1/*
2 * WPA Supplicant / Configuration backend: Windows registry
3 * Copyright (c) 2003-2008, Jouni Malinen <j@w1.fi>
4 *
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
8 *
9 * Alternatively, this software may be distributed under the terms of BSD
10 * license.
11 *
12 * See README and COPYING for more details.
13 *
14 * This file implements a configuration backend for Windows registry. All the
15 * configuration information is stored in the registry and the format for
16 * network configuration fields is same as described in the sample
17 * configuration file, wpa_supplicant.conf.
18 *
19 * Configuration data is in
20 * \a HKEY_LOCAL_MACHINE\\SOFTWARE\\%wpa_supplicant\\configs
21 * key. Each configuration profile has its own key under this. In terms of text
22 * files, each profile would map to a separate text file with possibly multiple
23 * networks. Under each profile, there is a networks key that lists all
24 * networks as a subkey. Each network has set of values in the same way as
25 * network block in the configuration file. In addition, blobs subkey has
26 * possible blobs as values.
27 *
28 * Example network configuration block:
29 * \verbatim
30HKEY_LOCAL_MACHINE\SOFTWARE\wpa_supplicant\configs\test\networks\0000
31   ssid="example"
32   key_mgmt=WPA-PSK
33\endverbatim
34 */
35
36#include "includes.h"
37
38#include "common.h"
39#include "uuid.h"
40#include "config.h"
41
42#ifndef WPA_KEY_ROOT
43#define WPA_KEY_ROOT HKEY_LOCAL_MACHINE
44#endif
45#ifndef WPA_KEY_PREFIX
46#define WPA_KEY_PREFIX TEXT("SOFTWARE\\wpa_supplicant")
47#endif
48
49#ifdef UNICODE
50#define TSTR "%S"
51#else /* UNICODE */
52#define TSTR "%s"
53#endif /* UNICODE */
54
55
56static int wpa_config_read_blobs(struct wpa_config *config, HKEY hk)
57{
58	struct wpa_config_blob *blob;
59	int errors = 0;
60	HKEY bhk;
61	LONG ret;
62	DWORD i;
63
64	ret = RegOpenKeyEx(hk, TEXT("blobs"), 0, KEY_QUERY_VALUE, &bhk);
65	if (ret != ERROR_SUCCESS) {
66		wpa_printf(MSG_DEBUG, "Could not open wpa_supplicant config "
67			   "blobs key");
68		return 0; /* assume no blobs */
69	}
70
71	for (i = 0; ; i++) {
72#define TNAMELEN 255
73		TCHAR name[TNAMELEN];
74		char data[4096];
75		DWORD namelen, datalen, type;
76
77		namelen = TNAMELEN;
78		datalen = sizeof(data);
79		ret = RegEnumValue(bhk, i, name, &namelen, NULL, &type,
80				   (LPBYTE) data, &datalen);
81
82		if (ret == ERROR_NO_MORE_ITEMS)
83			break;
84
85		if (ret != ERROR_SUCCESS) {
86			wpa_printf(MSG_DEBUG, "RegEnumValue failed: 0x%x",
87				   (unsigned int) ret);
88			break;
89		}
90
91		if (namelen >= TNAMELEN)
92			namelen = TNAMELEN - 1;
93		name[namelen] = TEXT('\0');
94		wpa_unicode2ascii_inplace(name);
95
96		if (datalen >= sizeof(data))
97			datalen = sizeof(data) - 1;
98
99		wpa_printf(MSG_MSGDUMP, "blob %d: field='%s' len %d",
100			   (int) i, name, (int) datalen);
101
102		blob = os_zalloc(sizeof(*blob));
103		if (blob == NULL) {
104			errors++;
105			break;
106		}
107		blob->name = os_strdup((char *) name);
108		blob->data = os_malloc(datalen);
109		if (blob->name == NULL || blob->data == NULL) {
110			wpa_config_free_blob(blob);
111			errors++;
112			break;
113		}
114		os_memcpy(blob->data, data, datalen);
115		blob->len = datalen;
116
117		wpa_config_set_blob(config, blob);
118	}
119
120	RegCloseKey(bhk);
121
122	return errors ? -1 : 0;
123}
124
125
126static int wpa_config_read_reg_dword(HKEY hk, const TCHAR *name, int *_val)
127{
128	DWORD val, buflen;
129	LONG ret;
130
131	buflen = sizeof(val);
132	ret = RegQueryValueEx(hk, name, NULL, NULL, (LPBYTE) &val, &buflen);
133	if (ret == ERROR_SUCCESS && buflen == sizeof(val)) {
134		wpa_printf(MSG_DEBUG, TSTR "=%d", name, (int) val);
135		*_val = val;
136		return 0;
137	}
138
139	return -1;
140}
141
142
143static char * wpa_config_read_reg_string(HKEY hk, const TCHAR *name)
144{
145	DWORD buflen;
146	LONG ret;
147	TCHAR *val;
148
149	buflen = 0;
150	ret = RegQueryValueEx(hk, name, NULL, NULL, NULL, &buflen);
151	if (ret != ERROR_SUCCESS)
152		return NULL;
153	val = os_malloc(buflen);
154	if (val == NULL)
155		return NULL;
156
157	ret = RegQueryValueEx(hk, name, NULL, NULL, (LPBYTE) val, &buflen);
158	if (ret != ERROR_SUCCESS) {
159		os_free(val);
160		return NULL;
161	}
162
163	wpa_unicode2ascii_inplace(val);
164	wpa_printf(MSG_DEBUG, TSTR "=%s", name, (char *) val);
165	return (char *) val;
166}
167
168
169#ifdef CONFIG_WPS
170static int wpa_config_read_global_uuid(struct wpa_config *config, HKEY hk)
171{
172	char *str;
173	int ret = 0;
174
175	str = wpa_config_read_reg_string(hk, TEXT("uuid"));
176	if (str == NULL)
177		return 0;
178
179	if (uuid_str2bin(str, config->uuid))
180		ret = -1;
181
182	os_free(str);
183
184	return ret;
185}
186
187
188static int wpa_config_read_global_os_version(struct wpa_config *config,
189					     HKEY hk)
190{
191	char *str;
192	int ret = 0;
193
194	str = wpa_config_read_reg_string(hk, TEXT("os_version"));
195	if (str == NULL)
196		return 0;
197
198	if (hexstr2bin(str, config->os_version, 4))
199		ret = -1;
200
201	os_free(str);
202
203	return ret;
204}
205#endif /* CONFIG_WPS */
206
207
208static int wpa_config_read_global(struct wpa_config *config, HKEY hk)
209{
210	int errors = 0;
211
212	wpa_config_read_reg_dword(hk, TEXT("ap_scan"), &config->ap_scan);
213	wpa_config_read_reg_dword(hk, TEXT("fast_reauth"),
214				  &config->fast_reauth);
215	wpa_config_read_reg_dword(hk, TEXT("dot11RSNAConfigPMKLifetime"),
216				  (int *) &config->dot11RSNAConfigPMKLifetime);
217	wpa_config_read_reg_dword(hk,
218				  TEXT("dot11RSNAConfigPMKReauthThreshold"),
219				  (int *)
220				  &config->dot11RSNAConfigPMKReauthThreshold);
221	wpa_config_read_reg_dword(hk, TEXT("dot11RSNAConfigSATimeout"),
222				  (int *) &config->dot11RSNAConfigSATimeout);
223	wpa_config_read_reg_dword(hk, TEXT("update_config"),
224				  &config->update_config);
225
226	if (wpa_config_read_reg_dword(hk, TEXT("eapol_version"),
227				      &config->eapol_version) == 0) {
228		if (config->eapol_version < 1 ||
229		    config->eapol_version > 2) {
230			wpa_printf(MSG_ERROR, "Invalid EAPOL version (%d)",
231				   config->eapol_version);
232			errors++;
233		}
234	}
235
236	config->ctrl_interface = wpa_config_read_reg_string(
237		hk, TEXT("ctrl_interface"));
238
239#ifdef CONFIG_WPS
240	if (wpa_config_read_global_uuid(config, hk))
241		errors++;
242	config->device_name = wpa_config_read_reg_string(
243		hk, TEXT("device_name"));
244	config->manufacturer = wpa_config_read_reg_string(
245		hk, TEXT("manufacturer"));
246	config->model_name = wpa_config_read_reg_string(
247		hk, TEXT("model_name"));
248	config->serial_number = wpa_config_read_reg_string(
249		hk, TEXT("serial_number"));
250	config->device_type = wpa_config_read_reg_string(
251		hk, TEXT("device_type"));
252	if (wpa_config_read_global_os_version(config, hk))
253		errors++;
254	wpa_config_read_reg_dword(hk, TEXT("wps_cred_processing"),
255				  &config->wps_cred_processing);
256#endif /* CONFIG_WPS */
257
258	return errors ? -1 : 0;
259}
260
261
262static struct wpa_ssid * wpa_config_read_network(HKEY hk, const TCHAR *netw,
263						 int id)
264{
265	HKEY nhk;
266	LONG ret;
267	DWORD i;
268	struct wpa_ssid *ssid;
269	int errors = 0;
270
271	ret = RegOpenKeyEx(hk, netw, 0, KEY_QUERY_VALUE, &nhk);
272	if (ret != ERROR_SUCCESS) {
273		wpa_printf(MSG_DEBUG, "Could not open wpa_supplicant config "
274			   "network '" TSTR "'", netw);
275		return NULL;
276	}
277
278	wpa_printf(MSG_MSGDUMP, "Start of a new network '" TSTR "'", netw);
279	ssid = os_zalloc(sizeof(*ssid));
280	if (ssid == NULL) {
281		RegCloseKey(nhk);
282		return NULL;
283	}
284	ssid->id = id;
285
286	wpa_config_set_network_defaults(ssid);
287
288	for (i = 0; ; i++) {
289		TCHAR name[255], data[1024];
290		DWORD namelen, datalen, type;
291
292		namelen = 255;
293		datalen = sizeof(data);
294		ret = RegEnumValue(nhk, i, name, &namelen, NULL, &type,
295				   (LPBYTE) data, &datalen);
296
297		if (ret == ERROR_NO_MORE_ITEMS)
298			break;
299
300		if (ret != ERROR_SUCCESS) {
301			wpa_printf(MSG_ERROR, "RegEnumValue failed: 0x%x",
302				   (unsigned int) ret);
303			break;
304		}
305
306		if (namelen >= 255)
307			namelen = 255 - 1;
308		name[namelen] = TEXT('\0');
309
310		if (datalen >= 1024)
311			datalen = 1024 - 1;
312		data[datalen] = TEXT('\0');
313
314		wpa_unicode2ascii_inplace(name);
315		wpa_unicode2ascii_inplace(data);
316		if (wpa_config_set(ssid, (char *) name, (char *) data, 0) < 0)
317			errors++;
318	}
319
320	RegCloseKey(nhk);
321
322	if (ssid->passphrase) {
323		if (ssid->psk_set) {
324			wpa_printf(MSG_ERROR, "Both PSK and passphrase "
325				   "configured for network '" TSTR "'.", netw);
326			errors++;
327		}
328		wpa_config_update_psk(ssid);
329	}
330
331	if ((ssid->key_mgmt & (WPA_KEY_MGMT_PSK | WPA_KEY_MGMT_FT_PSK |
332			       WPA_KEY_MGMT_PSK_SHA256)) &&
333	    !ssid->psk_set) {
334		wpa_printf(MSG_ERROR, "WPA-PSK accepted for key management, "
335			   "but no PSK configured for network '" TSTR "'.",
336			   netw);
337		errors++;
338	}
339
340	if ((ssid->group_cipher & WPA_CIPHER_CCMP) &&
341	    !(ssid->pairwise_cipher & WPA_CIPHER_CCMP) &&
342	    !(ssid->pairwise_cipher & WPA_CIPHER_NONE)) {
343		/* Group cipher cannot be stronger than the pairwise cipher. */
344		wpa_printf(MSG_DEBUG, "Removed CCMP from group cipher "
345			   "list since it was not allowed for pairwise "
346			   "cipher for network '" TSTR "'.", netw);
347		ssid->group_cipher &= ~WPA_CIPHER_CCMP;
348	}
349
350	if (errors) {
351		wpa_config_free_ssid(ssid);
352		ssid = NULL;
353	}
354
355	return ssid;
356}
357
358
359static int wpa_config_read_networks(struct wpa_config *config, HKEY hk)
360{
361	HKEY nhk;
362	struct wpa_ssid *ssid, *tail = NULL, *head = NULL;
363	int errors = 0;
364	LONG ret;
365	DWORD i;
366
367	ret = RegOpenKeyEx(hk, TEXT("networks"), 0, KEY_ENUMERATE_SUB_KEYS,
368			   &nhk);
369	if (ret != ERROR_SUCCESS) {
370		wpa_printf(MSG_ERROR, "Could not open wpa_supplicant networks "
371			   "registry key");
372		return -1;
373	}
374
375	for (i = 0; ; i++) {
376		TCHAR name[255];
377		DWORD namelen;
378
379		namelen = 255;
380		ret = RegEnumKeyEx(nhk, i, name, &namelen, NULL, NULL, NULL,
381				   NULL);
382
383		if (ret == ERROR_NO_MORE_ITEMS)
384			break;
385
386		if (ret != ERROR_SUCCESS) {
387			wpa_printf(MSG_DEBUG, "RegEnumKeyEx failed: 0x%x",
388				   (unsigned int) ret);
389			break;
390		}
391
392		if (namelen >= 255)
393			namelen = 255 - 1;
394		name[namelen] = '\0';
395
396		ssid = wpa_config_read_network(nhk, name, i);
397		if (ssid == NULL) {
398			wpa_printf(MSG_ERROR, "Failed to parse network "
399				   "profile '%s'.", name);
400			errors++;
401			continue;
402		}
403		if (head == NULL) {
404			head = tail = ssid;
405		} else {
406			tail->next = ssid;
407			tail = ssid;
408		}
409		if (wpa_config_add_prio_network(config, ssid)) {
410			wpa_printf(MSG_ERROR, "Failed to add network profile "
411				   "'%s' to priority list.", name);
412			errors++;
413			continue;
414		}
415	}
416
417	RegCloseKey(nhk);
418
419	config->ssid = head;
420
421	return errors ? -1 : 0;
422}
423
424
425struct wpa_config * wpa_config_read(const char *name)
426{
427	TCHAR buf[256];
428	int errors = 0;
429	struct wpa_config *config;
430	HKEY hk;
431	LONG ret;
432
433	config = wpa_config_alloc_empty(NULL, NULL);
434	if (config == NULL)
435		return NULL;
436	wpa_printf(MSG_DEBUG, "Reading configuration profile '%s'", name);
437
438#ifdef UNICODE
439	_snwprintf(buf, 256, WPA_KEY_PREFIX TEXT("\\configs\\%S"), name);
440#else /* UNICODE */
441	os_snprintf(buf, 256, WPA_KEY_PREFIX TEXT("\\configs\\%s"), name);
442#endif /* UNICODE */
443
444	ret = RegOpenKeyEx(WPA_KEY_ROOT, buf, 0, KEY_QUERY_VALUE, &hk);
445	if (ret != ERROR_SUCCESS) {
446		wpa_printf(MSG_ERROR, "Could not open wpa_supplicant "
447			   "configuration registry HKLM\\" TSTR, buf);
448		os_free(config);
449		return NULL;
450	}
451
452	if (wpa_config_read_global(config, hk))
453		errors++;
454
455	if (wpa_config_read_networks(config, hk))
456		errors++;
457
458	if (wpa_config_read_blobs(config, hk))
459		errors++;
460
461	wpa_config_debug_dump_networks(config);
462
463	RegCloseKey(hk);
464
465	if (errors) {
466		wpa_config_free(config);
467		config = NULL;
468	}
469
470	return config;
471}
472
473
474static int wpa_config_write_reg_dword(HKEY hk, const TCHAR *name, int val,
475				      int def)
476{
477	LONG ret;
478	DWORD _val = val;
479
480	if (val == def) {
481		RegDeleteValue(hk, name);
482		return 0;
483	}
484
485	ret = RegSetValueEx(hk, name, 0, REG_DWORD, (LPBYTE) &_val,
486			    sizeof(_val));
487	if (ret != ERROR_SUCCESS) {
488		wpa_printf(MSG_ERROR, "WINREG: Failed to set %s=%d: error %d",
489			   name, val, (int) GetLastError());
490		return -1;
491	}
492
493	return 0;
494}
495
496
497static int wpa_config_write_reg_string(HKEY hk, const char *name,
498				       const char *val)
499{
500	LONG ret;
501	TCHAR *_name, *_val;
502
503	_name = wpa_strdup_tchar(name);
504	if (_name == NULL)
505		return -1;
506
507	if (val == NULL) {
508		RegDeleteValue(hk, _name);
509		os_free(_name);
510		return 0;
511	}
512
513	_val = wpa_strdup_tchar(val);
514	if (_val == NULL) {
515		os_free(_name);
516		return -1;
517	}
518	ret = RegSetValueEx(hk, _name, 0, REG_SZ, (BYTE *) _val,
519			    (os_strlen(val) + 1) * sizeof(TCHAR));
520	if (ret != ERROR_SUCCESS) {
521		wpa_printf(MSG_ERROR, "WINREG: Failed to set %s='%s': "
522			   "error %d", name, val, (int) GetLastError());
523		os_free(_name);
524		os_free(_val);
525		return -1;
526	}
527
528	os_free(_name);
529	os_free(_val);
530	return 0;
531}
532
533
534static int wpa_config_write_global(struct wpa_config *config, HKEY hk)
535{
536#ifdef CONFIG_CTRL_IFACE
537	wpa_config_write_reg_string(hk, "ctrl_interface",
538				    config->ctrl_interface);
539#endif /* CONFIG_CTRL_IFACE */
540
541	wpa_config_write_reg_dword(hk, TEXT("eapol_version"),
542				   config->eapol_version,
543				   DEFAULT_EAPOL_VERSION);
544	wpa_config_write_reg_dword(hk, TEXT("ap_scan"), config->ap_scan,
545				   DEFAULT_AP_SCAN);
546	wpa_config_write_reg_dword(hk, TEXT("fast_reauth"),
547				   config->fast_reauth, DEFAULT_FAST_REAUTH);
548	wpa_config_write_reg_dword(hk, TEXT("dot11RSNAConfigPMKLifetime"),
549				   config->dot11RSNAConfigPMKLifetime, 0);
550	wpa_config_write_reg_dword(hk,
551				   TEXT("dot11RSNAConfigPMKReauthThreshold"),
552				   config->dot11RSNAConfigPMKReauthThreshold,
553				   0);
554	wpa_config_write_reg_dword(hk, TEXT("dot11RSNAConfigSATimeout"),
555				   config->dot11RSNAConfigSATimeout, 0);
556	wpa_config_write_reg_dword(hk, TEXT("update_config"),
557				   config->update_config,
558				   0);
559#ifdef CONFIG_WPS
560	if (!is_nil_uuid(config->uuid)) {
561		char buf[40];
562		uuid_bin2str(config->uuid, buf, sizeof(buf));
563		wpa_config_write_reg_string(hk, "uuid", buf);
564	}
565	wpa_config_write_reg_string(hk, "device_name", config->device_name);
566	wpa_config_write_reg_string(hk, "manufacturer", config->manufacturer);
567	wpa_config_write_reg_string(hk, "model_name", config->model_name);
568	wpa_config_write_reg_string(hk, "model_number", config->model_number);
569	wpa_config_write_reg_string(hk, "serial_number",
570				    config->serial_number);
571	wpa_config_write_reg_string(hk, "device_type", config->device_type);
572	if (WPA_GET_BE32(config->os_version)) {
573		char vbuf[10];
574		os_snprintf(vbuf, sizeof(vbuf), "%08x",
575			    WPA_GET_BE32(config->os_version));
576		wpa_config_write_reg_string(hk, "os_version", vbuf);
577	}
578	wpa_config_write_reg_dword(hk, TEXT("wps_cred_processing"),
579				   config->wps_cred_processing, 0);
580#endif /* CONFIG_WPS */
581
582	return 0;
583}
584
585
586static int wpa_config_delete_subkeys(HKEY hk, const TCHAR *key)
587{
588	HKEY nhk;
589	int i, errors = 0;
590	LONG ret;
591
592	ret = RegOpenKeyEx(hk, key, 0, KEY_ENUMERATE_SUB_KEYS | DELETE, &nhk);
593	if (ret != ERROR_SUCCESS) {
594		wpa_printf(MSG_DEBUG, "WINREG: Could not open key '" TSTR
595			   "' for subkey deletion: error 0x%x (%d)", key,
596			   (unsigned int) ret, (int) GetLastError());
597		return 0;
598	}
599
600	for (i = 0; ; i++) {
601		TCHAR name[255];
602		DWORD namelen;
603
604		namelen = 255;
605		ret = RegEnumKeyEx(nhk, i, name, &namelen, NULL, NULL, NULL,
606				   NULL);
607
608		if (ret == ERROR_NO_MORE_ITEMS)
609			break;
610
611		if (ret != ERROR_SUCCESS) {
612			wpa_printf(MSG_DEBUG, "RegEnumKeyEx failed: 0x%x (%d)",
613				   (unsigned int) ret, (int) GetLastError());
614			break;
615		}
616
617		if (namelen >= 255)
618			namelen = 255 - 1;
619		name[namelen] = TEXT('\0');
620
621		ret = RegDeleteKey(nhk, name);
622		if (ret != ERROR_SUCCESS) {
623			wpa_printf(MSG_DEBUG, "RegDeleteKey failed: 0x%x (%d)",
624				   (unsigned int) ret, (int) GetLastError());
625			errors++;
626		}
627	}
628
629	RegCloseKey(nhk);
630
631	return errors ? -1 : 0;
632}
633
634
635static void write_str(HKEY hk, const char *field, struct wpa_ssid *ssid)
636{
637	char *value = wpa_config_get(ssid, field);
638	if (value == NULL)
639		return;
640	wpa_config_write_reg_string(hk, field, value);
641	os_free(value);
642}
643
644
645static void write_int(HKEY hk, const char *field, int value, int def)
646{
647	char val[20];
648	if (value == def)
649		return;
650	os_snprintf(val, sizeof(val), "%d", value);
651	wpa_config_write_reg_string(hk, field, val);
652}
653
654
655static void write_bssid(HKEY hk, struct wpa_ssid *ssid)
656{
657	char *value = wpa_config_get(ssid, "bssid");
658	if (value == NULL)
659		return;
660	wpa_config_write_reg_string(hk, "bssid", value);
661	os_free(value);
662}
663
664
665static void write_psk(HKEY hk, struct wpa_ssid *ssid)
666{
667	char *value = wpa_config_get(ssid, "psk");
668	if (value == NULL)
669		return;
670	wpa_config_write_reg_string(hk, "psk", value);
671	os_free(value);
672}
673
674
675static void write_proto(HKEY hk, struct wpa_ssid *ssid)
676{
677	char *value;
678
679	if (ssid->proto == DEFAULT_PROTO)
680		return;
681
682	value = wpa_config_get(ssid, "proto");
683	if (value == NULL)
684		return;
685	if (value[0])
686		wpa_config_write_reg_string(hk, "proto", value);
687	os_free(value);
688}
689
690
691static void write_key_mgmt(HKEY hk, struct wpa_ssid *ssid)
692{
693	char *value;
694
695	if (ssid->key_mgmt == DEFAULT_KEY_MGMT)
696		return;
697
698	value = wpa_config_get(ssid, "key_mgmt");
699	if (value == NULL)
700		return;
701	if (value[0])
702		wpa_config_write_reg_string(hk, "key_mgmt", value);
703	os_free(value);
704}
705
706
707static void write_pairwise(HKEY hk, struct wpa_ssid *ssid)
708{
709	char *value;
710
711	if (ssid->pairwise_cipher == DEFAULT_PAIRWISE)
712		return;
713
714	value = wpa_config_get(ssid, "pairwise");
715	if (value == NULL)
716		return;
717	if (value[0])
718		wpa_config_write_reg_string(hk, "pairwise", value);
719	os_free(value);
720}
721
722
723static void write_group(HKEY hk, struct wpa_ssid *ssid)
724{
725	char *value;
726
727	if (ssid->group_cipher == DEFAULT_GROUP)
728		return;
729
730	value = wpa_config_get(ssid, "group");
731	if (value == NULL)
732		return;
733	if (value[0])
734		wpa_config_write_reg_string(hk, "group", value);
735	os_free(value);
736}
737
738
739static void write_auth_alg(HKEY hk, struct wpa_ssid *ssid)
740{
741	char *value;
742
743	if (ssid->auth_alg == 0)
744		return;
745
746	value = wpa_config_get(ssid, "auth_alg");
747	if (value == NULL)
748		return;
749	if (value[0])
750		wpa_config_write_reg_string(hk, "auth_alg", value);
751	os_free(value);
752}
753
754
755#ifdef IEEE8021X_EAPOL
756static void write_eap(HKEY hk, struct wpa_ssid *ssid)
757{
758	char *value;
759
760	value = wpa_config_get(ssid, "eap");
761	if (value == NULL)
762		return;
763
764	if (value[0])
765		wpa_config_write_reg_string(hk, "eap", value);
766	os_free(value);
767}
768#endif /* IEEE8021X_EAPOL */
769
770
771static void write_wep_key(HKEY hk, int idx, struct wpa_ssid *ssid)
772{
773	char field[20], *value;
774
775	os_snprintf(field, sizeof(field), "wep_key%d", idx);
776	value = wpa_config_get(ssid, field);
777	if (value) {
778		wpa_config_write_reg_string(hk, field, value);
779		os_free(value);
780	}
781}
782
783
784static int wpa_config_write_network(HKEY hk, struct wpa_ssid *ssid, int id)
785{
786	int i, errors = 0;
787	HKEY nhk, netw;
788	LONG ret;
789	TCHAR name[5];
790
791	ret = RegOpenKeyEx(hk, TEXT("networks"), 0, KEY_CREATE_SUB_KEY, &nhk);
792	if (ret != ERROR_SUCCESS) {
793		wpa_printf(MSG_DEBUG, "WINREG: Could not open networks key "
794			   "for subkey addition: error 0x%x (%d)",
795			   (unsigned int) ret, (int) GetLastError());
796		return 0;
797	}
798
799#ifdef UNICODE
800	wsprintf(name, L"%04d", id);
801#else /* UNICODE */
802	os_snprintf(name, sizeof(name), "%04d", id);
803#endif /* UNICODE */
804	ret = RegCreateKeyEx(nhk, name, 0, NULL, 0, KEY_WRITE, NULL, &netw,
805			     NULL);
806	RegCloseKey(nhk);
807	if (ret != ERROR_SUCCESS) {
808		wpa_printf(MSG_DEBUG, "WINREG: Could not add network key '%s':"
809			   " error 0x%x (%d)",
810			   name, (unsigned int) ret, (int) GetLastError());
811		return -1;
812	}
813
814#define STR(t) write_str(netw, #t, ssid)
815#define INT(t) write_int(netw, #t, ssid->t, 0)
816#define INTe(t) write_int(netw, #t, ssid->eap.t, 0)
817#define INT_DEF(t, def) write_int(netw, #t, ssid->t, def)
818#define INT_DEFe(t, def) write_int(netw, #t, ssid->eap.t, def)
819
820	STR(ssid);
821	INT(scan_ssid);
822	write_bssid(netw, ssid);
823	write_psk(netw, ssid);
824	write_proto(netw, ssid);
825	write_key_mgmt(netw, ssid);
826	write_pairwise(netw, ssid);
827	write_group(netw, ssid);
828	write_auth_alg(netw, ssid);
829#ifdef IEEE8021X_EAPOL
830	write_eap(netw, ssid);
831	STR(identity);
832	STR(anonymous_identity);
833	STR(password);
834	STR(ca_cert);
835	STR(ca_path);
836	STR(client_cert);
837	STR(private_key);
838	STR(private_key_passwd);
839	STR(dh_file);
840	STR(subject_match);
841	STR(altsubject_match);
842	STR(ca_cert2);
843	STR(ca_path2);
844	STR(client_cert2);
845	STR(private_key2);
846	STR(private_key2_passwd);
847	STR(dh_file2);
848	STR(subject_match2);
849	STR(altsubject_match2);
850	STR(phase1);
851	STR(phase2);
852	STR(pcsc);
853	STR(pin);
854	STR(engine_id);
855	STR(key_id);
856	STR(cert_id);
857	STR(ca_cert_id);
858	STR(key2_id);
859	STR(pin2);
860	STR(engine2_id);
861	STR(cert2_id);
862	STR(ca_cert2_id);
863	INTe(engine);
864	INTe(engine2);
865	INT_DEF(eapol_flags, DEFAULT_EAPOL_FLAGS);
866#endif /* IEEE8021X_EAPOL */
867	for (i = 0; i < 4; i++)
868		write_wep_key(netw, i, ssid);
869	INT(wep_tx_keyidx);
870	INT(priority);
871#ifdef IEEE8021X_EAPOL
872	INT_DEF(eap_workaround, DEFAULT_EAP_WORKAROUND);
873	STR(pac_file);
874	INT_DEFe(fragment_size, DEFAULT_FRAGMENT_SIZE);
875#endif /* IEEE8021X_EAPOL */
876	INT(mode);
877	INT(proactive_key_caching);
878	INT(disabled);
879	INT(peerkey);
880#ifdef CONFIG_IEEE80211W
881	INT(ieee80211w);
882#endif /* CONFIG_IEEE80211W */
883	STR(id_str);
884
885#undef STR
886#undef INT
887#undef INT_DEF
888
889	RegCloseKey(netw);
890
891	return errors ? -1 : 0;
892}
893
894
895static int wpa_config_write_blob(HKEY hk, struct wpa_config_blob *blob)
896{
897	HKEY bhk;
898	LONG ret;
899	TCHAR *name;
900
901	ret = RegCreateKeyEx(hk, TEXT("blobs"), 0, NULL, 0, KEY_WRITE, NULL,
902			     &bhk, NULL);
903	if (ret != ERROR_SUCCESS) {
904		wpa_printf(MSG_DEBUG, "WINREG: Could not add blobs key: "
905			   "error 0x%x (%d)",
906			   (unsigned int) ret, (int) GetLastError());
907		return -1;
908	}
909
910	name = wpa_strdup_tchar(blob->name);
911	ret = RegSetValueEx(bhk, name, 0, REG_BINARY, blob->data,
912			    blob->len);
913	if (ret != ERROR_SUCCESS) {
914		wpa_printf(MSG_ERROR, "WINREG: Failed to set blob %s': "
915			   "error 0x%x (%d)", blob->name, (unsigned int) ret,
916			   (int) GetLastError());
917		RegCloseKey(bhk);
918		os_free(name);
919		return -1;
920	}
921	os_free(name);
922
923	RegCloseKey(bhk);
924
925	return 0;
926}
927
928
929int wpa_config_write(const char *name, struct wpa_config *config)
930{
931	TCHAR buf[256];
932	HKEY hk;
933	LONG ret;
934	int errors = 0;
935	struct wpa_ssid *ssid;
936	struct wpa_config_blob *blob;
937	int id;
938
939	wpa_printf(MSG_DEBUG, "Writing configuration file '%s'", name);
940
941#ifdef UNICODE
942	_snwprintf(buf, 256, WPA_KEY_PREFIX TEXT("\\configs\\%S"), name);
943#else /* UNICODE */
944	os_snprintf(buf, 256, WPA_KEY_PREFIX TEXT("\\configs\\%s"), name);
945#endif /* UNICODE */
946
947	ret = RegOpenKeyEx(WPA_KEY_ROOT, buf, 0, KEY_SET_VALUE | DELETE, &hk);
948	if (ret != ERROR_SUCCESS) {
949		wpa_printf(MSG_ERROR, "Could not open wpa_supplicant "
950			   "configuration registry %s: error %d", buf,
951			   (int) GetLastError());
952		return -1;
953	}
954
955	if (wpa_config_write_global(config, hk)) {
956		wpa_printf(MSG_ERROR, "Failed to write global configuration "
957			   "data");
958		errors++;
959	}
960
961	wpa_config_delete_subkeys(hk, TEXT("networks"));
962	for (ssid = config->ssid, id = 0; ssid; ssid = ssid->next, id++) {
963		if (ssid->key_mgmt == WPA_KEY_MGMT_WPS)
964			continue; /* do not save temporary WPS networks */
965		if (wpa_config_write_network(hk, ssid, id))
966			errors++;
967	}
968
969	RegDeleteKey(hk, TEXT("blobs"));
970	for (blob = config->blobs; blob; blob = blob->next) {
971		if (wpa_config_write_blob(hk, blob))
972			errors++;
973	}
974
975	RegCloseKey(hk);
976
977	wpa_printf(MSG_DEBUG, "Configuration '%s' written %ssuccessfully",
978		   name, errors ? "un" : "");
979	return errors ? -1 : 0;
980}
981