wpa_supplicant: add more parameters
[openwrt/openwrt.git] / package / hostapd / files / wpa_supplicant.sh
1 wpa_supplicant_setup_vif() {
2 local vif="$1"
3 local driver="$2"
4 local key="$key"
5 local options="$3"
6 local freq=""
7 local ap_scan=""
8 local scan_ssid="1"
9 [ -n "$4" ] && freq="frequency=$4"
10
11 # make sure we have the encryption type and the psk
12 [ -n "$enc" ] || {
13 config_get enc "$vif" encryption
14 }
15 [ -n "$key" ] || {
16 config_get key "$vif" key
17 }
18
19 local net_cfg bridge
20 config_get bridge "$vif" bridge
21 [ -z "$bridge" ] && {
22 net_cfg="$(find_net_config "$vif")"
23 [ -z "$net_cfg" ] || bridge="$(bridge_interface "$net_cfg")"
24 config_set "$vif" bridge "$bridge"
25 }
26
27 local mode ifname wds modestr=""
28 config_get mode "$vif" mode
29 config_get ifname "$vif" ifname
30 config_get_bool wds "$vif" wds 0
31 [ -z "$bridge" ] || [ "$mode" = ap ] || [ "$mode" = sta -a $wds -eq 1 ] || {
32 echo "wpa_supplicant_setup_vif($ifname): Refusing to bridge $mode mode interface"
33 return 1
34 }
35 [ "$mode" = "adhoc" ] && {
36 modestr="mode=1"
37 scan_ssid="0"
38 ap_scan="ap_scan=2"
39 }
40
41 key_mgmt='NONE'
42 case "$enc" in
43 *none*) ;;
44 *wep*)
45 config_get key "$vif" key
46 key="${key:-1}"
47 case "$key" in
48 [1234])
49 for idx in 1 2 3 4; do
50 local zidx
51 zidx=$(($idx - 1))
52 config_get ckey "$vif" "key${idx}"
53 [ -n "$ckey" ] && \
54 append "wep_key${zidx}" "wep_key${zidx}=$(prepare_key_wep "$ckey")"
55 done
56 wep_tx_keyidx="wep_tx_keyidx=$((key - 1))"
57 ;;
58 *)
59 wep_key0="wep_key0=$(prepare_key_wep "$key")"
60 wep_tx_keyidx="wep_tx_keyidx=0"
61 ;;
62 esac
63 ;;
64 *psk*)
65 key_mgmt='WPA-PSK'
66 # if you want to use PSK with a non-nl80211 driver you
67 # have to use WPA-NONE and wext driver for wpa_s
68 [ "$mode" = "adhoc" -a "$driver" != "nl80211" ] && {
69 key_mgmt='WPA-NONE'
70 driver='wext'
71 }
72 if [ ${#key} -eq 64 ]; then
73 passphrase="psk=${key}"
74 else
75 passphrase="psk=\"${key}\""
76 fi
77 case "$enc" in
78 *psk2*)
79 proto='proto=RSN'
80 config_get ieee80211w "$vif" ieee80211w
81 ;;
82 *psk*)
83 proto='proto=WPA'
84 ;;
85 esac
86 ;;
87 *wpa*|*8021x*)
88 proto='proto=WPA2'
89 key_mgmt='WPA-EAP'
90 config_get ieee80211w "$vif" ieee80211w
91 config_get ca_cert "$vif" ca_cert
92 config_get eap_type "$vif" eap_type
93 ca_cert=${ca_cert:+"ca_cert=\"$ca_cert\""}
94 case "$eap_type" in
95 tls)
96 pairwise='pairwise=CCMP'
97 group='group=CCMP'
98 config_get identity "$vif" identity
99 config_get client_cert "$vif" client_cert
100 config_get priv_key "$vif" priv_key
101 config_get priv_key_pwd "$vif" priv_key_pwd
102 identity="identity=\"$identity\""
103 client_cert="client_cert=\"$client_cert\""
104 priv_key="private_key=\"$priv_key\""
105 priv_key_pwd="private_key_passwd=\"$priv_key_pwd\""
106 ;;
107 peap|ttls)
108 config_get auth "$vif" auth
109 config_get identity "$vif" identity
110 config_get password "$vif" password
111 phase2="phase2=\"auth=${auth:-MSCHAPV2}\""
112 identity="identity=\"$identity\""
113 password="password=\"$password\""
114 ;;
115 esac
116 eap_type="eap=$(echo $eap_type | tr 'a-z' 'A-Z')"
117 ;;
118 esac
119
120 case "$ieee80211w" in
121 [012])
122 ieee80211w="ieee80211w=$ieee80211w"
123 ;;
124 esac
125
126 local fixed_freq bssid1 beacon_interval brates mrate
127 config_get ifname "$vif" ifname
128 config_get bridge "$vif" bridge
129 bssid1=${bssid:+"bssid=$bssid"}
130 beacon_interval=${beacon_int:+"beacon_interval=$beacon_int"}
131
132 local br brval brsub brstr
133 [ -n "$basic_rate_list" ] && {
134 for br in $basic_rate_list; do
135 brval="$(($br / 1000))"
136 brsub="$((($br / 100) % 10))"
137 [ "$brsub" -gt 0 ] && brval="$brval.$brsub"
138 [ -n "$brstr" ] && brstr="$brstr,"
139 brstr="$brstr$brval"
140 done
141 brates=${basic_rate_list:+"rates=$brstr"}
142 }
143
144 local mcval=""
145 [ -n "$mcast_rate" ] && {
146 mcval="$(($mcast_rate / 1000))"
147 mcsub="$(( ($mcast_rate / 100) % 10 ))"
148 [ "$mcsub" -gt 0 ] && mcval="$mcval.$mcsub"
149 mrate=${mcast_rate:+"mcast_rate=$mcval"}
150 }
151
152 rm -rf /var/run/wpa_supplicant-$ifname
153 cat > /var/run/wpa_supplicant-$ifname.conf <<EOF
154 ctrl_interface=/var/run/wpa_supplicant-$ifname
155 $ap_scan
156 network={
157 $modestr
158 scan_ssid=$scan_ssid
159 ssid="$ssid"
160 $bssid1
161 key_mgmt=$key_mgmt
162 $proto
163 $freq
164 ${fixed:+"fixed_freq=1"}
165 $beacon_interval
166 $brates
167 $mrate
168 $ieee80211w
169 $passphrase
170 $pairwise
171 $group
172 $eap_type
173 $ca_cert
174 $client_cert
175 $priv_key
176 $priv_key_pwd
177 $phase2
178 $identity
179 $password
180 $wep_key0
181 $wep_key1
182 $wep_key2
183 $wep_key3
184 $wep_tx_keyidx
185 }
186 EOF
187 [ -z "$proto" -a "$key_mgmt" != "NONE" ] || \
188 wpa_supplicant ${bridge:+ -b $bridge} -B -P "/var/run/wifi-${ifname}.pid" -D ${driver:-wext} -i "$ifname" -c /var/run/wpa_supplicant-$ifname.conf $options
189 }