/* -*- Mode: C; tab-width: 5; indent-tabs-mode: t; c-basic-offset: 5 -*- */

/* NetworkManager system settings service (ifupdown)
 *
 * Alexander Sack <asac@ubuntu.com>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
 *
 * (C) Copyright 2008 Canonical Ltd.
 */

#include <string.h>
#include <arpa/inet.h>
#include <stdlib.h>
#include <errno.h>

#include <nm-connection.h>
#include <NetworkManager.h>
#include <nm-setting-connection.h>
#include <nm-setting-ip4-config.h>
#include <nm-setting-ppp.h>
#include <nm-setting-wired.h>
#include <nm-setting-wireless.h>
#include <nm-setting-8021x.h>
#include <nm-system-config-interface.h>
#include <nm-utils.h>

#include "parser.h"
#include "plugin.h"
#include "sha1.h"


#define WPA_PMK_LEN 32

#include "parser.h"

static const gchar*
_ifupdownplugin_guess_connection_type (if_block *block)
{
	if_data *curr = block->info;
	const gchar* ret_type = NULL;
	const gchar* value = ifparser_getkey(block, "inet");
	if(value && !strcmp("ppp", value)) {
		ret_type = NM_SETTING_PPP_SETTING_NAME;
	}

	while(!ret_type && curr) {
		if(!strncmp("wireless-", curr->key, strlen("wireless-")) ||
		   !strncmp("wpa-", curr->key, strlen("wpa-"))) {
			ret_type = NM_SETTING_WIRELESS_SETTING_NAME;
		}
		curr = curr->next;
	}

	if(!ret_type)
		ret_type = NM_SETTING_WIRED_SETTING_NAME;

	PLUGIN_PRINT("SCPluginIfupdown",
			   "guessed connection type (%s) = %s",
			   block->name, ret_type);
	return ret_type;
}

/* 
 * utils_bin2hexstr 
 * 
 * Convert a byte-array into a hexadecimal string. 
 * 
 * Code originally by Alex Larsson <alexl@redhat.com> and 
 *  copyright Red Hat, Inc. under terms of the LGPL. 
 * 
 */ 
static char * 
utils_bin2hexstr (const char *bytes, int len, int final_len) 
{ 
	static char     hex_digits[] = "0123456789abcdef"; 
	char *          result; 
	int                     i; 
 
	g_return_val_if_fail (bytes != NULL, NULL); 
	g_return_val_if_fail (len > 0, NULL); 
	g_return_val_if_fail (len < 256, NULL); /* Arbitrary limit */ 
 
	result = g_malloc0 (len * 2 + 1); 
	for (i = 0; i < len; i++) 
	{ 
		result[2*i] = hex_digits[(bytes[i] >> 4) & 0xf]; 
		result[2*i+1] = hex_digits[bytes[i] & 0xf]; 
	} 
	/* Cut converted key off at the correct length for this cipher type */ 
	if (final_len > -1) 
		result[final_len] = '\0'; 
 
	return result; 
} 


struct _Mapping {
	const gchar *domain;
	const gpointer target;
};

static gpointer
map_by_mapping(struct _Mapping *mapping, const gchar *key)
{
	struct _Mapping *curr = mapping;
	while(curr->domain) {
		if(!strcmp(curr->domain, key))
			return curr->target;
		curr++;
	}
	return NULL;
}

static void
update_wireless_setting_from_if_block(NMConnection *connection,
							   if_block *block)
{
	gint wpa_l= strlen("wpa-");
	gint wireless_l= strlen("wireless-");

	if_data *curr = block->info;
	const gchar* value = ifparser_getkey (block, "inet");
	struct _Mapping mapping[] = {
		{"ssid", "ssid"},
		{ NULL, NULL}
	};

	NMSettingWireless *wireless_setting = NULL;

	if(value && !strcmp("ppp", value)) {
		return;
	}

	PLUGIN_PRINT ("SCPlugin-Ifupdown", "update wireless settings (%s).", block->name);
	wireless_setting = NM_SETTING_WIRELESS(nm_setting_wireless_new());

	while(curr) {
		if(strlen(curr->key) > wireless_l &&
		   !strncmp("wireless-", curr->key, wireless_l)) {
			const gchar* newkey = map_by_mapping(mapping, curr->key+wireless_l);
			PLUGIN_PRINT ("SCPlugin-Ifupdown", "wireless setting key: %s='%s'",
					    newkey, curr->data);
			g_object_set(wireless_setting,
					   newkey, curr->data,
					   NULL);
		} else if(strlen(curr->key) > wpa_l &&
				!strncmp("wpa-", curr->key, wpa_l)) {
			const gchar* newkey = map_by_mapping(mapping, curr->key+wpa_l);

			if(newkey && !strcmp("ssid", newkey)) {
				gint len = strlen(curr->data);
				wireless_setting->ssid = g_byte_array_sized_new (len);
				g_byte_array_append (wireless_setting->ssid, (const guint8 *) curr->data, len);
				PLUGIN_PRINT("SCPlugin-Ifupdown", "setting wpa ssid = %d", wireless_setting->ssid->len);
			} else if(newkey) {

				g_object_set(wireless_setting,
						   newkey, curr->data,
						   NULL);
				PLUGIN_PRINT ("SCPlugin-Ifupdown", "setting wpa newkey(%s)=data(%s)", newkey, curr->data);
			}
		}
		curr = curr->next;
	}
	nm_connection_add_setting(connection, (NMSetting*) wireless_setting);
}

typedef gchar* (*IfupdownStrDupeFunc) (gpointer value, gpointer data);
typedef gpointer (*IfupdownStrToTypeFunc) (const gchar* value);

static char*
normalize_dupe (gpointer value, gpointer data) {
	return g_strdup(value);
}

static char*
normalize_tolower (gpointer value, gpointer data) {
	return g_ascii_strdown(value, -1);
}

static char *normalize_psk (gpointer value, gpointer data) {
	NMConnection *connection = data;
	NMSettingWireless *s_wireless =
		NM_SETTING_WIRELESS(nm_connection_get_setting(connection, NM_TYPE_SETTING_WIRELESS));
	gchar *normalized;
	if (strlen (value) == 64) {
		normalized = g_strdup (value);
	} else {
		/* passphrase */
		unsigned char *buf = g_malloc0 (WPA_PMK_LEN * 2);
		pbkdf2_sha1 (value, (char *) s_wireless->ssid->data, s_wireless->ssid->len, 4096, buf, WPA_PMK_LEN);
		normalized = utils_bin2hexstr ((const char *) buf, WPA_PMK_LEN, WPA_PMK_LEN * 2);
		g_free (buf);
	}
	return normalized;
}

static gpointer
string_to_gpointerint(const gchar* data)
{
	gint result = (gint) strtol (data, NULL, 10);
	return GINT_TO_POINTER(result);
}
	
static gpointer
string_to_glist_of_strings(const gchar* data)
{
	GSList *ret = NULL;
	gchar *string = (gchar*) data;
	while(string) {
		gchar* next = NULL;
		if( (next = strchr(string, ' '))  ||
		    (next = strchr(string, '\t')) ||
		    (next = strchr(string, '\0')) ) {

			gchar *part = g_strndup(string, (next - string));
			ret = g_slist_append(ret, part);
			if (*next)
				string = next+1;
			else
				string = NULL;
		} else {
			string = NULL;
		}
	}
	return ret;
}

static void
slist_free_all(gpointer slist)
{
	GSList *list = (GSList *) slist;
	g_slist_foreach (list, (GFunc) g_free, NULL);
	g_slist_free (list);
}

static void
update_wireless_security_setting_from_if_block(NMConnection *connection,
									  if_block *block)
{
	gint wpa_l= strlen("wpa-");
	gint wireless_l= strlen("wireless-");
	if_data *curr = block->info;
	const gchar* value = ifparser_getkey (block, "inet");
	struct _Mapping mapping[] = {
		{"psk", "psk"},
		{"identity", "identity"},
		{"password", "password"},
		{"key", "key"},
		{"key-mgmt", "key-mgmt"},
		{"group", "group"},
		{"pairwise", "pairwise"},
		{"proto", "proto"},
		{"pin", "pin"},
		{"wep-key0", "wep-key0"},
		{"wep-key1", "wep-key1"},
		{"wep-key2", "wep-key2"},
		{"wep-key3", "wep-key3"},
		{"wep-tx-keyidx", "wep-tx-keyidx"},
		{ NULL, NULL}
	};

	struct _Mapping dupe_mapping[] = {
		{"psk", normalize_psk},
		{"identity", normalize_dupe},
		{"password", normalize_dupe},
		{"key", normalize_dupe},
		{"key-mgmt", normalize_tolower},
		{"group", normalize_tolower},
		{"pairwise", normalize_tolower},
		{"proto", normalize_tolower},
		{"pin", normalize_dupe},
		{"wep-key0", normalize_dupe},
		{"wep-key1", normalize_dupe},
		{"wep-key2", normalize_dupe},
		{"wep-key3", normalize_dupe},
		{"wep-tx-keyidx", normalize_dupe},
		{ NULL, NULL}
	};

	struct _Mapping type_mapping[] = {
		{"group", string_to_glist_of_strings},
		{"pairwise", string_to_glist_of_strings},
		{"proto", string_to_glist_of_strings},
		{"wep-tx-keyidx", string_to_gpointerint},
		{ NULL, NULL}
	};

	struct _Mapping free_type_mapping[] = {
		{"group", slist_free_all},
		{"pairwise", slist_free_all},
		{"proto", slist_free_all},
		{ NULL, NULL}
	};

	NMSettingWirelessSecurity *wireless_security_setting;
	NMSettingWireless *s_wireless;
	gboolean security = FALSE;

	if(value && !strcmp("ppp", value)) {
		return;
	}

	s_wireless = NM_SETTING_WIRELESS(nm_connection_get_setting(connection,
												    NM_TYPE_SETTING_WIRELESS));
	g_return_if_fail(s_wireless);

	PLUGIN_PRINT ("SCPlugin-Ifupdown","update wireless security settings (%s).", block->name);
	wireless_security_setting =
		NM_SETTING_WIRELESS_SECURITY(nm_setting_wireless_security_new());

	while(curr) {
		if(strlen(curr->key) > wireless_l &&
		   !strncmp("wireless-", curr->key, wireless_l)) {

			gchar *property_value = NULL;
			gpointer typed_property_value = NULL;
			const gchar* newkey = map_by_mapping(mapping, curr->key+wireless_l);
			IfupdownStrDupeFunc dupe_func = map_by_mapping (dupe_mapping, curr->key+wireless_l);
			IfupdownStrToTypeFunc type_map_func = map_by_mapping (type_mapping, curr->key+wireless_l);
			GFreeFunc free_func = map_by_mapping (free_type_mapping, curr->key+wireless_l);
			if(!newkey || !dupe_func) {
				g_warning("no (wireless) mapping found for key: %s", curr->key);
				goto next;
			}
			property_value = (*dupe_func) (curr->data, connection);
			PLUGIN_PRINT ("SCPlugin-Ifupdown", "setting wireless security key: %s=%s",
					    newkey, property_value);

			if (type_map_func) {
				errno = 0;
				typed_property_value = (*type_map_func) (property_value);
				if(errno)
					goto wireless_next;
			}
		    
			g_object_set(wireless_security_setting,
					   newkey, typed_property_value ? typed_property_value : property_value,
					   NULL);
			security = TRUE;

		wireless_next:
			g_free(property_value);
			if (typed_property_value && free_func)
				(*free_func) (typed_property_value);

		} else if(strlen(curr->key) > wpa_l &&
				!strncmp("wpa-", curr->key, wpa_l)) {

			gchar *property_value = NULL;
			gpointer typed_property_value = NULL;
			const gchar* newkey = map_by_mapping(mapping, curr->key+wpa_l);
			IfupdownStrDupeFunc dupe_func = map_by_mapping (dupe_mapping, curr->key+wpa_l);
			IfupdownStrToTypeFunc type_map_func = map_by_mapping (type_mapping, curr->key+wpa_l);
			GFreeFunc free_func = map_by_mapping (free_type_mapping, curr->key+wpa_l);
			if(!newkey || !dupe_func) {
				goto next;
			}
			property_value = (*dupe_func) (curr->data, connection);
			PLUGIN_PRINT ("SCPlugin-Ifupdown", "setting wpa security key: %s=%s",
					    newkey,
#ifdef DEBUG_SECRETS
					    property_value
#else // DEBUG_SECRETS
					    !strcmp("key", newkey) ||
					    !strcmp("password", newkey) ||
					    !strcmp("pin", newkey) ||
					    !strcmp("psk", newkey) ||
					    !strcmp("wep-key0", newkey) ||
					    !strcmp("wep-key1", newkey) ||
					    !strcmp("wep-key2", newkey) ||
					    !strcmp("wep-key3", newkey) ||
					    NULL ?
					    "<omitted>" : property_value
#endif // DEBUG_SECRETS
					    );

			if (type_map_func) {
				errno = 0;
				typed_property_value = (*type_map_func) (property_value);
				if(errno)
					goto wpa_next;
			}
		    
			g_object_set(wireless_security_setting,
					   newkey, typed_property_value ? typed_property_value : property_value,
					   NULL);
			security = TRUE;

		wpa_next:
			g_free(property_value);
			if (free_func && typed_property_value)
				(*free_func) (typed_property_value);
		}
	next:
		curr = curr->next;
	}


	if(security) {
		nm_connection_add_setting(connection, NM_SETTING(wireless_security_setting));
		g_object_set(s_wireless, NM_SETTING_WIRELESS_SEC, NM_SETTING_WIRELESS_SECURITY_SETTING_NAME, NULL);
	}

}

static void
update_wired_setting_from_if_block(NMConnection *connection,
							if_block *block)
{
	NMSettingWired *s_wired = NULL;
	s_wired = NM_SETTING_WIRED(nm_setting_wired_new());
	nm_connection_add_setting(connection, NM_SETTING(s_wired));
}

static GQuark
eni_plugin_error_quark() {
	static GQuark error_quark = 0;

	if(!error_quark) {
		error_quark = g_quark_from_static_string ("eni-plugin-error-quark");
	}

	return error_quark;
}
	

static void
update_ip4_setting_from_if_block(NMConnection *connection,
						   if_block *block)
{

	NMSettingIP4Config *ip4_setting = NM_SETTING_IP4_CONFIG (nm_setting_ip4_config_new());
	const char *type = ifparser_getkey(block, "inet");
	gboolean is_static = type && !strcmp("static", type);

	if(!is_static) {
		g_object_set(ip4_setting,
				   NM_SETTING_IP4_CONFIG_METHOD, NM_SETTING_IP4_CONFIG_METHOD_AUTO,
				   NULL);
	} else {
 		struct in_addr tmp_ip4_addr;
		NMSettingIP4Address *ip4config = g_new0(NMSettingIP4Address, 1);
		GSList *ip4_addresses = NULL;
		GArray *nameserver = g_array_new (TRUE, TRUE, sizeof(guint32));

		const char *address_v = ifparser_getkey(block, "address");
		const char *netmask_v = ifparser_getkey(block, "netmask");
		const char *gateway_v = ifparser_getkey(block, "gateway");
		const char *nameserver_v = ifparser_getkey(block, "dns-nameserver");
		const char *nameservers_v = ifparser_getkey(block, "dns-nameservers");
		GSList* nameservers_list = NULL;
		GSList* nameservers_list_i = NULL;
		GError *error = NULL;

		if(nameservers_v)
			nameservers_list_i = nameservers_list = string_to_glist_of_strings (nameservers_v);
		if(nameserver_v)
			nameservers_list_i = nameservers_list = g_slist_append(nameservers_list, g_strdup(nameserver_v));

		if (!address_v)
			address_v = g_strdup ("0.0.0.0");

		if (inet_pton (AF_INET, address_v, &tmp_ip4_addr))
			ip4config->address = tmp_ip4_addr.s_addr;
		else
			g_set_error (&error, eni_plugin_error_quark (), 0,
					   "Invalid %s IP4 address '%s'", "address", address_v);
		if (!netmask_v)
			netmask_v = g_strdup( "255.255.255.255");

		if (inet_pton (AF_INET, netmask_v, &tmp_ip4_addr))
			ip4config->prefix = nm_utils_ip4_netmask_to_prefix(tmp_ip4_addr.s_addr);
		else
			g_set_error (&error, eni_plugin_error_quark (), 0,
					   "Invalid %s IP4 address '%s'", "netmask", netmask_v);

		if (!gateway_v)
			gateway_v = g_strdup (address_v);

		if (inet_pton (AF_INET, gateway_v, &tmp_ip4_addr))
			ip4config->gateway = tmp_ip4_addr.s_addr;
		else
			g_set_error (&error, eni_plugin_error_quark (), 0,
					   "Invalid %s IP4 address '%s'", "gateway", gateway_v);

		ip4_addresses = g_slist_append(ip4_addresses, ip4config);

		PLUGIN_PRINT("SCPlugin-Ifupdown", "addresses count: %d", g_slist_length(ip4_addresses));

		while(nameservers_list_i) {
			gchar *dns = nameservers_list_i->data;
			nameservers_list_i = nameservers_list_i -> next;
			if(!dns)
				continue;
			if (inet_pton (AF_INET, dns, &tmp_ip4_addr))
				g_array_append_vals(nameserver, &tmp_ip4_addr.s_addr, 1);
			else
				g_set_error (&error, eni_plugin_error_quark (), 0,
						   "Invalid %s IP4 address nameserver '%s'", "nameserver", dns);
		}
		if (!nameserver->len)
			PLUGIN_PRINT("SCPlugin-Ifupdown", "No dns-nameserver configured in /etc/network/interfaces");

		ip4_setting->addresses = ip4_addresses;
		ip4_setting->dns = nameserver;

		g_object_set(ip4_setting,
				   NM_SETTING_IP4_CONFIG_METHOD, NM_SETTING_IP4_CONFIG_METHOD_MANUAL,
				   NULL);

		g_slist_foreach (nameservers_list, (GFunc) g_free, NULL);
		g_slist_free (nameservers_list);
	}

	nm_connection_add_setting(connection, NM_SETTING(ip4_setting));
}

void
ifupdown_update_connection_from_if_block(NMConnection *connection,
								 if_block *block)
{
	const char *type = NULL;
	char *idstr = NULL;
	char *uuid_base = NULL;
	GError *verify_error = NULL;
	char *uuid = NULL;

	NMSettingConnection *connection_setting =
		NM_SETTING_CONNECTION(nm_connection_get_setting
						  (connection, NM_TYPE_SETTING_CONNECTION));

	if(!connection_setting) {
		connection_setting = NM_SETTING_CONNECTION(nm_setting_connection_new());
		nm_connection_add_setting(connection, NM_SETTING(connection_setting));
	}

	type = _ifupdownplugin_guess_connection_type (block);
	idstr = g_strconcat("Ifupdown (", block->name,")", NULL);
	uuid_base = idstr;

	uuid = nm_utils_uuid_generate_from_string(uuid_base);
	g_object_set (connection_setting,
	              NM_SETTING_CONNECTION_TYPE, type,
	              NM_SETTING_CONNECTION_ID, idstr,
	              NM_SETTING_CONNECTION_UUID, uuid,
	              NM_SETTING_CONNECTION_READ_ONLY, TRUE,
	              NULL);
	g_free (uuid);

	PLUGIN_PRINT("SCPlugin-Ifupdown", "update_connection_setting_from_if_block: name:%s, type:%s, autoconnect:%d, id:%s, uuid: %s",
			   block->name, type,
			   ((gboolean) strcmp("dhcp", type) == 0),
			   idstr,
			   nm_setting_connection_get_uuid (connection_setting));

	if(!strcmp (NM_SETTING_WIRED_SETTING_NAME, type)) {
		update_wired_setting_from_if_block (connection, block);	
	}
	else if(!strcmp (NM_SETTING_WIRELESS_SETTING_NAME, type)) {
		update_wireless_setting_from_if_block (connection, block);
		update_wireless_security_setting_from_if_block (connection, block);
	}

	update_ip4_setting_from_if_block(connection, block);

	if(!nm_connection_verify(connection, &verify_error)) {
		nm_warning("connection broken: %s (%d)",
				 verify_error->message, verify_error->code);
	}

	g_free(idstr);
}