Imported Upstream version 1.35
[platform/upstream/connman.git] / src / config.c
1 /*
2  *
3  *  Connection Manager
4  *
5  *  Copyright (C) 2007-2013  Intel Corporation. All rights reserved.
6  *
7  *  This program is free software; you can redistribute it and/or modify
8  *  it under the terms of the GNU General Public License version 2 as
9  *  published by the Free Software Foundation.
10  *
11  *  This program is distributed in the hope that it will be useful,
12  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
13  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
14  *  GNU General Public License for more details.
15  *
16  *  You should have received a copy of the GNU General Public License
17  *  along with this program; if not, write to the Free Software
18  *  Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
19  *
20  */
21
22 #ifdef HAVE_CONFIG_H
23 #include <config.h>
24 #endif
25
26 #include <errno.h>
27 #include <stdio.h>
28 #include <stdlib.h>
29 #include <unistd.h>
30 #include <string.h>
31 #include <sys/vfs.h>
32 #include <sys/inotify.h>
33 #include <netdb.h>
34 #include <glib.h>
35
36 #include <connman/provision.h>
37 #include <connman/ipaddress.h>
38 #include "connman.h"
39
40 struct connman_config_service {
41         char *ident;
42         char *name;
43         char *type;
44         void *ssid;
45         unsigned int ssid_len;
46         char *eap;
47         char *identity;
48         char *anonymous_identity;
49         char *ca_cert_file;
50         char *subject_match;
51         char *altsubject_match;
52         char *domain_suffix_match;
53         char *domain_match;
54         char *client_cert_file;
55         char *private_key_file;
56         char *private_key_passphrase;
57         char *private_key_passphrase_type;
58         char *phase2;
59         char *passphrase;
60         enum connman_service_security security;
61         GSList *service_identifiers;
62         char *config_ident; /* file prefix */
63         char *config_entry; /* entry name */
64         bool hidden;
65         bool virtual;
66         char *virtual_file;
67         char *ipv4_address;
68         char *ipv4_netmask;
69         char *ipv4_gateway;
70         char *ipv6_address;
71         unsigned char ipv6_prefix_length;
72         char *ipv6_gateway;
73         char *ipv6_privacy;
74         char *mac;
75         char **nameservers;
76         char **search_domains;
77         char **timeservers;
78         char *domain_name;
79 };
80
81 struct connman_config {
82         char *ident;
83         char *name;
84         char *description;
85         GHashTable *service_table;
86 };
87
88 static GHashTable *config_table = NULL;
89
90 static bool cleanup = false;
91
92 /* Definition of possible strings in the .config files */
93 #define CONFIG_KEY_NAME                "Name"
94 #define CONFIG_KEY_DESC                "Description"
95
96 #define SERVICE_KEY_TYPE               "Type"
97 #define SERVICE_KEY_NAME               "Name"
98 #define SERVICE_KEY_SSID               "SSID"
99 #define SERVICE_KEY_EAP                "EAP"
100 #define SERVICE_KEY_CA_CERT            "CACertFile"
101 #define SERVICE_KEY_CL_CERT            "ClientCertFile"
102 #define SERVICE_KEY_PRV_KEY            "PrivateKeyFile"
103 #define SERVICE_KEY_PRV_KEY_PASS       "PrivateKeyPassphrase"
104 #define SERVICE_KEY_PRV_KEY_PASS_TYPE  "PrivateKeyPassphraseType"
105 #define SERVICE_KEY_IDENTITY           "Identity"
106 #define SERVICE_KEY_ANONYMOUS_IDENTITY "AnonymousIdentity"
107 #define SERVICE_KEY_SUBJECT_MATCH      "SubjectMatch"
108 #define SERVICE_KEY_ALT_SUBJECT_MATCH  "AltSubjectMatch"
109 #define SERVICE_KEY_DOMAIN_SUFF_MATCH  "DomainSuffixMatch"
110 #define SERVICE_KEY_DOMAIN_MATCH       "DomainMatch"
111 #define SERVICE_KEY_PHASE2             "Phase2"
112 #define SERVICE_KEY_PASSPHRASE         "Passphrase"
113 #define SERVICE_KEY_SECURITY           "Security"
114 #define SERVICE_KEY_HIDDEN             "Hidden"
115
116 #define SERVICE_KEY_IPv4               "IPv4"
117 #define SERVICE_KEY_IPv6               "IPv6"
118 #define SERVICE_KEY_IPv6_PRIVACY       "IPv6.Privacy"
119 #define SERVICE_KEY_MAC                "MAC"
120 #define SERVICE_KEY_NAMESERVERS        "Nameservers"
121 #define SERVICE_KEY_SEARCH_DOMAINS     "SearchDomains"
122 #define SERVICE_KEY_TIMESERVERS        "Timeservers"
123 #define SERVICE_KEY_DOMAIN             "Domain"
124
125 static const char *config_possible_keys[] = {
126         CONFIG_KEY_NAME,
127         CONFIG_KEY_DESC,
128         NULL,
129 };
130
131 static const char *service_possible_keys[] = {
132         SERVICE_KEY_TYPE,
133         SERVICE_KEY_NAME,
134         SERVICE_KEY_SSID,
135         SERVICE_KEY_EAP,
136         SERVICE_KEY_CA_CERT,
137         SERVICE_KEY_CL_CERT,
138         SERVICE_KEY_PRV_KEY,
139         SERVICE_KEY_PRV_KEY_PASS,
140         SERVICE_KEY_PRV_KEY_PASS_TYPE,
141         SERVICE_KEY_IDENTITY,
142         SERVICE_KEY_ANONYMOUS_IDENTITY,
143         SERVICE_KEY_SUBJECT_MATCH,
144         SERVICE_KEY_ALT_SUBJECT_MATCH,
145         SERVICE_KEY_DOMAIN_SUFF_MATCH,
146         SERVICE_KEY_DOMAIN_MATCH,
147         SERVICE_KEY_PHASE2,
148         SERVICE_KEY_PASSPHRASE,
149         SERVICE_KEY_SECURITY,
150         SERVICE_KEY_HIDDEN,
151         SERVICE_KEY_IPv4,
152         SERVICE_KEY_IPv6,
153         SERVICE_KEY_IPv6_PRIVACY,
154         SERVICE_KEY_MAC,
155         SERVICE_KEY_NAMESERVERS,
156         SERVICE_KEY_SEARCH_DOMAINS,
157         SERVICE_KEY_TIMESERVERS,
158         SERVICE_KEY_DOMAIN,
159         NULL,
160 };
161
162 static void unregister_config(gpointer data)
163 {
164         struct connman_config *config = data;
165
166         connman_info("Removing configuration %s", config->ident);
167
168         g_hash_table_destroy(config->service_table);
169
170         g_free(config->description);
171         g_free(config->name);
172         g_free(config->ident);
173         g_free(config);
174 }
175
176 static void unregister_service(gpointer data)
177 {
178         struct connman_config_service *config_service = data;
179         struct connman_service *service;
180         char *service_id;
181         GSList *list;
182
183         if (cleanup)
184                 goto free_only;
185
186         connman_info("Removing service configuration %s",
187                                                 config_service->ident);
188
189         if (config_service->virtual)
190                 goto free_only;
191
192         for (list = config_service->service_identifiers; list;
193                                                         list = list->next) {
194                 service_id = list->data;
195
196                 service = __connman_service_lookup_from_ident(service_id);
197                 if (service) {
198                         __connman_service_set_immutable(service, false);
199                         __connman_service_set_config(service, NULL, NULL);
200                         __connman_service_remove(service);
201
202                         /*
203                          * Ethernet or gadget service cannot be removed by
204                          * __connman_service_remove() so reset the ipconfig
205                          * here.
206                          */
207                         if (connman_service_get_type(service) ==
208                                                 CONNMAN_SERVICE_TYPE_ETHERNET ||
209                                         connman_service_get_type(service) ==
210                                                 CONNMAN_SERVICE_TYPE_GADGET) {
211                                 __connman_service_disconnect(service);
212                                 __connman_service_reset_ipconfig(service,
213                                         CONNMAN_IPCONFIG_TYPE_IPV4, NULL, NULL);
214                                 __connman_service_reset_ipconfig(service,
215                                         CONNMAN_IPCONFIG_TYPE_IPV6, NULL, NULL);
216                                 __connman_service_set_ignore(service, true);
217
218                                 /*
219                                  * After these operations, user needs to
220                                  * reconnect ethernet cable to get IP
221                                  * address.
222                                  */
223                         }
224                 }
225
226                 if (!__connman_storage_remove_service(service_id))
227                         DBG("Could not remove all files for service %s",
228                                                                 service_id);
229         }
230
231 free_only:
232         g_free(config_service->ident);
233         g_free(config_service->type);
234         g_free(config_service->name);
235         g_free(config_service->ssid);
236         g_free(config_service->eap);
237         g_free(config_service->identity);
238         g_free(config_service->anonymous_identity);
239         g_free(config_service->ca_cert_file);
240         g_free(config_service->subject_match);
241         g_free(config_service->altsubject_match);
242         g_free(config_service->domain_suffix_match);
243         g_free(config_service->domain_match);
244         g_free(config_service->client_cert_file);
245         g_free(config_service->private_key_file);
246         g_free(config_service->private_key_passphrase);
247         g_free(config_service->private_key_passphrase_type);
248         g_free(config_service->phase2);
249         g_free(config_service->passphrase);
250         g_free(config_service->ipv4_address);
251         g_free(config_service->ipv4_gateway);
252         g_free(config_service->ipv4_netmask);
253         g_free(config_service->ipv6_address);
254         g_free(config_service->ipv6_gateway);
255         g_free(config_service->ipv6_privacy);
256         g_free(config_service->mac);
257         g_strfreev(config_service->nameservers);
258         g_strfreev(config_service->search_domains);
259         g_strfreev(config_service->timeservers);
260         g_free(config_service->domain_name);
261         g_slist_free_full(config_service->service_identifiers, g_free);
262         g_free(config_service->config_ident);
263         g_free(config_service->config_entry);
264         g_free(config_service->virtual_file);
265         g_free(config_service);
266 }
267
268 static void check_keys(GKeyFile *keyfile, const char *group,
269                         const char **possible_keys)
270 {
271         char **avail_keys;
272         gsize nb_avail_keys, i, j;
273
274         avail_keys = g_key_file_get_keys(keyfile, group, &nb_avail_keys, NULL);
275         if (!avail_keys)
276                 return;
277
278         /*
279          * For each key in the configuration file,
280          * verify it is understood by connman
281          */
282         for (i = 0 ; i < nb_avail_keys; i++) {
283                 for (j = 0; possible_keys[j] ; j++)
284                         if (g_strcmp0(avail_keys[i], possible_keys[j]) == 0)
285                                 break;
286
287                 if (!possible_keys[j])
288                         connman_warn("Unknown configuration key %s in [%s]",
289                                         avail_keys[i], group);
290         }
291
292         g_strfreev(avail_keys);
293 }
294
295 static int check_family(const char *address, int expected_family)
296 {
297         int family;
298         int err = 0;
299
300         family = connman_inet_check_ipaddress(address);
301         if (family < 0) {
302                 DBG("Cannot get address family of %s (%d/%s)", address,
303                         family, gai_strerror(family));
304                 err = -EINVAL;
305                 goto out;
306         }
307
308         switch (family) {
309         case AF_INET:
310                 if (expected_family != AF_INET) {
311                         DBG("Wrong type address %s, expecting IPv4", address);
312                         err = -EINVAL;
313                         goto out;
314                 }
315                 break;
316         case AF_INET6:
317                 if (expected_family != AF_INET6) {
318                         DBG("Wrong type address %s, expecting IPv6", address);
319                         err = -EINVAL;
320                         goto out;
321                 }
322                 break;
323         default:
324                 DBG("Unsupported address family %d", family);
325                 err = -EINVAL;
326                 goto out;
327         }
328
329 out:
330         return err;
331 }
332
333 static int parse_address(const char *address_str, int address_family,
334                         char **address, char **netmask, char **gateway)
335 {
336         char *addr_str, *mask_str, *gw_str;
337         int err = 0;
338         char **route;
339
340         route = g_strsplit(address_str, "/", 0);
341         if (!route)
342                 return -EINVAL;
343
344         addr_str = route[0];
345         if (!addr_str || addr_str[0] == '\0') {
346                 err = -EINVAL;
347                 goto out;
348         }
349
350         if ((err = check_family(addr_str, address_family)) < 0)
351                 goto out;
352
353         mask_str = route[1];
354         if (!mask_str || mask_str[0] == '\0') {
355                 err = -EINVAL;
356                 goto out;
357         }
358
359         gw_str = route[2];
360         if (gw_str && gw_str[0]) {
361                 if ((err = check_family(gw_str, address_family)) < 0)
362                         goto out;
363         }
364
365         g_free(*address);
366         *address = g_strdup(addr_str);
367
368         g_free(*netmask);
369         *netmask = g_strdup(mask_str);
370
371         g_free(*gateway);
372         *gateway = g_strdup(gw_str);
373
374         if (*gateway)
375                 DBG("address %s/%s via %s", *address, *netmask, *gateway);
376         else
377                 DBG("address %s/%s", *address, *netmask);
378
379 out:
380         g_strfreev(route);
381
382         return err;
383 }
384
385 static bool check_address(char *address_str, char **address)
386 {
387         if (g_ascii_strcasecmp(address_str, "auto") == 0 ||
388                         g_ascii_strcasecmp(address_str, "dhcp") == 0 ||
389                         g_ascii_strcasecmp(address_str, "off") == 0) {
390                 *address = address_str;
391                 return false;
392         }
393
394         return true;
395 }
396
397 static bool load_service_generic(GKeyFile *keyfile,
398                         const char *group, struct connman_config *config,
399                         struct connman_config_service *service)
400 {
401         char *str, *mask;
402         char **strlist;
403         gsize length;
404
405         str = __connman_config_get_string(keyfile, group, SERVICE_KEY_IPv4, NULL);
406         if (str && check_address(str, &service->ipv4_address)) {
407                 mask = NULL;
408
409                 if (parse_address(str, AF_INET, &service->ipv4_address,
410                                         &mask, &service->ipv4_gateway) < 0) {
411                         connman_warn("Invalid format for IPv4 address %s",
412                                                                         str);
413                         g_free(str);
414                         goto err;
415                 }
416
417                 if (!g_strrstr(mask, ".")) {
418                         /* We have netmask length */
419                         in_addr_t addr;
420                         struct in_addr netmask_in;
421                         unsigned char prefix_len = 32;
422                         char *ptr;
423                         long int value = strtol(mask, &ptr, 10);
424
425                         if (ptr != mask && *ptr == '\0' && value && value <= 32)
426                                 prefix_len = value;
427
428                         addr = 0xffffffff << (32 - prefix_len);
429                         netmask_in.s_addr = htonl(addr);
430                         service->ipv4_netmask =
431                                 g_strdup(inet_ntoa(netmask_in));
432
433                         g_free(mask);
434                 } else
435                         service->ipv4_netmask = mask;
436
437                 g_free(str);
438         }
439
440         str =  __connman_config_get_string(keyfile, group, SERVICE_KEY_IPv6, NULL);
441         if (str && check_address(str, &service->ipv6_address)) {
442                 long int value;
443                 char *ptr;
444
445                 mask = NULL;
446
447                 if (parse_address(str, AF_INET6, &service->ipv6_address,
448                                         &mask, &service->ipv6_gateway) < 0) {
449                         connman_warn("Invalid format for IPv6 address %s",
450                                                                         str);
451                         g_free(str);
452                         goto err;
453                 }
454
455                 value = strtol(mask, &ptr, 10);
456                 if (ptr != mask && *ptr == '\0' && value <= 128)
457                         service->ipv6_prefix_length = value;
458                 else
459                         service->ipv6_prefix_length = 128;
460
461                 g_free(mask);
462                 g_free(str);
463         }
464
465         str = __connman_config_get_string(keyfile, group, SERVICE_KEY_IPv6_PRIVACY,
466                                                                         NULL);
467         if (str) {
468                 g_free(service->ipv6_privacy);
469                 service->ipv6_privacy = str;
470         }
471
472         str = __connman_config_get_string(keyfile, group, SERVICE_KEY_MAC, NULL);
473         if (str) {
474                 g_free(service->mac);
475                 service->mac = str;
476         }
477
478         str = __connman_config_get_string(keyfile, group, SERVICE_KEY_DOMAIN, NULL);
479         if (str) {
480                 g_free(service->domain_name);
481                 service->domain_name = str;
482         }
483
484         strlist = __connman_config_get_string_list(keyfile, group,
485                                         SERVICE_KEY_NAMESERVERS,
486                                         &length, NULL);
487         if (strlist) {
488                 if (length != 0) {
489                         g_strfreev(service->nameservers);
490                         service->nameservers = strlist;
491                 } else
492                         g_strfreev(strlist);
493         }
494
495         strlist = __connman_config_get_string_list(keyfile, group,
496                                         SERVICE_KEY_SEARCH_DOMAINS,
497                                         &length, NULL);
498         if (strlist) {
499                 if (length != 0) {
500                         g_strfreev(service->search_domains);
501                         service->search_domains = strlist;
502                 } else
503                         g_strfreev(strlist);
504         }
505
506         strlist = __connman_config_get_string_list(keyfile, group,
507                                         SERVICE_KEY_TIMESERVERS,
508                                         &length, NULL);
509         if (strlist) {
510                 if (length != 0) {
511                         g_strfreev(service->timeservers);
512                         service->timeservers = strlist;
513                 } else
514                         g_strfreev(strlist);
515         }
516
517         return true;
518
519 err:
520         g_free(service->ident);
521         g_free(service->type);
522         g_free(service->ipv4_address);
523         g_free(service->ipv4_netmask);
524         g_free(service->ipv4_gateway);
525         g_free(service->ipv6_address);
526         g_free(service->ipv6_gateway);
527         g_free(service->mac);
528         g_free(service);
529
530         return false;
531 }
532
533 static bool load_service(GKeyFile *keyfile, const char *group,
534                                                 struct connman_config *config)
535 {
536         struct connman_config_service *service;
537         const char *ident;
538         char *str, *hex_ssid;
539         enum connman_service_security security;
540         bool service_created = false;
541
542         /* Strip off "service_" prefix */
543         ident = group + 8;
544
545         if (strlen(ident) < 1)
546                 return false;
547
548         /* Verify that provided keys are good */
549         check_keys(keyfile, group, service_possible_keys);
550
551         service = g_hash_table_lookup(config->service_table, ident);
552         if (!service) {
553                 service = g_try_new0(struct connman_config_service, 1);
554                 if (!service)
555                         return false;
556
557                 service->ident = g_strdup(ident);
558
559                 service_created = true;
560         }
561
562         str = __connman_config_get_string(keyfile, group, SERVICE_KEY_TYPE, NULL);
563         if (str) {
564                 g_free(service->type);
565                 service->type = str;
566         } else {
567                 DBG("Type of the configured service is missing for group %s",
568                                                                         group);
569                 goto err;
570         }
571
572         if (!load_service_generic(keyfile, group, config, service))
573                 return false;
574
575         if (g_strcmp0(str, "ethernet") == 0) {
576                 service->config_ident = g_strdup(config->ident);
577                 service->config_entry = g_strdup_printf("service_%s",
578                                                         service->ident);
579
580                 g_hash_table_insert(config->service_table, service->ident,
581                                                                 service);
582                 return true;
583         }
584
585         str = __connman_config_get_string(keyfile, group, SERVICE_KEY_NAME, NULL);
586         if (str) {
587                 g_free(service->name);
588                 service->name = str;
589         }
590
591         hex_ssid = __connman_config_get_string(keyfile, group, SERVICE_KEY_SSID,
592                                          NULL);
593         if (hex_ssid) {
594                 char *ssid;
595                 unsigned int i, j = 0, hex;
596                 size_t hex_ssid_len = strlen(hex_ssid);
597
598                 ssid = g_try_malloc0(hex_ssid_len / 2);
599                 if (!ssid) {
600                         g_free(hex_ssid);
601                         goto err;
602                 }
603
604                 for (i = 0; i < hex_ssid_len; i += 2) {
605                         if (sscanf(hex_ssid + i, "%02x", &hex) <= 0) {
606                                 connman_warn("Invalid SSID %s", hex_ssid);
607                                 g_free(ssid);
608                                 g_free(hex_ssid);
609                                 goto err;
610                         }
611                         ssid[j++] = hex;
612                 }
613
614                 g_free(hex_ssid);
615
616                 g_free(service->ssid);
617                 service->ssid = ssid;
618                 service->ssid_len = hex_ssid_len / 2;
619         } else if (service->name) {
620                 char *ssid;
621                 unsigned int ssid_len;
622
623                 ssid_len = strlen(service->name);
624                 ssid = g_try_malloc0(ssid_len);
625                 if (!ssid)
626                         goto err;
627
628                 memcpy(ssid, service->name, ssid_len);
629                 g_free(service->ssid);
630                 service->ssid = ssid;
631                 service->ssid_len = ssid_len;
632         }
633
634         str = __connman_config_get_string(keyfile, group, SERVICE_KEY_EAP, NULL);
635         if (str) {
636                 g_free(service->eap);
637                 service->eap = str;
638         }
639
640         str = __connman_config_get_string(keyfile, group, SERVICE_KEY_CA_CERT, NULL);
641         if (str) {
642                 g_free(service->ca_cert_file);
643                 service->ca_cert_file = str;
644         }
645
646         str = __connman_config_get_string(keyfile, group, SERVICE_KEY_CL_CERT, NULL);
647         if (str) {
648                 g_free(service->client_cert_file);
649                 service->client_cert_file = str;
650         }
651
652         str = __connman_config_get_string(keyfile, group, SERVICE_KEY_PRV_KEY, NULL);
653         if (str) {
654                 g_free(service->private_key_file);
655                 service->private_key_file = str;
656         }
657
658         str = __connman_config_get_string(keyfile, group,
659                                                 SERVICE_KEY_PRV_KEY_PASS, NULL);
660         if (str) {
661                 g_free(service->private_key_passphrase);
662                 service->private_key_passphrase = str;
663         }
664
665         str = __connman_config_get_string(keyfile, group,
666                                         SERVICE_KEY_PRV_KEY_PASS_TYPE, NULL);
667         if (str) {
668                 g_free(service->private_key_passphrase_type);
669                 service->private_key_passphrase_type = str;
670         }
671
672         str = __connman_config_get_string(keyfile, group, SERVICE_KEY_IDENTITY, NULL);
673         if (str) {
674                 g_free(service->identity);
675                 service->identity = str;
676         }
677
678         str = __connman_config_get_string(keyfile, group,
679                                         SERVICE_KEY_ANONYMOUS_IDENTITY, NULL);
680         if (str) {
681                 g_free(service->anonymous_identity);
682                 service->anonymous_identity = str;
683         }
684
685         str = __connman_config_get_string(keyfile, group,
686                                         SERVICE_KEY_SUBJECT_MATCH, NULL);
687         if (str) {
688                 g_free(service->subject_match);
689                 service->subject_match = str;
690         }
691
692         str = __connman_config_get_string(keyfile, group,
693                                         SERVICE_KEY_ALT_SUBJECT_MATCH, NULL);
694         if (str) {
695                 g_free(service->altsubject_match);
696                 service->altsubject_match = str;
697         }
698
699         str = __connman_config_get_string(keyfile, group,
700                                         SERVICE_KEY_DOMAIN_SUFF_MATCH, NULL);
701         if (str) {
702                 g_free(service->domain_suffix_match);
703                 service->domain_suffix_match = str;
704         }
705
706         str = __connman_config_get_string(keyfile, group,
707                                         SERVICE_KEY_DOMAIN_MATCH, NULL);
708         if (str) {
709                 g_free(service->domain_match);
710                 service->domain_match = str;
711         }
712
713         str = __connman_config_get_string(keyfile, group, SERVICE_KEY_PHASE2, NULL);
714         if (str) {
715                 g_free(service->phase2);
716                 service->phase2 = str;
717         }
718
719         str = __connman_config_get_string(keyfile, group, SERVICE_KEY_PASSPHRASE,
720                                         NULL);
721         if (str) {
722                 g_free(service->passphrase);
723                 service->passphrase = str;
724         }
725
726         str = __connman_config_get_string(keyfile, group, SERVICE_KEY_SECURITY,
727                         NULL);
728         security = __connman_service_string2security(str);
729
730         if (service->eap) {
731
732                 if (str && security != CONNMAN_SERVICE_SECURITY_8021X)
733                         connman_info("Mismatch between EAP configuration and "
734                                         "setting %s = %s",
735                                         SERVICE_KEY_SECURITY, str);
736
737                 service->security = CONNMAN_SERVICE_SECURITY_8021X;
738
739         } else if (service->passphrase) {
740
741                 if (str) {
742                         if (security == CONNMAN_SERVICE_SECURITY_PSK ||
743                                         security == CONNMAN_SERVICE_SECURITY_WEP) {
744                                 service->security = security;
745                         } else {
746                                 connman_info("Mismatch with passphrase and "
747                                                 "setting %s = %s",
748                                                 SERVICE_KEY_SECURITY, str);
749
750                                 service->security =
751                                         CONNMAN_SERVICE_SECURITY_PSK;
752                         }
753
754                 } else
755                         service->security = CONNMAN_SERVICE_SECURITY_PSK;
756         } else if (str) {
757
758                 if (security != CONNMAN_SERVICE_SECURITY_NONE)
759                         connman_info("Mismatch no security and "
760                                         "setting %s = %s",
761                                         SERVICE_KEY_SECURITY, str);
762
763                 service->security = CONNMAN_SERVICE_SECURITY_NONE;
764         } else
765                 service->security = CONNMAN_SERVICE_SECURITY_NONE;
766
767         g_free(str);
768
769         service->config_ident = g_strdup(config->ident);
770         service->config_entry = g_strdup_printf("service_%s", service->ident);
771
772         service->hidden = __connman_config_get_bool(keyfile, group,
773                                                 SERVICE_KEY_HIDDEN, NULL);
774
775         if (service_created)
776                 g_hash_table_insert(config->service_table, service->ident,
777                                         service);
778
779         connman_info("Adding service configuration %s", service->ident);
780
781         return true;
782
783 err:
784         if (service_created) {
785                 g_free(service->ident);
786                 g_free(service->type);
787                 g_free(service->name);
788                 g_free(service->ssid);
789                 g_free(service);
790         }
791
792         return false;
793 }
794
795 static bool load_service_from_keyfile(GKeyFile *keyfile,
796                                                 struct connman_config *config)
797 {
798         bool found = false;
799         char **groups;
800         int i;
801
802         groups = g_key_file_get_groups(keyfile, NULL);
803
804         for (i = 0; groups[i]; i++) {
805                 if (!g_str_has_prefix(groups[i], "service_"))
806                         continue;
807                 if (load_service(keyfile, groups[i], config))
808                         found = true;
809         }
810
811         g_strfreev(groups);
812
813         return found;
814 }
815
816 static int load_config(struct connman_config *config)
817 {
818         GKeyFile *keyfile;
819         char *str;
820
821         DBG("config %p", config);
822
823         keyfile = __connman_storage_load_config(config->ident);
824         if (!keyfile)
825                 return -EIO;
826
827         g_key_file_set_list_separator(keyfile, ',');
828
829         /* Verify keys validity of the global section */
830         check_keys(keyfile, "global", config_possible_keys);
831
832         str = __connman_config_get_string(keyfile, "global", CONFIG_KEY_NAME, NULL);
833         if (str) {
834                 g_free(config->name);
835                 config->name = str;
836         }
837
838         str = __connman_config_get_string(keyfile, "global", CONFIG_KEY_DESC, NULL);
839         if (str) {
840                 g_free(config->description);
841                 config->description = str;
842         }
843
844         if (!load_service_from_keyfile(keyfile, config))
845                 connman_warn("Config file %s/%s.config does not contain any "
846                         "configuration that can be provisioned!",
847                         STORAGEDIR, config->ident);
848
849         g_key_file_free(keyfile);
850
851         return 0;
852 }
853
854 static struct connman_config *create_config(const char *ident)
855 {
856         struct connman_config *config;
857
858         DBG("ident %s", ident);
859
860         if (g_hash_table_lookup(config_table, ident))
861                 return NULL;
862
863         config = g_try_new0(struct connman_config, 1);
864         if (!config)
865                 return NULL;
866
867         config->ident = g_strdup(ident);
868
869         config->service_table = g_hash_table_new_full(g_str_hash, g_str_equal,
870                                                 NULL, unregister_service);
871
872         g_hash_table_insert(config_table, config->ident, config);
873
874         connman_info("Adding configuration %s", config->ident);
875
876         return config;
877 }
878
879 static bool validate_ident(const char *ident)
880 {
881         unsigned int i;
882
883         if (!ident)
884                 return false;
885
886         for (i = 0; i < strlen(ident); i++)
887                 if (!g_ascii_isprint(ident[i]))
888                         return false;
889
890         return true;
891 }
892
893 static int read_configs(void)
894 {
895         GDir *dir;
896
897         DBG("");
898
899         dir = g_dir_open(STORAGEDIR, 0, NULL);
900         if (dir) {
901                 const gchar *file;
902
903                 while ((file = g_dir_read_name(dir))) {
904                         GString *str;
905                         gchar *ident;
906
907                         if (!g_str_has_suffix(file, ".config"))
908                                 continue;
909
910                         ident = g_strrstr(file, ".config");
911                         if (!ident)
912                                 continue;
913
914                         str = g_string_new_len(file, ident - file);
915                         if (!str)
916                                 continue;
917
918                         ident = g_string_free(str, FALSE);
919
920                         if (validate_ident(ident)) {
921                                 struct connman_config *config;
922
923                                 config = create_config(ident);
924                                 if (config)
925                                         load_config(config);
926                         } else {
927                                 connman_error("Invalid config ident %s", ident);
928                         }
929                         g_free(ident);
930                 }
931
932                 g_dir_close(dir);
933         }
934
935         return 0;
936 }
937
938 static void config_notify_handler(struct inotify_event *event,
939                                         const char *ident)
940 {
941         char *ext;
942
943         if (!ident)
944                 return;
945
946         if (!g_str_has_suffix(ident, ".config"))
947                 return;
948
949         ext = g_strrstr(ident, ".config");
950         if (!ext)
951                 return;
952
953         *ext = '\0';
954
955         if (!validate_ident(ident)) {
956                 connman_error("Invalid config ident %s", ident);
957                 return;
958         }
959
960         if (event->mask & (IN_CREATE | IN_MOVED_TO))
961                 create_config(ident);
962
963         if (event->mask & (IN_MODIFY | IN_MOVED_TO)) {
964                 struct connman_config *config;
965
966                 config = g_hash_table_lookup(config_table, ident);
967                 if (config) {
968                         int ret;
969
970                         g_hash_table_remove_all(config->service_table);
971                         load_config(config);
972                         ret = __connman_service_provision_changed(ident);
973                         if (ret > 0) {
974                                 /*
975                                  * Re-scan the config file for any
976                                  * changes
977                                  */
978                                 g_hash_table_remove_all(config->service_table);
979                                 load_config(config);
980                                 __connman_service_provision_changed(ident);
981                         }
982                 }
983         }
984
985         if (event->mask & (IN_DELETE | IN_MOVED_FROM))
986                 g_hash_table_remove(config_table, ident);
987 }
988
989 int __connman_config_init(void)
990 {
991         DBG("");
992
993         config_table = g_hash_table_new_full(g_str_hash, g_str_equal,
994                                                 NULL, unregister_config);
995
996         connman_inotify_register(STORAGEDIR, config_notify_handler);
997
998         return read_configs();
999 }
1000
1001 void __connman_config_cleanup(void)
1002 {
1003         DBG("");
1004
1005         cleanup = true;
1006
1007         connman_inotify_unregister(STORAGEDIR, config_notify_handler);
1008
1009         g_hash_table_destroy(config_table);
1010         config_table = NULL;
1011
1012         cleanup = false;
1013 }
1014
1015 char *__connman_config_get_string(GKeyFile *key_file,
1016         const char *group_name, const char *key, GError **error)
1017 {
1018         char *str = g_key_file_get_string(key_file, group_name, key, error);
1019         if (!str)
1020                 return NULL;
1021
1022         /* passphrases can have spaces in the end */
1023         if (!g_strcmp0(key, SERVICE_KEY_PASSPHRASE) ||
1024                         !g_strcmp0(key, SERVICE_KEY_PRV_KEY_PASS))
1025                 return str;
1026
1027         return g_strchomp(str);
1028 }
1029
1030 char **__connman_config_get_string_list(GKeyFile *key_file,
1031         const char *group_name, const char *key, gsize *length, GError **error)
1032 {
1033         char **p;
1034         char **strlist = g_key_file_get_string_list(key_file, group_name, key,
1035                 length, error);
1036         if (!strlist)
1037                 return NULL;
1038
1039         p = strlist;
1040         while (*p) {
1041                 *p = g_strstrip(*p);
1042                 p++;
1043         }
1044
1045         return strlist;
1046 }
1047
1048 bool __connman_config_get_bool(GKeyFile *key_file,
1049         const char *group_name, const char *key, GError **error)
1050 {
1051         char *valstr;
1052         bool val = false;
1053
1054         valstr = g_key_file_get_value(key_file, group_name, key, error);
1055         if (!valstr)
1056                 return false;
1057
1058         valstr = g_strchomp(valstr);
1059         if (strcmp(valstr, "true") == 0 || strcmp(valstr, "1") == 0)
1060                 val = true;
1061
1062         g_free(valstr);
1063
1064         return val;
1065 }
1066
1067 static char *config_pem_fsid(const char *pem_file)
1068 {
1069         struct statfs buf;
1070         unsigned *fsid = (unsigned *) &buf.f_fsid;
1071         unsigned long long fsid64;
1072
1073         if (!pem_file)
1074                 return NULL;
1075
1076         if (statfs(pem_file, &buf) < 0) {
1077                 connman_error("statfs error %s for %s",
1078                                                 strerror(errno), pem_file);
1079                 return NULL;
1080         }
1081
1082         fsid64 = ((unsigned long long) fsid[0] << 32) | fsid[1];
1083
1084         return g_strdup_printf("%llx", fsid64);
1085 }
1086
1087 static void provision_service_wifi(struct connman_config_service *config,
1088                                 struct connman_service *service,
1089                                 struct connman_network *network,
1090                                 const void *ssid, unsigned int ssid_len)
1091 {
1092         if (config->eap)
1093                 __connman_service_set_string(service, "EAP", config->eap);
1094
1095         if (config->identity)
1096                 __connman_service_set_string(service, "Identity",
1097                                                         config->identity);
1098
1099         if (config->anonymous_identity)
1100                 __connman_service_set_string(service, "AnonymousIdentity",
1101                                                 config->anonymous_identity);
1102
1103         if (config->ca_cert_file)
1104                 __connman_service_set_string(service, "CACertFile",
1105                                                         config->ca_cert_file);
1106
1107         if (config->subject_match)
1108                 __connman_service_set_string(service, "SubjectMatch",
1109                                                         config->subject_match);
1110
1111         if (config->altsubject_match)
1112                 __connman_service_set_string(service, "AltSubjectMatch",
1113                                                         config->altsubject_match);
1114
1115         if (config->domain_suffix_match)
1116                 __connman_service_set_string(service, "DomainSuffixMatch",
1117                                                         config->domain_suffix_match);
1118
1119         if (config->domain_match)
1120                 __connman_service_set_string(service, "DomainMatch",
1121                                                         config->domain_match);
1122
1123         if (config->client_cert_file)
1124                 __connman_service_set_string(service, "ClientCertFile",
1125                                                 config->client_cert_file);
1126
1127         if (config->private_key_file)
1128                 __connman_service_set_string(service, "PrivateKeyFile",
1129                                                 config->private_key_file);
1130
1131         if (g_strcmp0(config->private_key_passphrase_type, "fsid") == 0 &&
1132                                         config->private_key_file) {
1133                 char *fsid;
1134
1135                 fsid = config_pem_fsid(config->private_key_file);
1136                 if (!fsid)
1137                         return;
1138
1139                 g_free(config->private_key_passphrase);
1140                 config->private_key_passphrase = fsid;
1141         }
1142
1143         if (config->private_key_passphrase) {
1144                 __connman_service_set_string(service, "PrivateKeyPassphrase",
1145                                                 config->private_key_passphrase);
1146                 /*
1147                  * TODO: Support for PEAP with both identity and key passwd.
1148                  * In that case, we should check if both of them are found
1149                  * from the config file. If not, we should not set the
1150                  * service passphrase in order for the UI to request for an
1151                  * additional passphrase.
1152                  */
1153         }
1154
1155         if (config->phase2)
1156                 __connman_service_set_string(service, "Phase2", config->phase2);
1157
1158         if (config->passphrase)
1159                 __connman_service_set_string(service, "Passphrase",
1160                                                 config->passphrase);
1161
1162         if (config->hidden)
1163                 __connman_service_set_hidden(service);
1164 }
1165
1166 struct connect_virtual {
1167         struct connman_service *service;
1168         const char *vfile;
1169 };
1170
1171 static gboolean remove_virtual_config(gpointer user_data)
1172 {
1173         struct connect_virtual *virtual = user_data;
1174
1175         __connman_service_connect(virtual->service,
1176                                 CONNMAN_SERVICE_CONNECT_REASON_AUTO);
1177         g_hash_table_remove(config_table, virtual->vfile);
1178
1179         g_free(virtual);
1180
1181         return FALSE;
1182 }
1183
1184 static int try_provision_service(struct connman_config_service *config,
1185                                 struct connman_service *service)
1186 {
1187         struct connman_network *network;
1188         const void *service_id;
1189         enum connman_service_type type;
1190         const void *ssid;
1191         unsigned int ssid_len;
1192         const char *str;
1193
1194         network = __connman_service_get_network(service);
1195         if (!network) {
1196                 connman_error("Service has no network set");
1197                 return -EINVAL;
1198         }
1199
1200         DBG("network %p ident %s", network,
1201                                 connman_network_get_identifier(network));
1202
1203         type = connman_service_get_type(service);
1204
1205         switch(type) {
1206         case CONNMAN_SERVICE_TYPE_WIFI:
1207                 if (__connman_service_string2type(config->type) != type)
1208                         return -ENOENT;
1209
1210                 ssid = connman_network_get_blob(network, "WiFi.SSID",
1211                                                 &ssid_len);
1212                 if (!ssid) {
1213                         connman_error("Network SSID not set");
1214                         return -EINVAL;
1215                 }
1216
1217                 if (!config->ssid || ssid_len != config->ssid_len)
1218                         return -ENOENT;
1219
1220                 if (memcmp(config->ssid, ssid, ssid_len))
1221                         return -ENOENT;
1222
1223                 str = connman_network_get_string(network, "WiFi.Security");
1224                 if (config->security != __connman_service_string2security(str))
1225                         return -ENOENT;
1226
1227                 break;
1228
1229         case CONNMAN_SERVICE_TYPE_ETHERNET:
1230         case CONNMAN_SERVICE_TYPE_GADGET:
1231
1232                 if (__connman_service_string2type(config->type) != type)
1233                         return -ENOENT;
1234
1235                 break;
1236
1237         case CONNMAN_SERVICE_TYPE_UNKNOWN:
1238         case CONNMAN_SERVICE_TYPE_SYSTEM:
1239         case CONNMAN_SERVICE_TYPE_BLUETOOTH:
1240         case CONNMAN_SERVICE_TYPE_CELLULAR:
1241         case CONNMAN_SERVICE_TYPE_GPS:
1242         case CONNMAN_SERVICE_TYPE_VPN:
1243         case CONNMAN_SERVICE_TYPE_P2P:
1244
1245                 return -ENOENT;
1246         }
1247
1248         DBG("service %p ident %s", service,
1249                                         __connman_service_get_ident(service));
1250
1251         if (config->mac) {
1252                 struct connman_device *device;
1253                 const char *device_addr;
1254
1255                 device = connman_network_get_device(network);
1256                 if (!device) {
1257                         connman_error("Network device is missing");
1258                         return -ENODEV;
1259                 }
1260
1261                 device_addr = connman_device_get_string(device, "Address");
1262
1263                 DBG("wants %s has %s", config->mac, device_addr);
1264
1265                 if (g_ascii_strcasecmp(device_addr, config->mac) != 0)
1266                         return -ENOENT;
1267         }
1268
1269         if (!config->ipv6_address) {
1270                 connman_network_set_ipv6_method(network,
1271                                                 CONNMAN_IPCONFIG_METHOD_AUTO);
1272         } else if (g_ascii_strcasecmp(config->ipv6_address, "off") == 0) {
1273                 connman_network_set_ipv6_method(network,
1274                                                 CONNMAN_IPCONFIG_METHOD_OFF);
1275         } else if (g_ascii_strcasecmp(config->ipv6_address, "auto") == 0 ||
1276                         g_ascii_strcasecmp(config->ipv6_address, "dhcp") == 0) {
1277                 connman_network_set_ipv6_method(network,
1278                                                 CONNMAN_IPCONFIG_METHOD_AUTO);
1279         } else {
1280                 struct connman_ipaddress *address;
1281
1282                 if (config->ipv6_prefix_length == 0) {
1283                         DBG("IPv6 prefix missing");
1284                         return -EINVAL;
1285                 }
1286
1287                 address = connman_ipaddress_alloc(AF_INET6);
1288                 if (!address)
1289                         return -ENOENT;
1290
1291                 connman_ipaddress_set_ipv6(address, config->ipv6_address,
1292                                         config->ipv6_prefix_length,
1293                                         config->ipv6_gateway);
1294
1295                 connman_network_set_ipv6_method(network,
1296                                                 CONNMAN_IPCONFIG_METHOD_FIXED);
1297
1298                 if (connman_network_set_ipaddress(network, address) < 0)
1299                         DBG("Unable to set IPv6 address to network %p",
1300                                                                 network);
1301
1302                 connman_ipaddress_free(address);
1303         }
1304
1305         if (config->ipv6_privacy) {
1306                 struct connman_ipconfig *ipconfig;
1307
1308                 ipconfig = __connman_service_get_ip6config(service);
1309                 if (ipconfig)
1310                         __connman_ipconfig_ipv6_set_privacy(ipconfig,
1311                                                         config->ipv6_privacy);
1312         }
1313
1314         if (!config->ipv4_address) {
1315                 connman_network_set_ipv4_method(network,
1316                                                 CONNMAN_IPCONFIG_METHOD_DHCP);
1317         } else if (g_ascii_strcasecmp(config->ipv4_address, "off") == 0) {
1318                 connman_network_set_ipv4_method(network,
1319                                                 CONNMAN_IPCONFIG_METHOD_OFF);
1320         } else if (g_ascii_strcasecmp(config->ipv4_address, "auto") == 0 ||
1321                         g_ascii_strcasecmp(config->ipv4_address, "dhcp") == 0) {
1322                 connman_network_set_ipv4_method(network,
1323                                                 CONNMAN_IPCONFIG_METHOD_DHCP);
1324         } else {
1325                 struct connman_ipaddress *address;
1326
1327                 if (!config->ipv4_netmask) {
1328                         DBG("IPv4 netmask missing");
1329                         return -EINVAL;
1330                 }
1331
1332                 address = connman_ipaddress_alloc(AF_INET);
1333                 if (!address)
1334                         return -ENOENT;
1335
1336                 connman_ipaddress_set_ipv4(address, config->ipv4_address,
1337                                         config->ipv4_netmask,
1338                                         config->ipv4_gateway);
1339
1340                 connman_network_set_ipv4_method(network,
1341                                                 CONNMAN_IPCONFIG_METHOD_FIXED);
1342
1343                 if (connman_network_set_ipaddress(network, address) < 0)
1344                         DBG("Unable to set IPv4 address to network %p",
1345                                                                 network);
1346
1347                 connman_ipaddress_free(address);
1348         }
1349
1350         __connman_service_disconnect(service);
1351
1352         service_id = __connman_service_get_ident(service);
1353         config->service_identifiers =
1354                 g_slist_prepend(config->service_identifiers,
1355                                 g_strdup(service_id));
1356
1357         __connman_service_set_favorite_delayed(service, true, true);
1358
1359         __connman_service_set_config(service, config->config_ident,
1360                                                 config->config_entry);
1361
1362         if (config->domain_name)
1363                 __connman_service_set_domainname(service, config->domain_name);
1364
1365         if (config->nameservers) {
1366                 int i;
1367
1368                 __connman_service_nameserver_clear(service);
1369
1370                 for (i = 0; config->nameservers[i]; i++) {
1371                         __connman_service_nameserver_append(service,
1372                                                 config->nameservers[i], false);
1373                 }
1374         }
1375
1376         if (config->search_domains)
1377                 __connman_service_set_search_domains(service,
1378                                                 config->search_domains);
1379
1380         if (config->timeservers)
1381                 __connman_service_set_timeservers(service,
1382                                                 config->timeservers);
1383
1384         if (type == CONNMAN_SERVICE_TYPE_WIFI) {
1385                 provision_service_wifi(config, service, network,
1386                                                         ssid, ssid_len);
1387         }
1388
1389         __connman_service_mark_dirty();
1390
1391         __connman_service_load_modifiable(service);
1392
1393         if (config->virtual) {
1394                 struct connect_virtual *virtual;
1395
1396                 virtual = g_malloc0(sizeof(struct connect_virtual));
1397                 virtual->service = service;
1398                 virtual->vfile = config->virtual_file;
1399
1400                 g_idle_add(remove_virtual_config, virtual);
1401
1402                 return 0;
1403         }
1404
1405         __connman_service_set_immutable(service, true);
1406
1407         if (type == CONNMAN_SERVICE_TYPE_ETHERNET ||
1408                         type == CONNMAN_SERVICE_TYPE_GADGET) {
1409                 __connman_service_connect(service,
1410                                 CONNMAN_SERVICE_CONNECT_REASON_AUTO);
1411
1412                 return 0;
1413         }
1414
1415         __connman_service_auto_connect(CONNMAN_SERVICE_CONNECT_REASON_AUTO);
1416
1417         return 0;
1418 }
1419
1420 static int
1421 find_and_provision_service_from_config(struct connman_service *service,
1422                                         struct connman_config *config)
1423 {
1424         GHashTableIter iter;
1425         gpointer value, key;
1426
1427         g_hash_table_iter_init(&iter, config->service_table);
1428         while (g_hash_table_iter_next(&iter, &key,
1429                                         &value)) {
1430                 if (!try_provision_service(value, service))
1431                         return 0;
1432         }
1433
1434         return -ENOENT;
1435 }
1436
1437 static int find_and_provision_service(struct connman_service *service)
1438 {
1439         GHashTableIter iter;
1440         gpointer value, key;
1441
1442         g_hash_table_iter_init(&iter, config_table);
1443
1444         while (g_hash_table_iter_next(&iter, &key, &value)) {
1445                 struct connman_config *config = value;
1446
1447                 if (!find_and_provision_service_from_config(service, config))
1448                         return 0;
1449         }
1450
1451         return -ENOENT;
1452 }
1453
1454 int __connman_config_provision_service(struct connman_service *service)
1455 {
1456         enum connman_service_type type;
1457
1458         /* For now only WiFi, Gadget and Ethernet services are supported */
1459         type = connman_service_get_type(service);
1460
1461         DBG("service %p type %d", service, type);
1462
1463         if (type != CONNMAN_SERVICE_TYPE_WIFI &&
1464                         type != CONNMAN_SERVICE_TYPE_ETHERNET &&
1465                         type != CONNMAN_SERVICE_TYPE_GADGET)
1466                 return -ENOSYS;
1467
1468         return find_and_provision_service(service);
1469 }
1470
1471 int __connman_config_provision_service_ident(struct connman_service *service,
1472                         const char *ident, const char *file, const char *entry)
1473 {
1474         enum connman_service_type type;
1475         struct connman_config *config;
1476         int ret = 0;
1477
1478         /* For now only WiFi, Gadget and Ethernet services are supported */
1479         type = connman_service_get_type(service);
1480
1481         DBG("service %p type %d", service, type);
1482
1483         if (type != CONNMAN_SERVICE_TYPE_WIFI &&
1484                         type != CONNMAN_SERVICE_TYPE_ETHERNET &&
1485                         type != CONNMAN_SERVICE_TYPE_GADGET)
1486                 return -ENOSYS;
1487
1488         config = g_hash_table_lookup(config_table, ident);
1489         if (config) {
1490                 GHashTableIter iter;
1491                 gpointer value, key;
1492                 bool found = false;
1493
1494                 g_hash_table_iter_init(&iter, config->service_table);
1495
1496                 /*
1497                  * Check if we need to remove individual service if it
1498                  * is missing from config file.
1499                  */
1500                 if (file && entry) {
1501                         while (g_hash_table_iter_next(&iter, &key,
1502                                                         &value)) {
1503                                 struct connman_config_service *config_service;
1504
1505                                 config_service = value;
1506
1507                                 if (g_strcmp0(config_service->config_ident,
1508                                                                 file) != 0)
1509                                         continue;
1510
1511                                 if (g_strcmp0(config_service->config_entry,
1512                                                                 entry) != 0)
1513                                         continue;
1514
1515                                 found = true;
1516                                 break;
1517                         }
1518
1519                         DBG("found %d ident %s file %s entry %s", found, ident,
1520                                                                 file, entry);
1521
1522                         if (!found) {
1523                                 /*
1524                                  * The entry+8 will skip "service_" prefix
1525                                  */
1526                                 g_hash_table_remove(config->service_table,
1527                                                 entry + 8);
1528                                 ret = 1;
1529                         }
1530                 }
1531
1532                 find_and_provision_service_from_config(service, config);
1533         }
1534
1535         return ret;
1536 }
1537
1538 static void generate_random_string(char *str, int length)
1539 {
1540         uint8_t val;
1541         int i;
1542         uint64_t rand;
1543
1544         memset(str, '\0', length);
1545
1546         for (i = 0; i < length-1; i++) {
1547                 do {
1548                         __connman_util_get_random(&rand);
1549                         val = (uint8_t)(rand % 122);
1550                         if (val < 48)
1551                                 val += 48;
1552                 } while((val > 57 && val < 65) || (val > 90 && val < 97));
1553
1554                 str[i] = val;
1555         }
1556 }
1557
1558 int connman_config_provision_mutable_service(GKeyFile *keyfile)
1559 {
1560         struct connman_config_service *service_config;
1561         struct connman_config *config;
1562         char *vfile, *group = NULL;
1563         char rstr[11];
1564
1565         DBG("");
1566
1567         generate_random_string(rstr, 11);
1568
1569         vfile = g_strdup_printf("service_mutable_%s.config", rstr);
1570
1571         config = create_config(vfile);
1572         if (!config)
1573                 return -ENOMEM;
1574
1575         if (!load_service_from_keyfile(keyfile, config))
1576                 goto error;
1577
1578         group = g_key_file_get_start_group(keyfile);
1579
1580         service_config = g_hash_table_lookup(config->service_table, group+8);
1581         if (!service_config)
1582                 goto error;
1583
1584         /* Specific to non file based config: */
1585         g_free(service_config->config_ident);
1586         service_config->config_ident = NULL;
1587         g_free(service_config->config_entry);
1588         service_config->config_entry = NULL;
1589
1590         service_config->virtual = true;
1591         service_config->virtual_file = vfile;
1592
1593         __connman_service_provision_changed(vfile);
1594
1595         if (g_strcmp0(service_config->type, "wifi") == 0)
1596                 __connman_device_request_scan(CONNMAN_SERVICE_TYPE_WIFI);
1597
1598         g_free(group);
1599         return 0;
1600
1601 error:
1602         DBG("Could not proceed");
1603         g_hash_table_remove(config_table, vfile);
1604         g_free(vfile);
1605         g_free(group);
1606         return -EINVAL;
1607 }
1608
1609 struct connman_config_entry **connman_config_get_entries(const char *type)
1610 {
1611         GHashTableIter iter_file, iter_config;
1612         gpointer value, key;
1613         struct connman_config_entry **entries = NULL;
1614         int i = 0, count;
1615
1616         g_hash_table_iter_init(&iter_file, config_table);
1617         while (g_hash_table_iter_next(&iter_file, &key, &value)) {
1618                 struct connman_config *config_file = value;
1619                 struct connman_config_entry **tmp_entries = entries;
1620
1621                 count = g_hash_table_size(config_file->service_table);
1622
1623                 entries = g_try_realloc(entries, (i + count + 1) *
1624                                         sizeof(struct connman_config_entry *));
1625                 if (!entries) {
1626                         g_free(tmp_entries);
1627                         return NULL;
1628                 }
1629
1630                 g_hash_table_iter_init(&iter_config,
1631                                                 config_file->service_table);
1632                 while (g_hash_table_iter_next(&iter_config, &key,
1633                                                         &value)) {
1634                         struct connman_config_service *config = value;
1635
1636                         if (type &&
1637                                         g_strcmp0(config->type, type) != 0)
1638                                 continue;
1639
1640                         entries[i] = g_try_new0(struct connman_config_entry,
1641                                                 1);
1642                         if (!entries[i])
1643                                 goto cleanup;
1644
1645                         entries[i]->ident = g_strdup(config->ident);
1646                         entries[i]->name = g_strdup(config->name);
1647                         entries[i]->ssid = g_try_malloc0(config->ssid_len + 1);
1648                         if (!entries[i]->ssid)
1649                                 goto cleanup;
1650
1651                         memcpy(entries[i]->ssid, config->ssid,
1652                                                         config->ssid_len);
1653                         entries[i]->ssid_len = config->ssid_len;
1654                         entries[i]->hidden = config->hidden;
1655
1656                         i++;
1657                 }
1658         }
1659
1660         if (entries) {
1661                 struct connman_config_entry **tmp_entries = entries;
1662
1663                 entries = g_try_realloc(entries, (i + 1) *
1664                                         sizeof(struct connman_config_entry *));
1665                 if (!entries) {
1666                         g_free(tmp_entries);
1667                         return NULL;
1668                 }
1669
1670                 entries[i] = NULL;
1671
1672                 DBG("%d provisioned AP found", i);
1673         }
1674
1675         return entries;
1676
1677 cleanup:
1678         connman_config_free_entries(entries);
1679         return NULL;
1680 }
1681
1682 void connman_config_free_entries(struct connman_config_entry **entries)
1683 {
1684         int i;
1685
1686         if (!entries)
1687                 return;
1688
1689         for (i = 0; entries[i]; i++) {
1690                 g_free(entries[i]->ident);
1691                 g_free(entries[i]->name);
1692                 g_free(entries[i]->ssid);
1693                 g_free(entries[i]);
1694         }
1695
1696         g_free(entries);
1697         return;
1698 }
1699
1700 bool __connman_config_address_provisioned(const char *address,
1701                                         const char *netmask)
1702 {
1703         GHashTableIter iter, siter;
1704         gpointer value, key, svalue, skey;
1705
1706         if (!address || !netmask)
1707                 return false;
1708
1709         g_hash_table_iter_init(&iter, config_table);
1710
1711         while (g_hash_table_iter_next(&iter, &key, &value)) {
1712                 struct connman_config *config = value;
1713
1714                 g_hash_table_iter_init(&siter, config->service_table);
1715                 while (g_hash_table_iter_next(&siter, &skey, &svalue)) {
1716                         struct connman_config_service *service = svalue;
1717
1718                         if (!g_strcmp0(address, service->ipv4_address) &&
1719                                         !g_strcmp0(netmask,
1720                                                 service->ipv4_netmask))
1721                                 return true;
1722                 }
1723         }
1724
1725         return false;
1726 }