dnsproxy: Only one copy of the relevant buffers will be made to a TCP request
[framework/connectivity/connman.git] / src / provider.c
index 705f911..3f4bb1c 100644 (file)
@@ -2,7 +2,7 @@
  *
  *  Connection Manager
  *
- *  Copyright (C) 2007-2010  Intel Corporation. All rights reserved.
+ *  Copyright (C) 2007-2012  Intel Corporation. All rights reserved.
  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License version 2 as
 #include <config.h>
 #endif
 
+#include <errno.h>
 #include <stdio.h>
 #include <string.h>
+#include <stdlib.h>
 #include <gdbus.h>
 
 #include "connman.h"
@@ -35,17 +37,30 @@ static GHashTable *provider_hash = NULL;
 
 static GSList *driver_list = NULL;
 
+struct connman_route {
+       int family;
+       char *host;
+       char *netmask;
+       char *gateway;
+};
+
 struct connman_provider {
-       struct connman_element element;
+       int refcount;
        struct connman_service *vpn_service;
+       int index;
        char *identifier;
        char *name;
        char *type;
        char *host;
-       char *dns;
        char *domain;
+       int family;
+       GHashTable *routes;
        struct connman_provider_driver *driver;
        void *driver_data;
+       GHashTable *setting_strings;
+       GHashTable *user_routes;
+       gchar **user_networks;
+       gsize num_user_networks;
 };
 
 void __connman_provider_append_properties(struct connman_provider *provider,
@@ -64,56 +79,194 @@ void __connman_provider_append_properties(struct connman_provider *provider,
                                                 &provider->type);
 }
 
-static struct connman_provider *connman_provider_lookup(const char *identifier)
+int __connman_provider_append_user_route(struct connman_provider *provider,
+                       int family, const char *network, const char *netmask)
 {
-       struct connman_provider *provider = NULL;
+       struct connman_route *route;
+       char *key = g_strdup_printf("%d/%s/%s", family, network, netmask);
 
-       provider = g_hash_table_lookup(provider_hash, identifier);
+       DBG("family %d network %s netmask %s", family, network, netmask);
 
-       return provider;
+       route = g_hash_table_lookup(provider->user_routes, key);
+       if (route == NULL) {
+               route = g_try_new0(struct connman_route, 1);
+               if (route == NULL) {
+                       connman_error("out of memory");
+                       return -ENOMEM;
+               }
+
+               route->family = family;
+               route->host = g_strdup(network);
+               route->netmask = g_strdup(netmask);
+
+               g_hash_table_replace(provider->user_routes, key, route);
+       } else
+               g_free(key);
+
+       return 0;
 }
 
-static int connman_provider_setup_vpn_ipv4(struct connman_provider *provider,
-                                               struct connman_element *element)
+static void set_user_networks(struct connman_provider *provider,
+                                                       char **networks)
 {
-       if (element == NULL || provider == NULL)
-               return -EINVAL;
+       int i = 0;
 
-       DBG("set vpn type %d", element->type);
+       while (networks[i] != NULL) {
+               char **elems = g_strsplit(networks[i], "/", 0);
+               char *network, *netmask;
+               int family = PF_UNSPEC, ret;
 
-       g_free(element->ipv4.address);
-       element->ipv4.address = g_strdup(provider->element.ipv4.address);
+               if (elems == NULL)
+                       break;
 
-       g_free(element->ipv4.netmask);
-       element->ipv4.netmask = g_strdup(provider->element.ipv4.netmask);
+               network = elems[0];
+               if (network == NULL || *network == '\0') {
+                       DBG("no network/netmask set");
+                       g_strfreev(elems);
+                       break;
+               }
 
-       g_free(element->ipv4.gateway);
-       element->ipv4.gateway = g_strdup(provider->element.ipv4.gateway);
+               netmask = elems[1];
+               if (netmask != NULL && *netmask == '\0') {
+                       DBG("no netmask set");
+                       g_strfreev(elems);
+                       break;
+               }
+
+               if (g_strrstr(network, ":") != NULL)
+                       family = AF_INET6;
+               else if (g_strrstr(network, ".") != NULL) {
+                       family = AF_INET;
+
+                       if (g_strrstr(netmask, ".") == NULL) {
+                               /* We have netmask length */
+                               in_addr_t addr;
+                               struct in_addr netmask_in;
+                               unsigned char prefix_len = 32;
 
-       g_free(element->ipv4.broadcast);
-       element->ipv4.broadcast = g_strdup(provider->element.ipv4.broadcast);
+                               if (netmask != NULL)
+                                       prefix_len = atoi(netmask);
 
-       g_free(element->ipv4.pac);
-       element->ipv4.pac = g_strdup(provider->element.ipv4.pac);
+                               addr = 0xffffffff << (32 - prefix_len);
+                               netmask_in.s_addr = htonl(addr);
+                               netmask = inet_ntoa(netmask_in);
+
+                               DBG("network %s netmask %s", network, netmask);
+                       }
+               }
 
-       return connman_element_register(element, &provider->element);
+               ret = __connman_provider_append_user_route(provider,
+                                               family, network, netmask);
+               g_strfreev(elems);
+
+               if (ret != 0)
+                       break;
+
+               i++;
+       }
+}
+
+static int provider_load_from_keyfile(struct connman_provider *provider,
+               GKeyFile *keyfile)
+{
+       gsize idx = 0;
+       gchar **settings;
+       gchar *key, *value;
+       gsize length;
+
+       settings = g_key_file_get_keys(keyfile, provider->identifier, &length,
+                               NULL);
+       if (settings == NULL) {
+               g_key_file_free(keyfile);
+               return -ENOENT;
+       }
+
+       while (idx < length) {
+               key = settings[idx];
+               if (key != NULL) {
+                       if (g_str_equal(key, "Networks") == TRUE) {
+                               g_strfreev(provider->user_networks);
+                               provider->user_networks =
+                                       g_key_file_get_string_list(keyfile,
+                                               provider->identifier,
+                                               key,
+                                               &provider->num_user_networks,
+                                               NULL);
+                       } else {
+                               value = g_key_file_get_string(keyfile,
+                                                       provider->identifier,
+                                                       key, NULL);
+                               connman_provider_set_string(provider, key,
+                                                       value);
+                               g_free(value);
+                       }
+               }
+               idx += 1;
+       }
+       g_strfreev(settings);
+
+       if (provider->user_networks != NULL)
+               set_user_networks(provider, provider->user_networks);
+
+       return 0;
 }
 
-struct connman_provider *connman_provider_ref(struct connman_provider *provider)
+static int connman_provider_load(struct connman_provider *provider)
 {
+       GKeyFile *keyfile;
+
        DBG("provider %p", provider);
 
-       if (connman_element_ref(&provider->element) == NULL)
-               return NULL;
+       keyfile = __connman_storage_load_provider(provider->identifier);
+       if (keyfile == NULL)
+               return -ENOENT;
 
-       return provider;
+       provider_load_from_keyfile(provider, keyfile);
+
+       g_key_file_free(keyfile);
+       return 0;
 }
 
-void connman_provider_unref(struct connman_provider *provider)
+static int connman_provider_save(struct connman_provider *provider)
 {
+       GKeyFile *keyfile;
+
        DBG("provider %p", provider);
 
-       connman_element_unref(&provider->element);
+       keyfile = g_key_file_new();
+       if (keyfile == NULL)
+               return -ENOMEM;
+
+       g_key_file_set_string(keyfile, provider->identifier,
+                       "Name", provider->name);
+       g_key_file_set_string(keyfile, provider->identifier,
+                       "Type", provider->type);
+       g_key_file_set_string(keyfile, provider->identifier,
+                       "Host", provider->host);
+       g_key_file_set_string(keyfile, provider->identifier,
+                       "VPN.Domain", provider->domain);
+       if (provider->user_networks != NULL)
+               g_key_file_set_string_list(keyfile, provider->identifier,
+                               "Networks",
+                               (const gchar **)provider->user_networks,
+                               provider->num_user_networks);
+
+       if (provider->driver != NULL && provider->driver->save != NULL)
+               provider->driver->save(provider, keyfile);
+
+       __connman_storage_save_provider(keyfile, provider->identifier);
+        g_key_file_free(keyfile);
+
+       return 0;
+}
+
+static struct connman_provider *connman_provider_lookup(const char *identifier)
+{
+       struct connman_provider *provider = NULL;
+
+       provider = g_hash_table_lookup(provider_hash, identifier);
+
+       return provider;
 }
 
 static gboolean match_driver(struct connman_provider *provider,
@@ -154,6 +307,78 @@ static int provider_probe(struct connman_provider *provider)
        return 0;
 }
 
+static void provider_remove(struct connman_provider *provider)
+{
+       if (provider->driver != NULL) {
+               provider->driver->remove(provider);
+               provider->driver = NULL;
+       }
+}
+
+static int provider_register(struct connman_provider *provider)
+{
+       return provider_probe(provider);
+}
+
+static void provider_unregister(struct connman_provider *provider)
+{
+       provider_remove(provider);
+}
+
+struct connman_provider *
+connman_provider_ref_debug(struct connman_provider *provider,
+                       const char *file, int line, const char *caller)
+{
+       DBG("%p ref %d by %s:%d:%s()", provider, provider->refcount + 1,
+               file, line, caller);
+
+       __sync_fetch_and_add(&provider->refcount, 1);
+
+       return provider;
+}
+
+static void provider_destruct(struct connman_provider *provider)
+{
+       DBG("provider %p", provider);
+
+       g_free(provider->name);
+       g_free(provider->type);
+       g_free(provider->host);
+       g_free(provider->domain);
+       g_free(provider->identifier);
+       g_strfreev(provider->user_networks);
+       g_hash_table_destroy(provider->routes);
+       g_hash_table_destroy(provider->user_routes);
+       g_hash_table_destroy(provider->setting_strings);
+       g_free(provider);
+}
+
+void connman_provider_unref_debug(struct connman_provider *provider,
+                               const char *file, int line, const char *caller)
+{
+       DBG("%p ref %d by %s:%d:%s()", provider, provider->refcount - 1,
+               file, line, caller);
+
+       if (__sync_fetch_and_sub(&provider->refcount, 1) != 1)
+               return;
+
+       provider_remove(provider);
+
+       provider_destruct(provider);
+}
+
+static int provider_indicate_state(struct connman_provider *provider,
+                                       enum connman_service_state state)
+{
+       DBG("state %d", state);
+
+       __connman_service_ipconfig_indicate_state(provider->vpn_service, state,
+                                       CONNMAN_IPCONFIG_TYPE_IPV4);
+
+       return __connman_service_ipconfig_indicate_state(provider->vpn_service,
+                                       state, CONNMAN_IPCONFIG_TYPE_IPV6);
+}
+
 int __connman_provider_disconnect(struct connman_provider *provider)
 {
        int err;
@@ -165,8 +390,10 @@ int __connman_provider_disconnect(struct connman_provider *provider)
        else
                return -EOPNOTSUPP;
 
-       __connman_service_indicate_state(provider->vpn_service,
+       if (provider->vpn_service != NULL)
+               provider_indicate_state(provider,
                                        CONNMAN_SERVICE_STATE_DISCONNECT);
+
        if (err < 0) {
                if (err != -EINPROGRESS)
                        return err;
@@ -183,18 +410,6 @@ int __connman_provider_connect(struct connman_provider *provider)
 
        DBG("provider %p", provider);
 
-       g_free(provider->element.ipv4.address);
-       g_free(provider->element.ipv4.netmask);
-       g_free(provider->element.ipv4.gateway);
-       g_free(provider->element.ipv4.broadcast);
-       g_free(provider->element.ipv4.pac);
-
-       provider->element.ipv4.address = NULL;
-       provider->element.ipv4.netmask = NULL;
-       provider->element.ipv4.gateway = NULL;
-       provider->element.ipv4.broadcast = NULL;
-       provider->element.ipv4.pac = NULL;
-
        if (provider->driver != NULL && provider->driver->connect != NULL)
                err = provider->driver->connect(provider);
        else
@@ -204,8 +419,9 @@ int __connman_provider_connect(struct connman_provider *provider)
                if (err != -EINPROGRESS)
                        return err;
 
-               __connman_service_indicate_state(provider->vpn_service,
+               provider_indicate_state(provider,
                                        CONNMAN_SERVICE_STATE_ASSOCIATION);
+
                return -EINPROGRESS;
        }
 
@@ -215,83 +431,93 @@ int __connman_provider_connect(struct connman_provider *provider)
 int __connman_provider_remove(const char *path)
 {
        struct connman_provider *provider;
+       GHashTableIter iter;
+       gpointer value, key;
 
        DBG("path %s", path);
 
-       provider = g_hash_table_lookup(provider_hash, path);
-       if (provider == NULL) {
-               DBG("patch %s not found", path);
-               return -ENXIO;
+       g_hash_table_iter_init(&iter, provider_hash);
+       while (g_hash_table_iter_next(&iter, &key, &value) == TRUE) {
+               const char *srv_path;
+               provider = value;
+
+               if (provider->vpn_service == NULL)
+                       continue;
+
+               srv_path = __connman_service_get_path(provider->vpn_service);
+
+               if (g_strcmp0(srv_path, path) == 0) {
+                       DBG("Removing VPN %s", provider->identifier);
+
+                       provider_unregister(provider);
+                       g_hash_table_remove(provider_hash,
+                                               provider->identifier);
+                       return 0;
+               }
        }
 
-       g_hash_table_remove(provider_hash, path);
+       return -ENXIO;
+}
+
+static void provider_append_routes(gpointer key, gpointer value,
+                                       gpointer user_data)
+{
+       struct connman_route *route = value;
+       struct connman_provider *provider = user_data;
+       int index = provider->index;
 
-       return 0;
+       if (route->family == AF_INET6) {
+               unsigned char prefix_len = atoi(route->netmask);
+
+               connman_inet_add_ipv6_network_route(index, route->host,
+                                                       route->gateway,
+                                                       prefix_len);
+       } else {
+               connman_inet_add_network_route(index, route->host,
+                                               route->gateway,
+                                               route->netmask);
+       }
 }
 
 static int set_connected(struct connman_provider *provider,
                                        connman_bool_t connected)
 {
        struct connman_service *service = provider->vpn_service;
+       struct connman_ipconfig *ipconfig;
 
        if (service == NULL)
                return -ENODEV;
 
-       if (connected == TRUE) {
-               enum connman_element_type type = CONNMAN_ELEMENT_TYPE_UNKNOWN;
-               struct connman_element *element;
-               char *nameservers = NULL, *name = NULL;
-               const char *value, *first;
-               int err;
-
-               __connman_service_indicate_state(provider->vpn_service,
-                                       CONNMAN_SERVICE_STATE_CONFIGURATION);
-
-               type = CONNMAN_ELEMENT_TYPE_IPV4;
-
-               element = connman_element_create(NULL);
-               if (element == NULL)
-                       return -ENOMEM;
-
-               element->type  = type;
-               element->index = provider->element.index;
-
-               err = connman_provider_setup_vpn_ipv4(provider, element);
-               if (err < 0) {
-                       connman_element_unref(element);
+       ipconfig = __connman_service_get_ipconfig(service, provider->family);
 
-                       __connman_service_indicate_state(service,
+       if (connected == TRUE) {
+               if (ipconfig == NULL) {
+                       provider_indicate_state(provider,
                                                CONNMAN_SERVICE_STATE_FAILURE);
-
-                       return err;
+                       return -EIO;
                }
 
-               __connman_service_indicate_state(service,
-                                               CONNMAN_SERVICE_STATE_READY);
-
-               __connman_service_set_domainname(service, provider->domain);
+               __connman_ipconfig_address_add(ipconfig);
+               __connman_ipconfig_gateway_add(ipconfig);
 
-               nameservers = g_strdup(provider->dns);
-               value = nameservers;
-               first = strchr(value, ' ');
-               __connman_service_append_nameserver(service, first);
-               name = connman_inet_ifname(provider->element.index);
-               while (value) {
-                       char *next = strchr(value, ' ');
-                       if (next)
-                               *(next++) = 0;
+               provider_indicate_state(provider,
+                                       CONNMAN_SERVICE_STATE_READY);
 
-                       connman_resolver_append(name, provider->domain, value);
-                       value = next;
-               }
+               g_hash_table_foreach(provider->routes, provider_append_routes,
+                                       provider);
 
-               g_free(nameservers);
-               g_free(name);
+               g_hash_table_foreach(provider->user_routes, provider_append_routes,
+                                       provider);
 
        } else {
-               connman_element_unregister_children(&provider->element);
-               __connman_service_indicate_state(service,
-                                               CONNMAN_SERVICE_STATE_IDLE);
+               if (ipconfig != NULL) {
+                       provider_indicate_state(provider,
+                                       CONNMAN_SERVICE_STATE_DISCONNECT);
+                       __connman_ipconfig_gateway_remove(ipconfig);
+               }
+
+               provider_indicate_state(provider,
+                                       CONNMAN_SERVICE_STATE_IDLE);
        }
 
        return 0;
@@ -309,66 +535,85 @@ int connman_provider_set_state(struct connman_provider *provider,
        case CONNMAN_PROVIDER_STATE_IDLE:
                return set_connected(provider, FALSE);
        case CONNMAN_PROVIDER_STATE_CONNECT:
-               return __connman_service_indicate_state(provider->vpn_service,
+               return provider_indicate_state(provider,
                                        CONNMAN_SERVICE_STATE_ASSOCIATION);
        case CONNMAN_PROVIDER_STATE_READY:
                return set_connected(provider, TRUE);
        case CONNMAN_PROVIDER_STATE_DISCONNECT:
-               return __connman_service_indicate_state(provider->vpn_service,
+               return provider_indicate_state(provider,
                                        CONNMAN_SERVICE_STATE_DISCONNECT);
        case CONNMAN_PROVIDER_STATE_FAILURE:
-               return __connman_service_indicate_state(provider->vpn_service,
+               return provider_indicate_state(provider,
                                        CONNMAN_SERVICE_STATE_FAILURE);
        }
 
        return -EINVAL;
 }
 
+int connman_provider_indicate_error(struct connman_provider *provider,
+                                       enum connman_provider_error error)
+{
+       enum connman_service_error service_error;
+
+       switch (error) {
+       case CONNMAN_PROVIDER_ERROR_LOGIN_FAILED:
+               service_error = CONNMAN_SERVICE_ERROR_LOGIN_FAILED;
+               break;
+       case CONNMAN_PROVIDER_ERROR_AUTH_FAILED:
+               service_error = CONNMAN_SERVICE_ERROR_AUTH_FAILED;
+               break;
+       case CONNMAN_PROVIDER_ERROR_CONNECT_FAILED:
+               service_error = CONNMAN_SERVICE_ERROR_CONNECT_FAILED;
+               break;
+       default:
+               service_error = CONNMAN_SERVICE_ERROR_UNKNOWN;
+               break;
+       }
+
+       return __connman_service_indicate_error(provider->vpn_service,
+                                                       service_error);
+}
+
 static void unregister_provider(gpointer data)
 {
        struct connman_provider *provider = data;
 
-       DBG("provider %p", provider);
+       DBG("provider %p service %p", provider, provider->vpn_service);
 
-       __connman_service_put(provider->vpn_service);
+       if (provider->vpn_service != NULL) {
+               connman_service_unref(provider->vpn_service);
+               provider->vpn_service = NULL;
+       }
 
-       connman_element_unregister(&provider->element);
        connman_provider_unref(provider);
 }
 
-static void provider_destruct(struct connman_element *element)
+static void destroy_route(gpointer user_data)
 {
-       struct connman_provider *provider = element->private;
+       struct connman_route *route = user_data;
 
-       DBG("provider %p", provider);
-
-       g_free(provider->name);
-       g_free(provider->type);
-       g_free(provider->domain);
-       g_free(provider->identifier);
-       g_free(provider->dns);
+       g_free(route->host);
+       g_free(route->netmask);
+       g_free(route->gateway);
+       g_free(route);
 }
 
 static void provider_initialize(struct connman_provider *provider)
 {
        DBG("provider %p", provider);
 
-       __connman_element_initialize(&provider->element);
-
-       provider->element.private = provider;
-       provider->element.destruct = provider_destruct;
-
-       provider->element.ipv4.address = NULL;
-       provider->element.ipv4.netmask = NULL;
-       provider->element.ipv4.gateway = NULL;
-       provider->element.ipv4.broadcast = NULL;
-       provider->element.ipv4.pac = NULL;
-
+       provider->index = 0;
        provider->name = NULL;
        provider->type = NULL;
-       provider->dns = NULL;
        provider->domain = NULL;
        provider->identifier = NULL;
+       provider->user_networks = NULL;
+       provider->routes = g_hash_table_new_full(g_direct_hash, g_direct_equal,
+                                       NULL, destroy_route);
+       provider->user_routes = g_hash_table_new_full(g_str_hash, g_str_equal,
+                                       g_free, destroy_route);
+       provider->setting_strings = g_hash_table_new_full(g_str_hash, g_str_equal,
+                                                       g_free, g_free);
 }
 
 static struct connman_provider *connman_provider_new(void)
@@ -379,6 +624,8 @@ static struct connman_provider *connman_provider_new(void)
        if (provider == NULL)
                return NULL;
 
+       provider->refcount = 1;
+
        DBG("provider %p", provider);
        provider_initialize(provider);
 
@@ -403,9 +650,6 @@ static struct connman_provider *connman_provider_get(const char *identifier)
 
        g_hash_table_insert(provider_hash, provider->identifier, provider);
 
-       provider->element.name = g_strdup(identifier);
-       connman_element_register(&provider->element, NULL);
-
        return provider;
 }
 
@@ -413,20 +657,154 @@ static void provider_dbus_ident(char *ident)
 {
        int i, len = strlen(ident);
 
-       for (i = 0; i < len; i++)
-               if (ident[i] == '.')
-                       ident[i] = '_';
+       for (i = 0; i < len; i++) {
+               if (ident[i] >= '0' && ident[i] <= '9')
+                       continue;
+               if (ident[i] >= 'a' && ident[i] <= 'z')
+                       continue;
+               if (ident[i] >= 'A' && ident[i] <= 'Z')
+                       continue;
+               ident[i] = '_';
+       }
+}
+
+static struct connman_provider *provider_create_from_keyfile(GKeyFile *keyfile,
+               const char *ident)
+{
+       struct connman_provider *provider;
+
+       if (keyfile == NULL || ident == NULL)
+               return NULL;
+
+       provider = connman_provider_lookup(ident);
+       if (provider == NULL) {
+               provider = connman_provider_get(ident);
+               if (provider == NULL) {
+                       DBG("can not create provider");
+                       return NULL;
+               }
+
+               provider_load_from_keyfile(provider, keyfile);
+
+               if (provider->name == NULL || provider->host == NULL ||
+                               provider->domain == NULL) {
+                       DBG("cannot get name, host or domain");
+                       connman_provider_unref(provider);
+                       return NULL;
+               }
+
+               provider_register(provider);
+       }
+       return provider;
+}
+
+static int provider_create_service(struct connman_provider *provider)
+{
+       if (provider->vpn_service != NULL)
+               return -EALREADY;
+
+       provider->vpn_service =
+               __connman_service_create_from_provider(provider);
+
+       if (provider->vpn_service == NULL)
+               return -EOPNOTSUPP;
+
+       return 0;
+}
+
+static void provider_create_all_from_type(const char *provider_type)
+{
+       unsigned int i;
+       char **providers;
+       char *id, *type;
+       GKeyFile *keyfile;
+       struct connman_provider *provider;
+
+       DBG("provider type %s", provider_type);
+
+       providers = __connman_storage_get_providers();
+
+       for (i = 0; providers[i] != NULL; i+=1) {
+
+               if (strncmp(providers[i], "provider_", 9) != 0)
+                       continue;
+
+               id = providers[i] + 9;
+               keyfile = __connman_storage_load_provider(id);
+
+               if (keyfile == NULL)
+                       continue;
+
+               type = g_key_file_get_string(keyfile, id, "Type", NULL);
+
+               DBG("keyfile %p id %s type %s", keyfile, id, type);
+
+               if (strcmp(provider_type, type) != 0) {
+                       g_free(type);
+                       g_key_file_free(keyfile);
+                       continue;
+               }
+
+               provider = provider_create_from_keyfile(keyfile, id);
+               if (provider != NULL) {
+                       if (provider_create_service(provider) == -EOPNOTSUPP) {
+                               DBG("could not create service");
+                               connman_provider_unref(provider);
+                       }
+               }
+
+               g_free(type);
+               g_key_file_free(keyfile);
+       }
+       g_strfreev(providers);
+}
+
+static char **get_user_networks(DBusMessageIter *array, int *count)
+{
+       DBusMessageIter entry;
+       char **networks = NULL;
+       GSList *list = NULL, *l;
+       int len;
+
+       dbus_message_iter_recurse(array, &entry);
+
+       while (dbus_message_iter_get_arg_type(&entry) == DBUS_TYPE_STRING) {
+               const char *val;
+               dbus_message_iter_get_basic(&entry, &val);
+
+               list = g_slist_prepend(list, g_strdup(val));
+               dbus_message_iter_next(&entry);
+       }
+
+       len = g_slist_length(list);
+       if (len == 0)
+               goto out;
+
+       networks = g_try_new(char *, len + 1);
+       if (networks == NULL)
+               goto out;
+
+       *count = len;
+       networks[len] = 0;
+
+       for (l = list; l != NULL; l = g_slist_next(l))
+               networks[--len] = l->data;
+
+out:
+       g_slist_free(list);
+
+       return networks;
 }
 
 int __connman_provider_create_and_connect(DBusMessage *msg)
 {
        struct connman_provider *provider;
        DBusMessageIter iter, array;
-       const char *type = NULL, *name = NULL, *service_path = NULL;
+       const char *type = NULL, *name = NULL, *service_path;
        const char *host = NULL, *domain = NULL;
+       char **networks = NULL;
        char *ident;
-       gboolean created = FALSE;
-       int err;
+       int err, count = 0;
 
        dbus_message_iter_init(msg, &iter);
        dbus_message_iter_recurse(&iter, &array);
@@ -452,22 +830,22 @@ int __connman_provider_create_and_connect(DBusMessage *msg)
                        else if (g_str_equal(key, "VPN.Domain") == TRUE)
                                dbus_message_iter_get_basic(&value, &domain);
                        break;
+               case DBUS_TYPE_ARRAY:
+                       if (g_str_equal(key, "Networks") == TRUE)
+                               networks = get_user_networks(&value, &count);
+                       break;
                }
 
                dbus_message_iter_next(&array);
        }
 
-       if (host == NULL || domain == NULL) {
-               err = -EINVAL;
-               goto failed;
-       }
+       if (host == NULL || domain == NULL)
+               return -EINVAL;
 
-       DBG("Type %s name %s", type, name);
+       DBG("Type %s name %s networks %p", type, name, networks);
 
-       if (type == NULL || name == NULL) {
-               err = -EOPNOTSUPP;
-               goto failed;
-       }
+       if (type == NULL || name == NULL)
+               return -EOPNOTSUPP;
 
        ident = g_strdup_printf("%s_%s", host, domain);
        provider_dbus_ident(ident);
@@ -475,23 +853,30 @@ int __connman_provider_create_and_connect(DBusMessage *msg)
        DBG("ident %s", ident);
 
        provider = connman_provider_lookup(ident);
-
        if (provider == NULL) {
-               created = TRUE;
                provider = connman_provider_get(ident);
-               if (provider) {
-                       provider->host = g_strdup(host);
-                       provider->domain = g_strdup(domain);
-                       provider->name = g_strdup(name);
-                       provider->type = g_strdup(type);
+               if (provider == NULL) {
+                       DBG("can not create provider");
+                       g_free(ident);
+                       return -EOPNOTSUPP;
                }
+
+               provider->host = g_strdup(host);
+               provider->domain = g_strdup(domain);
+               provider->name = g_strdup(name);
+               provider->type = g_strdup(type);
+
+               if (provider_register(provider) == 0)
+                       connman_provider_load(provider);
        }
 
-       if (provider == NULL) {
-               DBG("can not create provider");
-               err = -EOPNOTSUPP;
-               goto failed;
+       if (networks != NULL) {
+               g_strfreev(provider->user_networks);
+               provider->user_networks = networks;
+               provider->num_user_networks = count;
+               set_user_networks(provider, provider->user_networks);
        }
+
        dbus_message_iter_init(msg, &iter);
        dbus_message_iter_recurse(&iter, &array);
 
@@ -517,25 +902,21 @@ int __connman_provider_create_and_connect(DBusMessage *msg)
 
        g_free(ident);
 
-       if (provider == NULL) {
-               err = -EOPNOTSUPP;
-               goto failed;
-       }
-
-       if (created == TRUE)
-               provider_probe(provider);
+       err = provider_create_service(provider);
+       if (err == -EALREADY) {
+               DBG("provider already connected");
+       } else {
+               if (err == -EOPNOTSUPP) {
+                       goto unref;
+               } else {
+                       err = __connman_service_connect(provider->vpn_service);
 
-       provider->vpn_service =
-                       __connman_service_create_from_provider(provider);
-       if (provider->vpn_service == NULL) {
-               err = -EOPNOTSUPP;
-               goto failed;
+                       if (err < 0 && err != -EINPROGRESS)
+                               goto failed;
+               }
        }
 
-       err = __connman_service_connect(provider->vpn_service);
-       if (err < 0 && err != -EINPROGRESS)
-               goto failed;
-
+       connman_provider_save(provider);
        service_path = __connman_service_get_path(provider->vpn_service);
        g_dbus_send_reply(connection, msg,
                                DBUS_TYPE_OBJECT_PATH, &service_path,
@@ -543,13 +924,13 @@ int __connman_provider_create_and_connect(DBusMessage *msg)
        return 0;
 
 failed:
-       if (provider != NULL && created == TRUE) {
-               DBG("can not connect delete provider");
-               connman_provider_unref(provider);
+       connman_service_unref(provider->vpn_service);
+       provider->vpn_service = NULL;
 
-               if (provider->vpn_service != NULL)
-                       __connman_service_put(provider->vpn_service);
-       }
+unref:
+       DBG("can not connect, delete provider");
+
+       g_hash_table_remove(provider_hash, provider->identifier);
 
        return err;
 }
@@ -573,29 +954,16 @@ int connman_provider_set_string(struct connman_provider *provider,
        } else if (g_str_equal(key, "Name") == TRUE) {
                g_free(provider->name);
                provider->name = g_strdup(value);
-       } else if (g_str_equal(key, "Gateway") == TRUE) {
-               g_free(provider->element.ipv4.gateway);
-               provider->element.ipv4.gateway = g_strdup(value);
-       } else if (g_str_equal(key, "Address") == TRUE) {
-               g_free(provider->element.ipv4.address);
-               provider->element.ipv4.address = g_strdup(value);
-       } else if (g_str_equal(key, "Netmask") == TRUE) {
-               g_free(provider->element.ipv4.netmask);
-               provider->element.ipv4.netmask = g_strdup(value);
-       } else if (g_str_equal(key, "PAC") == TRUE) {
-               g_free(provider->element.ipv4.pac);
-               provider->element.ipv4.pac = g_strdup(value);
-               __connman_service_set_proxy_autoconfig(provider->vpn_service,
-                                                                       value);
-       } else if (g_str_equal(key, "DNS") == TRUE) {
-               g_free(provider->dns);
-               provider->dns = g_strdup(value);
-       } else if (g_str_equal(key, "Domain") == TRUE) {
+       } else if (g_str_equal(key, "Host") == TRUE) {
+               g_free(provider->host);
+               provider->host = g_strdup(value);
+       } else if (g_str_equal(key, "VPN.Domain") == TRUE) {
                g_free(provider->domain);
                provider->domain = g_strdup(value);
-       }
-
-       return connman_element_set_string(&provider->element, key, value);
+       } else
+               g_hash_table_replace(provider->setting_strings,
+                               g_strdup(key), g_strdup(value));
+       return 0;
 }
 
 const char *connman_provider_get_string(struct connman_provider *provider,
@@ -607,8 +975,29 @@ const char *connman_provider_get_string(struct connman_provider *provider,
                return provider->type;
        else if (g_str_equal(key, "Name") == TRUE)
                return provider->name;
+       else if (g_str_equal(key, "Host") == TRUE)
+               return provider->host;
+       else if (g_str_equal(key, "VPN.Domain") == TRUE)
+               return provider->domain;
 
-       return connman_element_get_string(&provider->element, key);
+       return g_hash_table_lookup(provider->setting_strings, key);
+}
+
+connman_bool_t
+__connman_provider_check_routes(struct connman_provider *provider)
+{
+       if (provider == NULL)
+               return FALSE;
+
+       if (provider->user_routes != NULL &&
+                       g_hash_table_size(provider->user_routes) > 0)
+               return TRUE;
+
+       if (provider->routes != NULL &&
+                       g_hash_table_size(provider->routes) > 0)
+               return TRUE;
+
+       return FALSE;
 }
 
 void *connman_provider_get_data(struct connman_provider *provider)
@@ -628,29 +1017,234 @@ void connman_provider_set_index(struct connman_provider *provider, int index)
 
        DBG("");
 
-       ipconfig = __connman_service_get_ipconfig(service);
+       if (service == NULL)
+               return;
+
+       ipconfig = __connman_service_get_ip4config(service);
 
        if (ipconfig == NULL) {
-               __connman_service_create_ipconfig(service, index);
+               __connman_service_create_ip4config(service, index);
 
-               ipconfig = __connman_service_get_ipconfig(service);
+               ipconfig = __connman_service_get_ip4config(service);
                if (ipconfig == NULL) {
                        DBG("Couldnt create ipconfig");
                        goto done;
                }
        }
 
-       connman_ipconfig_set_method(ipconfig, CONNMAN_IPCONFIG_METHOD_FIXED);
+       __connman_ipconfig_set_method(ipconfig, CONNMAN_IPCONFIG_METHOD_FIXED);
        __connman_ipconfig_set_index(ipconfig, index);
 
 
+       ipconfig = __connman_service_get_ip6config(service);
+
+       if (ipconfig == NULL) {
+               __connman_service_create_ip6config(service, index);
+
+               ipconfig = __connman_service_get_ip6config(service);
+               if (ipconfig == NULL) {
+                       DBG("Couldnt create ipconfig for IPv6");
+                       goto done;
+               }
+       }
+
+       __connman_ipconfig_set_method(ipconfig, CONNMAN_IPCONFIG_METHOD_OFF);
+       __connman_ipconfig_set_index(ipconfig, index);
+
 done:
-       provider->element.index = index;
+       provider->index = index;
 }
 
 int connman_provider_get_index(struct connman_provider *provider)
 {
-       return provider->element.index;
+       return provider->index;
+}
+
+int connman_provider_set_ipaddress(struct connman_provider *provider,
+                                       struct connman_ipaddress *ipaddress)
+{
+       struct connman_ipconfig *ipconfig = NULL;
+
+       ipconfig = __connman_service_get_ipconfig(provider->vpn_service,
+                                                       ipaddress->family);
+       if (ipconfig == NULL)
+               return -EINVAL;
+
+       provider->family = ipaddress->family;
+
+       __connman_ipconfig_set_local(ipconfig, ipaddress->local);
+       __connman_ipconfig_set_peer(ipconfig, ipaddress->peer);
+       __connman_ipconfig_set_broadcast(ipconfig, ipaddress->broadcast);
+       __connman_ipconfig_set_gateway(ipconfig, ipaddress->gateway);
+       __connman_ipconfig_set_prefixlen(ipconfig, ipaddress->prefixlen);
+
+       return 0;
+}
+
+int connman_provider_set_pac(struct connman_provider *provider, const char *pac)
+{
+       DBG("provider %p pac %s", provider, pac);
+
+       __connman_service_set_pac(provider->vpn_service, pac);
+
+       return 0;
+}
+
+
+int connman_provider_set_domain(struct connman_provider *provider,
+                                       const char *domain)
+{
+       DBG("provider %p domain %s", provider, domain);
+
+       g_free(provider->domain);
+       provider->domain = g_strdup(domain);
+
+       __connman_service_set_domainname(provider->vpn_service, domain);
+
+       return 0;
+}
+
+int connman_provider_set_nameservers(struct connman_provider *provider,
+                                       const char *nameservers)
+{
+       int i;
+       char **nameservers_array = NULL;
+
+       DBG("provider %p nameservers %s", provider, nameservers);
+
+       __connman_service_nameserver_clear(provider->vpn_service);
+
+       if (nameservers == NULL)
+               return 0;
+
+       nameservers_array = g_strsplit(nameservers, " ", 0);
+
+       for (i = 0; nameservers_array[i] != NULL; i++) {
+               __connman_service_nameserver_append(provider->vpn_service,
+                                               nameservers_array[i], FALSE);
+       }
+
+       g_strfreev(nameservers_array);
+
+       return 0;
+}
+
+enum provider_route_type {
+       PROVIDER_ROUTE_TYPE_NONE = 0,
+       PROVIDER_ROUTE_TYPE_MASK = 1,
+       PROVIDER_ROUTE_TYPE_ADDR = 2,
+       PROVIDER_ROUTE_TYPE_GW   = 3,
+};
+
+static int route_env_parse(struct connman_provider *provider, const char *key,
+                               int *family, unsigned long *idx,
+                               enum provider_route_type *type)
+{
+       char *end;
+       const char *start;
+
+       DBG("name %s", provider->name);
+
+       if (!strcmp(provider->type, "openvpn")) {
+               if (g_str_has_prefix(key, "route_network_") == TRUE) {
+                       start = key + strlen("route_network_");
+                       *type = PROVIDER_ROUTE_TYPE_ADDR;
+               } else if (g_str_has_prefix(key, "route_netmask_") == TRUE) {
+                       start = key + strlen("route_netmask_");
+                       *type = PROVIDER_ROUTE_TYPE_MASK;
+               } else if (g_str_has_prefix(key, "route_gateway_") == TRUE) {
+                       start = key + strlen("route_gateway_");
+                       *type = PROVIDER_ROUTE_TYPE_GW;
+               } else
+                       return -EINVAL;
+
+               *family = AF_INET;
+               *idx = g_ascii_strtoull(start, &end, 10);
+
+       } else if (!strcmp(provider->type, "openconnect")) {
+               if (g_str_has_prefix(key, "CISCO_SPLIT_INC_") == TRUE) {
+                       *family = AF_INET;
+                       start = key + strlen("CISCO_SPLIT_INC_");
+               } else if (g_str_has_prefix(key, "CISCO_IPV6_SPLIT_INC_") == TRUE) {
+                       *family = AF_INET6;
+                       start = key + strlen("CISCO_IPV6_SPLIT_INC_");
+               } else
+                       return -EINVAL;
+
+               *idx = g_ascii_strtoull(start, &end, 10);
+
+               if (strncmp(end, "_ADDR", 5) == 0)
+                       *type = PROVIDER_ROUTE_TYPE_ADDR;
+               else if (strncmp(end, "_MASK", 5) == 0)
+                       *type = PROVIDER_ROUTE_TYPE_MASK;
+               else if (strncmp(end, "_MASKLEN", 8) == 0 &&
+                               *family == AF_INET6) {
+                       *type = PROVIDER_ROUTE_TYPE_MASK;
+               } else
+                       return -EINVAL;
+       }
+
+       return 0;
+}
+
+int connman_provider_append_route(struct connman_provider *provider,
+                                       const char *key, const char *value)
+{
+       struct connman_route *route;
+       int ret, family = 0;
+       unsigned long idx = 0;
+       enum provider_route_type type = PROVIDER_ROUTE_TYPE_NONE;
+
+       DBG("key %s value %s", key, value);
+
+       ret = route_env_parse(provider, key, &family, &idx, &type);
+       if (ret < 0)
+               return ret;
+
+       DBG("idx %lu family %d type %d", idx, family, type);
+
+       route = g_hash_table_lookup(provider->routes, GINT_TO_POINTER(idx));
+       if (route == NULL) {
+               route = g_try_new0(struct connman_route, 1);
+               if (route == NULL) {
+                       connman_error("out of memory");
+                       return -ENOMEM;
+               }
+
+               route->family = family;
+
+               g_hash_table_replace(provider->routes, GINT_TO_POINTER(idx),
+                                               route);
+       }
+
+       switch (type) {
+       case PROVIDER_ROUTE_TYPE_NONE:
+               break;
+       case PROVIDER_ROUTE_TYPE_MASK:
+               route->netmask = g_strdup(value);
+               break;
+       case PROVIDER_ROUTE_TYPE_ADDR:
+               route->host = g_strdup(value);
+               break;
+       case PROVIDER_ROUTE_TYPE_GW:
+               route->gateway = g_strdup(value);
+               break;
+       }
+
+       return 0;
+}
+
+const char *connman_provider_get_driver_name(struct connman_provider *provider)
+{
+       if (provider->driver == NULL)
+               return NULL;
+
+       return provider->driver->name;
+}
+
+const char *connman_provider_get_save_group(struct connman_provider *provider)
+{
+       return provider->identifier;
 }
 
 static gint compare_priority(gconstpointer a, gconstpointer b)
@@ -672,6 +1266,7 @@ int connman_provider_driver_register(struct connman_provider_driver *driver)
 
        driver_list = g_slist_insert_sorted(driver_list, driver,
                                                        compare_priority);
+       provider_create_all_from_type(driver->name);
        return 0;
 }
 
@@ -682,12 +1277,12 @@ void connman_provider_driver_unregister(struct connman_provider_driver *driver)
        driver_list = g_slist_remove(driver_list, driver);
 }
 
-static void provider_disconnect(gpointer key, gpointer value,
+static void provider_remove_all(gpointer key, gpointer value,
                                                gpointer user_data)
 {
        struct connman_provider *provider = value;
 
-       __connman_provider_disconnect(provider);
+       __connman_provider_remove(provider->identifier);
 }
 
 static void provider_offline_mode(connman_bool_t enabled)
@@ -695,13 +1290,75 @@ static void provider_offline_mode(connman_bool_t enabled)
        DBG("enabled %d", enabled);
 
        if (enabled == TRUE)
-               g_hash_table_foreach(provider_hash, provider_disconnect, NULL);
+               g_hash_table_foreach(provider_hash, provider_remove_all, NULL);
+
+}
+
+static struct connman_provider *provider_get(int index)
+{
+       GHashTableIter iter;
+       gpointer value, key;
+
+       g_hash_table_iter_init(&iter, provider_hash);
+
+       while (g_hash_table_iter_next(&iter, &key, &value) == TRUE) {
+               struct connman_provider *provider = value;
+
+               if (provider->index == index)
+                       return provider;
+       }
+
+       return NULL;
+}
+
+static void provider_service_changed(struct connman_service *service,
+                               enum connman_service_state state)
+{
+       struct connman_provider *provider;
+       int vpn_index, service_index;
+
+       if (service == NULL)
+               return;
+
+       switch (state) {
+       case CONNMAN_SERVICE_STATE_UNKNOWN:
+       case CONNMAN_SERVICE_STATE_IDLE:
+       case CONNMAN_SERVICE_STATE_ASSOCIATION:
+       case CONNMAN_SERVICE_STATE_CONFIGURATION:
+       case CONNMAN_SERVICE_STATE_READY:
+       case CONNMAN_SERVICE_STATE_ONLINE:
+               return;
+       case CONNMAN_SERVICE_STATE_DISCONNECT:
+       case CONNMAN_SERVICE_STATE_FAILURE:
+               break;
+       }
+
+       service_index = __connman_service_get_index(service);
+
+       vpn_index = __connman_connection_get_vpn_index(service_index);
+
+       DBG("service %p %s state %d index %d/%d", service,
+               __connman_service_get_ident(service),
+               state, service_index, vpn_index);
+
+       if (vpn_index < 0)
+               return;
+
+       provider = provider_get(vpn_index);
+       if (provider == NULL)
+               return;
+
+       DBG("disconnect %p index %d", provider, vpn_index);
+
+       __connman_provider_disconnect(provider);
 
+       return;
 }
 
 static struct connman_notifier provider_notifier = {
        .name                   = "provider",
        .offline_mode           = provider_offline_mode,
+       .service_state_changed  = provider_service_changed,
 };
 
 int __connman_provider_init(void)