void setupSupplicant(char *prefix)
{
char akm[16];
sprintf(akm, "%s_akm", prefix);
char wmode[16];
sprintf(wmode, "%s_mode", prefix);
if (nvram_match(akm, "8021X")) {
char fstr[32];
char psk[64];
char ath[64];
sprintf(fstr, "/tmp/%s_wpa_supplicant.conf", prefix);
FILE *fp = fopen(fstr, "wb");
fprintf(fp, "ap_scan=1\n");
fprintf(fp, "fast_reauth=1\n");
fprintf(fp, "eapol_version=1\n");
fprintf(fp, "network={\n");
sprintf(psk, "%s_ssid", prefix);
fprintf(fp, "\tssid=\"%s\"\n", nvram_safe_get(psk));
fprintf(fp, "\tscan_ssid=1\n");
if (nvram_prefix_match("8021xtype", prefix, "tls")) {
// -> added habeIchVergessen
char *keyExchng = nvram_nget("%s_tls8021xkeyxchng", prefix);
char *wpaOpts[40];
if (strlen(keyExchng)==0)
nvram_nset("wep","%s_tls8021xkeyxchng", prefix);
sprintf(wpaOpts, "");
keyExchng = nvram_nget("%s_tls8021xkeyxchng", prefix);
if (strcmp("wpa2", keyExchng) == 0)
sprintf(wpaOpts, "\tpairwise=CCMP\n\tgroup=CCMP\n");
if (strcmp("wpa2mixed", keyExchng) == 0)
sprintf(wpaOpts, "\tpairwise=CCMP TKIP\n\tgroup=CCMP TKIP\n");
if (strcmp("wpa", keyExchng) == 0)
sprintf(wpaOpts, "\tpairwise=TKIP\n\tgroup=TKIP\n");
fprintf(fp, "\tkey_mgmt=%s\n%s", (strlen(wpaOpts) == 0 ? "IEEE8021X" : "WPA-EAP"), wpaOpts);
// <- added habeIchVergessen
fprintf(fp, "\teap=TLS\n");
fprintf(fp, "\tidentity=\"%s\"\n",
nvram_prefix_get("tls8021xuser", prefix));
sprintf(psk, "/tmp/%s", prefix);
mkdir(psk);
sprintf(psk, "/tmp/%s/ca.pem", prefix);
sprintf(ath, "%s_tls8021xca", prefix);
write_nvram(psk, ath);
sprintf(psk, "/tmp/%s/user.pem", prefix);
sprintf(ath, "%s_tls8021xpem", prefix);
write_nvram(psk, ath);
sprintf(psk, "/tmp/%s/user.prv", prefix);
sprintf(ath, "%s_tls8021xprv", prefix);
write_nvram(psk, ath);
fprintf(fp, "\tca_cert=/tmp/%s/ca.pem\n", prefix);
fprintf(fp, "\tclient_cert=/tmp/%s/user.pem\n", prefix);
fprintf(fp, "\tprivate_key=/tmp/%s/user.prv\n", prefix);
fprintf(fp, "\tprivate_key_passwd=\"%s\"\n",
nvram_prefix_get("tls8021xpasswd", prefix));
fprintf(fp, "\teapol_flags=3\n");
if (strlen(nvram_nget("%s_tls8021xphase2", prefix)) > 0) {
fprintf(fp, "\tphase2=\"%s\"\n",
nvram_nget("%s_tls8021xphase2",
prefix));
}
if (strlen(nvram_nget("%s_tls8021xanon", prefix)) > 0) {
fprintf(fp, "\tanonymous_identity=\"%s\"\n",
nvram_nget("%s_tls8021xanon", prefix));
}
if (strlen(nvram_nget("%s_tls8021xaddopt", prefix)) > 0) {
sprintf(ath, "%s_tls8021xaddopt", prefix);
fprintf(fp, "\t"); // tab
fwritenvram(ath, fp);
fprintf(fp, "\n"); // extra new line at the end
}
}
if (nvram_prefix_match("8021xtype", prefix, "peap")) {
fprintf(fp, "\tkey_mgmt=WPA-EAP\n");
fprintf(fp, "\teap=PEAP\n");
fprintf(fp, "\tpairwise=CCMP TKIP\n");
fprintf(fp, "\tgroup=CCMP TKIP\n");
fprintf(fp, "\tphase1=\"peapver=0\"\n");
fprintf(fp, "\tidentity=\"%s\"\n",
nvram_prefix_get("peap8021xuser", prefix));
fprintf(fp, "\tpassword=\"%s\"\n",
nvram_prefix_get("peap8021xpasswd", prefix));
sprintf(psk, "/tmp/%s", prefix);
mkdir(psk);
sprintf(psk, "/tmp/%s/ca.pem", prefix);
sprintf(ath, "%s_peap8021xca", prefix);
if (!nvram_match(ath, "")) {
write_nvram(psk, ath);
fprintf(fp, "\tca_cert=\"/tmp/%s/ca.pem\"\n",
prefix);
}
if (strlen(nvram_nget("%s_peap8021xphase2", prefix)) >
0) {
fprintf(fp, "\tphase2=\"%s\"\n",
nvram_nget("%s_peap8021xphase2",
prefix));
}
if (strlen(nvram_nget("%s_peap8021xanon", prefix)) > 0) {
fprintf(fp, "\tanonymous_identity=\"%s\"\n",
nvram_nget("%s_peap8021xanon", prefix));
}
if (strlen(nvram_nget("%s_peap8021xaddopt", prefix)) >
0) {
sprintf(ath, "%s_peap8021xaddopt", prefix);
fprintf(fp, "\t"); // tab
fwritenvram(ath, fp);
fprintf(fp, "\n"); // extra new line at the end
}
}
if (nvram_prefix_match("8021xtype", prefix, "ttls")) {
fprintf(fp, "\tkey_mgmt=WPA-EAP\n");
fprintf(fp, "\teap=TTLS\n");
fprintf(fp, "\tpairwise=CCMP TKIP\n");
fprintf(fp, "\tgroup=CCMP TKIP\n");
fprintf(fp, "\tidentity=\"%s\"\n",
nvram_prefix_get("ttls8021xuser", prefix));
fprintf(fp, "\tpassword=\"%s\"\n",
nvram_prefix_get("ttls8021xpasswd", prefix));
if (strlen(nvram_nget("%s_ttls8021xca", prefix)) > 0) {
sprintf(psk, "/tmp/%s", prefix);
mkdir(psk);
sprintf(psk, "/tmp/%s/ca.pem", prefix);
sprintf(ath, "%s_ttls8021xca", prefix);
write_nvram(psk, ath);
fprintf(fp, "\tca_cert=\"/tmp/%s/ca.pem\"\n",
prefix);
}
if (strlen(nvram_nget("%s_ttls8021xphase2", prefix)) >
0) {
fprintf(fp, "\tphase2=\"%s\"\n",
nvram_nget("%s_ttls8021xphase2",
prefix));
}
if (strlen(nvram_nget("%s_ttls8021xanon", prefix)) > 0) {
fprintf(fp, "\tanonymous_identity=\"%s\"\n",
nvram_nget("%s_ttls8021xanon", prefix));
}
if (strlen(nvram_nget("%s_ttls8021xaddopt", prefix)) >
0) {
sprintf(ath, "%s_ttls8021xaddopt", prefix);
fprintf(fp, "\t"); // tab
fwritenvram(ath, fp);
fprintf(fp, "\n"); // extra new line at the end
}
}
if (nvram_prefix_match("8021xtype", prefix, "leap")) {
fprintf(fp, "\tkey_mgmt=WPA-EAP\n");
fprintf(fp, "\teap=LEAP\n");
fprintf(fp, "\tauth_alg=LEAP\n");
fprintf(fp, "\tproto=WPA RSN\n");
fprintf(fp, "\tpairwise=CCMP TKIP\n");
fprintf(fp, "\tgroup=CCMP TKIP\n");
fprintf(fp, "\tidentity=\"%s\"\n",
nvram_prefix_get("leap8021xuser", prefix));
fprintf(fp, "\tpassword=\"%s\"\n",
nvram_prefix_get("leap8021xpasswd", prefix));
if (strlen(nvram_nget("%s_leap8021xphase2", prefix)) >
0) {
fprintf(fp, "\tphase2=\"%s\"\n",
nvram_nget("%s_leap8021xphase2",
prefix));
}
if (strlen(nvram_nget("%s_leap8021xanon", prefix)) > 0) {
fprintf(fp, "\tanonymous_identity=\"%s\"\n",
nvram_nget("%s_leap8021xanon", prefix));
}
if (strlen(nvram_nget("%s_leap8021xaddopt", prefix)) >
0) {
sprintf(ath, "%s_leap8021xaddopt", prefix);
fprintf(fp, "\t"); // tab
fwritenvram(ath, fp);
fprintf(fp, "\n"); // extra new line at the end
}
}
fprintf(fp, "}\n");
fclose(fp);
sprintf(psk, "-i%s", getRADev(prefix));
char bvar[32];
sprintf(bvar, "%s_bridged", prefix);
if (nvram_match(bvar, "1")
&& (nvram_match(wmode, "wdssta")
|| nvram_match(wmode, "wet")))
eval("wpa_supplicant", "-b",
nvram_safe_get("lan_ifname"), "-B", "-Dralink",
psk, "-c", fstr);
else
eval("wpa_supplicant", "-B", "-Dralink", psk, "-c",
fstr);
}
}
void setupSupplicant(char *prefix)
{
char akm[16];
sprintf(akm, "%s_akm", prefix);
char wmode[16];
sprintf(wmode, "%s_mode", prefix);
if (nvram_match(akm, "wep")) {
char key[16];
int cnt = 1;
int i;
char bul[8];
for (i = 1; i < 5; i++) {
sprintf(key, "%s_key%d", prefix, i);
char *athkey = nvram_safe_get(key);
if (athkey != NULL && strlen(athkey) > 0) {
sprintf(bul, "[%d]", cnt++);
eval("iwconfig", prefix, "key", bul, athkey); // setup wep
// encryption
// key
}
}
sprintf(key, "%s_key", prefix);
sprintf(bul, "[%s]", nvram_safe_get(key));
eval("iwconfig", prefix, "key", bul);
// eval ("iwpriv", prefix, "authmode", "2");
} else if (nvram_match(akm, "psk") || nvram_match(akm, "psk2") || nvram_match(akm, "psk psk2")) {
char fstr[64];
char psk[16];
sprintf(fstr, "/tmp/%s_wpa_supplicant.conf", prefix);
FILE *fp = fopen(fstr, "wb");
#ifdef HAVE_MAKSAT
fprintf(fp, "ap_scan=1\n");
#elif HAVE_NEWMEDIA
fprintf(fp, "ap_scan=1\n");
#else
fprintf(fp, "ap_scan=2\n");
#endif
fprintf(fp, "fast_reauth=1\n");
fprintf(fp, "eapol_version=1\n");
// fprintf (fp, "ctrl_interface_group=0\n");
// fprintf (fp, "ctrl_interface=/var/run/wpa_supplicant\n");
fprintf(fp, "network={\n");
sprintf(psk, "%s_ssid", prefix);
fprintf(fp, "\tssid=\"%s\"\n", nvram_safe_get(psk));
// fprintf (fp, "\tmode=0\n");
fprintf(fp, "\tscan_ssid=1\n");
fprintf(fp, "\tkey_mgmt=WPA-PSK\n");
sprintf(psk, "%s_crypto", prefix);
if (nvram_match(psk, "aes")) {
#if 1
fprintf(fp, "\tpairwise=CCMP\n");
fprintf(fp, "\tgroup=CCMP TKIP\n");
#else
fprintf(fp, "\tpairwise=CCMP\n");
fprintf(fp, "\tgroup=CCMP\n");
#endif
}
if (nvram_match(psk, "tkip")) {
fprintf(fp, "\tpairwise=TKIP\n");
fprintf(fp, "\tgroup=TKIP\n");
}
if (nvram_match(psk, "tkip+aes")) {
fprintf(fp, "\tpairwise=CCMP TKIP\n");
fprintf(fp, "\tgroup=CCMP TKIP\n");
}
if (nvram_match(akm, "psk"))
fprintf(fp, "\tproto=WPA\n");
if (nvram_match(akm, "psk2"))
fprintf(fp, "\tproto=RSN\n");
if (nvram_match(akm, "psk psk2"))
fprintf(fp, "\tproto=WPA RSN\n");
sprintf(psk, "%s_wpa_psk", prefix);
fprintf(fp, "\tpsk=\"%s\"\n", nvram_safe_get(psk));
fprintf(fp, "}\n");
fclose(fp);
if (!strcmp(prefix, "wl0"))
sprintf(psk, "-i%s", nvram_safe_get("wl0_ifname"));
else if (!strcmp(prefix, "wl1"))
sprintf(psk, "-i%s", nvram_safe_get("wl1_ifname"));
else
sprintf(psk, "-i%s", prefix);
if (nvram_match(wmode, "wdssta") || nvram_match(wmode, "wet"))
eval("wpa_supplicant", "-b", getBridge(prefix), "-B", "-Dwext", psk, "-c", fstr);
else
eval("wpa_supplicant", "-B", "-Dwext", psk, "-c", fstr);
} else if (nvram_match(akm, "8021X")) {
char fstr[32];
char psk[64];
char ath[64];
sprintf(fstr, "/tmp/%s_wpa_supplicant.conf", prefix);
FILE *fp = fopen(fstr, "wb");
fprintf(fp, "ap_scan=1\n");
fprintf(fp, "fast_reauth=1\n");
fprintf(fp, "eapol_version=1\n");
// fprintf (fp, "ctrl_interface_group=0\n");
// fprintf (fp, "ctrl_interface=/var/run/wpa_supplicant\n");
fprintf(fp, "network={\n");
sprintf(psk, "%s_ssid", prefix);
fprintf(fp, "\tssid=\"%s\"\n", nvram_safe_get(psk));
fprintf(fp, "\tscan_ssid=1\n");
if (nvram_prefix_match("8021xtype", prefix, "tls")) {
// -> added habeIchVergessen
char *keyExchng = nvram_nget("%s_tls8021xkeyxchng", prefix);
char *wpaOpts[40];
if (strlen(keyExchng) == 0)
nvram_nset("wep", "%s_tls8021xkeyxchng", prefix);
sprintf(wpaOpts, "");
keyExchng = nvram_nget("%s_tls8021xkeyxchng", prefix);
if (strcmp("wpa2", keyExchng) == 0)
sprintf(wpaOpts, "\tpairwise=CCMP\n\tgroup=CCMP\n");
if (strcmp("wpa2mixed", keyExchng) == 0)
sprintf(wpaOpts, "\tpairwise=CCMP TKIP\n\tgroup=CCMP TKIP\n");
if (strcmp("wpa", keyExchng) == 0)
sprintf(wpaOpts, "\tpairwise=TKIP\n\tgroup=TKIP\n");
fprintf(fp, "\tkey_mgmt=%s\n%s", (strlen(wpaOpts) == 0 ? "IEEE8021X" : "WPA-EAP"), wpaOpts);
// <- added habeIchVergessen
fprintf(fp, "\teap=TLS\n");
fprintf(fp, "\tidentity=\"%s\"\n", nvram_prefix_get("tls8021xuser", prefix));
sprintf(psk, "/tmp/%s", prefix);
mkdir(psk, 0700);
sprintf(psk, "/tmp/%s/ca.pem", prefix);
sprintf(ath, "%s_tls8021xca", prefix);
write_nvram(psk, ath);
sprintf(psk, "/tmp/%s/user.pem", prefix);
sprintf(ath, "%s_tls8021xpem", prefix);
write_nvram(psk, ath);
sprintf(psk, "/tmp/%s/user.prv", prefix);
sprintf(ath, "%s_tls8021xprv", prefix);
write_nvram(psk, ath);
fprintf(fp, "\tca_cert=/tmp/%s/ca.pem\n", prefix);
fprintf(fp, "\tclient_cert=/tmp/%s/user.pem\n", prefix);
fprintf(fp, "\tprivate_key=/tmp/%s/user.prv\n", prefix);
fprintf(fp, "\tprivate_key_passwd=\"%s\"\n", nvram_prefix_get("tls8021xpasswd", prefix));
fprintf(fp, "\teapol_flags=3\n");
if (strlen(nvram_nget("%s_tls8021xphase2", prefix)) > 0) {
fprintf(fp, "\tphase2=\"%s\"\n", nvram_nget("%s_tls8021xphase2", prefix));
}
if (strlen(nvram_nget("%s_tls8021xanon", prefix)) > 0) {
fprintf(fp, "\tanonymous_identity=\"%s\"\n", nvram_nget("%s_tls8021xanon", prefix));
}
if (strlen(nvram_nget("%s_tls8021xaddopt", prefix)) > 0) {
sprintf(ath, "%s_tls8021xaddopt", prefix);
fprintf(fp, "\t"); // tab
fwritenvram(ath, fp);
fprintf(fp, "\n"); // extra new line at the end
}
}
if (nvram_prefix_match("8021xtype", prefix, "peap")) {
fprintf(fp, "\tkey_mgmt=WPA-EAP\n");
fprintf(fp, "\teap=PEAP\n");
fprintf(fp, "\tpairwise=CCMP TKIP\n");
fprintf(fp, "\tgroup=CCMP TKIP\n");
fprintf(fp, "\tphase1=\"peapver=0\"\n");
fprintf(fp, "\tidentity=\"%s\"\n", nvram_prefix_get("peap8021xuser", prefix));
fprintf(fp, "\tpassword=\"%s\"\n", nvram_prefix_get("peap8021xpasswd", prefix));
sprintf(psk, "/tmp/%s", prefix);
mkdir(psk, 0700);
sprintf(psk, "/tmp/%s/ca.pem", prefix);
sprintf(ath, "%s_peap8021xca", prefix);
if (!nvram_match(ath, "")) {
write_nvram(psk, ath);
fprintf(fp, "\tca_cert=\"/tmp/%s/ca.pem\"\n", prefix);
}
if (strlen(nvram_nget("%s_peap8021xphase2", prefix)) > 0) {
fprintf(fp, "\tphase2=\"%s\"\n", nvram_nget("%s_peap8021xphase2", prefix));
}
if (strlen(nvram_nget("%s_peap8021xanon", prefix)) > 0) {
fprintf(fp, "\tanonymous_identity=\"%s\"\n", nvram_nget("%s_peap8021xanon", prefix));
}
if (strlen(nvram_nget("%s_peap8021xaddopt", prefix)) > 0) {
sprintf(ath, "%s_peap8021xaddopt", prefix);
fprintf(fp, "\t"); // tab
fwritenvram(ath, fp);
fprintf(fp, "\n"); // extra new line at the end
}
}
if (nvram_prefix_match("8021xtype", prefix, "ttls")) {
fprintf(fp, "\tkey_mgmt=WPA-EAP\n");
fprintf(fp, "\teap=TTLS\n");
fprintf(fp, "\tpairwise=CCMP TKIP\n");
fprintf(fp, "\tgroup=CCMP TKIP\n");
fprintf(fp, "\tidentity=\"%s\"\n", nvram_prefix_get("ttls8021xuser", prefix));
fprintf(fp, "\tpassword=\"%s\"\n", nvram_prefix_get("ttls8021xpasswd", prefix));
if (strlen(nvram_nget("%s_ttls8021xca", prefix)) > 0) {
sprintf(psk, "/tmp/%s", prefix);
mkdir(psk, 0700);
sprintf(psk, "/tmp/%s/ca.pem", prefix);
sprintf(ath, "%s_ttls8021xca", prefix);
write_nvram(psk, ath);
fprintf(fp, "\tca_cert=\"/tmp/%s/ca.pem\"\n", prefix);
}
if (strlen(nvram_nget("%s_ttls8021xphase2", prefix)) > 0) {
fprintf(fp, "\tphase2=\"%s\"\n", nvram_nget("%s_ttls8021xphase2", prefix));
}
if (strlen(nvram_nget("%s_ttls8021xanon", prefix)) > 0) {
fprintf(fp, "\tanonymous_identity=\"%s\"\n", nvram_nget("%s_ttls8021xanon", prefix));
}
if (strlen(nvram_nget("%s_ttls8021xaddopt", prefix)) > 0) {
sprintf(ath, "%s_ttls8021xaddopt", prefix);
fprintf(fp, "\t"); // tab
fwritenvram(ath, fp);
fprintf(fp, "\n"); // extra new line at the end
}
}
if (nvram_prefix_match("8021xtype", prefix, "leap")) {
fprintf(fp, "\tkey_mgmt=WPA-EAP\n");
fprintf(fp, "\teap=LEAP\n");
fprintf(fp, "\tauth_alg=LEAP\n");
fprintf(fp, "\tproto=WPA RSN\n");
fprintf(fp, "\tpairwise=CCMP TKIP\n");
fprintf(fp, "\tgroup=CCMP TKIP\n");
fprintf(fp, "\tidentity=\"%s\"\n", nvram_prefix_get("leap8021xuser", prefix));
fprintf(fp, "\tpassword=\"%s\"\n", nvram_prefix_get("leap8021xpasswd", prefix));
if (strlen(nvram_nget("%s_leap8021xphase2", prefix)) > 0) {
fprintf(fp, "\tphase2=\"%s\"\n", nvram_nget("%s_leap8021xphase2", prefix));
}
if (strlen(nvram_nget("%s_leap8021xanon", prefix)) > 0) {
fprintf(fp, "\tanonymous_identity=\"%s\"\n", nvram_nget("%s_leap8021xanon", prefix));
}
if (strlen(nvram_nget("%s_leap8021xaddopt", prefix)) > 0) {
sprintf(ath, "%s_leap8021xaddopt", prefix);
fprintf(fp, "\t"); // tab
fwritenvram(ath, fp);
fprintf(fp, "\n"); // extra new line at the end
}
}
fprintf(fp, "}\n");
fclose(fp);
if (!strcmp(prefix, "wl0"))
sprintf(psk, "-i%s", nvram_safe_get("wl0_ifname"));
else if (!strcmp(prefix, "wl1"))
sprintf(psk, "-i%s", nvram_safe_get("wl1_ifname"));
else
sprintf(psk, "-i%s", prefix);
char bvar[32];
sprintf(bvar, "%s_bridged", prefix);
if (nvram_match(bvar, "1")
&& (nvram_match(wmode, "wdssta")
|| nvram_match(wmode, "wet")))
eval("wpa_supplicant", "-b", nvram_safe_get("lan_ifname"), "-B", "-Dwext", psk, "-c", fstr);
else
eval("wpa_supplicant", "-B", "-Dwext", psk, "-c", fstr);
} else {
eval("iwconfig", prefix, "key", "off");
// eval ("iwpriv", prefix, "authmode", "0");
}
}
