2015-02-18 18:59:28 +00:00
|
|
|
/* -*- Mode: C; tab-width: 4; indent-tabs-mode: t; c-basic-offset: 4 -*- */
|
|
|
|
/* NetworkManager system settings service - keyfile plugin
|
|
|
|
*
|
|
|
|
* This program is free software; you can redistribute it and/or modify
|
|
|
|
* it under the terms of the GNU General Public License as published by
|
|
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
|
|
* (at your option) any later version.
|
|
|
|
*
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU General Public License along
|
|
|
|
* with this program; if not, write to the Free Software Foundation, Inc.,
|
|
|
|
* 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
|
|
*
|
|
|
|
* Copyright (C) 2008 Novell, Inc.
|
2015-02-18 17:59:35 +00:00
|
|
|
* Copyright (C) 2008 - 2015 Red Hat, Inc.
|
2015-02-18 18:59:28 +00:00
|
|
|
*/
|
|
|
|
|
2016-02-12 13:44:52 +00:00
|
|
|
#include "nm-default.h"
|
2016-02-19 13:57:48 +00:00
|
|
|
|
2016-02-12 13:44:52 +00:00
|
|
|
#include "nm-keyfile-internal.h"
|
|
|
|
|
2015-02-18 18:59:28 +00:00
|
|
|
#include <stdlib.h>
|
|
|
|
#include <sys/stat.h>
|
|
|
|
#include <unistd.h>
|
|
|
|
#include <stdio.h>
|
|
|
|
#include <errno.h>
|
|
|
|
#include <arpa/inet.h>
|
2015-02-18 17:59:35 +00:00
|
|
|
#include <string.h>
|
|
|
|
|
2015-08-28 14:45:42 +00:00
|
|
|
#include "nm-core-internal.h"
|
2015-02-18 17:59:35 +00:00
|
|
|
#include "nm-keyfile-utils.h"
|
|
|
|
|
|
|
|
typedef struct {
|
|
|
|
NMConnection *connection;
|
|
|
|
GKeyFile *keyfile;
|
|
|
|
GError *error;
|
|
|
|
NMKeyfileWriteHandler handler;
|
|
|
|
void *user_data;
|
|
|
|
} KeyfileWriterInfo;
|
|
|
|
|
2015-02-18 18:59:28 +00:00
|
|
|
|
|
|
|
/* Some setting properties also contain setting names, such as
|
|
|
|
* NMSettingConnection's 'type' property (which specifies the base type of the
|
|
|
|
* connection, eg ethernet or wifi) or the 802-11-wireless setting's
|
|
|
|
* 'security' property which specifies whether or not the AP requires
|
|
|
|
* encrpytion. This function handles translating those properties' values
|
|
|
|
* from the real setting name to the more-readable alias.
|
|
|
|
*/
|
|
|
|
static void
|
2015-02-18 17:59:35 +00:00
|
|
|
setting_alias_writer (KeyfileWriterInfo *info,
|
2015-02-18 18:59:28 +00:00
|
|
|
NMSetting *setting,
|
|
|
|
const char *key,
|
|
|
|
const GValue *value)
|
|
|
|
{
|
|
|
|
const char *str, *alias;
|
|
|
|
|
|
|
|
str = g_value_get_string (value);
|
|
|
|
alias = nm_keyfile_plugin_get_alias_for_setting_name (str);
|
2015-02-18 17:59:35 +00:00
|
|
|
nm_keyfile_plugin_kf_set_string (info->keyfile,
|
2015-02-18 18:59:28 +00:00
|
|
|
nm_setting_get_name (setting),
|
|
|
|
key,
|
|
|
|
alias ? alias : str);
|
|
|
|
}
|
|
|
|
|
2015-02-18 17:59:35 +00:00
|
|
|
static void
|
2015-02-18 18:59:28 +00:00
|
|
|
write_array_of_uint (GKeyFile *file,
|
|
|
|
NMSetting *setting,
|
|
|
|
const char *key,
|
|
|
|
const GValue *value)
|
|
|
|
{
|
|
|
|
GArray *array;
|
|
|
|
int i;
|
|
|
|
int *tmp_array;
|
|
|
|
|
|
|
|
array = (GArray *) g_value_get_boxed (value);
|
|
|
|
if (!array || !array->len)
|
2015-02-18 17:59:35 +00:00
|
|
|
return;
|
2015-02-18 18:59:28 +00:00
|
|
|
|
|
|
|
tmp_array = g_new (gint, array->len);
|
|
|
|
for (i = 0; i < array->len; i++)
|
|
|
|
tmp_array[i] = g_array_index (array, int, i);
|
|
|
|
|
|
|
|
nm_keyfile_plugin_kf_set_integer_list (file, nm_setting_get_name (setting), key, tmp_array, array->len);
|
|
|
|
g_free (tmp_array);
|
|
|
|
}
|
|
|
|
|
|
|
|
static void
|
2015-02-18 17:59:35 +00:00
|
|
|
dns_writer (KeyfileWriterInfo *info,
|
2015-02-18 18:59:28 +00:00
|
|
|
NMSetting *setting,
|
|
|
|
const char *key,
|
|
|
|
const GValue *value)
|
|
|
|
{
|
|
|
|
char **list;
|
|
|
|
|
|
|
|
list = g_value_get_boxed (value);
|
|
|
|
if (list && list[0]) {
|
2015-02-18 17:59:35 +00:00
|
|
|
nm_keyfile_plugin_kf_set_string_list (info->keyfile, nm_setting_get_name (setting), key,
|
2015-02-18 18:59:28 +00:00
|
|
|
(const char **) list, g_strv_length (list));
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2015-10-26 17:00:03 +00:00
|
|
|
static void
|
|
|
|
ip6_addr_gen_mode_writer (KeyfileWriterInfo *info,
|
|
|
|
NMSetting *setting,
|
|
|
|
const char *key,
|
|
|
|
const GValue *value)
|
|
|
|
{
|
|
|
|
NMSettingIP6ConfigAddrGenMode addr_gen_mode;
|
2015-11-11 15:14:53 +00:00
|
|
|
gs_free char *str = NULL;
|
2015-10-26 17:00:03 +00:00
|
|
|
|
|
|
|
addr_gen_mode = (NMSettingIP6ConfigAddrGenMode) g_value_get_int (value);
|
|
|
|
str = nm_utils_enum_to_str (nm_setting_ip6_config_addr_gen_mode_get_type (),
|
|
|
|
addr_gen_mode);
|
|
|
|
nm_keyfile_plugin_kf_set_string (info->keyfile,
|
|
|
|
nm_setting_get_name (setting),
|
|
|
|
key,
|
|
|
|
str);
|
|
|
|
}
|
|
|
|
|
2015-02-18 18:59:28 +00:00
|
|
|
static void
|
|
|
|
write_ip_values (GKeyFile *file,
|
|
|
|
const char *setting_name,
|
|
|
|
GPtrArray *array,
|
|
|
|
const char *gateway,
|
|
|
|
gboolean is_route)
|
|
|
|
{
|
|
|
|
GString *output;
|
|
|
|
int family, i;
|
|
|
|
const char *addr, *gw;
|
|
|
|
guint32 plen, metric;
|
|
|
|
char key_name[30], *key_name_idx;
|
|
|
|
|
|
|
|
if (!array->len)
|
|
|
|
return;
|
|
|
|
|
|
|
|
family = !strcmp (setting_name, NM_SETTING_IP4_CONFIG_SETTING_NAME) ? AF_INET : AF_INET6;
|
|
|
|
|
|
|
|
strcpy (key_name, is_route ? "route" : "address");
|
|
|
|
key_name_idx = key_name + strlen (key_name);
|
|
|
|
|
|
|
|
output = g_string_sized_new (2*INET_ADDRSTRLEN + 10);
|
|
|
|
for (i = 0; i < array->len; i++) {
|
|
|
|
if (is_route) {
|
|
|
|
NMIPRoute *route = array->pdata[i];
|
|
|
|
|
|
|
|
addr = nm_ip_route_get_dest (route);
|
|
|
|
plen = nm_ip_route_get_prefix (route);
|
|
|
|
gw = nm_ip_route_get_next_hop (route);
|
|
|
|
metric = MAX (0, nm_ip_route_get_metric (route));
|
|
|
|
} else {
|
|
|
|
NMIPAddress *address = array->pdata[i];
|
|
|
|
|
|
|
|
addr = nm_ip_address_get_address (address);
|
|
|
|
plen = nm_ip_address_get_prefix (address);
|
|
|
|
gw = i == 0 ? gateway : NULL;
|
|
|
|
metric = 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
g_string_set_size (output, 0);
|
|
|
|
g_string_append_printf (output, "%s/%u", addr, plen);
|
|
|
|
if (metric || gw) {
|
|
|
|
/* Older versions of the plugin do not support the form
|
|
|
|
* "a.b.c.d/plen,,metric", so, we always have to write the
|
|
|
|
* gateway, even if there isn't one.
|
|
|
|
* The current version supports reading of the above form.
|
|
|
|
*/
|
|
|
|
if (!gw) {
|
|
|
|
if (family == AF_INET)
|
|
|
|
gw = "0.0.0.0";
|
|
|
|
else
|
|
|
|
gw = "::";
|
|
|
|
}
|
|
|
|
|
|
|
|
g_string_append_printf (output, ",%s", gw);
|
|
|
|
if (metric)
|
|
|
|
g_string_append_printf (output, ",%lu", (unsigned long) metric);
|
|
|
|
}
|
|
|
|
|
|
|
|
sprintf (key_name_idx, "%d", i + 1);
|
|
|
|
nm_keyfile_plugin_kf_set_string (file, setting_name, key_name, output->str);
|
|
|
|
}
|
|
|
|
g_string_free (output, TRUE);
|
|
|
|
}
|
|
|
|
|
|
|
|
static void
|
2015-02-18 17:59:35 +00:00
|
|
|
addr_writer (KeyfileWriterInfo *info,
|
2015-02-18 18:59:28 +00:00
|
|
|
NMSetting *setting,
|
|
|
|
const char *key,
|
|
|
|
const GValue *value)
|
|
|
|
{
|
|
|
|
GPtrArray *array;
|
|
|
|
const char *setting_name = nm_setting_get_name (setting);
|
|
|
|
const char *gateway = nm_setting_ip_config_get_gateway (NM_SETTING_IP_CONFIG (setting));
|
|
|
|
|
|
|
|
array = (GPtrArray *) g_value_get_boxed (value);
|
|
|
|
if (array && array->len)
|
2015-02-18 17:59:35 +00:00
|
|
|
write_ip_values (info->keyfile, setting_name, array, gateway, FALSE);
|
2015-02-18 18:59:28 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
static void
|
2015-02-18 17:59:35 +00:00
|
|
|
ip4_addr_label_writer (KeyfileWriterInfo *info,
|
2015-02-18 18:59:28 +00:00
|
|
|
NMSetting *setting,
|
|
|
|
const char *key,
|
|
|
|
const GValue *value)
|
|
|
|
{
|
|
|
|
/* skip */
|
|
|
|
}
|
|
|
|
|
|
|
|
static void
|
2015-02-18 17:59:35 +00:00
|
|
|
gateway_writer (KeyfileWriterInfo *info,
|
2015-02-18 18:59:28 +00:00
|
|
|
NMSetting *setting,
|
|
|
|
const char *key,
|
|
|
|
const GValue *value)
|
|
|
|
{
|
|
|
|
/* skip */
|
|
|
|
}
|
|
|
|
|
|
|
|
static void
|
2015-02-18 17:59:35 +00:00
|
|
|
route_writer (KeyfileWriterInfo *info,
|
2015-02-18 18:59:28 +00:00
|
|
|
NMSetting *setting,
|
|
|
|
const char *key,
|
|
|
|
const GValue *value)
|
|
|
|
{
|
|
|
|
GPtrArray *array;
|
|
|
|
const char *setting_name = nm_setting_get_name (setting);
|
|
|
|
|
|
|
|
array = (GPtrArray *) g_value_get_boxed (value);
|
|
|
|
if (array && array->len)
|
2015-02-18 17:59:35 +00:00
|
|
|
write_ip_values (info->keyfile, setting_name, array, NULL, TRUE);
|
2015-02-18 18:59:28 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
static void
|
|
|
|
write_hash_of_string (GKeyFile *file,
|
|
|
|
NMSetting *setting,
|
|
|
|
const char *key,
|
|
|
|
const GValue *value)
|
|
|
|
{
|
2016-05-23 08:02:04 +00:00
|
|
|
GHashTable *hash;
|
2015-02-18 18:59:28 +00:00
|
|
|
const char *group_name = nm_setting_get_name (setting);
|
|
|
|
gboolean vpn_secrets = FALSE;
|
2016-05-23 08:02:04 +00:00
|
|
|
gs_free const char **keys = NULL;
|
|
|
|
guint i, l;
|
2015-02-18 18:59:28 +00:00
|
|
|
|
|
|
|
/* Write VPN secrets out to a different group to keep them separate */
|
|
|
|
if (NM_IS_SETTING_VPN (setting) && !strcmp (key, NM_SETTING_VPN_SECRETS)) {
|
2015-06-08 17:38:52 +00:00
|
|
|
group_name = NM_KEYFILE_GROUP_VPN_SECRETS;
|
2015-02-18 18:59:28 +00:00
|
|
|
vpn_secrets = TRUE;
|
|
|
|
}
|
|
|
|
|
2016-05-23 08:02:04 +00:00
|
|
|
hash = g_value_get_boxed (value);
|
|
|
|
keys = (const char **) g_hash_table_get_keys_as_array (hash, &l);
|
|
|
|
if (!keys)
|
|
|
|
return;
|
|
|
|
|
2016-06-07 11:05:26 +00:00
|
|
|
g_qsort_with_data (keys, l, sizeof (const char *), nm_strcmp_p_with_data, NULL);
|
2016-05-23 08:02:04 +00:00
|
|
|
|
|
|
|
for (i = 0; keys[i]; i++) {
|
|
|
|
const char *property, *data;
|
2015-02-18 18:59:28 +00:00
|
|
|
gboolean write_item = TRUE;
|
|
|
|
|
2016-05-23 08:02:04 +00:00
|
|
|
property = keys[i];
|
|
|
|
|
2015-02-18 18:59:28 +00:00
|
|
|
/* Handle VPN secrets specially; they are nested in the property's hash;
|
|
|
|
* we don't want to write them if the secret is not saved, not required,
|
|
|
|
* or owned by a user's secret agent.
|
|
|
|
*/
|
|
|
|
if (vpn_secrets) {
|
|
|
|
NMSettingSecretFlags secret_flags = NM_SETTING_SECRET_FLAG_NONE;
|
|
|
|
|
|
|
|
nm_setting_get_secret_flags (setting, property, &secret_flags, NULL);
|
|
|
|
if (secret_flags != NM_SETTING_SECRET_FLAG_NONE)
|
|
|
|
write_item = FALSE;
|
|
|
|
}
|
|
|
|
|
2016-05-23 08:02:04 +00:00
|
|
|
if (write_item) {
|
|
|
|
data = g_hash_table_lookup (hash, property);
|
2015-02-18 18:59:28 +00:00
|
|
|
nm_keyfile_plugin_kf_set_string (file, group_name, property, data);
|
2016-05-23 08:02:04 +00:00
|
|
|
}
|
2015-02-18 18:59:28 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
static void
|
2015-02-18 17:59:35 +00:00
|
|
|
ssid_writer (KeyfileWriterInfo *info,
|
2015-02-18 18:59:28 +00:00
|
|
|
NMSetting *setting,
|
|
|
|
const char *key,
|
|
|
|
const GValue *value)
|
|
|
|
{
|
|
|
|
GBytes *bytes;
|
|
|
|
const guint8 *ssid_data;
|
|
|
|
gsize ssid_len;
|
|
|
|
const char *setting_name = nm_setting_get_name (setting);
|
|
|
|
gboolean new_format = TRUE;
|
|
|
|
unsigned int semicolons = 0;
|
|
|
|
int i, *tmp_array;
|
|
|
|
char *ssid;
|
|
|
|
|
|
|
|
g_return_if_fail (G_VALUE_HOLDS (value, G_TYPE_BYTES));
|
|
|
|
|
|
|
|
bytes = g_value_get_boxed (value);
|
|
|
|
if (!bytes)
|
|
|
|
return;
|
|
|
|
ssid_data = g_bytes_get_data (bytes, &ssid_len);
|
|
|
|
if (ssid_len == 0)
|
|
|
|
return;
|
|
|
|
|
|
|
|
/* Check whether each byte is printable. If not, we have to use an
|
|
|
|
* integer list, otherwise we can just use a string.
|
|
|
|
*/
|
|
|
|
for (i = 0; i < ssid_len; i++) {
|
|
|
|
char c = ssid_data[i] & 0xFF;
|
|
|
|
if (!g_ascii_isprint (c)) {
|
|
|
|
new_format = FALSE;
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
if (c == ';')
|
|
|
|
semicolons++;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (new_format) {
|
|
|
|
ssid = g_malloc0 (ssid_len + semicolons + 1);
|
|
|
|
if (semicolons == 0)
|
|
|
|
memcpy (ssid, ssid_data, ssid_len);
|
|
|
|
else {
|
|
|
|
/* Escape semicolons with backslashes to make strings
|
|
|
|
* containing ';', such as '16;17;' unambiguous */
|
|
|
|
int j = 0;
|
|
|
|
for (i = 0; i < ssid_len; i++) {
|
|
|
|
if (ssid_data[i] == ';')
|
|
|
|
ssid[j++] = '\\';
|
|
|
|
ssid[j++] = ssid_data[i];
|
|
|
|
}
|
|
|
|
}
|
2015-02-18 17:59:35 +00:00
|
|
|
nm_keyfile_plugin_kf_set_string (info->keyfile, setting_name, key, ssid);
|
2015-02-18 18:59:28 +00:00
|
|
|
g_free (ssid);
|
|
|
|
} else {
|
|
|
|
tmp_array = g_new (gint, ssid_len);
|
|
|
|
for (i = 0; i < ssid_len; i++)
|
|
|
|
tmp_array[i] = (int) ssid_data[i];
|
2015-02-18 17:59:35 +00:00
|
|
|
nm_keyfile_plugin_kf_set_integer_list (info->keyfile, setting_name, key, tmp_array, ssid_len);
|
2015-02-18 18:59:28 +00:00
|
|
|
g_free (tmp_array);
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
static void
|
2015-02-18 17:59:35 +00:00
|
|
|
password_raw_writer (KeyfileWriterInfo *info,
|
2015-02-18 18:59:28 +00:00
|
|
|
NMSetting *setting,
|
|
|
|
const char *key,
|
|
|
|
const GValue *value)
|
|
|
|
{
|
|
|
|
const char *setting_name = nm_setting_get_name (setting);
|
|
|
|
GBytes *array;
|
|
|
|
int *tmp_array;
|
|
|
|
gsize i, len;
|
|
|
|
const char *data;
|
|
|
|
|
|
|
|
g_return_if_fail (G_VALUE_HOLDS (value, G_TYPE_BYTES));
|
|
|
|
|
|
|
|
array = (GBytes *) g_value_get_boxed (value);
|
|
|
|
if (!array)
|
|
|
|
return;
|
|
|
|
data = g_bytes_get_data (array, &len);
|
|
|
|
if (!data || !len)
|
|
|
|
return;
|
|
|
|
|
|
|
|
tmp_array = g_new (gint, len);
|
|
|
|
for (i = 0; i < len; i++)
|
|
|
|
tmp_array[i] = (int) data[i];
|
2015-02-18 17:59:35 +00:00
|
|
|
nm_keyfile_plugin_kf_set_integer_list (info->keyfile, setting_name, key, tmp_array, len);
|
2015-02-18 18:59:28 +00:00
|
|
|
g_free (tmp_array);
|
|
|
|
}
|
|
|
|
|
|
|
|
typedef struct ObjectType {
|
|
|
|
const char *key;
|
|
|
|
const char *suffix;
|
|
|
|
NMSetting8021xCKScheme (*scheme_func) (NMSetting8021x *setting);
|
|
|
|
NMSetting8021xCKFormat (*format_func) (NMSetting8021x *setting);
|
|
|
|
const char * (*path_func) (NMSetting8021x *setting);
|
|
|
|
GBytes * (*blob_func) (NMSetting8021x *setting);
|
|
|
|
} ObjectType;
|
|
|
|
|
|
|
|
static const ObjectType objtypes[10] = {
|
|
|
|
{ NM_SETTING_802_1X_CA_CERT,
|
|
|
|
"ca-cert",
|
|
|
|
nm_setting_802_1x_get_ca_cert_scheme,
|
|
|
|
NULL,
|
|
|
|
nm_setting_802_1x_get_ca_cert_path,
|
|
|
|
nm_setting_802_1x_get_ca_cert_blob },
|
|
|
|
|
|
|
|
{ NM_SETTING_802_1X_PHASE2_CA_CERT,
|
|
|
|
"inner-ca-cert",
|
|
|
|
nm_setting_802_1x_get_phase2_ca_cert_scheme,
|
|
|
|
NULL,
|
|
|
|
nm_setting_802_1x_get_phase2_ca_cert_path,
|
|
|
|
nm_setting_802_1x_get_phase2_ca_cert_blob },
|
|
|
|
|
|
|
|
{ NM_SETTING_802_1X_CLIENT_CERT,
|
|
|
|
"client-cert",
|
|
|
|
nm_setting_802_1x_get_client_cert_scheme,
|
|
|
|
NULL,
|
|
|
|
nm_setting_802_1x_get_client_cert_path,
|
|
|
|
nm_setting_802_1x_get_client_cert_blob },
|
|
|
|
|
|
|
|
{ NM_SETTING_802_1X_PHASE2_CLIENT_CERT,
|
|
|
|
"inner-client-cert",
|
|
|
|
nm_setting_802_1x_get_phase2_client_cert_scheme,
|
|
|
|
NULL,
|
|
|
|
nm_setting_802_1x_get_phase2_client_cert_path,
|
|
|
|
nm_setting_802_1x_get_phase2_client_cert_blob },
|
|
|
|
|
|
|
|
{ NM_SETTING_802_1X_PRIVATE_KEY,
|
|
|
|
"private-key",
|
|
|
|
nm_setting_802_1x_get_private_key_scheme,
|
|
|
|
nm_setting_802_1x_get_private_key_format,
|
|
|
|
nm_setting_802_1x_get_private_key_path,
|
|
|
|
nm_setting_802_1x_get_private_key_blob },
|
|
|
|
|
|
|
|
{ NM_SETTING_802_1X_PHASE2_PRIVATE_KEY,
|
|
|
|
"inner-private-key",
|
|
|
|
nm_setting_802_1x_get_phase2_private_key_scheme,
|
|
|
|
nm_setting_802_1x_get_phase2_private_key_format,
|
|
|
|
nm_setting_802_1x_get_phase2_private_key_path,
|
|
|
|
nm_setting_802_1x_get_phase2_private_key_blob },
|
|
|
|
|
|
|
|
{ NULL },
|
|
|
|
};
|
|
|
|
|
2016-10-02 16:22:50 +00:00
|
|
|
/*****************************************************************************/
|
keyfile: support writing certificates as blob inside the keyfile
keyfile should become our main import/export format. It is desirable,
that a keyfile can contain every aspect of a connection.
For blob certificates, the writer in core daemon would always write
them to a file and convert the scheme to path.
This behavior is not great for a (hyptetical) `nmcli connection export`
command because it would have to export them somehow outside of keyfile,
e.g. by writing them to temporary files.
Instead, if the write handler does not handle a certificate, use a
default implementation in nm_keyfile_write() which adds the blob inside
the keyfile.
Interestingly, keyfile reader already supported reading certificate
blobs. But this legacy format accepts the blob as arbitrary
binary without marking the format and without scheme prefix.
Instead of writing the binary data directly, write it with a new
uri scheme "data:;base64," and encode it in base64.
Also go through some lengths to make sure that whatever path
keyfile plugin writes, can be read back again. That is, because
keyfile writer preferably writes relative paths without prefix.
Add nm_keyfile_detect_unqualified_path_scheme() to encapsulate
the detection of pathnames without file:// prefix and use it to
check whether the path name must be fully qualified.
2015-02-24 21:22:14 +00:00
|
|
|
|
|
|
|
static void
|
|
|
|
cert_writer_default (NMConnection *connection,
|
|
|
|
GKeyFile *file,
|
|
|
|
NMKeyfileWriteTypeDataCert *cert_data)
|
|
|
|
{
|
|
|
|
const char *setting_name = nm_setting_get_name (NM_SETTING (cert_data->setting));
|
|
|
|
NMSetting8021xCKScheme scheme;
|
|
|
|
|
|
|
|
scheme = cert_data->scheme_func (cert_data->setting);
|
|
|
|
if (scheme == NM_SETTING_802_1X_CK_SCHEME_PATH) {
|
|
|
|
const char *path;
|
|
|
|
char *path_free = NULL, *tmp;
|
|
|
|
gs_free char *base_dir = NULL;
|
|
|
|
|
|
|
|
path = cert_data->path_func (cert_data->setting);
|
|
|
|
g_assert (path);
|
|
|
|
|
|
|
|
/* If the path is relative, make it an absolute path.
|
|
|
|
* Relative paths make a keyfile not easily usable in another
|
|
|
|
* context. */
|
|
|
|
if (path[0] && path[0] != '/') {
|
|
|
|
base_dir = g_get_current_dir ();
|
|
|
|
path = path_free = g_strconcat (base_dir, "/", path, NULL);
|
|
|
|
} else
|
|
|
|
base_dir = g_path_get_dirname (path);
|
|
|
|
|
|
|
|
/* path cannot start with "file://" or "data:;base64,", because it is an absolute path.
|
|
|
|
* Still, make sure that a prefix-less path will be recognized. This can happen
|
|
|
|
* for example if the path is longer then 500 chars. */
|
|
|
|
tmp = nm_keyfile_detect_unqualified_path_scheme (base_dir, path, -1, FALSE, NULL);
|
|
|
|
if (tmp)
|
|
|
|
g_clear_pointer (&tmp, g_free);
|
|
|
|
else
|
|
|
|
path = tmp = g_strconcat (NM_KEYFILE_CERT_SCHEME_PREFIX_PATH, path, NULL);
|
|
|
|
|
|
|
|
/* Path contains at least a '/', hence it cannot be recognized as the old
|
|
|
|
* binary format consisting of a list of integers. */
|
|
|
|
|
|
|
|
nm_keyfile_plugin_kf_set_string (file, setting_name, cert_data->property_name, path);
|
|
|
|
g_free (tmp);
|
|
|
|
g_free (path_free);
|
|
|
|
} else if (scheme == NM_SETTING_802_1X_CK_SCHEME_BLOB) {
|
|
|
|
GBytes *blob;
|
|
|
|
const guint8 *blob_data;
|
|
|
|
gsize blob_len;
|
|
|
|
char *blob_base64, *val;
|
|
|
|
|
|
|
|
blob = cert_data->blob_func (cert_data->setting);
|
|
|
|
g_assert (blob);
|
|
|
|
blob_data = g_bytes_get_data (blob, &blob_len);
|
|
|
|
|
|
|
|
blob_base64 = g_base64_encode (blob_data, blob_len);
|
|
|
|
val = g_strconcat (NM_KEYFILE_CERT_SCHEME_PREFIX_BLOB, blob_base64, NULL);
|
|
|
|
|
|
|
|
nm_keyfile_plugin_kf_set_string (file, setting_name, cert_data->property_name, val);
|
|
|
|
g_free (val);
|
|
|
|
g_free (blob_base64);
|
|
|
|
} else {
|
|
|
|
/* scheme_func() returns UNKNOWN in all other cases. The only valid case
|
|
|
|
* where a scheme is allowed to be UNKNOWN, is unsetting the value. In this
|
|
|
|
* case, we don't expect the writer to be called, because the default value
|
|
|
|
* will not be serialized.
|
|
|
|
* The only other reason for the scheme to be UNKNOWN is an invalid cert.
|
|
|
|
* But our connection verifies, so that cannot happen either. */
|
|
|
|
g_return_if_reached ();
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2015-02-18 18:59:28 +00:00
|
|
|
static void
|
2015-02-18 17:59:35 +00:00
|
|
|
cert_writer (KeyfileWriterInfo *info,
|
2015-02-18 18:59:28 +00:00
|
|
|
NMSetting *setting,
|
|
|
|
const char *key,
|
|
|
|
const GValue *value)
|
|
|
|
{
|
|
|
|
const ObjectType *objtype = NULL;
|
2015-02-18 17:59:35 +00:00
|
|
|
guint i;
|
|
|
|
NMKeyfileWriteTypeDataCert type_data = { 0 };
|
2015-02-18 18:59:28 +00:00
|
|
|
|
|
|
|
for (i = 0; i < G_N_ELEMENTS (objtypes) && objtypes[i].key; i++) {
|
|
|
|
if (g_strcmp0 (objtypes[i].key, key) == 0) {
|
|
|
|
objtype = &objtypes[i];
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
2015-02-18 17:59:35 +00:00
|
|
|
if (!objtype)
|
|
|
|
g_return_if_reached ();
|
2015-02-18 18:59:28 +00:00
|
|
|
|
2015-02-18 17:59:35 +00:00
|
|
|
type_data.setting = NM_SETTING_802_1X (setting);
|
|
|
|
type_data.property_name = key;
|
|
|
|
type_data.suffix = objtype->suffix;
|
|
|
|
type_data.scheme_func = objtype->scheme_func;
|
|
|
|
type_data.format_func = objtype->format_func;
|
|
|
|
type_data.path_func = objtype->path_func;
|
|
|
|
type_data.blob_func = objtype->blob_func;
|
|
|
|
|
keyfile: support writing certificates as blob inside the keyfile
keyfile should become our main import/export format. It is desirable,
that a keyfile can contain every aspect of a connection.
For blob certificates, the writer in core daemon would always write
them to a file and convert the scheme to path.
This behavior is not great for a (hyptetical) `nmcli connection export`
command because it would have to export them somehow outside of keyfile,
e.g. by writing them to temporary files.
Instead, if the write handler does not handle a certificate, use a
default implementation in nm_keyfile_write() which adds the blob inside
the keyfile.
Interestingly, keyfile reader already supported reading certificate
blobs. But this legacy format accepts the blob as arbitrary
binary without marking the format and without scheme prefix.
Instead of writing the binary data directly, write it with a new
uri scheme "data:;base64," and encode it in base64.
Also go through some lengths to make sure that whatever path
keyfile plugin writes, can be read back again. That is, because
keyfile writer preferably writes relative paths without prefix.
Add nm_keyfile_detect_unqualified_path_scheme() to encapsulate
the detection of pathnames without file:// prefix and use it to
check whether the path name must be fully qualified.
2015-02-24 21:22:14 +00:00
|
|
|
if (info->handler) {
|
|
|
|
if (info->handler (info->connection,
|
|
|
|
info->keyfile,
|
|
|
|
NM_KEYFILE_WRITE_TYPE_CERT,
|
|
|
|
&type_data,
|
|
|
|
info->user_data,
|
|
|
|
&info->error))
|
|
|
|
return;
|
|
|
|
if (info->error)
|
|
|
|
return;
|
2015-02-18 18:59:28 +00:00
|
|
|
}
|
keyfile: support writing certificates as blob inside the keyfile
keyfile should become our main import/export format. It is desirable,
that a keyfile can contain every aspect of a connection.
For blob certificates, the writer in core daemon would always write
them to a file and convert the scheme to path.
This behavior is not great for a (hyptetical) `nmcli connection export`
command because it would have to export them somehow outside of keyfile,
e.g. by writing them to temporary files.
Instead, if the write handler does not handle a certificate, use a
default implementation in nm_keyfile_write() which adds the blob inside
the keyfile.
Interestingly, keyfile reader already supported reading certificate
blobs. But this legacy format accepts the blob as arbitrary
binary without marking the format and without scheme prefix.
Instead of writing the binary data directly, write it with a new
uri scheme "data:;base64," and encode it in base64.
Also go through some lengths to make sure that whatever path
keyfile plugin writes, can be read back again. That is, because
keyfile writer preferably writes relative paths without prefix.
Add nm_keyfile_detect_unqualified_path_scheme() to encapsulate
the detection of pathnames without file:// prefix and use it to
check whether the path name must be fully qualified.
2015-02-24 21:22:14 +00:00
|
|
|
|
|
|
|
cert_writer_default (info->connection, info->keyfile, &type_data);
|
2015-02-18 18:59:28 +00:00
|
|
|
}
|
|
|
|
|
2016-10-02 16:22:50 +00:00
|
|
|
/*****************************************************************************/
|
keyfile: support writing certificates as blob inside the keyfile
keyfile should become our main import/export format. It is desirable,
that a keyfile can contain every aspect of a connection.
For blob certificates, the writer in core daemon would always write
them to a file and convert the scheme to path.
This behavior is not great for a (hyptetical) `nmcli connection export`
command because it would have to export them somehow outside of keyfile,
e.g. by writing them to temporary files.
Instead, if the write handler does not handle a certificate, use a
default implementation in nm_keyfile_write() which adds the blob inside
the keyfile.
Interestingly, keyfile reader already supported reading certificate
blobs. But this legacy format accepts the blob as arbitrary
binary without marking the format and without scheme prefix.
Instead of writing the binary data directly, write it with a new
uri scheme "data:;base64," and encode it in base64.
Also go through some lengths to make sure that whatever path
keyfile plugin writes, can be read back again. That is, because
keyfile writer preferably writes relative paths without prefix.
Add nm_keyfile_detect_unqualified_path_scheme() to encapsulate
the detection of pathnames without file:// prefix and use it to
check whether the path name must be fully qualified.
2015-02-24 21:22:14 +00:00
|
|
|
|
2015-02-18 18:59:28 +00:00
|
|
|
typedef struct {
|
|
|
|
const char *setting_name;
|
|
|
|
const char *key;
|
2015-02-18 17:59:35 +00:00
|
|
|
void (*writer) (KeyfileWriterInfo *info,
|
2015-02-18 18:59:28 +00:00
|
|
|
NMSetting *setting,
|
|
|
|
const char *key,
|
|
|
|
const GValue *value);
|
|
|
|
} KeyWriter;
|
|
|
|
|
|
|
|
/* A table of keys that require further parsing/conversion because they are
|
|
|
|
* stored in a format that can't be automatically read using the key's type.
|
|
|
|
* i.e. IPv4 addresses, which are stored in NetworkManager as guint32, but are
|
|
|
|
* stored in keyfiles as strings, eg "10.1.1.2" or IPv6 addresses stored
|
|
|
|
* in struct in6_addr internally, but as string in keyfiles.
|
|
|
|
*/
|
|
|
|
static KeyWriter key_writers[] = {
|
|
|
|
{ NM_SETTING_CONNECTION_SETTING_NAME,
|
|
|
|
NM_SETTING_CONNECTION_TYPE,
|
|
|
|
setting_alias_writer },
|
|
|
|
{ NM_SETTING_IP4_CONFIG_SETTING_NAME,
|
|
|
|
NM_SETTING_IP_CONFIG_ADDRESSES,
|
|
|
|
addr_writer },
|
|
|
|
{ NM_SETTING_IP4_CONFIG_SETTING_NAME,
|
|
|
|
"address-labels",
|
|
|
|
ip4_addr_label_writer },
|
|
|
|
{ NM_SETTING_IP6_CONFIG_SETTING_NAME,
|
|
|
|
NM_SETTING_IP_CONFIG_ADDRESSES,
|
|
|
|
addr_writer },
|
|
|
|
{ NM_SETTING_IP4_CONFIG_SETTING_NAME,
|
|
|
|
NM_SETTING_IP_CONFIG_GATEWAY,
|
|
|
|
gateway_writer },
|
|
|
|
{ NM_SETTING_IP6_CONFIG_SETTING_NAME,
|
|
|
|
NM_SETTING_IP_CONFIG_GATEWAY,
|
|
|
|
gateway_writer },
|
|
|
|
{ NM_SETTING_IP4_CONFIG_SETTING_NAME,
|
|
|
|
NM_SETTING_IP_CONFIG_ROUTES,
|
|
|
|
route_writer },
|
|
|
|
{ NM_SETTING_IP6_CONFIG_SETTING_NAME,
|
|
|
|
NM_SETTING_IP_CONFIG_ROUTES,
|
|
|
|
route_writer },
|
|
|
|
{ NM_SETTING_IP4_CONFIG_SETTING_NAME,
|
|
|
|
NM_SETTING_IP_CONFIG_DNS,
|
|
|
|
dns_writer },
|
|
|
|
{ NM_SETTING_IP6_CONFIG_SETTING_NAME,
|
|
|
|
NM_SETTING_IP_CONFIG_DNS,
|
|
|
|
dns_writer },
|
2015-10-26 17:00:03 +00:00
|
|
|
{ NM_SETTING_IP6_CONFIG_SETTING_NAME,
|
|
|
|
NM_SETTING_IP6_CONFIG_ADDR_GEN_MODE,
|
|
|
|
ip6_addr_gen_mode_writer },
|
2015-02-18 18:59:28 +00:00
|
|
|
{ NM_SETTING_WIRELESS_SETTING_NAME,
|
|
|
|
NM_SETTING_WIRELESS_SSID,
|
|
|
|
ssid_writer },
|
|
|
|
{ NM_SETTING_802_1X_SETTING_NAME,
|
|
|
|
NM_SETTING_802_1X_PASSWORD_RAW,
|
|
|
|
password_raw_writer },
|
|
|
|
{ NM_SETTING_802_1X_SETTING_NAME,
|
|
|
|
NM_SETTING_802_1X_CA_CERT,
|
|
|
|
cert_writer },
|
|
|
|
{ NM_SETTING_802_1X_SETTING_NAME,
|
|
|
|
NM_SETTING_802_1X_CLIENT_CERT,
|
|
|
|
cert_writer },
|
|
|
|
{ NM_SETTING_802_1X_SETTING_NAME,
|
|
|
|
NM_SETTING_802_1X_PRIVATE_KEY,
|
|
|
|
cert_writer },
|
|
|
|
{ NM_SETTING_802_1X_SETTING_NAME,
|
|
|
|
NM_SETTING_802_1X_PHASE2_CA_CERT,
|
|
|
|
cert_writer },
|
|
|
|
{ NM_SETTING_802_1X_SETTING_NAME,
|
|
|
|
NM_SETTING_802_1X_PHASE2_CLIENT_CERT,
|
|
|
|
cert_writer },
|
|
|
|
{ NM_SETTING_802_1X_SETTING_NAME,
|
|
|
|
NM_SETTING_802_1X_PHASE2_PRIVATE_KEY,
|
|
|
|
cert_writer },
|
|
|
|
{ NULL, NULL, NULL }
|
|
|
|
};
|
|
|
|
|
2015-08-28 14:45:42 +00:00
|
|
|
static gboolean
|
|
|
|
can_omit_default_value (NMSetting *setting, const char *property)
|
|
|
|
{
|
2015-10-08 11:08:59 +00:00
|
|
|
if (NM_IS_SETTING_VLAN (setting)) {
|
|
|
|
if (!strcmp (property, NM_SETTING_VLAN_FLAGS))
|
|
|
|
return FALSE;
|
|
|
|
} else if (NM_IS_SETTING_IP6_CONFIG (setting)) {
|
|
|
|
if (!strcmp (property, NM_SETTING_IP6_CONFIG_ADDR_GEN_MODE))
|
|
|
|
return FALSE;
|
|
|
|
} else if (NM_IS_SETTING_WIRELESS (setting)) {
|
|
|
|
if (!strcmp (property, NM_SETTING_WIRELESS_MAC_ADDRESS_RANDOMIZATION))
|
|
|
|
return FALSE;
|
|
|
|
}
|
2015-08-28 14:45:42 +00:00
|
|
|
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
2015-02-18 18:59:28 +00:00
|
|
|
static void
|
|
|
|
write_setting_value (NMSetting *setting,
|
|
|
|
const char *key,
|
|
|
|
const GValue *value,
|
|
|
|
GParamFlags flag,
|
|
|
|
gpointer user_data)
|
|
|
|
{
|
2015-02-18 17:59:35 +00:00
|
|
|
KeyfileWriterInfo *info = user_data;
|
2015-02-18 18:59:28 +00:00
|
|
|
const char *setting_name;
|
|
|
|
GType type = G_VALUE_TYPE (value);
|
|
|
|
KeyWriter *writer = &key_writers[0];
|
|
|
|
GParamSpec *pspec;
|
|
|
|
|
2015-02-18 17:59:35 +00:00
|
|
|
if (info->error)
|
|
|
|
return;
|
|
|
|
|
2015-02-18 18:59:28 +00:00
|
|
|
/* Setting name gets picked up from the keyfile's section name instead */
|
|
|
|
if (!strcmp (key, NM_SETTING_NAME))
|
|
|
|
return;
|
|
|
|
|
|
|
|
/* Don't write the NMSettingConnection object's 'read-only' property */
|
|
|
|
if ( NM_IS_SETTING_CONNECTION (setting)
|
|
|
|
&& !strcmp (key, NM_SETTING_CONNECTION_READ_ONLY))
|
|
|
|
return;
|
|
|
|
|
|
|
|
setting_name = nm_setting_get_name (setting);
|
|
|
|
|
|
|
|
/* If the value is the default value, remove the item from the keyfile */
|
|
|
|
pspec = g_object_class_find_property (G_OBJECT_GET_CLASS (setting), key);
|
|
|
|
if (pspec) {
|
2015-08-28 14:45:42 +00:00
|
|
|
if ( can_omit_default_value (setting, key)
|
|
|
|
&& g_param_value_defaults (pspec, (GValue *) value)) {
|
2015-02-18 18:59:28 +00:00
|
|
|
g_key_file_remove_key (info->keyfile, setting_name, key, NULL);
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Don't write secrets that are owned by user secret agents or aren't
|
|
|
|
* supposed to be saved. VPN secrets are handled specially though since
|
|
|
|
* the secret flags there are in a third-level hash in the 'secrets'
|
|
|
|
* property.
|
|
|
|
*/
|
|
|
|
if (pspec && (pspec->flags & NM_SETTING_PARAM_SECRET) && !NM_IS_SETTING_VPN (setting)) {
|
|
|
|
NMSettingSecretFlags secret_flags = NM_SETTING_SECRET_FLAG_NONE;
|
|
|
|
|
|
|
|
if (!nm_setting_get_secret_flags (setting, key, &secret_flags, NULL))
|
|
|
|
g_assert_not_reached ();
|
|
|
|
if (secret_flags != NM_SETTING_SECRET_FLAG_NONE)
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Look through the list of handlers for non-standard format key values */
|
|
|
|
while (writer->setting_name) {
|
|
|
|
if (!strcmp (writer->setting_name, setting_name) && !strcmp (writer->key, key)) {
|
2015-02-18 17:59:35 +00:00
|
|
|
(*writer->writer) (info, setting, key, value);
|
2015-02-18 18:59:28 +00:00
|
|
|
return;
|
|
|
|
}
|
|
|
|
writer++;
|
|
|
|
}
|
|
|
|
|
|
|
|
if (type == G_TYPE_STRING) {
|
|
|
|
const char *str;
|
|
|
|
|
|
|
|
str = g_value_get_string (value);
|
|
|
|
if (str)
|
|
|
|
nm_keyfile_plugin_kf_set_string (info->keyfile, setting_name, key, str);
|
|
|
|
} else if (type == G_TYPE_UINT)
|
|
|
|
nm_keyfile_plugin_kf_set_integer (info->keyfile, setting_name, key, (int) g_value_get_uint (value));
|
|
|
|
else if (type == G_TYPE_INT)
|
|
|
|
nm_keyfile_plugin_kf_set_integer (info->keyfile, setting_name, key, g_value_get_int (value));
|
|
|
|
else if (type == G_TYPE_UINT64) {
|
|
|
|
char *numstr;
|
|
|
|
|
|
|
|
numstr = g_strdup_printf ("%" G_GUINT64_FORMAT, g_value_get_uint64 (value));
|
|
|
|
nm_keyfile_plugin_kf_set_value (info->keyfile, setting_name, key, numstr);
|
|
|
|
g_free (numstr);
|
|
|
|
} else if (type == G_TYPE_INT64) {
|
|
|
|
char *numstr;
|
|
|
|
|
|
|
|
numstr = g_strdup_printf ("%" G_GINT64_FORMAT, g_value_get_int64 (value));
|
|
|
|
nm_keyfile_plugin_kf_set_value (info->keyfile, setting_name, key, numstr);
|
|
|
|
g_free (numstr);
|
|
|
|
} else if (type == G_TYPE_BOOLEAN) {
|
|
|
|
nm_keyfile_plugin_kf_set_boolean (info->keyfile, setting_name, key, g_value_get_boolean (value));
|
|
|
|
} else if (type == G_TYPE_CHAR) {
|
|
|
|
nm_keyfile_plugin_kf_set_integer (info->keyfile, setting_name, key, (int) g_value_get_schar (value));
|
|
|
|
} else if (type == G_TYPE_BYTES) {
|
|
|
|
GBytes *bytes;
|
|
|
|
const guint8 *data;
|
|
|
|
gsize len = 0;
|
|
|
|
|
|
|
|
bytes = g_value_get_boxed (value);
|
|
|
|
data = bytes ? g_bytes_get_data (bytes, &len) : NULL;
|
|
|
|
|
|
|
|
if (data != NULL && len > 0) {
|
|
|
|
int *tmp_array;
|
|
|
|
int i;
|
|
|
|
|
|
|
|
tmp_array = g_new (gint, len);
|
|
|
|
for (i = 0; i < len; i++)
|
|
|
|
tmp_array[i] = (int) data[i];
|
|
|
|
|
|
|
|
nm_keyfile_plugin_kf_set_integer_list (info->keyfile, setting_name, key, tmp_array, len);
|
|
|
|
g_free (tmp_array);
|
|
|
|
}
|
|
|
|
} else if (type == G_TYPE_STRV) {
|
|
|
|
char **array;
|
|
|
|
|
|
|
|
array = (char **) g_value_get_boxed (value);
|
|
|
|
nm_keyfile_plugin_kf_set_string_list (info->keyfile, setting_name, key, (const gchar **const) array, g_strv_length (array));
|
|
|
|
} else if (type == G_TYPE_HASH_TABLE) {
|
|
|
|
write_hash_of_string (info->keyfile, setting, key, value);
|
|
|
|
} else if (type == G_TYPE_ARRAY) {
|
2015-02-18 17:59:35 +00:00
|
|
|
write_array_of_uint (info->keyfile, setting, key, value);
|
2015-02-18 18:59:28 +00:00
|
|
|
} else if (G_VALUE_HOLDS_FLAGS (value)) {
|
|
|
|
/* Flags are guint but GKeyFile has no uint reader, just uint64 */
|
|
|
|
nm_keyfile_plugin_kf_set_uint64 (info->keyfile, setting_name, key, (guint64) g_value_get_flags (value));
|
|
|
|
} else if (G_VALUE_HOLDS_ENUM (value))
|
|
|
|
nm_keyfile_plugin_kf_set_integer (info->keyfile, setting_name, key, (gint) g_value_get_enum (value));
|
2015-02-18 17:59:35 +00:00
|
|
|
else
|
|
|
|
g_warn_if_reached ();
|
2015-02-18 18:59:28 +00:00
|
|
|
}
|
|
|
|
|
2015-02-18 17:59:35 +00:00
|
|
|
GKeyFile *
|
|
|
|
nm_keyfile_write (NMConnection *connection,
|
|
|
|
NMKeyfileWriteHandler handler,
|
|
|
|
void *user_data,
|
|
|
|
GError **error)
|
2015-02-18 18:59:28 +00:00
|
|
|
{
|
2015-02-18 17:59:35 +00:00
|
|
|
KeyfileWriterInfo info = { 0 };
|
2015-02-18 18:59:28 +00:00
|
|
|
|
2015-02-18 17:59:35 +00:00
|
|
|
g_return_val_if_fail (NM_IS_CONNECTION (connection), NULL);
|
|
|
|
g_return_val_if_fail (!error || !*error, NULL);
|
2015-02-18 18:59:28 +00:00
|
|
|
|
|
|
|
if (!nm_connection_verify (connection, error))
|
2015-02-18 17:59:35 +00:00
|
|
|
return NULL;
|
2015-02-18 18:59:28 +00:00
|
|
|
|
2015-02-18 17:59:35 +00:00
|
|
|
info.connection = connection;
|
|
|
|
info.keyfile = g_key_file_new ();
|
|
|
|
info.error = NULL;
|
|
|
|
info.handler = handler;
|
|
|
|
info.user_data = user_data;
|
2015-02-18 18:59:28 +00:00
|
|
|
nm_connection_for_each_setting_value (connection, write_setting_value, &info);
|
|
|
|
|
2015-02-18 17:59:35 +00:00
|
|
|
if (info.error) {
|
|
|
|
g_propagate_error (error, info.error);
|
|
|
|
g_key_file_unref (info.keyfile);
|
|
|
|
return NULL;
|
2015-02-18 18:59:28 +00:00
|
|
|
}
|
2015-02-18 17:59:35 +00:00
|
|
|
return info.keyfile;
|
2015-02-18 18:59:28 +00:00
|
|
|
}
|
|
|
|
|