wpa_supplicant.c

Go to the documentation of this file.

/*
 * WPA Supplicant
 * Copyright (c) 2003-2010, Jouni Malinen <j@w1.fi>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 *
 * Alternatively, this software may be distributed under the terms of BSD
 * license.
 *
 * See README and COPYING for more details.
 *
 * This file implements functions for registering and unregistering
 * %wpa_supplicant interfaces. In addition, this file contains number of
 * functions for managing network connections.
 */

#include "includes.h"

#include "common.h"
#include "eapol_supp/eapol_supp_sm.h"
#include "eap_peer/eap.h"
#include "eap_server/eap_methods.h"
#include "rsn_supp/wpa.h"
#include "eloop.h"
#include "config.h"
#include "l2_packet/l2_packet.h"
#include "wpa_supplicant_i.h"
#include "driver_i.h"
#include "ctrl_iface.h"
#include "pcsc_funcs.h"
#include "common/version.h"
#include "rsn_supp/preauth.h"
#include "rsn_supp/pmksa_cache.h"
#include "common/wpa_ctrl.h"
#include "mlme.h"
#include "common/ieee802_11_defs.h"
#include "blacklist.h"
#include "wpas_glue.h"
#include "wps_supplicant.h"
#include "ibss_rsn.h"
#include "sme.h"
#include "ap.h"
#include "notify.h"
#include "bgscan.h"
#include "bss.h"
#include "scan.h"

const char *wpa_supplicant_version =
"wpa_supplicant v" VERSION_STR "\n"
"Copyright (c) 2003-2010, Jouni Malinen <j@w1.fi> and contributors";

const char *wpa_supplicant_license =
"This program is free software. You can distribute it and/or modify it\n"
"under the terms of the GNU General Public License version 2.\n"
"\n"
"Alternatively, this software may be distributed under the terms of the\n"
"BSD license. See README and COPYING for more details.\n"
#ifdef EAP_TLS_OPENSSL
"\nThis product includes software developed by the OpenSSL Project\n"
"for use in the OpenSSL Toolkit (http://www.openssl.org/)\n"
#endif /* EAP_TLS_OPENSSL */
;

#ifndef CONFIG_NO_STDOUT_DEBUG
/* Long text divided into parts in order to fit in C89 strings size limits. */
const char *wpa_supplicant_full_license1 =
"This program is free software; you can redistribute it and/or modify\n"
"it under the terms of the GNU General Public License version 2 as\n"
"published by the Free Software Foundation.\n"
"\n"
"This program is distributed in the hope that it will be useful,\n"
"but WITHOUT ANY WARRANTY; without even the implied warranty of\n"
"MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the\n"
"GNU General Public License for more details.\n"
"\n";
const char *wpa_supplicant_full_license2 =
"You should have received a copy of the GNU General Public License\n"
"along with this program; if not, write to the Free Software\n"
"Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA\n"
"\n"
"Alternatively, this software may be distributed under the terms of the\n"
"BSD license.\n"
"\n"
"Redistribution and use in source and binary forms, with or without\n"
"modification, are permitted provided that the following conditions are\n"
"met:\n"
"\n";
const char *wpa_supplicant_full_license3 =
"1. Redistributions of source code must retain the above copyright\n"
"   notice, this list of conditions and the following disclaimer.\n"
"\n"
"2. Redistributions in binary form must reproduce the above copyright\n"
"   notice, this list of conditions and the following disclaimer in the\n"
"   documentation and/or other materials provided with the distribution.\n"
"\n";
const char *wpa_supplicant_full_license4 =
"3. Neither the name(s) of the above-listed copyright holder(s) nor the\n"
"   names of its contributors may be used to endorse or promote products\n"
"   derived from this software without specific prior written permission.\n"
"\n"
"THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS\n"
"\"AS IS\" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT\n"
"LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR\n"
"A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT\n";
const char *wpa_supplicant_full_license5 =
"OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,\n"
"SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT\n"
"LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,\n"
"DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY\n"
"THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n"
"(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE\n"
"OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.\n"
"\n";
#endif /* CONFIG_NO_STDOUT_DEBUG */

extern int wpa_debug_level;
extern int wpa_debug_show_keys;
extern int wpa_debug_timestamp;
extern struct wpa_driver_ops *wpa_drivers[];

/* Configure default/group WEP keys for static WEP */
int wpa_set_wep_keys(struct wpa_supplicant *wpa_s, struct wpa_ssid *ssid)
{
        int i, set = 0;

        for (i = 0; i < NUM_WEP_KEYS; i++) {
                if (ssid->wep_key_len[i] == 0)
                        continue;

                set = 1;
                wpa_drv_set_key(wpa_s, WPA_ALG_WEP,
                                (u8 *) "\xff\xff\xff\xff\xff\xff",
                                i, i == ssid->wep_tx_keyidx, (u8 *) "", 0,
                                ssid->wep_key[i], ssid->wep_key_len[i]);
        }

        return set;
}


static int wpa_supplicant_set_wpa_none_key(struct wpa_supplicant *wpa_s,
                                           struct wpa_ssid *ssid)
{
        u8 key[32];
        size_t keylen;
        enum wpa_alg alg;
        u8 seq[6] = { 0 };

        /* IBSS/WPA-None uses only one key (Group) for both receiving and
         * sending unicast and multicast packets. */

        if (ssid->mode != WPAS_MODE_IBSS) {
                wpa_printf(MSG_INFO, "WPA: Invalid mode %d (not IBSS/ad-hoc) "
                           "for WPA-None", ssid->mode);
                return -1;
        }

        if (!ssid->psk_set) {
                wpa_printf(MSG_INFO, "WPA: No PSK configured for WPA-None");
                return -1;
        }

        switch (wpa_s->group_cipher) {
        case WPA_CIPHER_CCMP:
                os_memcpy(key, ssid->psk, 16);
                keylen = 16;
                alg = WPA_ALG_CCMP;
                break;
        case WPA_CIPHER_TKIP:
                /* WPA-None uses the same Michael MIC key for both TX and RX */
                os_memcpy(key, ssid->psk, 16 + 8);
                os_memcpy(key + 16 + 8, ssid->psk + 16, 8);
                keylen = 32;
                alg = WPA_ALG_TKIP;
                break;
        default:
                wpa_printf(MSG_INFO, "WPA: Invalid group cipher %d for "
                           "WPA-None", wpa_s->group_cipher);
                return -1;
        }

        /* TODO: should actually remember the previously used seq#, both for TX
         * and RX from each STA.. */

        return wpa_drv_set_key(wpa_s, alg, (u8 *) "\xff\xff\xff\xff\xff\xff",
                               0, 1, seq, 6, key, keylen);
}


static void wpa_supplicant_timeout(void *eloop_ctx, void *timeout_ctx)
{
        struct wpa_supplicant *wpa_s = eloop_ctx;
        const u8 *bssid = wpa_s->bssid;
        if (is_zero_ether_addr(bssid))
                bssid = wpa_s->pending_bssid;
        wpa_msg(wpa_s, MSG_INFO, "Authentication with " MACSTR " timed out.",
                MAC2STR(bssid));
        wpa_blacklist_add(wpa_s, bssid);
        wpa_sm_notify_disassoc(wpa_s->wpa);
        wpa_supplicant_disassociate(wpa_s, WLAN_REASON_DEAUTH_LEAVING);
        wpa_s->reassociate = 1;
        wpa_supplicant_req_scan(wpa_s, 0, 0);
}


void wpa_supplicant_req_auth_timeout(struct wpa_supplicant *wpa_s,
                                     int sec, int usec)
{
        if (wpa_s->conf && wpa_s->conf->ap_scan == 0 &&
            (wpa_s->drv_flags & WPA_DRIVER_FLAGS_WIRED))
                return;

        wpa_msg(wpa_s, MSG_DEBUG, "Setting authentication timeout: %d sec "
                "%d usec", sec, usec);
        eloop_cancel_timeout(wpa_supplicant_timeout, wpa_s, NULL);
        eloop_register_timeout(sec, usec, wpa_supplicant_timeout, wpa_s, NULL);
}


void wpa_supplicant_cancel_auth_timeout(struct wpa_supplicant *wpa_s)
{
        wpa_msg(wpa_s, MSG_DEBUG, "Cancelling authentication timeout");
        eloop_cancel_timeout(wpa_supplicant_timeout, wpa_s, NULL);
        wpa_blacklist_del(wpa_s, wpa_s->bssid);
}


void wpa_supplicant_initiate_eapol(struct wpa_supplicant *wpa_s)
{
#ifdef IEEE8021X_EAPOL
        struct eapol_config eapol_conf;
        struct wpa_ssid *ssid = wpa_s->current_ssid;

#ifdef CONFIG_IBSS_RSN
        if (ssid->mode == WPAS_MODE_IBSS &&
            wpa_s->key_mgmt != WPA_KEY_MGMT_NONE &&
            wpa_s->key_mgmt != WPA_KEY_MGMT_WPA_NONE) {
                /*
                 * RSN IBSS authentication is per-STA and we can disable the
                 * per-BSSID EAPOL authentication.
                 */
                eapol_sm_notify_portControl(wpa_s->eapol, ForceAuthorized);
                eapol_sm_notify_eap_success(wpa_s->eapol, TRUE);
                eapol_sm_notify_eap_fail(wpa_s->eapol, FALSE);
                return;
        }
#endif /* CONFIG_IBSS_RSN */

        eapol_sm_notify_eap_success(wpa_s->eapol, FALSE);
        eapol_sm_notify_eap_fail(wpa_s->eapol, FALSE);

        if (wpa_s->key_mgmt == WPA_KEY_MGMT_NONE ||
            wpa_s->key_mgmt == WPA_KEY_MGMT_WPA_NONE)
                eapol_sm_notify_portControl(wpa_s->eapol, ForceAuthorized);
        else
                eapol_sm_notify_portControl(wpa_s->eapol, Auto);

        os_memset(&eapol_conf, 0, sizeof(eapol_conf));
        if (wpa_s->key_mgmt == WPA_KEY_MGMT_IEEE8021X_NO_WPA) {
                eapol_conf.accept_802_1x_keys = 1;
                eapol_conf.required_keys = 0;
                if (ssid->eapol_flags & EAPOL_FLAG_REQUIRE_KEY_UNICAST) {
                        eapol_conf.required_keys |= EAPOL_REQUIRE_KEY_UNICAST;
                }
                if (ssid->eapol_flags & EAPOL_FLAG_REQUIRE_KEY_BROADCAST) {
                        eapol_conf.required_keys |=
                                EAPOL_REQUIRE_KEY_BROADCAST;
                }

                if (wpa_s->conf && (wpa_s->drv_flags & WPA_DRIVER_FLAGS_WIRED))
                        eapol_conf.required_keys = 0;
        }
        if (wpa_s->conf)
                eapol_conf.fast_reauth = wpa_s->conf->fast_reauth;
        eapol_conf.workaround = ssid->eap_workaround;
        eapol_conf.eap_disabled =
                !wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt) &&
                wpa_s->key_mgmt != WPA_KEY_MGMT_IEEE8021X_NO_WPA &&
                wpa_s->key_mgmt != WPA_KEY_MGMT_WPS;
        eapol_sm_notify_config(wpa_s->eapol, &ssid->eap, &eapol_conf);
#endif /* IEEE8021X_EAPOL */
}


void wpa_supplicant_set_non_wpa_policy(struct wpa_supplicant *wpa_s,
                                       struct wpa_ssid *ssid)
{
        int i;

        if (ssid->key_mgmt & WPA_KEY_MGMT_WPS)
                wpa_s->key_mgmt = WPA_KEY_MGMT_WPS;
        else if (ssid->key_mgmt & WPA_KEY_MGMT_IEEE8021X_NO_WPA)
                wpa_s->key_mgmt = WPA_KEY_MGMT_IEEE8021X_NO_WPA;
        else
                wpa_s->key_mgmt = WPA_KEY_MGMT_NONE;
        wpa_sm_set_ap_wpa_ie(wpa_s->wpa, NULL, 0);
        wpa_sm_set_ap_rsn_ie(wpa_s->wpa, NULL, 0);
        wpa_sm_set_assoc_wpa_ie(wpa_s->wpa, NULL, 0);
        wpa_s->pairwise_cipher = WPA_CIPHER_NONE;
        wpa_s->group_cipher = WPA_CIPHER_NONE;
        wpa_s->mgmt_group_cipher = 0;

        for (i = 0; i < NUM_WEP_KEYS; i++) {
                if (ssid->wep_key_len[i] > 5) {
                        wpa_s->pairwise_cipher = WPA_CIPHER_WEP104;
                        wpa_s->group_cipher = WPA_CIPHER_WEP104;
                        break;
                } else if (ssid->wep_key_len[i] > 0) {
                        wpa_s->pairwise_cipher = WPA_CIPHER_WEP40;
                        wpa_s->group_cipher = WPA_CIPHER_WEP40;
                        break;
                }
        }

        wpa_sm_set_param(wpa_s->wpa, WPA_PARAM_RSN_ENABLED, 0);
        wpa_sm_set_param(wpa_s->wpa, WPA_PARAM_KEY_MGMT, wpa_s->key_mgmt);
        wpa_sm_set_param(wpa_s->wpa, WPA_PARAM_PAIRWISE,
                         wpa_s->pairwise_cipher);
        wpa_sm_set_param(wpa_s->wpa, WPA_PARAM_GROUP, wpa_s->group_cipher);
#ifdef CONFIG_IEEE80211W
        wpa_sm_set_param(wpa_s->wpa, WPA_PARAM_MGMT_GROUP,
                         wpa_s->mgmt_group_cipher);
#endif /* CONFIG_IEEE80211W */

        pmksa_cache_clear_current(wpa_s->wpa);
}


static void wpa_supplicant_cleanup(struct wpa_supplicant *wpa_s)
{
        bgscan_deinit(wpa_s);
        scard_deinit(wpa_s->scard);
        wpa_s->scard = NULL;
        wpa_sm_set_scard_ctx(wpa_s->wpa, NULL);
        eapol_sm_register_scard_ctx(wpa_s->eapol, NULL);
        l2_packet_deinit(wpa_s->l2);
        wpa_s->l2 = NULL;
        if (wpa_s->l2_br) {
                l2_packet_deinit(wpa_s->l2_br);
                wpa_s->l2_br = NULL;
        }

        if (wpa_s->ctrl_iface) {
                wpa_supplicant_ctrl_iface_deinit(wpa_s->ctrl_iface);
                wpa_s->ctrl_iface = NULL;
        }
        if (wpa_s->conf != NULL) {
                struct wpa_ssid *ssid;
                for (ssid = wpa_s->conf->ssid; ssid; ssid = ssid->next)
                        wpas_notify_network_removed(wpa_s, ssid);
                wpa_config_free(wpa_s->conf);
                wpa_s->conf = NULL;
        }

        os_free(wpa_s->confname);
        wpa_s->confname = NULL;

        wpa_sm_set_eapol(wpa_s->wpa, NULL);
        eapol_sm_deinit(wpa_s->eapol);
        wpa_s->eapol = NULL;

        rsn_preauth_deinit(wpa_s->wpa);

        pmksa_candidate_free(wpa_s->wpa);
        wpa_sm_deinit(wpa_s->wpa);
        wpa_s->wpa = NULL;
        wpa_blacklist_clear(wpa_s);

        wpa_bss_deinit(wpa_s);

        wpa_supplicant_cancel_scan(wpa_s);
        wpa_supplicant_cancel_auth_timeout(wpa_s);

        ieee80211_sta_deinit(wpa_s);

        wpas_wps_deinit(wpa_s);

        wpabuf_free(wpa_s->pending_eapol_rx);
        wpa_s->pending_eapol_rx = NULL;

#ifdef CONFIG_IBSS_RSN
        ibss_rsn_deinit(wpa_s->ibss_rsn);
        wpa_s->ibss_rsn = NULL;
#endif /* CONFIG_IBSS_RSN */

#ifdef CONFIG_SME
        os_free(wpa_s->sme.ft_ies);
        wpa_s->sme.ft_ies = NULL;
        wpa_s->sme.ft_ies_len = 0;
#endif /* CONFIG_SME */

#ifdef CONFIG_AP
        wpa_supplicant_ap_deinit(wpa_s);
#endif /* CONFIG_AP */
}


void wpa_clear_keys(struct wpa_supplicant *wpa_s, const u8 *addr)
{
        u8 *bcast = (u8 *) "\xff\xff\xff\xff\xff\xff";

        if (wpa_s->keys_cleared) {
                /* Some drivers (e.g., ndiswrapper & NDIS drivers) seem to have
                 * timing issues with keys being cleared just before new keys
                 * are set or just after association or something similar. This
                 * shows up in group key handshake failing often because of the
                 * client not receiving the first encrypted packets correctly.
                 * Skipping some of the extra key clearing steps seems to help
                 * in completing group key handshake more reliably. */
                wpa_printf(MSG_DEBUG, "No keys have been configured - "
                           "skip key clearing");
                return;
        }

        /* MLME-DELETEKEYS.request */
        wpa_drv_set_key(wpa_s, WPA_ALG_NONE, bcast, 0, 0, NULL, 0, NULL, 0);
        wpa_drv_set_key(wpa_s, WPA_ALG_NONE, bcast, 1, 0, NULL, 0, NULL, 0);
        wpa_drv_set_key(wpa_s, WPA_ALG_NONE, bcast, 2, 0, NULL, 0, NULL, 0);
        wpa_drv_set_key(wpa_s, WPA_ALG_NONE, bcast, 3, 0, NULL, 0, NULL, 0);
#ifdef CONFIG_IEEE80211W
        wpa_drv_set_key(wpa_s, WPA_ALG_NONE, bcast, 4, 0, NULL, 0, NULL, 0);
        wpa_drv_set_key(wpa_s, WPA_ALG_NONE, bcast, 5, 0, NULL, 0, NULL, 0);
#endif /* CONFIG_IEEE80211W */
        if (addr) {
                wpa_drv_set_key(wpa_s, WPA_ALG_NONE, addr, 0, 0, NULL, 0, NULL,
                                0);
                /* MLME-SETPROTECTION.request(None) */
                wpa_drv_mlme_setprotection(
                        wpa_s, addr,
                        MLME_SETPROTECTION_PROTECT_TYPE_NONE,
                        MLME_SETPROTECTION_KEY_TYPE_PAIRWISE);
        }
        wpa_s->keys_cleared = 1;
}


const char * wpa_supplicant_state_txt(enum wpa_states state)
{
        switch (state) {
        case WPA_DISCONNECTED:
                return "DISCONNECTED";
        case WPA_INACTIVE:
                return "INACTIVE";
        case WPA_SCANNING:
                return "SCANNING";
        case WPA_AUTHENTICATING:
                return "AUTHENTICATING";
        case WPA_ASSOCIATING:
                return "ASSOCIATING";
        case WPA_ASSOCIATED:
                return "ASSOCIATED";
        case WPA_4WAY_HANDSHAKE:
                return "4WAY_HANDSHAKE";
        case WPA_GROUP_HANDSHAKE:
                return "GROUP_HANDSHAKE";
        case WPA_COMPLETED:
                return "COMPLETED";
        default:
                return "UNKNOWN";
        }
}


void wpa_supplicant_set_state(struct wpa_supplicant *wpa_s,
                              enum wpa_states state)
{
        enum wpa_states old_state = wpa_s->wpa_state;

        wpa_printf(MSG_DEBUG, "State: %s -> %s",
                   wpa_supplicant_state_txt(wpa_s->wpa_state),
                   wpa_supplicant_state_txt(state));

        if (state != WPA_SCANNING)
                wpa_supplicant_notify_scanning(wpa_s, 0);

        if (state == WPA_COMPLETED && wpa_s->new_connection) {
#if defined(CONFIG_CTRL_IFACE) || !defined(CONFIG_NO_STDOUT_DEBUG)
                struct wpa_ssid *ssid = wpa_s->current_ssid;
                wpa_msg(wpa_s, MSG_INFO, WPA_EVENT_CONNECTED "- Connection to "
                        MACSTR " completed %s [id=%d id_str=%s]",
                        MAC2STR(wpa_s->bssid), wpa_s->reassociated_connection ?
                        "(reauth)" : "(auth)",
                        ssid ? ssid->id : -1,
                        ssid && ssid->id_str ? ssid->id_str : "");
#endif /* CONFIG_CTRL_IFACE || !CONFIG_NO_STDOUT_DEBUG */
                wpa_s->new_connection = 0;
                wpa_s->reassociated_connection = 1;
                wpa_drv_set_operstate(wpa_s, 1);
                wpa_s->after_wps = 0;
        } else if (state == WPA_DISCONNECTED || state == WPA_ASSOCIATING ||
                   state == WPA_ASSOCIATED) {
                wpa_s->new_connection = 1;
                wpa_drv_set_operstate(wpa_s, 0);
        }
        wpa_s->wpa_state = state;

        if (wpa_s->wpa_state != old_state)
                wpas_notify_state_changed(wpa_s, wpa_s->wpa_state, old_state);
}


void wpa_supplicant_terminate_proc(struct wpa_global *global)
{
        int pending = 0;
#ifdef CONFIG_WPS
        struct wpa_supplicant *wpa_s = global->ifaces;
        while (wpa_s) {
                if (wpas_wps_terminate_pending(wpa_s) == 1)
                        pending = 1;
                wpa_s = wpa_s->next;
        }
#endif /* CONFIG_WPS */
        if (pending)
                return;
        eloop_terminate();
}


static void wpa_supplicant_terminate(int sig, void *signal_ctx)
{
        struct wpa_global *global = signal_ctx;
        struct wpa_supplicant *wpa_s;
        for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next) {
                wpa_msg(wpa_s, MSG_INFO, WPA_EVENT_TERMINATING "- signal %d "
                        "received", sig);
        }
        wpa_supplicant_terminate_proc(global);
}


static void wpa_supplicant_clear_status(struct wpa_supplicant *wpa_s)
{
        enum wpa_states old_state = wpa_s->wpa_state;

        wpa_s->pairwise_cipher = 0;
        wpa_s->group_cipher = 0;
        wpa_s->mgmt_group_cipher = 0;
        wpa_s->key_mgmt = 0;
        wpa_s->wpa_state = WPA_DISCONNECTED;

        if (wpa_s->wpa_state != old_state)
                wpas_notify_state_changed(wpa_s, wpa_s->wpa_state, old_state);
}


int wpa_supplicant_reload_configuration(struct wpa_supplicant *wpa_s)
{
        struct wpa_config *conf;
        struct wpa_ssid *old_ssid;
        int reconf_ctrl;
        int old_ap_scan;

        if (wpa_s->confname == NULL)
                return -1;
        conf = wpa_config_read(wpa_s->confname);
        if (conf == NULL) {
                wpa_msg(wpa_s, MSG_ERROR, "Failed to parse the configuration "
                        "file '%s' - exiting", wpa_s->confname);
                return -1;
        }

        reconf_ctrl = !!conf->ctrl_interface != !!wpa_s->conf->ctrl_interface
                || (conf->ctrl_interface && wpa_s->conf->ctrl_interface &&
                    os_strcmp(conf->ctrl_interface,
                              wpa_s->conf->ctrl_interface) != 0);

        if (reconf_ctrl && wpa_s->ctrl_iface) {
                wpa_supplicant_ctrl_iface_deinit(wpa_s->ctrl_iface);
                wpa_s->ctrl_iface = NULL;
        }

        eapol_sm_invalidate_cached_session(wpa_s->eapol);
        old_ssid = wpa_s->current_ssid;
        wpa_s->current_ssid = NULL;
        if (old_ssid != wpa_s->current_ssid)
                wpas_notify_network_changed(wpa_s);

        /*
         * TODO: should notify EAPOL SM about changes in opensc_engine_path,
         * pkcs11_engine_path, pkcs11_module_path.
         */
        if (wpa_key_mgmt_wpa_psk(wpa_s->key_mgmt)) {
                /*
                 * Clear forced success to clear EAP state for next
                 * authentication.
                 */
                eapol_sm_notify_eap_success(wpa_s->eapol, FALSE);
        }
        eapol_sm_notify_config(wpa_s->eapol, NULL, NULL);
        wpa_sm_set_config(wpa_s->wpa, NULL);
        wpa_sm_set_fast_reauth(wpa_s->wpa, wpa_s->conf->fast_reauth);
        rsn_preauth_deinit(wpa_s->wpa);

        old_ap_scan = wpa_s->conf->ap_scan;
        wpa_config_free(wpa_s->conf);
        wpa_s->conf = conf;
        if (old_ap_scan != wpa_s->conf->ap_scan)
                wpas_notify_ap_scan_changed(wpa_s);

        if (reconf_ctrl)
                wpa_s->ctrl_iface = wpa_supplicant_ctrl_iface_init(wpa_s);

        wpa_supplicant_clear_status(wpa_s);
        wpa_s->reassociate = 1;
        wpa_supplicant_req_scan(wpa_s, 0, 0);
        wpa_msg(wpa_s, MSG_DEBUG, "Reconfiguration completed");
        return 0;
}


static void wpa_supplicant_reconfig(int sig, void *signal_ctx)
{
        struct wpa_global *global = signal_ctx;
        struct wpa_supplicant *wpa_s;
        wpa_printf(MSG_DEBUG, "Signal %d received - reconfiguring", sig);
        for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next) {
                if (wpa_supplicant_reload_configuration(wpa_s) < 0) {
                        wpa_supplicant_terminate_proc(global);
                }
        }
}


enum wpa_cipher cipher_suite2driver(int cipher)
{
        switch (cipher) {
        case WPA_CIPHER_NONE:
                return CIPHER_NONE;
        case WPA_CIPHER_WEP40:
                return CIPHER_WEP40;
        case WPA_CIPHER_WEP104:
                return CIPHER_WEP104;
        case WPA_CIPHER_CCMP:
                return CIPHER_CCMP;
        case WPA_CIPHER_TKIP:
        default:
                return CIPHER_TKIP;
        }
}


enum wpa_key_mgmt key_mgmt2driver(int key_mgmt)
{
        switch (key_mgmt) {
        case WPA_KEY_MGMT_NONE:
                return KEY_MGMT_NONE;
        case WPA_KEY_MGMT_IEEE8021X_NO_WPA:
                return KEY_MGMT_802_1X_NO_WPA;
        case WPA_KEY_MGMT_IEEE8021X:
                return KEY_MGMT_802_1X;
        case WPA_KEY_MGMT_WPA_NONE:
                return KEY_MGMT_WPA_NONE;
        case WPA_KEY_MGMT_FT_IEEE8021X:
                return KEY_MGMT_FT_802_1X;
        case WPA_KEY_MGMT_FT_PSK:
                return KEY_MGMT_FT_PSK;
        case WPA_KEY_MGMT_IEEE8021X_SHA256:
                return KEY_MGMT_802_1X_SHA256;
        case WPA_KEY_MGMT_PSK_SHA256:
                return KEY_MGMT_PSK_SHA256;
        case WPA_KEY_MGMT_WPS:
                return KEY_MGMT_WPS;
        case WPA_KEY_MGMT_PSK:
        default:
                return KEY_MGMT_PSK;
        }
}


static int wpa_supplicant_suites_from_ai(struct wpa_supplicant *wpa_s,
                                         struct wpa_ssid *ssid,
                                         struct wpa_ie_data *ie)
{
        int ret = wpa_sm_parse_own_wpa_ie(wpa_s->wpa, ie);
        if (ret) {
                if (ret == -2) {
                        wpa_msg(wpa_s, MSG_INFO, "WPA: Failed to parse WPA IE "
                                "from association info");
                }
                return -1;
        }

        wpa_printf(MSG_DEBUG, "WPA: Using WPA IE from AssocReq to set cipher "
                   "suites");
        if (!(ie->group_cipher & ssid->group_cipher)) {
                wpa_msg(wpa_s, MSG_INFO, "WPA: Driver used disabled group "
                        "cipher 0x%x (mask 0x%x) - reject",
                        ie->group_cipher, ssid->group_cipher);
                return -1;
        }
        if (!(ie->pairwise_cipher & ssid->pairwise_cipher)) {
                wpa_msg(wpa_s, MSG_INFO, "WPA: Driver used disabled pairwise "
                        "cipher 0x%x (mask 0x%x) - reject",
                        ie->pairwise_cipher, ssid->pairwise_cipher);
                return -1;
        }
        if (!(ie->key_mgmt & ssid->key_mgmt)) {
                wpa_msg(wpa_s, MSG_INFO, "WPA: Driver used disabled key "
                        "management 0x%x (mask 0x%x) - reject",
                        ie->key_mgmt, ssid->key_mgmt);
                return -1;
        }

#ifdef CONFIG_IEEE80211W
        if (!(ie->capabilities & WPA_CAPABILITY_MFPC) &&
            ssid->ieee80211w == MGMT_FRAME_PROTECTION_REQUIRED) {
                wpa_msg(wpa_s, MSG_INFO, "WPA: Driver associated with an AP "
                        "that does not support management frame protection - "
                        "reject");
                return -1;
        }
#endif /* CONFIG_IEEE80211W */

        return 0;
}


int wpa_supplicant_set_suites(struct wpa_supplicant *wpa_s,
                              struct wpa_bss *bss, struct wpa_ssid *ssid,
                              u8 *wpa_ie, size_t *wpa_ie_len)
{
        struct wpa_ie_data ie;
        int sel, proto;
        const u8 *bss_wpa, *bss_rsn;

        if (bss) {
                bss_wpa = wpa_bss_get_vendor_ie(bss, WPA_IE_VENDOR_TYPE);
                bss_rsn = wpa_bss_get_ie(bss, WLAN_EID_RSN);
        } else
                bss_wpa = bss_rsn = NULL;

        if (bss_rsn && (ssid->proto & WPA_PROTO_RSN) &&
            wpa_parse_wpa_ie(bss_rsn, 2 + bss_rsn[1], &ie) == 0 &&
            (ie.group_cipher & ssid->group_cipher) &&
            (ie.pairwise_cipher & ssid->pairwise_cipher) &&
            (ie.key_mgmt & ssid->key_mgmt)) {
                wpa_msg(wpa_s, MSG_DEBUG, "RSN: using IEEE 802.11i/D9.0");
                proto = WPA_PROTO_RSN;
        } else if (bss_wpa && (ssid->proto & WPA_PROTO_WPA) &&
                   wpa_parse_wpa_ie(bss_wpa, 2 +bss_wpa[1], &ie) == 0 &&
                   (ie.group_cipher & ssid->group_cipher) &&
                   (ie.pairwise_cipher & ssid->pairwise_cipher) &&
                   (ie.key_mgmt & ssid->key_mgmt)) {
                wpa_msg(wpa_s, MSG_DEBUG, "WPA: using IEEE 802.11i/D3.0");
                proto = WPA_PROTO_WPA;
        } else if (bss) {
                wpa_msg(wpa_s, MSG_WARNING, "WPA: Failed to select WPA/RSN");
                return -1;
        } else {
                if (ssid->proto & WPA_PROTO_RSN)
                        proto = WPA_PROTO_RSN;
                else
                        proto = WPA_PROTO_WPA;
                if (wpa_supplicant_suites_from_ai(wpa_s, ssid, &ie) < 0) {
                        os_memset(&ie, 0, sizeof(ie));
                        ie.group_cipher = ssid->group_cipher;
                        ie.pairwise_cipher = ssid->pairwise_cipher;
                        ie.key_mgmt = ssid->key_mgmt;
#ifdef CONFIG_IEEE80211W
                        ie.mgmt_group_cipher =
                                ssid->ieee80211w != NO_MGMT_FRAME_PROTECTION ?
                                WPA_CIPHER_AES_128_CMAC : 0;
#endif /* CONFIG_IEEE80211W */
                        wpa_printf(MSG_DEBUG, "WPA: Set cipher suites based "
                                   "on configuration");
                } else
                        proto = ie.proto;
        }

        wpa_printf(MSG_DEBUG, "WPA: Selected cipher suites: group %d "
                   "pairwise %d key_mgmt %d proto %d",
                   ie.group_cipher, ie.pairwise_cipher, ie.key_mgmt, proto);
#ifdef CONFIG_IEEE80211W
        if (ssid->ieee80211w) {
                wpa_printf(MSG_DEBUG, "WPA: Selected mgmt group cipher %d",
                           ie.mgmt_group_cipher);
        }
#endif /* CONFIG_IEEE80211W */

        wpa_sm_set_param(wpa_s->wpa, WPA_PARAM_PROTO, proto);
        wpa_sm_set_param(wpa_s->wpa, WPA_PARAM_RSN_ENABLED,
                         !!(ssid->proto & WPA_PROTO_RSN));

        if (bss || !wpa_s->ap_ies_from_associnfo) {
                if (wpa_sm_set_ap_wpa_ie(wpa_s->wpa, bss_wpa,
                                         bss_wpa ? 2 + bss_wpa[1] : 0) ||
                    wpa_sm_set_ap_rsn_ie(wpa_s->wpa, bss_rsn,
                                         bss_rsn ? 2 + bss_rsn[1] : 0))
                        return -1;
        }

        sel = ie.group_cipher & ssid->group_cipher;
        if (sel & WPA_CIPHER_CCMP) {
                wpa_s->group_cipher = WPA_CIPHER_CCMP;
                wpa_msg(wpa_s, MSG_DEBUG, "WPA: using GTK CCMP");
        } else if (sel & WPA_CIPHER_TKIP) {
                wpa_s->group_cipher = WPA_CIPHER_TKIP;
                wpa_msg(wpa_s, MSG_DEBUG, "WPA: using GTK TKIP");
        } else if (sel & WPA_CIPHER_WEP104) {
                wpa_s->group_cipher = WPA_CIPHER_WEP104;
                wpa_msg(wpa_s, MSG_DEBUG, "WPA: using GTK WEP104");
        } else if (sel & WPA_CIPHER_WEP40) {
                wpa_s->group_cipher = WPA_CIPHER_WEP40;
                wpa_msg(wpa_s, MSG_DEBUG, "WPA: using GTK WEP40");
        } else {
                wpa_printf(MSG_WARNING, "WPA: Failed to select group cipher.");
                return -1;
        }

        sel = ie.pairwise_cipher & ssid->pairwise_cipher;
        if (sel & WPA_CIPHER_CCMP) {
                wpa_s->pairwise_cipher = WPA_CIPHER_CCMP;
                wpa_msg(wpa_s, MSG_DEBUG, "WPA: using PTK CCMP");
        } else if (sel & WPA_CIPHER_TKIP) {
                wpa_s->pairwise_cipher = WPA_CIPHER_TKIP;
                wpa_msg(wpa_s, MSG_DEBUG, "WPA: using PTK TKIP");
        } else if (sel & WPA_CIPHER_NONE) {
                wpa_s->pairwise_cipher = WPA_CIPHER_NONE;
                wpa_msg(wpa_s, MSG_DEBUG, "WPA: using PTK NONE");
        } else {
                wpa_printf(MSG_WARNING, "WPA: Failed to select pairwise "
                           "cipher.");
                return -1;
        }

        sel = ie.key_mgmt & ssid->key_mgmt;
        if (0) {
#ifdef CONFIG_IEEE80211R
        } else if (sel & WPA_KEY_MGMT_FT_IEEE8021X) {
                wpa_s->key_mgmt = WPA_KEY_MGMT_FT_IEEE8021X;
                wpa_msg(wpa_s, MSG_DEBUG, "WPA: using KEY_MGMT FT/802.1X");
        } else if (sel & WPA_KEY_MGMT_FT_PSK) {
                wpa_s->key_mgmt = WPA_KEY_MGMT_FT_PSK;
                wpa_msg(wpa_s, MSG_DEBUG, "WPA: using KEY_MGMT FT/PSK");
#endif /* CONFIG_IEEE80211R */
#ifdef CONFIG_IEEE80211W
        } else if (sel & WPA_KEY_MGMT_IEEE8021X_SHA256) {
                wpa_s->key_mgmt = WPA_KEY_MGMT_IEEE8021X_SHA256;
                wpa_msg(wpa_s, MSG_DEBUG,
                        "WPA: using KEY_MGMT 802.1X with SHA256");
        } else if (sel & WPA_KEY_MGMT_PSK_SHA256) {
                wpa_s->key_mgmt = WPA_KEY_MGMT_PSK_SHA256;
                wpa_msg(wpa_s, MSG_DEBUG,
                        "WPA: using KEY_MGMT PSK with SHA256");
#endif /* CONFIG_IEEE80211W */
        } else if (sel & WPA_KEY_MGMT_IEEE8021X) {
                wpa_s->key_mgmt = WPA_KEY_MGMT_IEEE8021X;
                wpa_msg(wpa_s, MSG_DEBUG, "WPA: using KEY_MGMT 802.1X");
        } else if (sel & WPA_KEY_MGMT_PSK) {
                wpa_s->key_mgmt = WPA_KEY_MGMT_PSK;
                wpa_msg(wpa_s, MSG_DEBUG, "WPA: using KEY_MGMT WPA-PSK");
        } else if (sel & WPA_KEY_MGMT_WPA_NONE) {
                wpa_s->key_mgmt = WPA_KEY_MGMT_WPA_NONE;
                wpa_msg(wpa_s, MSG_DEBUG, "WPA: using KEY_MGMT WPA-NONE");
        } else {
                wpa_printf(MSG_WARNING, "WPA: Failed to select authenticated "
                           "key management type.");
                return -1;
        }

        wpa_sm_set_param(wpa_s->wpa, WPA_PARAM_KEY_MGMT, wpa_s->key_mgmt);
        wpa_sm_set_param(wpa_s->wpa, WPA_PARAM_PAIRWISE,
                         wpa_s->pairwise_cipher);
        wpa_sm_set_param(wpa_s->wpa, WPA_PARAM_GROUP, wpa_s->group_cipher);

#ifdef CONFIG_IEEE80211W
        sel = ie.mgmt_group_cipher;
        if (ssid->ieee80211w == NO_MGMT_FRAME_PROTECTION ||
            !(ie.capabilities & WPA_CAPABILITY_MFPC))
                sel = 0;
        if (sel & WPA_CIPHER_AES_128_CMAC) {
                wpa_s->mgmt_group_cipher = WPA_CIPHER_AES_128_CMAC;
                wpa_msg(wpa_s, MSG_DEBUG, "WPA: using MGMT group cipher "
                        "AES-128-CMAC");
        } else {
                wpa_s->mgmt_group_cipher = 0;
                wpa_msg(wpa_s, MSG_DEBUG, "WPA: not using MGMT group cipher");
        }
        wpa_sm_set_param(wpa_s->wpa, WPA_PARAM_MGMT_GROUP,
                         wpa_s->mgmt_group_cipher);
        wpa_sm_set_param(wpa_s->wpa, WPA_PARAM_MFP, ssid->ieee80211w);
#endif /* CONFIG_IEEE80211W */

        if (wpa_sm_set_assoc_wpa_ie_default(wpa_s->wpa, wpa_ie, wpa_ie_len)) {
                wpa_printf(MSG_WARNING, "WPA: Failed to generate WPA IE.");
                return -1;
        }

        if (ssid->key_mgmt &
            (WPA_KEY_MGMT_PSK | WPA_KEY_MGMT_FT_PSK | WPA_KEY_MGMT_PSK_SHA256))
                wpa_sm_set_pmk(wpa_s->wpa, ssid->psk, PMK_LEN);
        else
                wpa_sm_set_pmk_from_pmksa(wpa_s->wpa);

        return 0;
}


void wpa_supplicant_associate(struct wpa_supplicant *wpa_s,
                              struct wpa_bss *bss, struct wpa_ssid *ssid)
{
        u8 wpa_ie[80];
        size_t wpa_ie_len;
        int use_crypt, ret, i, bssid_changed;
        int algs = WPA_AUTH_ALG_OPEN;
        enum wpa_cipher cipher_pairwise, cipher_group;
        struct wpa_driver_associate_params params;
        int wep_keys_set = 0;
        struct wpa_driver_capa capa;
        int assoc_failed = 0;
        struct wpa_ssid *old_ssid;

        if (ssid->mode == WPAS_MODE_AP) {
#ifdef CONFIG_AP
                if (!(wpa_s->drv_flags & WPA_DRIVER_FLAGS_AP)) {
                        wpa_printf(MSG_INFO, "Driver does not support AP "
                                   "mode");
                        return;
                }
                wpa_supplicant_create_ap(wpa_s, ssid);
                wpa_s->current_bss = bss;
#else /* CONFIG_AP */
                wpa_printf(MSG_ERROR, "AP mode support not included in the "
                           "build");
#endif /* CONFIG_AP */
                return;
        }

        if ((wpa_s->drv_flags & WPA_DRIVER_FLAGS_SME) &&
            ssid->mode == IEEE80211_MODE_INFRA) {
                sme_authenticate(wpa_s, bss, ssid);
                return;
        }

        wpa_s->reassociate = 0;
        if (bss) {
#ifdef CONFIG_IEEE80211R
                const u8 *ie, *md = NULL;
#endif /* CONFIG_IEEE80211R */
                wpa_msg(wpa_s, MSG_INFO, "Trying to associate with " MACSTR
                        " (SSID='%s' freq=%d MHz)", MAC2STR(bss->bssid),
                        wpa_ssid_txt(bss->ssid, bss->ssid_len), bss->freq);
                bssid_changed = !is_zero_ether_addr(wpa_s->bssid);
                os_memset(wpa_s->bssid, 0, ETH_ALEN);
                os_memcpy(wpa_s->pending_bssid, bss->bssid, ETH_ALEN);
                if (bssid_changed)
                        wpas_notify_bssid_changed(wpa_s);
#ifdef CONFIG_IEEE80211R
                ie = wpa_bss_get_ie(bss, WLAN_EID_MOBILITY_DOMAIN);
                if (ie && ie[1] >= MOBILITY_DOMAIN_ID_LEN)
                        md = ie + 2;
                wpa_sm_set_ft_params(wpa_s->wpa, ie, ie ? 2 + ie[1] : 0);
                if (md) {
                        /* Prepare for the next transition */
                        wpa_ft_prepare_auth_request(wpa_s->wpa, ie);
                }
#endif /* CONFIG_IEEE80211R */
#ifdef CONFIG_WPS
        } else if ((ssid->ssid == NULL || ssid->ssid_len == 0) &&
                   wpa_s->conf->ap_scan == 2 &&
                   (ssid->key_mgmt & WPA_KEY_MGMT_WPS)) {
                /* Use ap_scan==1 style network selection to find the network
                 */
                wpa_s->scan_req = 2;
                wpa_s->reassociate = 1;
                wpa_supplicant_req_scan(wpa_s, 0, 0);
                return;
#endif /* CONFIG_WPS */
        } else {
                wpa_msg(wpa_s, MSG_INFO, "Trying to associate with SSID '%s'",
                        wpa_ssid_txt(ssid->ssid, ssid->ssid_len));
                os_memset(wpa_s->pending_bssid, 0, ETH_ALEN);
        }
        wpa_supplicant_cancel_scan(wpa_s);

        /* Starting new association, so clear the possibly used WPA IE from the
         * previous association. */
        wpa_sm_set_assoc_wpa_ie(wpa_s->wpa, NULL, 0);

#ifdef IEEE8021X_EAPOL
        if (ssid->key_mgmt & WPA_KEY_MGMT_IEEE8021X_NO_WPA) {
                if (ssid->leap) {
                        if (ssid->non_leap == 0)
                                algs = WPA_AUTH_ALG_LEAP;
                        else
                                algs |= WPA_AUTH_ALG_LEAP;
                }
        }
#endif /* IEEE8021X_EAPOL */
        wpa_printf(MSG_DEBUG, "Automatic auth_alg selection: 0x%x", algs);
        if (ssid->auth_alg) {
                algs = ssid->auth_alg;
                wpa_printf(MSG_DEBUG, "Overriding auth_alg selection: 0x%x",
                           algs);
        }

        if (bss && (wpa_bss_get_vendor_ie(bss, WPA_IE_VENDOR_TYPE) ||
                    wpa_bss_get_ie(bss, WLAN_EID_RSN)) &&
            (ssid->key_mgmt & (WPA_KEY_MGMT_IEEE8021X | WPA_KEY_MGMT_PSK |
                               WPA_KEY_MGMT_FT_IEEE8021X |
                               WPA_KEY_MGMT_FT_PSK |
                               WPA_KEY_MGMT_IEEE8021X_SHA256 |
                               WPA_KEY_MGMT_PSK_SHA256))) {
                int try_opportunistic;
                try_opportunistic = ssid->proactive_key_caching &&
                        (ssid->proto & WPA_PROTO_RSN);
                if (pmksa_cache_set_current(wpa_s->wpa, NULL, bss->bssid,
                                            wpa_s->current_ssid,
                                            try_opportunistic) == 0)
                        eapol_sm_notify_pmkid_attempt(wpa_s->eapol, 1);
                wpa_ie_len = sizeof(wpa_ie);
                if (wpa_supplicant_set_suites(wpa_s, bss, ssid,
                                              wpa_ie, &wpa_ie_len)) {
                        wpa_printf(MSG_WARNING, "WPA: Failed to set WPA key "
                                   "management and encryption suites");
                        return;
                }
        } else if (ssid->key_mgmt &
                   (WPA_KEY_MGMT_PSK | WPA_KEY_MGMT_IEEE8021X |
                    WPA_KEY_MGMT_WPA_NONE | WPA_KEY_MGMT_FT_PSK |
                    WPA_KEY_MGMT_FT_IEEE8021X | WPA_KEY_MGMT_PSK_SHA256 |
                    WPA_KEY_MGMT_IEEE8021X_SHA256)) {
                wpa_ie_len = sizeof(wpa_ie);
                if (wpa_supplicant_set_suites(wpa_s, NULL, ssid,
                                              wpa_ie, &wpa_ie_len)) {
                        wpa_printf(MSG_WARNING, "WPA: Failed to set WPA key "
                                   "management and encryption suites (no scan "
                                   "results)");
                        return;
                }
#ifdef CONFIG_WPS
        } else if (ssid->key_mgmt & WPA_KEY_MGMT_WPS) {
                struct wpabuf *wps_ie;
                wps_ie = wps_build_assoc_req_ie(wpas_wps_get_req_type(ssid));
                if (wps_ie && wpabuf_len(wps_ie) <= sizeof(wpa_ie)) {
                        wpa_ie_len = wpabuf_len(wps_ie);
                        os_memcpy(wpa_ie, wpabuf_head(wps_ie), wpa_ie_len);
                } else
                        wpa_ie_len = 0;
                wpabuf_free(wps_ie);
                wpa_supplicant_set_non_wpa_policy(wpa_s, ssid);
#endif /* CONFIG_WPS */
        } else {
                wpa_supplicant_set_non_wpa_policy(wpa_s, ssid);
                wpa_ie_len = 0;
        }

        wpa_clear_keys(wpa_s, bss ? bss->bssid : NULL);
        use_crypt = 1;
        cipher_pairwise = cipher_suite2driver(wpa_s->pairwise_cipher);
        cipher_group = cipher_suite2driver(wpa_s->group_cipher);
        if (wpa_s->key_mgmt == WPA_KEY_MGMT_NONE ||
            wpa_s->key_mgmt == WPA_KEY_MGMT_IEEE8021X_NO_WPA) {
                if (wpa_s->key_mgmt == WPA_KEY_MGMT_NONE)
                        use_crypt = 0;
                if (wpa_set_wep_keys(wpa_s, ssid)) {
                        use_crypt = 1;
                        wep_keys_set = 1;
                }
        }
        if (wpa_s->key_mgmt == WPA_KEY_MGMT_WPS)
                use_crypt = 0;

#ifdef IEEE8021X_EAPOL
        if (wpa_s->key_mgmt == WPA_KEY_MGMT_IEEE8021X_NO_WPA) {
                if ((ssid->eapol_flags &
                     (EAPOL_FLAG_REQUIRE_KEY_UNICAST |
                      EAPOL_FLAG_REQUIRE_KEY_BROADCAST)) == 0 &&
                    !wep_keys_set) {
                        use_crypt = 0;
                } else {
                        /* Assume that dynamic WEP-104 keys will be used and
                         * set cipher suites in order for drivers to expect
                         * encryption. */
                        cipher_pairwise = cipher_group = CIPHER_WEP104;
                }
        }
#endif /* IEEE8021X_EAPOL */

        if (wpa_s->key_mgmt == WPA_KEY_MGMT_WPA_NONE) {
                /* Set the key before (and later after) association */
                wpa_supplicant_set_wpa_none_key(wpa_s, ssid);
        }

        wpa_supplicant_set_state(wpa_s, WPA_ASSOCIATING);
        os_memset(&params, 0, sizeof(params));
        if (bss) {
                params.bssid = bss->bssid;
                params.ssid = bss->ssid;
                params.ssid_len = bss->ssid_len;
                params.freq = bss->freq;
        } else {
                params.ssid = ssid->ssid;
                params.ssid_len = ssid->ssid_len;
        }
        if (ssid->mode == WPAS_MODE_IBSS && ssid->frequency > 0 &&
            params.freq == 0)
                params.freq = ssid->frequency; /* Initial channel for IBSS */
        params.wpa_ie = wpa_ie;
        params.wpa_ie_len = wpa_ie_len;
        params.pairwise_suite = cipher_pairwise;
        params.group_suite = cipher_group;
        params.key_mgmt_suite = key_mgmt2driver(wpa_s->key_mgmt);
        params.auth_alg = algs;
        params.mode = ssid->mode;
        for (i = 0; i < NUM_WEP_KEYS; i++) {
                if (ssid->wep_key_len[i])
                        params.wep_key[i] = ssid->wep_key[i];
                params.wep_key_len[i] = ssid->wep_key_len[i];
        }
        params.wep_tx_keyidx = ssid->wep_tx_keyidx;

        if ((wpa_s->drv_flags & WPA_DRIVER_FLAGS_4WAY_HANDSHAKE) &&
            (params.key_mgmt_suite == KEY_MGMT_PSK ||
             params.key_mgmt_suite == KEY_MGMT_FT_PSK)) {
                params.passphrase = ssid->passphrase;
                if (ssid->psk_set)
                        params.psk = ssid->psk;
        }

        params.drop_unencrypted = use_crypt;

#ifdef CONFIG_IEEE80211W
        params.mgmt_frame_protection = ssid->ieee80211w;
        if (ssid->ieee80211w != NO_MGMT_FRAME_PROTECTION && bss) {
                const u8 *rsn = wpa_bss_get_ie(bss, WLAN_EID_RSN);
                struct wpa_ie_data ie;
                if (rsn && wpa_parse_wpa_ie(rsn, 2 + rsn[1], &ie) == 0 &&
                    ie.capabilities &
                    (WPA_CAPABILITY_MFPC | WPA_CAPABILITY_MFPR)) {
                        wpa_printf(MSG_DEBUG, "WPA: Selected AP supports MFP: "
                                   "require MFP");
                        params.mgmt_frame_protection =
                                MGMT_FRAME_PROTECTION_REQUIRED;
                }
        }
#endif /* CONFIG_IEEE80211W */

        if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_USER_SPACE_MLME)
                ret = ieee80211_sta_associate(wpa_s, &params);
        else
                ret = wpa_drv_associate(wpa_s, &params);
        if (ret < 0) {
                wpa_msg(wpa_s, MSG_INFO, "Association request to the driver "
                        "failed");
                /* try to continue anyway; new association will be tried again
                 * after timeout */
                assoc_failed = 1;
        }

        if (wpa_s->key_mgmt == WPA_KEY_MGMT_WPA_NONE) {
                /* Set the key after the association just in case association
                 * cleared the previously configured key. */
                wpa_supplicant_set_wpa_none_key(wpa_s, ssid);
                /* No need to timeout authentication since there is no key
                 * management. */
                wpa_supplicant_cancel_auth_timeout(wpa_s);
                wpa_supplicant_set_state(wpa_s, WPA_COMPLETED);
#ifdef CONFIG_IBSS_RSN
        } else if (ssid->mode == WPAS_MODE_IBSS &&
                   wpa_s->key_mgmt != WPA_KEY_MGMT_NONE &&
                   wpa_s->key_mgmt != WPA_KEY_MGMT_WPA_NONE) {
                ibss_rsn_set_psk(wpa_s->ibss_rsn, ssid->psk);
                /*
                 * RSN IBSS authentication is per-STA and we can disable the
                 * per-BSSID authentication.
                 */
                wpa_supplicant_cancel_auth_timeout(wpa_s);
#endif /* CONFIG_IBSS_RSN */
        } else {
                /* Timeout for IEEE 802.11 authentication and association */
                int timeout = 60;

                if (assoc_failed) {
                        /* give IBSS a bit more time */
                        timeout = ssid->mode == WPAS_MODE_IBSS ? 10 : 5;
                } else if (wpa_s->conf->ap_scan == 1) {
                        /* give IBSS a bit more time */
                        timeout = ssid->mode == WPAS_MODE_IBSS ? 20 : 10;
                }
                wpa_supplicant_req_auth_timeout(wpa_s, timeout, 0);
        }

        if (wep_keys_set && wpa_drv_get_capa(wpa_s, &capa) == 0 &&
            capa.flags & WPA_DRIVER_FLAGS_SET_KEYS_AFTER_ASSOC) {
                /* Set static WEP keys again */
                wpa_set_wep_keys(wpa_s, ssid);
        }

        if (wpa_s->current_ssid && wpa_s->current_ssid != ssid) {
                /*
                 * Do not allow EAP session resumption between different
                 * network configurations.
                 */
                eapol_sm_invalidate_cached_session(wpa_s->eapol);
        }
        old_ssid = wpa_s->current_ssid;
        wpa_s->current_ssid = ssid;
        wpa_s->current_bss = bss;
        wpa_supplicant_rsn_supp_set_config(wpa_s, wpa_s->current_ssid);
        wpa_supplicant_initiate_eapol(wpa_s);
        if (old_ssid != wpa_s->current_ssid)
                wpas_notify_network_changed(wpa_s);
}


void wpa_supplicant_disassociate(struct wpa_supplicant *wpa_s,
                                 int reason_code)
{
        struct wpa_ssid *old_ssid;
        u8 *addr = NULL;

        if (!is_zero_ether_addr(wpa_s->bssid)) {
                if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_USER_SPACE_MLME)
                        ieee80211_sta_disassociate(wpa_s, reason_code);
                else
                        wpa_drv_disassociate(wpa_s, wpa_s->bssid, reason_code);
                addr = wpa_s->bssid;
        }
        wpa_clear_keys(wpa_s, addr);
        wpa_supplicant_mark_disassoc(wpa_s);
        old_ssid = wpa_s->current_ssid;
        wpa_s->current_ssid = NULL;
        wpa_s->current_bss = NULL;
        wpa_sm_set_config(wpa_s->wpa, NULL);
        eapol_sm_notify_config(wpa_s->eapol, NULL, NULL);
        if (old_ssid != wpa_s->current_ssid)
                wpas_notify_network_changed(wpa_s);
}


void wpa_supplicant_deauthenticate(struct wpa_supplicant *wpa_s,
                                   int reason_code)
{
        struct wpa_ssid *old_ssid;
        u8 *addr = NULL;

        if (!is_zero_ether_addr(wpa_s->bssid)) {
                if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_USER_SPACE_MLME)
                        ieee80211_sta_deauthenticate(wpa_s, reason_code);
                else
                        wpa_drv_deauthenticate(wpa_s, wpa_s->bssid,
                                               reason_code);
                addr = wpa_s->bssid;
        }
        wpa_clear_keys(wpa_s, addr);
        wpa_supplicant_mark_disassoc(wpa_s);
        old_ssid = wpa_s->current_ssid;
        wpa_s->current_ssid = NULL;
        wpa_s->current_bss = NULL;
        wpa_sm_set_config(wpa_s->wpa, NULL);
        eapol_sm_notify_config(wpa_s->eapol, NULL, NULL);
        if (old_ssid != wpa_s->current_ssid)
                wpas_notify_network_changed(wpa_s);
}


void wpa_supplicant_enable_network(struct wpa_supplicant *wpa_s,
                                   struct wpa_ssid *ssid)
{
        struct wpa_ssid *other_ssid;
        int was_disabled;

        if (ssid == NULL) {
                other_ssid = wpa_s->conf->ssid;
                while (other_ssid) {
                        if (other_ssid == wpa_s->current_ssid &&
                            other_ssid->disabled)
                                wpa_s->reassociate = 1;

                        was_disabled = other_ssid->disabled;

                        other_ssid->disabled = 0;

                        if (was_disabled != other_ssid->disabled)
                                wpas_notify_network_enabled_changed(
                                        wpa_s, other_ssid);

                        other_ssid = other_ssid->next;
                }
                if (wpa_s->reassociate)
                        wpa_supplicant_req_scan(wpa_s, 0, 0);
        } else if (wpa_s->current_ssid == NULL && ssid->disabled) {
                /*
                 * Try to reassociate since there is no current configuration
                 * and a new network was made available.
                 */
                wpa_s->reassociate = 1;
                wpa_supplicant_req_scan(wpa_s, 0, 0);

                was_disabled = ssid->disabled;

                ssid->disabled = 0;

                if (was_disabled != ssid->disabled)
                        wpas_notify_network_enabled_changed(wpa_s, ssid);
        }
}


void wpa_supplicant_disable_network(struct wpa_supplicant *wpa_s,
                                    struct wpa_ssid *ssid)
{
        struct wpa_ssid *other_ssid;
        int was_disabled;

        if (ssid == NULL) {
                other_ssid = wpa_s->conf->ssid;
                while (other_ssid) {
                        was_disabled = other_ssid->disabled;

                        other_ssid->disabled = 1;

                        if (was_disabled != other_ssid->disabled)
                                wpas_notify_network_enabled_changed(
                                        wpa_s, other_ssid);

                        other_ssid = other_ssid->next;
                }
                if (wpa_s->current_ssid)
                        wpa_supplicant_disassociate(
                                wpa_s, WLAN_REASON_DEAUTH_LEAVING);
        } else {
                if (ssid == wpa_s->current_ssid)
                        wpa_supplicant_disassociate(
                                wpa_s, WLAN_REASON_DEAUTH_LEAVING);

                was_disabled = ssid->disabled;

                ssid->disabled = 1;

                if (was_disabled != ssid->disabled)
                        wpas_notify_network_enabled_changed(wpa_s, ssid);
        }
}


void wpa_supplicant_select_network(struct wpa_supplicant *wpa_s,
                                   struct wpa_ssid *ssid)
{

        struct wpa_ssid *other_ssid;

        if (ssid && ssid != wpa_s->current_ssid && wpa_s->current_ssid)
                wpa_supplicant_disassociate(
                        wpa_s, WLAN_REASON_DEAUTH_LEAVING);

        /*
         * Mark all other networks disabled or mark all networks enabled if no
         * network specified.
         */
        other_ssid = wpa_s->conf->ssid;
        while (other_ssid) {
                int was_disabled = other_ssid->disabled;

                other_ssid->disabled = ssid ? (ssid->id != other_ssid->id) : 0;

                if (was_disabled != other_ssid->disabled)
                        wpas_notify_network_enabled_changed(wpa_s, other_ssid);

                other_ssid = other_ssid->next;
        }
        wpa_s->disconnected = 0;
        wpa_s->reassociate = 1;
        wpa_supplicant_req_scan(wpa_s, 0, 0);

        if (ssid)
                wpas_notify_network_selected(wpa_s, ssid);
}


int wpa_supplicant_set_ap_scan(struct wpa_supplicant *wpa_s, int ap_scan)
{

        int old_ap_scan;

        if (ap_scan < 0 || ap_scan > 2)
                return -1;

        old_ap_scan = wpa_s->conf->ap_scan;
        wpa_s->conf->ap_scan = ap_scan;

        if (old_ap_scan != wpa_s->conf->ap_scan)
                wpas_notify_ap_scan_changed(wpa_s);

        return 0;
}


int wpa_supplicant_set_debug_params(struct wpa_global *global, int debug_level,
                                    int debug_timestamp, int debug_show_keys)
{

        int old_level, old_timestamp, old_show_keys;

        /* check for allowed debuglevels */
        if (debug_level != MSG_MSGDUMP &&
            debug_level != MSG_DEBUG &&
            debug_level != MSG_INFO &&
            debug_level != MSG_WARNING &&
            debug_level != MSG_ERROR)
                return -1;

        old_level = wpa_debug_level;
        old_timestamp = wpa_debug_timestamp;
        old_show_keys = wpa_debug_show_keys;

        wpa_debug_level = debug_level;
        wpa_debug_timestamp = debug_timestamp ? 1 : 0;
        wpa_debug_show_keys = debug_show_keys ? 1 : 0;

        if (wpa_debug_level != old_level)
                wpas_notify_debug_level_changed(global);
        if (wpa_debug_timestamp != old_timestamp)
                wpas_notify_debug_timestamp_changed(global);
        if (wpa_debug_show_keys != old_show_keys)
                wpas_notify_debug_show_keys_changed(global);

        return 0;
}


struct wpa_ssid * wpa_supplicant_get_ssid(struct wpa_supplicant *wpa_s)
{
        struct wpa_ssid *entry;
        u8 ssid[MAX_SSID_LEN];
        int res;
        size_t ssid_len;
        u8 bssid[ETH_ALEN];
        int wired;

        if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_USER_SPACE_MLME) {
                if (ieee80211_sta_get_ssid(wpa_s, ssid, &ssid_len)) {
                        wpa_printf(MSG_WARNING, "Could not read SSID from "
                                   "MLME.");
                        return NULL;
                }
        } else {
                res = wpa_drv_get_ssid(wpa_s, ssid);
                if (res < 0) {
                        wpa_printf(MSG_WARNING, "Could not read SSID from "
                                   "driver.");
                        return NULL;
                }
                ssid_len = res;
        }

        if (wpa_s->drv_flags & WPA_DRIVER_FLAGS_USER_SPACE_MLME)
                os_memcpy(bssid, wpa_s->bssid, ETH_ALEN);
        else if (wpa_drv_get_bssid(wpa_s, bssid) < 0) {
                wpa_printf(MSG_WARNING, "Could not read BSSID from driver.");
                return NULL;
        }

        wired = wpa_s->conf->ap_scan == 0 &&
                (wpa_s->drv_flags & WPA_DRIVER_FLAGS_WIRED);

        entry = wpa_s->conf->ssid;
        while (entry) {
                if (!entry->disabled &&
                    ((ssid_len == entry->ssid_len &&
                      os_memcmp(ssid, entry->ssid, ssid_len) == 0) || wired) &&
                    (!entry->bssid_set ||
                     os_memcmp(bssid, entry->bssid, ETH_ALEN) == 0))
                        return entry;
#ifdef CONFIG_WPS
                if (!entry->disabled &&
                    (entry->key_mgmt & WPA_KEY_MGMT_WPS) &&
                    (entry->ssid == NULL || entry->ssid_len == 0) &&
                    (!entry->bssid_set ||
                     os_memcmp(bssid, entry->bssid, ETH_ALEN) == 0))
                        return entry;
#endif /* CONFIG_WPS */
                entry = entry->next;
        }

        return NULL;
}


static int wpa_supplicant_set_driver(struct wpa_supplicant *wpa_s,
                                     const char *name)
{
        int i;
        size_t len;
        const char *pos;

        if (wpa_s == NULL)
                return -1;

        if (wpa_drivers[0] == NULL) {
                wpa_printf(MSG_ERROR, "No driver interfaces build into "
                           "wpa_supplicant.");
                return -1;
        }

        if (name == NULL) {
                /* default to first driver in the list */
                wpa_s->driver = wpa_drivers[0];
                wpa_s->global_drv_priv = wpa_s->global->drv_priv[0];
                return 0;
        }

        pos = os_strchr(name, ',');
        if (pos)
                len = pos - name;
        else
                len = os_strlen(name);
        for (i = 0; wpa_drivers[i]; i++) {
                if (os_strlen(wpa_drivers[i]->name) == len &&
                    os_strncmp(name, wpa_drivers[i]->name, len) ==
                    0) {
                        wpa_s->driver = wpa_drivers[i];
                        wpa_s->global_drv_priv = wpa_s->global->drv_priv[i];
                        return 0;
                }
        }

        wpa_printf(MSG_ERROR, "Unsupported driver '%s'.", name);
        return -1;
}


void wpa_supplicant_rx_eapol(void *ctx, const u8 *src_addr,
                             const u8 *buf, size_t len)
{
        struct wpa_supplicant *wpa_s = ctx;

        wpa_printf(MSG_DEBUG, "RX EAPOL from " MACSTR, MAC2STR(src_addr));
        wpa_hexdump(MSG_MSGDUMP, "RX EAPOL", buf, len);

        if (wpa_s->wpa_state < WPA_ASSOCIATED) {
                /*
                 * There is possible race condition between receiving the
                 * association event and the EAPOL frame since they are coming
                 * through different paths from the driver. In order to avoid
                 * issues in trying to process the EAPOL frame before receiving
                 * association information, lets queue it for processing until
                 * the association event is received.
                 */
                wpa_printf(MSG_DEBUG, "Not associated - Delay processing of "
                           "received EAPOL frame");
                wpabuf_free(wpa_s->pending_eapol_rx);
                wpa_s->pending_eapol_rx = wpabuf_alloc_copy(buf, len);
                if (wpa_s->pending_eapol_rx) {
                        os_get_time(&wpa_s->pending_eapol_rx_time);
                        os_memcpy(wpa_s->pending_eapol_rx_src, src_addr,
                                  ETH_ALEN);
                }
                return;
        }

#ifdef CONFIG_AP
        if (wpa_s->ap_iface) {
                wpa_supplicant_ap_rx_eapol(wpa_s, src_addr, buf, len);
                return;
        }
#endif /* CONFIG_AP */

        if (wpa_s->key_mgmt == WPA_KEY_MGMT_NONE) {
                wpa_printf(MSG_DEBUG, "Ignored received EAPOL frame since "
                           "no key management is configured");
                return;
        }

        if (wpa_s->eapol_received == 0 &&
            (!(wpa_s->drv_flags & WPA_DRIVER_FLAGS_4WAY_HANDSHAKE) ||
             !wpa_key_mgmt_wpa_psk(wpa_s->key_mgmt) ||
             wpa_s->wpa_state != WPA_COMPLETED) &&
            (wpa_s->current_ssid == NULL ||
             wpa_s->current_ssid->mode != IEEE80211_MODE_IBSS)) {
                /* Timeout for completing IEEE 802.1X and WPA authentication */
                wpa_supplicant_req_auth_timeout(
                        wpa_s,
                        (wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt) ||
                         wpa_s->key_mgmt == WPA_KEY_MGMT_IEEE8021X_NO_WPA ||
                         wpa_s->key_mgmt == WPA_KEY_MGMT_WPS) ?
                        70 : 10, 0);
        }
        wpa_s->eapol_received++;

        if (wpa_s->countermeasures) {
                wpa_printf(MSG_INFO, "WPA: Countermeasures - dropped EAPOL "
                           "packet");
                return;
        }

#ifdef CONFIG_IBSS_RSN
        if (wpa_s->current_ssid &&
            wpa_s->current_ssid->mode == WPAS_MODE_IBSS) {
                ibss_rsn_rx_eapol(wpa_s->ibss_rsn, src_addr, buf, len);
                return;
        }
#endif /* CONFIG_IBSS_RSN */

        /* Source address of the incoming EAPOL frame could be compared to the
         * current BSSID. However, it is possible that a centralized
         * Authenticator could be using another MAC address than the BSSID of
         * an AP, so just allow any address to be used for now. The replies are
         * still sent to the current BSSID (if available), though. */

        os_memcpy(wpa_s->last_eapol_src, src_addr, ETH_ALEN);
        if (!wpa_key_mgmt_wpa_psk(wpa_s->key_mgmt) &&
            eapol_sm_rx_eapol(wpa_s->eapol, src_addr, buf, len) > 0)
                return;
        wpa_drv_poll(wpa_s);
        if (!(wpa_s->drv_flags & WPA_DRIVER_FLAGS_4WAY_HANDSHAKE))
                wpa_sm_rx_eapol(wpa_s->wpa, src_addr, buf, len);
        else if (wpa_key_mgmt_wpa_ieee8021x(wpa_s->key_mgmt)) {
                /*
                 * Set portValid = TRUE here since we are going to skip 4-way
                 * handshake processing which would normally set portValid. We
                 * need this to allow the EAPOL state machines to be completed
                 * without going through EAPOL-Key handshake.
                 */
                eapol_sm_notify_portValid(wpa_s->eapol, TRUE);
        }
}


int wpa_supplicant_driver_init(struct wpa_supplicant *wpa_s)
{
        static int interface_count = 0;

        if (wpa_s->driver->send_eapol) {
                const u8 *addr = wpa_drv_get_mac_addr(wpa_s);
                if (addr)
                        os_memcpy(wpa_s->own_addr, addr, ETH_ALEN);
        } else {
                wpa_s->l2 = l2_packet_init(wpa_s->ifname,
                                           wpa_drv_get_mac_addr(wpa_s),
                                           ETH_P_EAPOL,
                                           wpa_supplicant_rx_eapol, wpa_s, 0);
                if (wpa_s->l2 == NULL)
                        return -1;
        }

        if (wpa_s->l2 && l2_packet_get_own_addr(wpa_s->l2, wpa_s->own_addr)) {
                wpa_printf(MSG_ERROR, "Failed to get own L2 address");
                return -1;
        }

        wpa_printf(MSG_DEBUG, "Own MAC address: " MACSTR,
                   MAC2STR(wpa_s->own_addr));

        if (wpa_s->bridge_ifname[0]) {
                wpa_printf(MSG_DEBUG, "Receiving packets from bridge interface"
                           " '%s'", wpa_s->bridge_ifname);
                wpa_s->l2_br = l2_packet_init(wpa_s->bridge_ifname,
                                              wpa_s->own_addr,
                                              ETH_P_EAPOL,
                                              wpa_supplicant_rx_eapol, wpa_s,
                                              0);
                if (wpa_s->l2_br == NULL) {
                        wpa_printf(MSG_ERROR, "Failed to open l2_packet "
                                   "connection for the bridge interface '%s'",
                                   wpa_s->bridge_ifname);
                        return -1;
                }
        }

        wpa_clear_keys(wpa_s, NULL);

        /* Make sure that TKIP countermeasures are not left enabled (could
         * happen if wpa_supplicant is killed during countermeasures. */
        wpa_drv_set_countermeasures(wpa_s, 0);

        wpa_printf(MSG_DEBUG, "RSN: flushing PMKID list in the driver");
        wpa_drv_flush_pmkid(wpa_s);

        wpa_s->prev_scan_ssid = WILDCARD_SSID_SCAN;
        if (wpa_supplicant_enabled_networks(wpa_s->conf)) {
                wpa_supplicant_req_scan(wpa_s, interface_count, 100000);
                interface_count++;
        } else
                wpa_supplicant_set_state(wpa_s, WPA_INACTIVE);

        return 0;
}


static int wpa_supplicant_daemon(const char *pid_file)
{
        wpa_printf(MSG_DEBUG, "Daemonize..");
        return os_daemonize(pid_file);
}


static struct wpa_supplicant * wpa_supplicant_alloc(void)
{
        struct wpa_supplicant *wpa_s;

        wpa_s = os_zalloc(sizeof(*wpa_s));
        if (wpa_s == NULL)
                return NULL;
        wpa_s->scan_req = 1;
        wpa_s->new_connection = 1;

        return wpa_s;
}


static int wpa_supplicant_init_iface(struct wpa_supplicant *wpa_s,
                                     struct wpa_interface *iface)
{
        const char *ifname, *driver;
        struct wpa_driver_capa capa;

        wpa_printf(MSG_DEBUG, "Initializing interface '%s' conf '%s' driver "
                   "'%s' ctrl_interface '%s' bridge '%s'", iface->ifname,
                   iface->confname ? iface->confname : "N/A",
                   iface->driver ? iface->driver : "default",
                   iface->ctrl_interface ? iface->ctrl_interface : "N/A",
                   iface->bridge_ifname ? iface->bridge_ifname : "N/A");

        if (iface->confname) {
#ifdef CONFIG_BACKEND_FILE
                wpa_s->confname = os_rel2abs_path(iface->confname);
                if (wpa_s->confname == NULL) {
                        wpa_printf(MSG_ERROR, "Failed to get absolute path "
                                   "for configuration file '%s'.",
                                   iface->confname);
                        return -1;
                }
                wpa_printf(MSG_DEBUG, "Configuration file '%s' -> '%s'",
                           iface->confname, wpa_s->confname);
#else /* CONFIG_BACKEND_FILE */
                wpa_s->confname = os_strdup(iface->confname);
#endif /* CONFIG_BACKEND_FILE */
                wpa_s->conf = wpa_config_read(wpa_s->confname);
                if (wpa_s->conf == NULL) {
                        wpa_printf(MSG_ERROR, "Failed to read or parse "
                                   "configuration '%s'.", wpa_s->confname);
                        return -1;
                }

                /*
                 * Override ctrl_interface and driver_param if set on command
                 * line.
                 */
                if (iface->ctrl_interface) {
                        os_free(wpa_s->conf->ctrl_interface);
                        wpa_s->conf->ctrl_interface =
                                os_strdup(iface->ctrl_interface);
                }

                if (iface->driver_param) {
                        os_free(wpa_s->conf->driver_param);
                        wpa_s->conf->driver_param =
                                os_strdup(iface->driver_param);
                }
        } else
                wpa_s->conf = wpa_config_alloc_empty(iface->ctrl_interface,
                                                     iface->driver_param);

        if (wpa_s->conf == NULL) {
                wpa_printf(MSG_ERROR, "\nNo configuration found.");
                return -1;
        }

        if (iface->ifname == NULL) {
                wpa_printf(MSG_ERROR, "\nInterface name is required.");
                return -1;
        }
        if (os_strlen(iface->ifname) >= sizeof(wpa_s->ifname)) {
                wpa_printf(MSG_ERROR, "\nToo long interface name '%s'.",
                           iface->ifname);
                return -1;
        }
        os_strlcpy(wpa_s->ifname, iface->ifname, sizeof(wpa_s->ifname));

        if (iface->bridge_ifname) {
                if (os_strlen(iface->bridge_ifname) >=
                    sizeof(wpa_s->bridge_ifname)) {
                        wpa_printf(MSG_ERROR, "\nToo long bridge interface "
                                   "name '%s'.", iface->bridge_ifname);
                        return -1;
                }
                os_strlcpy(wpa_s->bridge_ifname, iface->bridge_ifname,
                           sizeof(wpa_s->bridge_ifname));
        }

        /* RSNA Supplicant Key Management - INITIALIZE */
        eapol_sm_notify_portEnabled(wpa_s->eapol, FALSE);
        eapol_sm_notify_portValid(wpa_s->eapol, FALSE);

        /* Initialize driver interface and register driver event handler before
         * L2 receive handler so that association events are processed before
         * EAPOL-Key packets if both become available for the same select()
         * call. */
        driver = iface->driver;
next_driver:
        if (wpa_supplicant_set_driver(wpa_s, driver) < 0)
                return -1;

        wpa_s->drv_priv = wpa_drv_init(wpa_s, wpa_s->ifname);
        if (wpa_s->drv_priv == NULL) {
                const char *pos;
                pos = driver ? os_strchr(driver, ',') : NULL;
                if (pos) {
                        wpa_printf(MSG_DEBUG, "Failed to initialize driver "
                                   "interface - try next driver wrapper");
                        driver = pos + 1;
                        goto next_driver;
                }
                wpa_printf(MSG_ERROR, "Failed to initialize driver interface");
                return -1;
        }
        if (wpa_drv_set_param(wpa_s, wpa_s->conf->driver_param) < 0) {
                wpa_printf(MSG_ERROR, "Driver interface rejected "
                           "driver_param '%s'", wpa_s->conf->driver_param);
                return -1;
        }

        ifname = wpa_drv_get_ifname(wpa_s);
        if (ifname && os_strcmp(ifname, wpa_s->ifname) != 0) {
                wpa_printf(MSG_DEBUG, "Driver interface replaced interface "
                           "name with '%s'", ifname);
                os_strlcpy(wpa_s->ifname, ifname, sizeof(wpa_s->ifname));
        }

        if (wpa_supplicant_init_wpa(wpa_s) < 0)
                return -1;

        wpa_sm_set_ifname(wpa_s->wpa, wpa_s->ifname,
                          wpa_s->bridge_ifname[0] ? wpa_s->bridge_ifname :
                          NULL);
        wpa_sm_set_fast_reauth(wpa_s->wpa, wpa_s->conf->fast_reauth);

        if (wpa_s->conf->dot11RSNAConfigPMKLifetime &&
            wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_LIFETIME,
                             wpa_s->conf->dot11RSNAConfigPMKLifetime)) {
                wpa_printf(MSG_ERROR, "Invalid WPA parameter value for "
                           "dot11RSNAConfigPMKLifetime");
                return -1;
        }

        if (wpa_s->conf->dot11RSNAConfigPMKReauthThreshold &&
            wpa_sm_set_param(wpa_s->wpa, RSNA_PMK_REAUTH_THRESHOLD,
                             wpa_s->conf->dot11RSNAConfigPMKReauthThreshold)) {
                wpa_printf(MSG_ERROR, "Invalid WPA parameter value for "
                        "dot11RSNAConfigPMKReauthThreshold");
                return -1;
        }

        if (wpa_s->conf->dot11RSNAConfigSATimeout &&
            wpa_sm_set_param(wpa_s->wpa, RSNA_SA_TIMEOUT,
                             wpa_s->conf->dot11RSNAConfigSATimeout)) {
                wpa_printf(MSG_ERROR, "Invalid WPA parameter value for "
                           "dot11RSNAConfigSATimeout");
                return -1;
        }

        if (wpa_drv_get_capa(wpa_s, &capa) == 0) {
                wpa_s->drv_flags = capa.flags;
                if (capa.flags & WPA_DRIVER_FLAGS_USER_SPACE_MLME) {
                        if (ieee80211_sta_init(wpa_s))
                                return -1;
                }
                wpa_s->max_scan_ssids = capa.max_scan_ssids;
                wpa_s->max_remain_on_chan = capa.max_remain_on_chan;
        }
        if (wpa_s->max_remain_on_chan == 0)
                wpa_s->max_remain_on_chan = 1000;

        if (wpa_supplicant_driver_init(wpa_s) < 0)
                return -1;

        if (wpa_s->conf->country[0] && wpa_s->conf->country[1] &&
            wpa_drv_set_country(wpa_s, wpa_s->conf->country)) {
                wpa_printf(MSG_DEBUG, "Failed to set country");
                return -1;
        }

        wpa_sm_set_own_addr(wpa_s->wpa, wpa_s->own_addr);

        if (wpas_wps_init(wpa_s))
                return -1;

        if (wpa_supplicant_init_eapol(wpa_s) < 0)
                return -1;
        wpa_sm_set_eapol(wpa_s->wpa, wpa_s->eapol);

        wpa_s->ctrl_iface = wpa_supplicant_ctrl_iface_init(wpa_s);
        if (wpa_s->ctrl_iface == NULL) {
                wpa_printf(MSG_ERROR,
                           "Failed to initialize control interface '%s'.\n"
                           "You may have another wpa_supplicant process "
                           "already running or the file was\n"
                           "left by an unclean termination of wpa_supplicant "
                           "in which case you will need\n"
                           "to manually remove this file before starting "
                           "wpa_supplicant again.\n",
                           wpa_s->conf->ctrl_interface);
                return -1;
        }

#ifdef CONFIG_IBSS_RSN
        wpa_s->ibss_rsn = ibss_rsn_init(wpa_s);
        if (!wpa_s->ibss_rsn) {
                wpa_printf(MSG_DEBUG, "Failed to init IBSS RSN");
                return -1;
        }
#endif /* CONFIG_IBSS_RSN */

        if (wpa_bss_init(wpa_s) < 0)
                return -1;

        return 0;
}


static void wpa_supplicant_deinit_iface(struct wpa_supplicant *wpa_s,
                                        int notify)
{
        if (wpa_s->drv_priv) {
                wpa_supplicant_deauthenticate(wpa_s,
                                              WLAN_REASON_DEAUTH_LEAVING);

                wpa_drv_set_countermeasures(wpa_s, 0);
                wpa_clear_keys(wpa_s, NULL);
        }

        wpa_supplicant_cleanup(wpa_s);

        if (notify)
                wpas_notify_iface_removed(wpa_s);

        if (wpa_s->drv_priv)
                wpa_drv_deinit(wpa_s);
}


struct wpa_supplicant * wpa_supplicant_add_iface(struct wpa_global *global,
                                                 struct wpa_interface *iface)
{
        struct wpa_supplicant *wpa_s;
        struct wpa_interface t_iface;
        struct wpa_ssid *ssid;

        if (global == NULL || iface == NULL)
                return NULL;

        wpa_s = wpa_supplicant_alloc();
        if (wpa_s == NULL)
                return NULL;

        wpa_s->global = global;

        t_iface = *iface;
        if (global->params.override_driver) {
                wpa_printf(MSG_DEBUG, "Override interface parameter: driver "
                           "('%s' -> '%s')",
                           iface->driver, global->params.override_driver);
                t_iface.driver = global->params.override_driver;
        }
        if (global->params.override_ctrl_interface) {
                wpa_printf(MSG_DEBUG, "Override interface parameter: "
                           "ctrl_interface ('%s' -> '%s')",
                           iface->ctrl_interface,
                           global->params.override_ctrl_interface);
                t_iface.ctrl_interface =
                        global->params.override_ctrl_interface;
        }
        if (wpa_supplicant_init_iface(wpa_s, &t_iface)) {
                wpa_printf(MSG_DEBUG, "Failed to add interface %s",
                           iface->ifname);
                wpa_supplicant_deinit_iface(wpa_s, 0);
                os_free(wpa_s);
                return NULL;
        }

        /* Notify the control interfaces about new iface */
        if (wpas_notify_iface_added(wpa_s)) {
                wpa_supplicant_deinit_iface(wpa_s, 1);
                os_free(wpa_s);
                return NULL;
        }

        for (ssid = wpa_s->conf->ssid; ssid; ssid = ssid->next)
                wpas_notify_network_added(wpa_s, ssid);

        wpa_s->next = global->ifaces;
        global->ifaces = wpa_s;

        wpa_printf(MSG_DEBUG, "Added interface %s", wpa_s->ifname);

        return wpa_s;
}


int wpa_supplicant_remove_iface(struct wpa_global *global,
                                struct wpa_supplicant *wpa_s)
{
        struct wpa_supplicant *prev;

        /* Remove interface from the global list of interfaces */
        prev = global->ifaces;
        if (prev == wpa_s) {
                global->ifaces = wpa_s->next;
        } else {
                while (prev && prev->next != wpa_s)
                        prev = prev->next;
                if (prev == NULL)
                        return -1;
                prev->next = wpa_s->next;
        }

        wpa_printf(MSG_DEBUG, "Removing interface %s", wpa_s->ifname);

        wpa_supplicant_deinit_iface(wpa_s, 1);
        os_free(wpa_s);

        return 0;
}


struct wpa_supplicant * wpa_supplicant_get_iface(struct wpa_global *global,
                                                 const char *ifname)
{
        struct wpa_supplicant *wpa_s;

        for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next) {
                if (os_strcmp(wpa_s->ifname, ifname) == 0)
                        return wpa_s;
        }
        return NULL;
}


struct wpa_global * wpa_supplicant_init(struct wpa_params *params)
{
        struct wpa_global *global;
        int ret, i;

        if (params == NULL)
                return NULL;

        wpa_debug_open_file(params->wpa_debug_file_path);
        if (params->wpa_debug_syslog)
                wpa_debug_open_syslog();

        ret = eap_register_methods();
        if (ret) {
                wpa_printf(MSG_ERROR, "Failed to register EAP methods");
                if (ret == -2)
                        wpa_printf(MSG_ERROR, "Two or more EAP methods used "
                                   "the same EAP type.");
                return NULL;
        }

        global = os_zalloc(sizeof(*global));
        if (global == NULL)
                return NULL;
        global->params.daemonize = params->daemonize;
        global->params.wait_for_monitor = params->wait_for_monitor;
        global->params.dbus_ctrl_interface = params->dbus_ctrl_interface;
        if (params->pid_file)
                global->params.pid_file = os_strdup(params->pid_file);
        if (params->ctrl_interface)
                global->params.ctrl_interface =
                        os_strdup(params->ctrl_interface);
        if (params->override_driver)
                global->params.override_driver =
                        os_strdup(params->override_driver);
        if (params->override_ctrl_interface)
                global->params.override_ctrl_interface =
                        os_strdup(params->override_ctrl_interface);
        wpa_debug_level = global->params.wpa_debug_level =
                params->wpa_debug_level;
        wpa_debug_show_keys = global->params.wpa_debug_show_keys =
                params->wpa_debug_show_keys;
        wpa_debug_timestamp = global->params.wpa_debug_timestamp =
                params->wpa_debug_timestamp;

        if (eloop_init()) {
                wpa_printf(MSG_ERROR, "Failed to initialize event loop");
                wpa_supplicant_deinit(global);
                return NULL;
        }

        global->ctrl_iface = wpa_supplicant_global_ctrl_iface_init(global);
        if (global->ctrl_iface == NULL) {
                wpa_supplicant_deinit(global);
                return NULL;
        }

        if (wpas_notify_supplicant_initialized(global)) {
                wpa_supplicant_deinit(global);
                return NULL;
        }

        for (i = 0; wpa_drivers[i]; i++)
                global->drv_count++;
        if (global->drv_count == 0) {
                wpa_printf(MSG_ERROR, "No drivers enabled");
                wpa_supplicant_deinit(global);
                return NULL;
        }
        global->drv_priv = os_zalloc(global->drv_count * sizeof(void *));
        if (global->drv_priv == NULL) {
                wpa_supplicant_deinit(global);
                return NULL;
        }
        for (i = 0; wpa_drivers[i]; i++) {
                if (!wpa_drivers[i]->global_init)
                        continue;
                global->drv_priv[i] = wpa_drivers[i]->global_init();
                if (global->drv_priv[i] == NULL) {
                        wpa_printf(MSG_ERROR, "Failed to initialize driver "
                                   "'%s'", wpa_drivers[i]->name);
                        wpa_supplicant_deinit(global);
                        return NULL;
                }
        }

        return global;
}


int wpa_supplicant_run(struct wpa_global *global)
{
        struct wpa_supplicant *wpa_s;

        if (global->params.daemonize &&
            wpa_supplicant_daemon(global->params.pid_file))
                return -1;

        if (global->params.wait_for_monitor) {
                for (wpa_s = global->ifaces; wpa_s; wpa_s = wpa_s->next)
                        if (wpa_s->ctrl_iface)
                                wpa_supplicant_ctrl_iface_wait(
                                        wpa_s->ctrl_iface);
        }

        eloop_register_signal_terminate(wpa_supplicant_terminate, global);
        eloop_register_signal_reconfig(wpa_supplicant_reconfig, global);

        eloop_run();

        return 0;
}


void wpa_supplicant_deinit(struct wpa_global *global)
{
        int i;

        if (global == NULL)
                return;

        while (global->ifaces)
                wpa_supplicant_remove_iface(global, global->ifaces);

        if (global->ctrl_iface)
                wpa_supplicant_global_ctrl_iface_deinit(global->ctrl_iface);

        wpas_notify_supplicant_deinitialized(global);

        eap_peer_unregister_methods();
#ifdef CONFIG_AP
        eap_server_unregister_methods();
#endif /* CONFIG_AP */

        for (i = 0; wpa_drivers[i] && global->drv_priv; i++) {
                if (!global->drv_priv[i])
                        continue;
                wpa_drivers[i]->global_deinit(global->drv_priv[i]);
        }
        os_free(global->drv_priv);

        eloop_destroy();

        if (global->params.pid_file) {
                os_daemonize_terminate(global->params.pid_file);
                os_free(global->params.pid_file);
        }
        os_free(global->params.ctrl_interface);
        os_free(global->params.override_driver);
        os_free(global->params.override_ctrl_interface);

        os_free(global);
        wpa_debug_close_syslog();
        wpa_debug_close_file();
}

---

wpa_supplicant
Author(s): Package maintained by Blaise Gassend
autogenerated on Fri Jan 11 10:04:05 2013