linux下移植wifi之安装wpa_supplicant及wpa_supplicant其操作(六)

r囧r小猫 2022-05-20 08:20 1014阅读 0赞

第五节：安装wpa\_supplicant及wpa\_supplicant其操作

概念：  
     wpa\_supplicant : 可用于下述"认证/加密"  
       
     All security modes have been verified to work (at least complete authentication and successfully ping a wired host):  
    - plaintext  
    - static WEP / open system authentication  
    - static WEP / shared key authentication  
    - IEEE 802.1X with dynamic WEP keys  
    - WPA-PSK, TKIP, CCMP, TKIP+CCMP  
    - WPA-EAP, TKIP, CCMP, TKIP+CCMP  
    - WPA2-PSK, TKIP, CCMP, TKIP+CCMP  
    - WPA2-EAP, TKIP, CCMP, TKIP+CCMP  
      
    分析： 一般使用 wpa-psk,wpa2-psk. 因为\*.eap 是需要服务器的。

Download wpa\_supplicant soft: http://w1.fi/wpa\_supplicant/  
      
    下载最新版本：wpa\_supplicant-2.6版本。  
      
    查看README得有效信息：  
    This package may include either wpa\_supplicant, hostapd, or both. See  
README file respective subdirectories (wpa\_supplicant/README or  
hostapd/README) for more details.

那就再看wpa\_supplicant/README。  
      
    由README可知，需要下载库 openssl. 第三节我们已经安装了。需要.config。

1. 解压  
   tar -xzf wpa\_supplicant-2.6.tar.gz  
   cd wpa\_supplicant-2.6/wpa\_supplicant  
2. 编译与安装  
   cp  deconfig .config  
   修改.config，使能CONFIG\_LIBNL32=y  
   修改Makefile ，加上libnl 和 opnssl的头文件 和 lib库。  
     
    CFLAGS += -I/home/clh/work/libnl-3.2.25/tmp/include/libnl3  
    LDFLAGS += -L/home/clh/work/libnl-3.2.25/tmp/lib

CFLAGS += -I/home/clh/work/openssl-1.0.1o/tmp/include  
    LDFLAGS += -L/home/clh/work/openssl-1.0.1o/tmp/lib  
      
   make CC=arm-linux-gcc  
   make DESTDIR=$PWD/tmp install  
3. 将生成的，复制到根文件系统。  
   cp tmp/usr/local/sbin/\* /opt/rootfs/bin/     /\*wpa\_supplicant, wpa\_cli, \*/

4. 操作  
   在操作之前，查看文件wpa\_supplicant/README。内容：Command line options  
     
  usage:  
  wpa\_supplicant \[-BddfhKLqqtuvW\] \[-P<pid file>\] \[-g<global ctrl>\] \\  
        \[-G<group>\] \\  
        -i<ifname> -c<config file> \[-C<ctrl>\] \[-D<driver>\] \[-p<driver\_param>\] \\  
        \[-b<br\_ifname> \[-MN -i<ifname> -c<conf> \[-C<ctrl>\] \[-D<driver>\] \\  
        \[-p<driver\_param>\] \[-b<br\_ifname>\] \[-m<P2P Device config file>\] ...

options:  
  -b = optional bridge interface name  
  -B = run daemon in the background  
  -c = Configuration file  
  -C = ctrl\_interface parameter (only used if -c is not)  
  -i = interface name  
  -d = increase debugging verbosity (-dd even more)  
  -D = driver name (can be multiple drivers: nl80211,wext)  
  -f = Log output to default log location (normally /tmp)  
  -g = global ctrl\_interface  
  -G = global ctrl\_interface group  
  -K = include keys (passwords, etc.) in debug output  
  -t = include timestamp in debug messages  
  -h = show this help text  
  -L = show license (BSD)  
  -p = driver parameters  
  -P = PID file  
  -q = decrease debugging verbosity (-qq even less)  
  -u = enable DBus control interface  
  -v = show version  
  -W = wait for a control interface monitor before starting  
  -M = start describing matching interface  
  -N = start describing new interface  
  -m = Configuration file for the P2P Device

drivers:  
  nl80211 = Linux nl80211/cfg80211  
  wext = Linux wireless extensions (generic)  
  wired = wpa\_supplicant wired Ethernet driver  
  roboswitch = wpa\_supplicant Broadcom switch driver  
  bsd = BSD 802.11 support (Atheros, etc.)  
  ndis = Windows NDIS driver

In most common cases, wpa\_supplicant is started with

wpa\_supplicant -B -c/etc/wpa\_supplicant.conf -iwlan0

This makes the process fork into background.

The easiest way to debug problems, and to get debug log for bug  
reports, is to start wpa\_supplicant on foreground with debugging  
enabled:

wpa\_supplicant -c/etc/wpa\_supplicant.conf -iwlan0 -d

If the specific driver wrapper is not known beforehand, it is possible  
to specify multiple comma separated driver wrappers on the command  
line. wpa\_supplicant will use the first driver wrapper that is able to  
initialize the interface.

wpa\_supplicant -Dnl80211,wext -c/etc/wpa\_supplicant.conf -iwlan0

分析：

wpa\_supplicant \[-BddfhKLqqtuvW\] \[-P<pid file>\] \[-g<global ctrl>\] \\  
        \[-G<group>\] \\  
        -i<ifname> -c<config file> \[-C<ctrl>\] \[-D<driver>\] \[-p<driver\_param>\] \\  
        \[-b<br\_ifname> \[-MN -i<ifname> -c<conf> \[-C<ctrl>\] \[-D<driver>\] \\  
        \[-p<driver\_param>\] \[-b<br\_ifname>\] \[-m<P2P Device config file>\] ... 是命令格式  
          
options ： 参数说明

在大多数常见情况下，wpa\_supplicant的启动，都是以这种方式配置的wpa\_supplicant -B -c / etc / wpa\_supplicant.conf -iwlan0。这种配置方式，使得wpa\_supplicant运行在后台。  
若要获取bug调试日志，可以这样设置，wpa\_supplicant -c / etc / wpa\_supplicant.conf -iwlan0 -d。

使用:  
配置可以参考examples下的。plaintext.conf, wep.conf, wpa2-eap-ccmp.conf, wpa-psk-tkip.conf，复制到/etc下，按自己需要进行修改。

mkdir -p /var/run/wpa\_supplicant  
① OPEN  
wpa\_supplicant -B -c/etc/plaintext.conf -iwlan0  
wpa\_cli -iwlan0 status  // 查看状态  
ifconfig wlan0 192.168.43.88  
ping 192.168.43.1

配置文件内容为:  
ctrl\_interface=/var/run/wpa\_supplicant  
network=\{  
        ssid="hello"  
        key\_mgmt=NONE  
\}

② WEP/WEP  
wpa\_supplicant -B -c/etc/wep.conf  -iwlan0  
wpa\_cli -iwlan0 status  // 查看状态  
ifconfig wlan0 192.168.43.88  
ping 192.168.43.1

配置文件:  
ctrl\_interface=/var/run/wpa\_supplicant  
network=\{  
        ssid="hello"  
        key\_mgmt=NONE  
        wep\_key0="hellogrilclh0"  
        wep\_tx\_keyidx=0   //注释： 表示用第几个密码  
\}

③WPA(TKIP)  
wpa\_supplicant -B -c/etc/wpa-psk-tkip.conf  -iwlan0  
wpa\_cli -iwlan0 status  // 查看状态  
ifconfig wlan0 192.168.43.88  
ping 192.168.43.1

配置文件  
ctrl\_interface=/var/run/wpa\_supplicant  \# 一个目录,用于wpa\_supplicant和wpa\_cli的socket通信  
network=\{  
        ssid="hello"  
        proto=WPA  \# proto: list of accepted protocols, 可取WPA,RSN  
                   \# If not set, this defaults to: WPA RSN  
        key\_mgmt=WPA-PSK \# 认证方式  
                         \# If not set, this defaults to: WPA-PSK WPA-EAP  
        pairwise=TKIP    \# If not set, this defaults to: CCMP TKIP  
        group=TKIP       \# If not set, this defaults to: CCMP TKIP WEP104 WEP40   
        psk="hellogrilclh0"  
\}

④ WPA2(AES)  
wpa\_supplicant -B -c/etc/wpa\_wpa2.conf  -iwlan0  
wpa\_cli -iwlan0 status  // 查看状态  
ifconfig wlan0 192.168.43.88  
ping 192.168.43.1

配置文件：  
ctrl\_interface=/var/run/wpa\_supplicant  
network=\{  
        ssid="hello"  
        psk="hellogrilclh0"  
\}

⑤ 配置文件里设置多个network:             //第一个没有连接到的话，连接第二个。  
ctrl\_interface=/var/run/wpa\_supplicant  
network=\{  
        ssid="hello"  
        psk="hellogrilclh0"  
\}  
network=\{  
        ssid="vivo"  
        psk="vivotest"  
\}

⑥ 访问外网：  
修改/etc/resolv.conf添加DNS:  
nameserver 192.168.43.1

设置网关:  
route add default gw 192.168.43.1

然后访问外网  
ping www.baidu.com

扩展：  
wpa\_cli可工作于"命令模式"和"交互模式" 下面是wpa\_cli命令说明：

status  /\*查看当前连接状态\*/  
scan    /\*启动一次wifi热点扫描\*/  
scan\_result  /\*显示上一次扫描的结果\*/  
add\_network  /\* 添加网络，返回一个编号 \*/  
set\_network  /\* 设置网络的加密形式和ssid，秘钥 \*/  
select\_network /\* 使能网络，并且禁用其他网络 \*/  
save\_config  /\* 保存配置 \*/

例如：  
\# Configure a network using the newly added network interface:  
wpa\_cli -iwlan0 add\_network  
wpa\_cli -iwlan0 set\_network 0 ssid '"test"'  
wpa\_cli -iwlan0 set\_network 0 key\_mgmt WPA-PSK  
wpa\_cli -iwlan0 set\_network 0 psk '"12345678"'  
wpa\_cli -iwlan0 set\_network 0 pairwise TKIP  
wpa\_cli -iwlan0 set\_network 0 group TKIP  
wpa\_cli -iwlan0 set\_network 0 proto WPA  
wpa\_cli -iwlan0 enable\_network 0

问题注意点： 设置板子ip的时候，和无线网络设置在一个网段。