
 680         settings = g_key_file_get_keys(keyfile, provider->identifier, &length,
 681                                 NULL);
 682         if (settings == NULL) {
 683                 g_key_file_free(keyfile);
 684                 return -ENOENT;
 685         }
 686
 687         while (idx < length) {
 688                 key = settings[idx];
 689                 if (key != NULL) {
 690                         if (g_str_equal(key, "Networks") == TRUE) {
 691                                 networks = g_key_file_get_string_list(keyfile,
 692                                                 provider->identifier,
 693                                                 key,
 694                                                 &num_user_networks,
 695                                                 NULL);
 696                                 provider->user_networks = get_routes(networks);
 697
 698                         } else {
 699                                 value = g_key_file_get_string(keyfile,
 700                                                         provider->identifier,
 701                                                         key, NULL);
 702                                 vpn_provider_set_string(provider, key,
 703                                                         value);
 704                                 g_free(value);
 705                         }
 706                 }
 707                 idx += 1;
 708         }
 709         g_strfreev(settings);
 710         g_strfreev(networks);
 711
 712         if (provider->user_networks != NULL)
 713                 set_user_networks(provider, provider->user_networks);
 714
 715         return 0;
 716 }
 717
 718
 719 static int vpn_provider_load(struct vpn_provider *provider)
 720 {
 721         GKeyFile *keyfile;
 722
 723         DBG("provider %p", provider);
 724
 725         keyfile = __connman_storage_load_provider(provider->identifier);
 726         if (keyfile == NULL)
 727                 return -ENOENT;
 728
 729         provider_load_from_keyfile(provider, keyfile);
 730
 731         g_key_file_free(keyfile);
 732         return 0;
 733 }
 734
 735 static gchar **create_network_list(GSList *networks, gsize *count)
 736 {
 737         GSList *list;
 738         gchar **result = NULL;
 739         unsigned int num_elems = 0;
 740
 741         for (list = networks; list != NULL; list = g_slist_next(list)) {
 742                 struct vpn_route *route = list->data;
 743                 int family;
 744
 745                 result = g_try_realloc(result,
 746                                 (num_elems + 1) * sizeof(gchar *));
 747                 if (result == NULL)
 748                         return NULL;
 749
 750                 switch (route->family) {
 751                 case AF_INET:
 752                         family = 4;
 753                         break;
 754                 case AF_INET6:
 755                         family = 6;
 756                         break;
 757                 default:
 758                         family = 0;
 759                         break;
 760                 }
 761
 762                 result[num_elems] = g_strdup_printf("%d/%s/%s/%s",
 763                                 family, route->network, route->netmask,
 764                                 route->gateway == NULL ? "" : route->gateway);
 765
 766                 num_elems++;
 767         }
 768
 769         result = g_try_realloc(result, (num_elems + 1) * sizeof(gchar *));
 770         if (result == NULL)
 771                 return NULL;
 772
 773         result[num_elems] = NULL;
 774         *count = num_elems;
 775         return result;
 776 }
 777
 778 static int vpn_provider_save(struct vpn_provider *provider)
 779 {
 780         GKeyFile *keyfile;
 781
 782         DBG("provider %p", provider);
 783
 784         keyfile = g_key_file_new();
 785         if (keyfile == NULL)
 786                 return -ENOMEM;
 787
 788         g_key_file_set_string(keyfile, provider->identifier,
 789                         "Name", provider->name);
 790         g_key_file_set_string(keyfile, provider->identifier,
 791                         "Type", provider->type);
 792         g_key_file_set_string(keyfile, provider->identifier,
 793                         "Host", provider->host);
 794         g_key_file_set_string(keyfile, provider->identifier,
 795                         "VPN.Domain", provider->domain);
 796         if (provider->user_networks != NULL) {
 797                 gchar **networks;
 798                 gsize network_count;
 799
 800                 networks = create_network_list(provider->user_networks,
 801                                                         &network_count);
 802                 if (networks != NULL) {
 803                         g_key_file_set_string_list(keyfile,
 804                                                 provider->identifier,
 805                                                 "Networks",
 806                                                 (const gchar ** const)networks,
 807                                                 network_count);
 808                         g_strfreev(networks);
 809                 }
 810         }
 811
 812         if (provider->driver != NULL && provider->driver->save != NULL)
 813                 provider->driver->save(provider, keyfile);
 814
 815         __connman_storage_save_provider(keyfile, provider->identifier);
 816         g_key_file_free(keyfile);
 817
 818         return 0;
 819 }
 820
 821 struct vpn_provider *__vpn_provider_lookup(const char *identifier)
 822 {
 823         struct vpn_provider *provider = NULL;
 824
 825         provider = g_hash_table_lookup(provider_hash, identifier);
 826
 827         return provider;
 828 }
 829
 830 static gboolean match_driver(struct vpn_provider *provider,
 831                                 struct vpn_provider_driver *driver)
 832 {
 833         if (g_strcmp0(driver->name, provider->type) == 0)
 834                 return TRUE;
 835
 836         return FALSE;
 837 }
 838
 839 static int provider_probe(struct vpn_provider *provider)
 840 {
 841         GSList *list;
 842
 843         DBG("provider %p driver %p name %s", provider, provider->driver,
 844                                                 provider->name);
 845
 846         if (provider->driver != NULL)
 847                 return -EALREADY;
 848
 849         for (list = driver_list; list; list = list->next) {
 850                 struct vpn_provider_driver *driver = list->data;
 851
 852                 if (match_driver(provider, driver) == FALSE)
 853                         continue;
 854
 855                 DBG("driver %p name %s", driver, driver->name);
 856
 857                 if (driver->probe != NULL && driver->probe(provider) == 0) {
 858                         provider->driver = driver;
 859                         break;
 860                 }
 861         }
 862
 863         if (provider->driver == NULL)
 864                 return -ENODEV;
 865
 866         return 0;
 867 }
 868
 869 static void provider_remove(struct vpn_provider *provider)
 870 {
 871         if (provider->driver != NULL) {
 872                 provider->driver->remove(provider);
 873                 provider->driver = NULL;
 874         }
 875 }
 876
 877 static int provider_register(struct vpn_provider *provider)
 878 {
 879         return provider_probe(provider);
 880 }
 881
 882 static void provider_unregister(struct vpn_provider *provider)
 883 {
 884         provider_remove(provider);
 885 }
 886
 887 struct vpn_provider *
 888 vpn_provider_ref_debug(struct vpn_provider *provider,
 889                         const char *file, int line, const char *caller)
 890 {
 891         DBG("%p ref %d by %s:%d:%s()", provider, provider->refcount + 1,
 892                 file, line, caller);
 893
 894         __sync_fetch_and_add(&provider->refcount, 1);
 895
 896         return provider;
 897 }
 898
 899 static void provider_destruct(struct vpn_provider *provider)
 900 {
 901         DBG("provider %p", provider);
 902
 903         if (provider->notify_id != 0)
 904                 g_source_remove(provider->notify_id);
 905
 906         g_free(provider->name);
 907         g_free(provider->type);
 908         g_free(provider->host);
 909         g_free(provider->domain);
 910         g_free(provider->identifier);
 911         g_free(provider->path);
 912         g_slist_free_full(provider->user_networks, free_route);
 913         g_strfreev(provider->nameservers);
 914         g_hash_table_destroy(provider->routes);
 915         g_hash_table_destroy(provider->user_routes);
 916         g_hash_table_destroy(provider->setting_strings);
 917         if (provider->resolv != NULL) {
 918                 g_resolv_unref(provider->resolv);
 919                 provider->resolv = NULL;
 920         }
 921         __vpn_ipconfig_unref(provider->ipconfig_ipv4);
 922         __vpn_ipconfig_unref(provider->ipconfig_ipv6);
 923
 924         g_strfreev(provider->host_ip);
 925         g_free(provider);
 926 }
 927
 928 void vpn_provider_unref_debug(struct vpn_provider *provider,
 929                                 const char *file, int line, const char *caller)
 930 {
 931         DBG("%p ref %d by %s:%d:%s()", provider, provider->refcount - 1,
 932                 file, line, caller);
 933
 934         if (__sync_fetch_and_sub(&provider->refcount, 1) != 1)
 935                 return;
 936
 937         provider_remove(provider);
 938
 939         provider_destruct(provider);
 940 }
 941
 942 static void configuration_count_add(void)
 943 {
 944         DBG("count %d", configuration_count + 1);
 945
 946         __sync_fetch_and_add(&configuration_count, 1);
 947 }
 948
 949 static void configuration_count_del(void)
 950 {
 951         DBG("count %d", configuration_count - 1);
 952
 953         if (__sync_fetch_and_sub(&configuration_count, 1) != 1)
 954                 return;
 955
 956         raise(SIGTERM);
 957 }
 958
 959 int __vpn_provider_disconnect(struct vpn_provider *provider)
 960 {
 961         int err;
 962
 963         DBG("provider %p", provider);
 964
 965         if (provider->driver != NULL && provider->driver->disconnect != NULL)
 966                 err = provider->driver->disconnect(provider);
 967         else
 968                 return -EOPNOTSUPP;
 969
 970         if (err == -EINPROGRESS)
 971                 vpn_provider_set_state(provider, VPN_PROVIDER_STATE_CONNECT);
 972
 973         return err;
 974 }
 975
 976 static void connect_cb(struct vpn_provider *provider, void *user_data,
 977                                                                 int error)
 978 {
 979         DBusMessage *pending = user_data;
 980
 981         DBG("provider %p user %p error %d", provider, user_data, error);
 982
 983         if (error != 0) {
 984                 DBusMessage *reply = __connman_error_failed(pending, error);
 985                 if (reply != NULL)
 986                         g_dbus_send_message(connection, reply);
 987
 988                 vpn_provider_indicate_error(provider,
 989                                         VPN_PROVIDER_ERROR_CONNECT_FAILED);
 990                 vpn_provider_set_state(provider, VPN_PROVIDER_STATE_FAILURE);
 991         } else
 992                 g_dbus_send_reply(connection, pending, DBUS_TYPE_INVALID);
 993
 994         dbus_message_unref(pending);
 995 }
 996
 997 int __vpn_provider_connect(struct vpn_provider *provider, DBusMessage *msg)
 998 {
 999         int err;
1000
1001         DBG("provider %p", provider);
1002
1003         if (provider->driver != NULL && provider->driver->connect != NULL) {
1004                 dbus_message_ref(msg);
1005                 err = provider->driver->connect(provider, connect_cb, msg);
1006         } else
1007                 return -EOPNOTSUPP;
1008
1009         if (err == -EINPROGRESS)
1010                 vpn_provider_set_state(provider, VPN_PROVIDER_STATE_CONNECT);
1011
1012         return err;
1013 }
1014
1015 static void connection_removed_signal(struct vpn_provider *provider)
1016 {
1017         DBusMessage *signal;
1018         DBusMessageIter iter;
1019
1020         signal = dbus_message_new_signal(VPN_MANAGER_PATH,
1021                         VPN_MANAGER_INTERFACE, "ConnectionRemoved");
1022         if (signal == NULL)
1023                 return;
1024
1025         dbus_message_iter_init_append(signal, &iter);
1026         dbus_message_iter_append_basic(&iter, DBUS_TYPE_OBJECT_PATH,
1027                                                         &provider->path);
1028         dbus_connection_send(connection, signal, NULL);
1029         dbus_message_unref(signal);
1030 }
1031
1032 static char *get_ident(const char *path)
1033 {
1034         char *pos;
1035
1036         if (*path != '/')
1037                 return NULL;
1038
1039         pos = strrchr(path, '/');
1040         if (pos == NULL)
1041                 return NULL;
1042
1043         return pos + 1;
1044 }
1045
1046 int __vpn_provider_remove(const char *path)
1047 {
1048         struct vpn_provider *provider;
1049         char *ident;
1050
1051         DBG("path %s", path);
1052
1053         ident = get_ident(path);
1054
1055         provider = __vpn_provider_lookup(ident);
1056         if (provider != NULL)
1057                 return __vpn_provider_delete(provider);
1058
1059         return -ENXIO;
1060 }
1061
1062 int __vpn_provider_delete(struct vpn_provider *provider)
1063 {
1064         DBG("Deleting VPN %s", provider->identifier);
1065
1066         connection_removed_signal(provider);
1067
1068         provider_unregister(provider);
1069
1070         __connman_storage_remove_provider(provider->identifier);
1071
1072         g_hash_table_remove(provider_hash, provider->identifier);
1073
1074         return 0;
1075 }
1076
1077 static void append_ipv4(DBusMessageIter *iter, void *user_data)
1078 {
1079         struct vpn_provider *provider = user_data;
1080         const char *address, *gateway, *peer;
1081
1082         address = __vpn_ipconfig_get_local(provider->ipconfig_ipv4);
1083         if (address != NULL) {
1084                 in_addr_t addr;
1085                 struct in_addr netmask;
1086                 char *mask;
1087                 int prefixlen;
1088
1089                 prefixlen = __vpn_ipconfig_get_prefixlen(
1090                                                 provider->ipconfig_ipv4);
1091
1092                 addr = 0xffffffff << (32 - prefixlen);
1093                 netmask.s_addr = htonl(addr);
1094                 mask = inet_ntoa(netmask);
1095
1096                 connman_dbus_dict_append_basic(iter, "Address",
1097                                                 DBUS_TYPE_STRING, &address);
1098
1099                 connman_dbus_dict_append_basic(iter, "Netmask",
1100                                                 DBUS_TYPE_STRING, &mask);
1101         }
1102
1103         gateway = __vpn_ipconfig_get_gateway(provider->ipconfig_ipv4);
1104         if (gateway != NULL)
1105                 connman_dbus_dict_append_basic(iter, "Gateway",
1106                                                 DBUS_TYPE_STRING, &gateway);
1107
1108         peer = __vpn_ipconfig_get_peer(provider->ipconfig_ipv4);
1109         if (peer != NULL)
1110                 connman_dbus_dict_append_basic(iter, "Peer",
1111                                                 DBUS_TYPE_STRING, &peer);
1112 }
1113
1114 static void append_ipv6(DBusMessageIter *iter, void *user_data)
1115 {
1116         struct vpn_provider *provider = user_data;
1117         const char *address, *gateway, *peer;
1118
1119         address = __vpn_ipconfig_get_local(provider->ipconfig_ipv6);
1120         if (address != NULL) {
1121                 unsigned char prefixlen;
1122
1123                 connman_dbus_dict_append_basic(iter, "Address",
1124                                                 DBUS_TYPE_STRING, &address);
1125
1126                 prefixlen = __vpn_ipconfig_get_prefixlen(
1127                                                 provider->ipconfig_ipv6);
1128
1129                 connman_dbus_dict_append_basic(iter, "PrefixLength",
1130                                                 DBUS_TYPE_BYTE, &prefixlen);
1131         }
1132
1133         gateway = __vpn_ipconfig_get_gateway(provider->ipconfig_ipv6);
1134         if (gateway != NULL)
1135                 connman_dbus_dict_append_basic(iter, "Gateway",
1136                                                 DBUS_TYPE_STRING, &gateway);
1137
1138         peer = __vpn_ipconfig_get_peer(provider->ipconfig_ipv6);
1139         if (peer != NULL)
1140                 connman_dbus_dict_append_basic(iter, "Peer",
1141                                                 DBUS_TYPE_STRING, &peer);
1142 }
1143
1144 static const char *state2string(enum vpn_provider_state state)
1145 {
1146         switch (state) {
1147         case VPN_PROVIDER_STATE_UNKNOWN:
1148                 break;
1149         case VPN_PROVIDER_STATE_IDLE:
1150                 return "idle";
1151         case VPN_PROVIDER_STATE_CONNECT:
1152                 return "configuration";
1153         case VPN_PROVIDER_STATE_READY:
1154                 return "ready";
1155         case VPN_PROVIDER_STATE_DISCONNECT:
1156                 return "disconnect";
1157         case VPN_PROVIDER_STATE_FAILURE:
1158                 return "failure";
1159         }
1160
1161         return NULL;
1162 }
1163
1164 static int provider_indicate_state(struct vpn_provider *provider,
1165                                 enum vpn_provider_state state)
1166 {
1167         const char *str;
1168
1169         DBG("provider %p state %d", provider, state);
1170
1171         str = state2string(state);
1172         if (str == NULL)
1173                 return -EINVAL;
1174
1175         provider->state = state;
1176
1177         if (state == VPN_PROVIDER_STATE_READY) {
1178                 connman_dbus_property_changed_basic(provider->path,
1179                                         VPN_CONNECTION_INTERFACE, "Index",
1180                                         DBUS_TYPE_INT32, &provider->index);
1181
1182                 if (provider->family == AF_INET)
1183                         connman_dbus_property_changed_dict(provider->path,
1184                                         VPN_CONNECTION_INTERFACE, "IPv4",
1185                                         append_ipv4, provider);
1186                 else if (provider->family == AF_INET6)
1187                         connman_dbus_property_changed_dict(provider->path,
1188                                         VPN_CONNECTION_INTERFACE, "IPv6",
1189                                         append_ipv6, provider);
1190         }
1191
1192         connman_dbus_property_changed_basic(provider->path,
1193                                         VPN_CONNECTION_INTERFACE, "State",
1194                                         DBUS_TYPE_STRING, &str);
1195         return 0;
1196 }
1197
1198 static void append_nameservers(DBusMessageIter *iter, char **servers)
1199 {
1200         int i;
1201
1202         DBG("%p", servers);
1203
1204         for (i = 0; servers[i] != NULL; i++) {
1205                 DBG("servers[%d] %s", i, servers[i]);
1206                 dbus_message_iter_append_basic(iter,
1207                                         DBUS_TYPE_STRING, &servers[i]);
1208         }
1209 }
1210
1211 static void append_dns(DBusMessageIter *iter, void *user_data)
1212 {
1213         struct vpn_provider *provider = user_data;
1214
1215         if (provider->nameservers != NULL)
1216                 append_nameservers(iter, provider->nameservers);
1217 }
1218
1219 static void append_state(DBusMessageIter *iter,
1220                                         struct vpn_provider *provider)
1221 {
1222         char *str;
1223
1224         switch (provider->state) {
1225         case VPN_PROVIDER_STATE_UNKNOWN:
1226         case VPN_PROVIDER_STATE_IDLE:
1227                 str = "idle";
1228                 break;
1229         case VPN_PROVIDER_STATE_CONNECT:
1230                 str = "configuration";
1231                 break;
1232         case VPN_PROVIDER_STATE_READY:
1233                 str = "ready";
1234                 break;
1235         case VPN_PROVIDER_STATE_DISCONNECT:
1236                 str = "disconnect";
1237                 break;
1238         case VPN_PROVIDER_STATE_FAILURE:
1239                 str = "failure";
1240                 break;
1241         }
1242
1243         connman_dbus_dict_append_basic(iter, "State",
1244                                 DBUS_TYPE_STRING, &str);
1245 }
1246
1247 static void append_properties(DBusMessageIter *iter,
1248                                         struct vpn_provider *provider)
1249 {
1250         DBusMessageIter dict;
1251
1252         connman_dbus_dict_open(iter, &dict);
1253
1254         append_state(&dict, provider);
1255
1256         if (provider->type != NULL)
1257                 connman_dbus_dict_append_basic(&dict, "Type",
1258                                         DBUS_TYPE_STRING, &provider->type);
1259
1260         if (provider->name != NULL)
1261                 connman_dbus_dict_append_basic(&dict, "Name",
1262                                         DBUS_TYPE_STRING, &provider->name);
1263
1264         if (provider->host != NULL)
1265                 connman_dbus_dict_append_basic(&dict, "Host",
1266                                         DBUS_TYPE_STRING, &provider->host);
1267         if (provider->index >= 0)
1268                 connman_dbus_dict_append_basic(&dict, "Index",
1269                                         DBUS_TYPE_INT32, &provider->index);
1270         if (provider->domain != NULL)
1271                 connman_dbus_dict_append_basic(&dict, "Domain",
1272                                         DBUS_TYPE_STRING, &provider->domain);
1273
1274         if (provider->family == AF_INET)
1275                 connman_dbus_dict_append_dict(&dict, "IPv4", append_ipv4,
1276                                                 provider);
1277         else if (provider->family == AF_INET6)
1278                 connman_dbus_dict_append_dict(&dict, "IPv6", append_ipv6,
1279                                                 provider);
1280
1281         connman_dbus_dict_append_array(&dict, "Nameservers",
1282                                 DBUS_TYPE_STRING, append_dns, provider);
1283
1284         connman_dbus_dict_append_array(&dict, "UserRoutes",
1285                                 DBUS_TYPE_DICT_ENTRY, append_routes,
1286                                 provider->user_routes);
1287
1288         connman_dbus_dict_append_array(&dict, "ServerRoutes",
1289                                 DBUS_TYPE_DICT_ENTRY, append_routes,
1290                                 provider->routes);
1291
1292         connman_dbus_dict_close(iter, &dict);
1293 }
1294
1295 static void connection_added_signal(struct vpn_provider *provider)
1296 {
1297         DBusMessage *signal;
1298         DBusMessageIter iter;
1299
1300         signal = dbus_message_new_signal(VPN_MANAGER_PATH,
1301                         VPN_MANAGER_INTERFACE, "ConnectionAdded");
1302         if (signal == NULL)
1303                 return;
1304
1305         dbus_message_iter_init_append(signal, &iter);
1306         dbus_message_iter_append_basic(&iter, DBUS_TYPE_OBJECT_PATH,
1307                                                         &provider->path);
1308         append_properties(&iter, provider);
1309
1310         dbus_connection_send(connection, signal, NULL);
1311         dbus_message_unref(signal);
1312 }
1313
1314 static connman_bool_t check_host(char **hosts, char *host)
1315 {
1316         int i;
1317
1318         if (hosts == NULL)
1319                 return FALSE;
1320
1321         for (i = 0; hosts[i] != NULL; i++) {
1322                 if (g_strcmp0(hosts[i], host) == 0)
1323                         return TRUE;
1324         }
1325
1326         return FALSE;
1327 }
1328
1329 static void provider_append_routes(gpointer key, gpointer value,
1330                                         gpointer user_data)
1331 {
1332         struct vpn_route *route = value;
1333         struct vpn_provider *provider = user_data;
1334         int index = provider->index;
1335
1336         if (handle_routes == FALSE)
1337                 return;
1338
1339         /*
1340          * If the VPN administrator/user has given a route to
1341          * VPN server, then we must discard that because the
1342          * server cannot be contacted via VPN tunnel.
1343          */
1344         if (check_host(provider->host_ip, route->network) == TRUE) {
1345                 DBG("Discarding VPN route to %s via %s at index %d",
1346                         route->network, route->gateway, index);
1347                 return;
1348         }
1349
1350         if (route->family == AF_INET6) {
1351                 unsigned char prefix_len = atoi(route->netmask);
1352
1353                 connman_inet_add_ipv6_network_route(index, route->network,
1354                                                         route->gateway,
1355                                                         prefix_len);
1356         } else {
1357                 connman_inet_add_network_route(index, route->network,
1358                                                 route->gateway,
1359                                                 route->netmask);
1360         }
1361 }
1362
1363 static int set_connected(struct vpn_provider *provider,
1364                                         connman_bool_t connected)
1365 {
1366         struct vpn_ipconfig *ipconfig;
1367
1368         DBG("provider %p id %s connected %d", provider,
1369                                         provider->identifier, connected);
1370
1371         if (connected == TRUE) {
1372                 if (provider->family == AF_INET6)
1373                         ipconfig = provider->ipconfig_ipv6;
1374                 else
1375                         ipconfig = provider->ipconfig_ipv4;
1376
1377                 __vpn_ipconfig_address_add(ipconfig, provider->family);
1378
1379                 if (handle_routes == TRUE)
1380                         __vpn_ipconfig_gateway_add(ipconfig, provider->family);
1381
1382                 provider_indicate_state(provider,
1383                                         VPN_PROVIDER_STATE_READY);
1384
1385                 g_hash_table_foreach(provider->routes, provider_append_routes,
1386                                         provider);
1387
1388                 g_hash_table_foreach(provider->user_routes,
1389                                         provider_append_routes, provider);
1390
1391         } else {
1392                 provider_indicate_state(provider,
1393                                         VPN_PROVIDER_STATE_DISCONNECT);
1394
1395                 provider_indicate_state(provider,
1396                                         VPN_PROVIDER_STATE_IDLE);
1397         }
1398
1399         return 0;
1400 }
1401
1402 int vpn_provider_set_state(struct vpn_provider *provider,
1403                                         enum vpn_provider_state state)
1404 {
1405         if (provider == NULL)
1406                 return -EINVAL;
1407
1408         switch (state) {
1409         case VPN_PROVIDER_STATE_UNKNOWN:
1410                 return -EINVAL;
1411         case VPN_PROVIDER_STATE_IDLE:
1412                 return set_connected(provider, FALSE);
1413         case VPN_PROVIDER_STATE_CONNECT:
1414                 return provider_indicate_state(provider, state);
1415         case VPN_PROVIDER_STATE_READY:
1416                 return set_connected(provider, TRUE);
1417         case VPN_PROVIDER_STATE_DISCONNECT:
1418                 return provider_indicate_state(provider, state);
1419         case VPN_PROVIDER_STATE_FAILURE:
1420                 return provider_indicate_state(provider, state);
1421         }
1422         return -EINVAL;
1423 }
1424
1425 int vpn_provider_indicate_error(struct vpn_provider *provider,
1426                                         enum vpn_provider_error error)
1427 {
1428         DBG("provider %p id %s error %d", provider, provider->identifier,
1429                                                                         error);
1430
1431         switch (error) {
1432         case VPN_PROVIDER_ERROR_LOGIN_FAILED:
1433                 break;
1434         case VPN_PROVIDER_ERROR_AUTH_FAILED:
1435                 break;
1436         case VPN_PROVIDER_ERROR_CONNECT_FAILED:
1437                 break;
1438         default:
1439                 break;
1440         }
1441
1442         return 0;
1443 }
1444
1445 static int connection_unregister(struct vpn_provider *provider)
1446 {
1447         DBG("provider %p path %s", provider, provider->path);
1448
1449         if (provider->path == NULL)
1450                 return -EALREADY;
1451
1452         g_dbus_unregister_interface(connection, provider->path,
1453                                 VPN_CONNECTION_INTERFACE);
1454
1455         g_free(provider->path);
1456         provider->path = NULL;
1457
1458         return 0;
1459 }
1460
1461 static int connection_register(struct vpn_provider *provider)
1462 {
1463         DBG("provider %p path %s", provider, provider->path);
1464
1465         if (provider->path != NULL)
1466                 return -EALREADY;
1467
1468         provider->path = g_strdup_printf("%s/connection/%s", VPN_PATH,
1469                                                 provider->identifier);
1470
1471         g_dbus_register_interface(connection, provider->path,
1472                                 VPN_CONNECTION_INTERFACE,
1473                                 connection_methods, connection_signals,
1474                                 NULL, provider, NULL);
1475
1476         return 0;
1477 }
1478
1479 static void unregister_provider(gpointer data)
1480 {
1481         struct vpn_provider *provider = data;
1482
1483         configuration_count_del();
1484
1485         connection_unregister(provider);
1486
1487         vpn_provider_unref(provider);
1488 }
1489
1490 static void provider_initialize(struct vpn_provider *provider)
1491 {
1492         DBG("provider %p", provider);
1493
1494         provider->index = 0;
1495         provider->fd = -1;
1496         provider->name = NULL;
1497         provider->type = NULL;
1498         provider->domain = NULL;
1499         provider->identifier = NULL;
1500         provider->user_networks = NULL;
1501         provider->routes = g_hash_table_new_full(g_direct_hash, g_direct_equal,
1502                                         NULL, free_route);
1503         provider->user_routes = g_hash_table_new_full(g_str_hash, g_str_equal,
1504                                         g_free, free_route);
1505         provider->setting_strings = g_hash_table_new_full(g_str_hash,
1506                                                 g_str_equal, g_free, g_free);
1507 }
1508
1509 static struct vpn_provider *vpn_provider_new(void)
1510 {
1511         struct vpn_provider *provider;
1512
1513         provider = g_try_new0(struct vpn_provider, 1);
1514         if (provider == NULL)
1515                 return NULL;
1516
1517         provider->refcount = 1;
1518
1519         DBG("provider %p", provider);
1520         provider_initialize(provider);
1521
1522         return provider;
1523 }
1524
1525 static struct vpn_provider *vpn_provider_get(const char *identifier)
1526 {
1527         struct vpn_provider *provider;
1528
1529         provider = g_hash_table_lookup(provider_hash, identifier);
1530         if (provider != NULL)
1531                 return provider;
1532
1533         provider = vpn_provider_new();
1534         if (provider == NULL)
1535                 return NULL;
1536
1537         DBG("provider %p", provider);
1538
1539         provider->identifier = g_strdup(identifier);
1540
1541         g_hash_table_insert(provider_hash, provider->identifier, provider);
1542
1543         configuration_count_add();
1544
1545         return provider;
1546 }
1547
1548 static void provider_dbus_ident(char *ident)
1549 {
1550         int i, len = strlen(ident);
1551
1552         for (i = 0; i < len; i++) {
1553                 if (ident[i] >= '0' && ident[i] <= '9')
1554                         continue;
1555                 if (ident[i] >= 'a' && ident[i] <= 'z')
1556                         continue;
1557                 if (ident[i] >= 'A' && ident[i] <= 'Z')
1558                         continue;
1559                 ident[i] = '_';
1560         }
1561 }
1562
1563 static struct vpn_provider *provider_create_from_keyfile(GKeyFile *keyfile,
1564                 const char *ident)
1565 {
1566         struct vpn_provider *provider;
1567
1568         if (keyfile == NULL || ident == NULL)
1569                 return NULL;
1570
1571         provider = __vpn_provider_lookup(ident);
1572         if (provider == NULL) {
1573                 provider = vpn_provider_get(ident);
1574                 if (provider == NULL) {
1575                         DBG("can not create provider");
1576                         return NULL;
1577                 }
1578
1579                 provider_load_from_keyfile(provider, keyfile);
1580
1581                 if (provider->name == NULL || provider->host == NULL ||
1582                                 provider->domain == NULL) {
1583                         DBG("cannot get name, host or domain");
1584                         vpn_provider_unref(provider);
1585                         return NULL;
1586                 }
1587
1588                 if (provider_register(provider) == 0)
1589                         connection_register(provider);
1590         }
1591         return provider;
1592 }
1593
1594 static void provider_create_all_from_type(const char *provider_type)
1595 {
1596         unsigned int i;
1597         char **providers;
1598         char *id, *type;
1599         GKeyFile *keyfile;
1600
1601         DBG("provider type %s", provider_type);
1602
1603         providers = __connman_storage_get_providers();
1604
1605         if (providers == NULL)
1606                 return;
1607
1608         for (i = 0; providers[i] != NULL; i+=1) {
1609
1610                 if (strncmp(providers[i], "provider_", 9) != 0)
1611                         continue;
1612
1613                 id = providers[i] + 9;
1614                 keyfile = __connman_storage_load_provider(id);
1615
1616                 if (keyfile == NULL)
1617                         continue;
1618
1619                 type = g_key_file_get_string(keyfile, id, "Type", NULL);
1620
1621                 DBG("keyfile %p id %s type %s", keyfile, id, type);
1622
1623                 if (strcmp(provider_type, type) != 0) {
1624                         g_free(type);
1625                         g_key_file_free(keyfile);
1626                         continue;
1627                 }
1628
1629                 if (provider_create_from_keyfile(keyfile, id) == NULL)
1630                         DBG("could not create provider");
1631
1632                 g_free(type);
1633                 g_key_file_free(keyfile);
1634         }
1635         g_strfreev(providers);
1636 }
1637
1638 char *__vpn_provider_create_identifier(const char *host, const char *domain)
1639 {
1640         char *ident;
1641
1642         ident = g_strdup_printf("%s_%s", host, domain);
1643         if (ident == NULL)
1644                 return NULL;
1645
1646         provider_dbus_ident(ident);
1647
1648         return ident;
1649 }
1650
1651 int __vpn_provider_create(DBusMessage *msg)
1652 {
1653         struct vpn_provider *provider;
1654         DBusMessageIter iter, array;
1655         const char *type = NULL, *name = NULL;
1656         const char *host = NULL, *domain = NULL;
1657         GSList *networks = NULL;
1658         char *ident;
1659         int err;
1660
1661         dbus_message_iter_init(msg, &iter);
1662         dbus_message_iter_recurse(&iter, &array);
1663
1664         while (dbus_message_iter_get_arg_type(&array) == DBUS_TYPE_DICT_ENTRY) {
1665                 DBusMessageIter entry, value;
1666                 const char *key;
1667
1668                 dbus_message_iter_recurse(&array, &entry);
1669                 dbus_message_iter_get_basic(&entry, &key);
1670
1671                 dbus_message_iter_next(&entry);
1672                 dbus_message_iter_recurse(&entry, &value);
1673
1674                 switch (dbus_message_iter_get_arg_type(&value)) {
1675                 case DBUS_TYPE_STRING:
1676                         if (g_str_equal(key, "Type") == TRUE)
1677                                 dbus_message_iter_get_basic(&value, &type);
1678                         else if (g_str_equal(key, "Name") == TRUE)
1679                                 dbus_message_iter_get_basic(&value, &name);
1680                         else if (g_str_equal(key, "Host") == TRUE)
1681                                 dbus_message_iter_get_basic(&value, &host);
1682                         else if (g_str_equal(key, "VPN.Domain") == TRUE)
1683                                 dbus_message_iter_get_basic(&value, &domain);
1684                         break;
1685                 case DBUS_TYPE_ARRAY:
1686                         if (g_str_equal(key, "UserRoutes") == TRUE)
1687                                 networks = get_user_networks(&value);
1688                         break;
1689                 }
1690
1691                 dbus_message_iter_next(&array);
1692         }
1693
1694         if (host == NULL || domain == NULL)
1695                 return -EINVAL;
1696
1697         DBG("Type %s name %s networks %p", type, name, networks);
1698
1699         if (type == NULL || name == NULL)
1700                 return -EOPNOTSUPP;
1701
1702         ident = __vpn_provider_create_identifier(host, domain);
1703         DBG("ident %s", ident);
1704
1705         provider = __vpn_provider_lookup(ident);
1706         if (provider == NULL) {
1707                 provider = vpn_provider_get(ident);
1708                 if (provider == NULL) {
1709                         DBG("can not create provider");
1710                         g_free(ident);
1711                         return -EOPNOTSUPP;
1712                 }
1713
1714                 provider->host = g_strdup(host);
1715                 provider->domain = g_strdup(domain);
1716                 provider->name = g_strdup(name);
1717                 provider->type = g_strdup(type);
1718
1719                 if (provider_register(provider) == 0)
1720                         vpn_provider_load(provider);
1721
1722                 provider_resolv_host_addr(provider);
1723         }
1724
1725         if (networks != NULL) {
1726                 g_slist_free_full(provider->user_networks, free_route);
1727                 provider->user_networks = networks;
1728                 set_user_networks(provider, provider->user_networks);
1729         }
1730
1731         dbus_message_iter_init(msg, &iter);
1732         dbus_message_iter_recurse(&iter, &array);
1733
1734         while (dbus_message_iter_get_arg_type(&array) == DBUS_TYPE_DICT_ENTRY) {
1735                 DBusMessageIter entry, value;
1736                 const char *key, *str;
1737
1738                 dbus_message_iter_recurse(&array, &entry);
1739                 dbus_message_iter_get_basic(&entry, &key);
1740
1741                 dbus_message_iter_next(&entry);
1742                 dbus_message_iter_recurse(&entry, &value);
1743
1744                 switch (dbus_message_iter_get_arg_type(&value)) {
1745                 case DBUS_TYPE_STRING:
1746                         dbus_message_iter_get_basic(&value, &str);
1747                         vpn_provider_set_string(provider, key, str);
1748                         break;
1749                 }
1750
1751                 dbus_message_iter_next(&array);
1752         }
1753
1754         g_free(ident);
1755
1756         vpn_provider_save(provider);
1757
1758         err = provider_register(provider);
1759         if (err != 0 && err != -EALREADY)
1760                 return err;
1761
1762         connection_register(provider);
1763
1764         DBG("provider %p index %d path %s", provider, provider->index,
1765                                                         provider->path);
1766
1767         g_dbus_send_reply(connection, msg,
1768                                 DBUS_TYPE_OBJECT_PATH, &provider->path,
1769                                 DBUS_TYPE_INVALID);
1770
1771         connection_added_signal(provider);
1772
1773         return 0;
1774 }
1775
1776 static const char *get_string(GHashTable *settings, const char *key)
1777 {
1778         DBG("settings %p key %s", settings, key);
1779
1780         return g_hash_table_lookup(settings, key);
1781 }
1782
1783 static GSList *parse_user_networks(const char *network_str)
1784 {
1785         return NULL;
1786 }
1787
1788 int __vpn_provider_create_from_config(GHashTable *settings,
1789                                 const char *config_ident,
1790                                 const char *config_entry)
1791 {
1792         struct vpn_provider *provider;
1793         const char *type, *name, *host, *domain, *networks_str;
1794         GSList *networks;
1795         char *ident = NULL;
1796         GHashTableIter hash;
1797         gpointer value, key;
1798         int err;
1799
1800         type = get_string(settings, "Type");
1801         name = get_string(settings, "Name");
1802         host = get_string(settings, "Host");
1803         domain = get_string(settings, "Domain");
1804         networks_str = get_string(settings, "Networks");
1805         networks = parse_user_networks(networks_str);
1806
1807         if (host == NULL || domain == NULL) {
1808                 err = -EINVAL;
1809                 goto fail;
1810         }
1811
1812         DBG("type %s name %s networks %s", type, name, networks_str);
1813
1814         if (type == NULL || name == NULL) {
1815                 err = -EOPNOTSUPP;
1816                 goto fail;
1817         }
1818
1819         ident = __vpn_provider_create_identifier(host, domain);
1820         DBG("ident %s", ident);
1821
1822         provider = __vpn_provider_lookup(ident);
1823         if (provider == NULL) {
1824                 provider = vpn_provider_get(ident);
1825                 if (provider == NULL) {
1826                         DBG("can not create provider");
1827                         err = -EOPNOTSUPP;
1828                         goto fail;
1829                 }
1830
1831                 provider->host = g_strdup(host);
1832                 provider->domain = g_strdup(domain);
1833                 provider->name = g_strdup(name);
1834                 provider->type = g_ascii_strdown(type, -1);
1835
1836                 if (provider_register(provider) == 0)
1837                         vpn_provider_load(provider);
1838
1839                 provider_resolv_host_addr(provider);
1840         }
1841
1842         if (networks != NULL) {
1843                 g_slist_free_full(provider->user_networks, free_route);
1844                 provider->user_networks = networks;
1845                 set_user_networks(provider, provider->user_networks);
1846         }
1847
1848         g_hash_table_iter_init(&hash, settings);
1849
1850         while (g_hash_table_iter_next(&hash, &key, &value) == TRUE)
1851                 vpn_provider_set_string(provider, key, value);
1852
1853         vpn_provider_save(provider);
1854
1855         err = provider_register(provider);
1856         if (err != 0 && err != -EALREADY)
1857                 goto fail;
1858
1859         connection_register(provider);
1860
1861         DBG("provider %p index %d path %s", provider, provider->index,
1862                                                         provider->path);
1863
1864         connection_added_signal(provider);
1865
1866         err = 0;
1867
1868 fail:
1869         g_free(ident);
1870         if (networks != NULL)
1871                 g_slist_free_full(networks, free_route);
1872
1873         return err;
1874 }
1875
1876 static void append_connection_structs(DBusMessageIter *iter, void *user_data)
1877 {
1878         DBusMessageIter entry;
1879         GHashTableIter hash;
1880         gpointer value, key;
1881
1882         g_hash_table_iter_init(&hash, provider_hash);
1883
1884         while (g_hash_table_iter_next(&hash, &key, &value) == TRUE) {
1885                 struct vpn_provider *provider = value;
1886
1887                 DBG("path %s", provider->path);
1888
1889                 if (provider->identifier == NULL)
1890                         continue;
1891
1892                 dbus_message_iter_open_container(iter, DBUS_TYPE_STRUCT,
1893                                 NULL, &entry);
1894                 dbus_message_iter_append_basic(&entry, DBUS_TYPE_OBJECT_PATH,
1895                                 &provider->path);
1896                 append_properties(&entry, provider);
1897                 dbus_message_iter_close_container(iter, &entry);
1898         }
1899 }
1900
1901 DBusMessage *__vpn_provider_get_connections(DBusMessage *msg)
1902 {
1903         DBusMessage *reply;
1904
1905         DBG("");
1906
1907         reply = dbus_message_new_method_return(msg);
1908         if (reply == NULL)
1909                 return NULL;
1910
1911         __connman_dbus_append_objpath_dict_array(reply,
1912                         append_connection_structs, NULL);
1913
1914         return reply;
1915 }
1916
1917 const char * __vpn_provider_get_ident(struct vpn_provider *provider)
1918 {
1919         if (provider == NULL)
1920                 return NULL;
1921
1922         return provider->identifier;
1923 }
1924
1925 int vpn_provider_set_string(struct vpn_provider *provider,
1926                                         const char *key, const char *value)
1927 {
1928         DBG("provider %p key %s value %s", provider, key, value);
1929
1930         if (g_str_equal(key, "Type") == TRUE) {
1931                 g_free(provider->type);
1932                 provider->type = g_ascii_strdown(value, -1);
1933         } else if (g_str_equal(key, "Name") == TRUE) {
1934                 g_free(provider->name);
1935                 provider->name = g_strdup(value);
1936         } else if (g_str_equal(key, "Host") == TRUE) {
1937                 g_free(provider->host);
1938                 provider->host = g_strdup(value);
1939         } else if (g_str_equal(key, "VPN.Domain") == TRUE) {
1940                 g_free(provider->domain);
1941                 provider->domain = g_strdup(value);
1942         } else
1943                 g_hash_table_replace(provider->setting_strings,
1944                                 g_strdup(key), g_strdup(value));
1945         return 0;
1946 }
1947
1948 const char *vpn_provider_get_string(struct vpn_provider *provider,
1949                                                         const char *key)
1950 {
1951         DBG("provider %p key %s", provider, key);
1952
1953         if (g_str_equal(key, "Type") == TRUE)
1954                 return provider->type;
1955         else if (g_str_equal(key, "Name") == TRUE)
1956                 return provider->name;
1957         else if (g_str_equal(key, "Host") == TRUE)
1958                 return provider->host;
1959         else if (g_str_equal(key, "HostIP") == TRUE) {
1960                 if (provider->host_ip == NULL ||
1961                                 provider->host_ip[0] == NULL)
1962                         return provider->host;
1963                 else
1964                         return provider->host_ip[0];
1965         } else if (g_str_equal(key, "VPN.Domain") == TRUE)
1966                 return provider->domain;
1967
1968         return g_hash_table_lookup(provider->setting_strings, key);
1969 }
1970
1971 connman_bool_t __vpn_provider_check_routes(struct vpn_provider *provider)
1972 {
1973         if (provider == NULL)
1974                 return FALSE;
1975
1976         if (provider->user_routes != NULL &&
1977                         g_hash_table_size(provider->user_routes) > 0)
1978                 return TRUE;
1979
1980         if (provider->routes != NULL &&
1981                         g_hash_table_size(provider->routes) > 0)
1982                 return TRUE;
1983
1984         return FALSE;
1985 }
1986
1987 void *vpn_provider_get_data(struct vpn_provider *provider)
1988 {
1989         return provider->driver_data;
1990 }
1991
1992 void vpn_provider_set_data(struct vpn_provider *provider, void *data)
1993 {
1994         provider->driver_data = data;
1995 }
1996
1997 void vpn_provider_set_index(struct vpn_provider *provider, int index)
1998 {
1999         DBG("index %d provider %p", index, provider);
2000
2001         if (provider->ipconfig_ipv4 == NULL) {
2002                 provider->ipconfig_ipv4 = __vpn_ipconfig_create(index,
2003                                                                 AF_INET);
2004                 if (provider->ipconfig_ipv4 == NULL) {
2005                         DBG("Couldnt create ipconfig for IPv4");
2006                         goto done;
2007                 }
2008         }
2009
2010         __vpn_ipconfig_set_index(provider->ipconfig_ipv4, index);
2011
2012         if (provider->ipconfig_ipv6 == NULL) {
2013                 provider->ipconfig_ipv6 = __vpn_ipconfig_create(index,
2014                                                                 AF_INET6);
2015                 if (provider->ipconfig_ipv6 == NULL) {
2016                         DBG("Couldnt create ipconfig for IPv6");
2017                         goto done;
2018                 }
2019         }
2020
2021         __vpn_ipconfig_set_index(provider->ipconfig_ipv6, index);
2022
2023 done:
2024         provider->index = index;
2025 }
2026
2027 int vpn_provider_get_index(struct vpn_provider *provider)
2028 {
2029         return provider->index;
2030 }
2031
2032 int vpn_provider_set_ipaddress(struct vpn_provider *provider,
2033                                         struct connman_ipaddress *ipaddress)
2034 {
2035         struct vpn_ipconfig *ipconfig = NULL;
2036
2037         switch (ipaddress->family) {
2038         case AF_INET:
2039                 ipconfig = provider->ipconfig_ipv4;
2040                 break;
2041         case AF_INET6:
2042                 ipconfig = provider->ipconfig_ipv6;
2043                 break;
2044         default:
2045                 break;
2046         }
2047
2048         DBG("provider %p ipconfig %p family %d", provider, ipconfig,
2049                                                         ipaddress->family);
2050
2051         if (ipconfig == NULL)
2052                 return -EINVAL;
2053
2054         provider->family = ipaddress->family;
2055
2056         __vpn_ipconfig_set_local(ipconfig, ipaddress->local);
2057         __vpn_ipconfig_set_peer(ipconfig, ipaddress->peer);
2058         __vpn_ipconfig_set_broadcast(ipconfig, ipaddress->broadcast);
2059         __vpn_ipconfig_set_gateway(ipconfig, ipaddress->gateway);
2060         __vpn_ipconfig_set_prefixlen(ipconfig, ipaddress->prefixlen);
2061
2062         return 0;
2063 }
2064
2065 int vpn_provider_set_pac(struct vpn_provider *provider,
2066                                 const char *pac)
2067 {
2068         DBG("provider %p pac %s", provider, pac);
2069
2070         return 0;
2071 }
2072
2073
2074 int vpn_provider_set_domain(struct vpn_provider *provider,
2075                                         const char *domain)
2076 {
2077         DBG("provider %p domain %s", provider, domain);
2078
2079         g_free(provider->domain);
2080         provider->domain = g_strdup(domain);
2081
2082         return 0;
2083 }
2084
2085 int vpn_provider_set_nameservers(struct vpn_provider *provider,
2086                                         const char *nameservers)
2087 {
2088         DBG("provider %p nameservers %s", provider, nameservers);
2089
2090         g_strfreev(provider->nameservers);
2091         provider->nameservers = NULL;
2092
2093         if (nameservers == NULL)
2094                 return 0;
2095
2096         provider->nameservers = g_strsplit(nameservers, " ", 0);
2097
2098         return 0;
2099 }
2100
2101 enum provider_route_type {
2102         PROVIDER_ROUTE_TYPE_NONE = 0,
2103         PROVIDER_ROUTE_TYPE_MASK = 1,
2104         PROVIDER_ROUTE_TYPE_ADDR = 2,
2105         PROVIDER_ROUTE_TYPE_GW   = 3,
2106 };
2107
2108 static int route_env_parse(struct vpn_provider *provider, const char *key,
2109                                 int *family, unsigned long *idx,
2110                                 enum provider_route_type *type)
2111 {
2112         char *end;
2113         const char *start;
2114
2115         DBG("name %s", provider->name);
2116
2117         if (!strcmp(provider->type, "openvpn")) {
2118                 if (g_str_has_prefix(key, "route_network_") == TRUE) {
2119                         start = key + strlen("route_network_");
2120                         *type = PROVIDER_ROUTE_TYPE_ADDR;
2121                 } else if (g_str_has_prefix(key, "route_netmask_") == TRUE) {
2122                         start = key + strlen("route_netmask_");
2123                         *type = PROVIDER_ROUTE_TYPE_MASK;
2124                 } else if (g_str_has_prefix(key, "route_gateway_") == TRUE) {
2125                         start = key + strlen("route_gateway_");
2126                         *type = PROVIDER_ROUTE_TYPE_GW;
2127                 } else
2128                         return -EINVAL;
2129
2130                 *family = AF_INET;
2131                 *idx = g_ascii_strtoull(start, &end, 10);
2132
2133         } else if (!strcmp(provider->type, "openconnect")) {
2134                 if (g_str_has_prefix(key, "CISCO_SPLIT_INC_") == TRUE) {
2135                         *family = AF_INET;
2136                         start = key + strlen("CISCO_SPLIT_INC_");
2137                 } else if (g_str_has_prefix(key,
2138                                         "CISCO_IPV6_SPLIT_INC_") == TRUE) {
2139                         *family = AF_INET6;
2140                         start = key + strlen("CISCO_IPV6_SPLIT_INC_");
2141                 } else
2142                         return -EINVAL;
2143
2144                 *idx = g_ascii_strtoull(start, &end, 10);
2145
2146                 if (strncmp(end, "_ADDR", 5) == 0)
2147                         *type = PROVIDER_ROUTE_TYPE_ADDR;
2148                 else if (strncmp(end, "_MASK", 5) == 0)
2149                         *type = PROVIDER_ROUTE_TYPE_MASK;
2150                 else if (strncmp(end, "_MASKLEN", 8) == 0 &&
2151                                 *family == AF_INET6) {
2152                         *type = PROVIDER_ROUTE_TYPE_MASK;
2153                 } else
2154                         return -EINVAL;
2155         }
2156
2157         return 0;
2158 }
2159
2160 int vpn_provider_append_route(struct vpn_provider *provider,
2161                                         const char *key, const char *value)
2162 {
2163         struct vpn_route *route;
2164         int ret, family = 0;
2165         unsigned long idx = 0;
2166         enum provider_route_type type = PROVIDER_ROUTE_TYPE_NONE;
2167
2168         DBG("key %s value %s", key, value);
2169
2170         ret = route_env_parse(provider, key, &family, &idx, &type);
2171         if (ret < 0)
2172                 return ret;
2173
2174         DBG("idx %lu family %d type %d", idx, family, type);
2175
2176         route = g_hash_table_lookup(provider->routes, GINT_TO_POINTER(idx));
2177         if (route == NULL) {
2178                 route = g_try_new0(struct vpn_route, 1);
2179                 if (route == NULL) {
2180                         connman_error("out of memory");
2181                         return -ENOMEM;
2182                 }
2183
2184                 route->family = family;
2185
2186                 g_hash_table_replace(provider->routes, GINT_TO_POINTER(idx),
2187                                                 route);
2188         }
2189
2190         switch (type) {
2191         case PROVIDER_ROUTE_TYPE_NONE:
2192                 break;
2193         case PROVIDER_ROUTE_TYPE_MASK:
2194                 route->netmask = g_strdup(value);
2195                 break;
2196         case PROVIDER_ROUTE_TYPE_ADDR:
2197                 route->network = g_strdup(value);
2198                 break;
2199         case PROVIDER_ROUTE_TYPE_GW:
2200                 route->gateway = g_strdup(value);
2201                 break;
2202         }
2203
2204         if (handle_routes == FALSE) {
2205                 if (route->netmask != NULL && route->gateway != NULL &&
2206                                                         route->network != NULL)
2207                         provider_schedule_changed(provider,
2208                                                 SERVER_ROUTES_CHANGED);
2209         }
2210
2211         return 0;
2212 }
2213
2214 const char *vpn_provider_get_driver_name(struct vpn_provider *provider)
2215 {
2216         if (provider->driver == NULL)
2217                 return NULL;
2218
2219         return provider->driver->name;
2220 }
2221
2222 const char *vpn_provider_get_save_group(struct vpn_provider *provider)
2223 {
2224         return provider->identifier;
2225 }
2226
2227 static gint compare_priority(gconstpointer a, gconstpointer b)
2228 {
2229         return 0;
2230 }
2231
2232 static void clean_provider(gpointer key, gpointer value, gpointer user_data)
2233 {
2234         struct vpn_provider *provider = value;
2235
2236         if (provider->driver != NULL && provider->driver->remove)
2237                 provider->driver->remove(provider);
2238
2239         connection_unregister(provider);
2240 }
2241
2242 int vpn_provider_driver_register(struct vpn_provider_driver *driver)
2243 {
2244         DBG("driver %p name %s", driver, driver->name);
2245
2246         driver_list = g_slist_insert_sorted(driver_list, driver,
2247                                                         compare_priority);
2248         provider_create_all_from_type(driver->name);
2249         return 0;
2250 }
2251
2252 void vpn_provider_driver_unregister(struct vpn_provider_driver *driver)
2253 {
2254         GHashTableIter iter;
2255         gpointer value, key;
2256
2257         DBG("driver %p name %s", driver, driver->name);
2258
2259         driver_list = g_slist_remove(driver_list, driver);
2260
2261         g_hash_table_iter_init(&iter, provider_hash);
2262         while (g_hash_table_iter_next(&iter, &key, &value) == TRUE) {
2263                 struct vpn_provider *provider = value;
2264
2265                 if (provider != NULL && provider->driver != NULL &&
2266                                 provider->driver->type == driver->type &&
2267                                 g_strcmp0(provider->driver->name,
2268                                                         driver->name) == 0) {
2269                         provider->driver = NULL;
2270                 }
2271         }
2272 }
2273
2274 static gboolean check_vpn_count(gpointer data)
2275 {
2276         if (configuration_count == 0) {
2277                 connman_info("No VPN configurations found, quitting.");
2278                 raise(SIGTERM);
2279         }
2280
2281         return FALSE;
2282 }
2283
2284 void __vpn_provider_check_connections(void)
2285 {
2286         /*
2287          * If we were started when there is no providers configured,
2288          * then just quit. This happens when connman starts and its
2289          * vpn plugin asks connman-vpnd if it has any connections
2290          * configured. If there are none, then we can stop the vpn
2291          * daemon.
2292          */
2293         g_timeout_add(1000, check_vpn_count, NULL);
2294 }
2295
2296 const char *vpn_provider_get_name(struct vpn_provider *provider)
2297 {
2298         return provider->name;
2299 }
2300
2301 const char *vpn_provider_get_host(struct vpn_provider *provider)
2302 {
2303         return provider->host;
2304 }
2305
2306 const char *vpn_provider_get_path(struct vpn_provider *provider)
2307 {
2308         return provider->path;
2309 }
2310
2311 static int agent_probe(struct connman_agent *agent)
2312 {
2313         DBG("agent %p", agent);
2314         return 0;
2315 }
2316
2317 static void agent_remove(struct connman_agent *agent)
2318 {
2319         DBG("agent %p", agent);
2320 }
2321
2322 static struct connman_agent_driver agent_driver = {
2323         .name           = "vpn",
2324         .interface      = VPN_AGENT_INTERFACE,
2325         .probe          = agent_probe,
2326         .remove         = agent_remove,
2327 };
2328
2329 int __vpn_provider_init(gboolean do_routes)
2330 {
2331         int err;
2332
2333         DBG("");
2334
2335         handle_routes = do_routes;
2336
2337         err = connman_agent_driver_register(&agent_driver);
2338         if (err < 0) {
2339                 connman_error("Cannot register agent driver for %s",
2340                                                 agent_driver.name);
2341                 return err;
2342         }
2343
2344         connection = connman_dbus_get_connection();
2345
2346         provider_hash = g_hash_table_new_full(g_str_hash, g_str_equal,
2347                                                 NULL, unregister_provider);
2348
2349         return 0;
2350 }
2351
2352 void __vpn_provider_cleanup(void)
2353 {
2354         DBG("");
2355
2356         g_hash_table_foreach(provider_hash, clean_provider, NULL);
2357
2358         g_hash_table_destroy(provider_hash);
2359         provider_hash = NULL;
2360
2361         connman_agent_driver_unregister(&agent_driver);
2362
2363         dbus_connection_unref(connection);
2364 }