nl80211: Remove SIOCGIWRANGE and assume TKIP+CCMP+WPA+WPA2
[wpasupplicant] / src / drivers / driver_nl80211.c
index 45fd7b8..615e9df 100644 (file)
 #include <netlink/genl/family.h>
 #include <netlink/genl/ctrl.h>
 #include "nl80211_copy.h"
-#ifdef CONFIG_CLIENT_MLME
-#include <netpacket/packet.h>
-#include <linux/if_ether.h>
-#include "radiotap.h"
-#include "radiotap_iter.h"
-#endif /* CONFIG_CLIENT_MLME */
-
 #include "wireless_copy.h"
+
 #include "common.h"
 #include "driver.h"
 #include "eloop.h"
 #endif
 
 
-#ifndef NO_WEXT_COMPAT
-/*
- * Fall back to WEXT association, if the kernel does not support nl80211 MLME
- * commands. This is temporary backwards compatibility version that will be
- * removed at some point.
- */
-#define WEXT_COMPAT
-#endif /* NO_WEXT_COMPAT */
-
-
 struct wpa_driver_nl80211_data {
        void *ctx;
-       int wext_event_sock;
+       int link_event_sock;
        int ioctl_sock;
        char ifname[IFNAMSIZ + 1];
        int ifindex;
        int if_removed;
        struct wpa_driver_capa capa;
        int has_capability;
-       int we_version_compiled;
-
-#ifdef WEXT_COMPAT
-       u8 *assoc_req_ies;
-       size_t assoc_req_ies_len;
-       u8 *assoc_resp_ies;
-       size_t assoc_resp_ies_len;
-
-       /* for set_auth_alg fallback */
-       int use_crypt;
-       int auth_alg_fallback;
-#endif /* WEXT_COMPAT */
 
        int operstate;
 
-       char mlmedev[IFNAMSIZ + 1];
-
        int scan_complete_events;
 
        struct nl_handle *nl_handle;
@@ -90,21 +60,17 @@ struct wpa_driver_nl80211_data {
        struct nl_cb *nl_cb;
        struct genl_family *nl80211;
 
-#ifdef CONFIG_CLIENT_MLME
-       int monitor_sock; /* socket for monitor */
-       int monitor_ifidx;
-#endif /* CONFIG_CLIENT_MLME */
-
        u8 bssid[ETH_ALEN];
        int associated;
+       u8 ssid[32];
+       size_t ssid_len;
 };
 
 
 static void wpa_driver_nl80211_scan_timeout(void *eloop_ctx,
                                            void *timeout_ctx);
-static int wpa_driver_nl80211_set_mode(void *priv, int mode);
-static int wpa_driver_nl80211_flush_pmkid(void *priv);
-static int wpa_driver_nl80211_get_range(void *priv);
+static int wpa_driver_nl80211_set_mode(struct wpa_driver_nl80211_data *drv,
+                                      int mode);
 static int
 wpa_driver_nl80211_finish_drv_init(struct wpa_driver_nl80211_data *drv);
 
@@ -278,7 +244,7 @@ static int wpa_driver_nl80211_send_oper_ifla(
        wpa_printf(MSG_DEBUG, "WEXT: Operstate: linkmode=%d, operstate=%d",
                   linkmode, operstate);
 
-       ret = send(drv->wext_event_sock, &req, req.hdr.nlmsg_len, 0);
+       ret = send(drv->link_event_sock, &req, req.hdr.nlmsg_len, 0);
        if (ret < 0) {
                wpa_printf(MSG_DEBUG, "WEXT: Sending operstate IFLA failed: "
                           "%s (assume operstate is not supported)",
@@ -316,23 +282,6 @@ static int wpa_driver_nl80211_set_auth_param(
 static int wpa_driver_nl80211_get_bssid(void *priv, u8 *bssid)
 {
        struct wpa_driver_nl80211_data *drv = priv;
-#ifdef WEXT_COMPAT
-       if (!(drv->capa.flags & WPA_DRIVER_FLAGS_SME)) {
-               struct iwreq iwr;
-               int ret = 0;
-
-               os_memset(&iwr, 0, sizeof(iwr));
-               os_strlcpy(iwr.ifr_name, drv->ifname, IFNAMSIZ);
-
-               if (ioctl(drv->ioctl_sock, SIOCGIWAP, &iwr) < 0) {
-                       perror("ioctl[SIOCGIWAP]");
-                       ret = -1;
-               }
-               os_memcpy(bssid, iwr.u.ap_addr.sa_data, ETH_ALEN);
-
-               return ret;
-       }
-#endif /* WEXT_COMPAT */
        if (!drv->associated)
                return -1;
        os_memcpy(bssid, drv->bssid, ETH_ALEN);
@@ -340,418 +289,13 @@ static int wpa_driver_nl80211_get_bssid(void *priv, u8 *bssid)
 }
 
 
-static int wpa_driver_nl80211_set_bssid(void *priv, const u8 *bssid)
-{
-       struct wpa_driver_nl80211_data *drv = priv;
-       struct iwreq iwr;
-       int ret = 0;
-
-       os_memset(&iwr, 0, sizeof(iwr));
-       os_strlcpy(iwr.ifr_name, drv->ifname, IFNAMSIZ);
-       iwr.u.ap_addr.sa_family = ARPHRD_ETHER;
-       if (bssid)
-               os_memcpy(iwr.u.ap_addr.sa_data, bssid, ETH_ALEN);
-       else
-               os_memset(iwr.u.ap_addr.sa_data, 0, ETH_ALEN);
-
-       if (ioctl(drv->ioctl_sock, SIOCSIWAP, &iwr) < 0) {
-               perror("ioctl[SIOCSIWAP]");
-               ret = -1;
-       }
-
-       return ret;
-}
-
-
 static int wpa_driver_nl80211_get_ssid(void *priv, u8 *ssid)
 {
        struct wpa_driver_nl80211_data *drv = priv;
-       struct iwreq iwr;
-       int ret = 0;
-
-       os_memset(&iwr, 0, sizeof(iwr));
-       os_strlcpy(iwr.ifr_name, drv->ifname, IFNAMSIZ);
-       iwr.u.essid.pointer = (caddr_t) ssid;
-       iwr.u.essid.length = 32;
-
-       if (ioctl(drv->ioctl_sock, SIOCGIWESSID, &iwr) < 0) {
-               perror("ioctl[SIOCGIWESSID]");
-               ret = -1;
-       } else {
-               ret = iwr.u.essid.length;
-               if (ret > 32)
-                       ret = 32;
-               /* Some drivers include nul termination in the SSID, so let's
-                * remove it here before further processing. WE-21 changes this
-                * to explicitly require the length _not_ to include nul
-                * termination. */
-               if (ret > 0 && ssid[ret - 1] == '\0' &&
-                   drv->we_version_compiled < 21)
-                       ret--;
-       }
-
-       return ret;
-}
-
-
-static int wpa_driver_nl80211_set_ssid(void *priv, const u8 *ssid,
-                                      size_t ssid_len)
-{
-       struct wpa_driver_nl80211_data *drv = priv;
-       struct iwreq iwr;
-       int ret = 0;
-       char buf[33];
-
-       if (ssid_len > 32)
-               return -1;
-
-       os_memset(&iwr, 0, sizeof(iwr));
-       os_strlcpy(iwr.ifr_name, drv->ifname, IFNAMSIZ);
-       /* flags: 1 = ESSID is active, 0 = not (promiscuous) */
-       iwr.u.essid.flags = (ssid_len != 0);
-       os_memset(buf, 0, sizeof(buf));
-       os_memcpy(buf, ssid, ssid_len);
-       iwr.u.essid.pointer = (caddr_t) buf;
-       if (drv->we_version_compiled < 21) {
-               /* For historic reasons, set SSID length to include one extra
-                * character, C string nul termination, even though SSID is
-                * really an octet string that should not be presented as a C
-                * string. Some Linux drivers decrement the length by one and
-                * can thus end up missing the last octet of the SSID if the
-                * length is not incremented here. WE-21 changes this to
-                * explicitly require the length _not_ to include nul
-                * termination. */
-               if (ssid_len)
-                       ssid_len++;
-       }
-       iwr.u.essid.length = ssid_len;
-
-       if (ioctl(drv->ioctl_sock, SIOCSIWESSID, &iwr) < 0) {
-               perror("ioctl[SIOCSIWESSID]");
-               ret = -1;
-       }
-
-       return ret;
-}
-
-
-static int wpa_driver_nl80211_set_freq(void *priv, int freq)
-{
-       struct wpa_driver_nl80211_data *drv = priv;
-       struct iwreq iwr;
-       int ret = 0;
-
-       os_memset(&iwr, 0, sizeof(iwr));
-       os_strlcpy(iwr.ifr_name, drv->ifname, IFNAMSIZ);
-       iwr.u.freq.m = freq * 100000;
-       iwr.u.freq.e = 1;
-
-       if (ioctl(drv->ioctl_sock, SIOCSIWFREQ, &iwr) < 0) {
-               perror("ioctl[SIOCSIWFREQ]");
-               ret = -1;
-       }
-
-       return ret;
-}
-
-
-#ifdef WEXT_COMPAT
-static void
-wpa_driver_nl80211_event_wireless_custom(void *ctx, char *custom)
-{
-       union wpa_event_data data;
-
-       wpa_printf(MSG_MSGDUMP, "WEXT: Custom wireless event: '%s'",
-                  custom);
-
-       os_memset(&data, 0, sizeof(data));
-       /* Host AP driver */
-       if (os_strncmp(custom, "MLME-MICHAELMICFAILURE.indication", 33) == 0) {
-               data.michael_mic_failure.unicast =
-                       os_strstr(custom, " unicast ") != NULL;
-               /* TODO: parse parameters(?) */
-               wpa_supplicant_event(ctx, EVENT_MICHAEL_MIC_FAILURE, &data);
-       } else if (os_strncmp(custom, "ASSOCINFO(ReqIEs=", 17) == 0) {
-               char *spos;
-               int bytes;
-
-               spos = custom + 17;
-
-               bytes = strspn(spos, "0123456789abcdefABCDEF");
-               if (!bytes || (bytes & 1))
-                       return;
-               bytes /= 2;
-
-               data.assoc_info.req_ies = os_malloc(bytes);
-               if (data.assoc_info.req_ies == NULL)
-                       return;
-
-               data.assoc_info.req_ies_len = bytes;
-               hexstr2bin(spos, data.assoc_info.req_ies, bytes);
-
-               spos += bytes * 2;
-
-               data.assoc_info.resp_ies = NULL;
-               data.assoc_info.resp_ies_len = 0;
-
-               if (os_strncmp(spos, " RespIEs=", 9) == 0) {
-                       spos += 9;
-
-                       bytes = strspn(spos, "0123456789abcdefABCDEF");
-                       if (!bytes || (bytes & 1))
-                               goto done;
-                       bytes /= 2;
-
-                       data.assoc_info.resp_ies = os_malloc(bytes);
-                       if (data.assoc_info.resp_ies == NULL)
-                               goto done;
-
-                       data.assoc_info.resp_ies_len = bytes;
-                       hexstr2bin(spos, data.assoc_info.resp_ies, bytes);
-               }
-
-               wpa_supplicant_event(ctx, EVENT_ASSOCINFO, &data);
-
-       done:
-               os_free(data.assoc_info.resp_ies);
-               os_free(data.assoc_info.req_ies);
-#ifdef CONFIG_PEERKEY
-       } else if (os_strncmp(custom, "STKSTART.request=", 17) == 0) {
-               if (hwaddr_aton(custom + 17, data.stkstart.peer)) {
-                       wpa_printf(MSG_DEBUG, "WEXT: unrecognized "
-                                  "STKSTART.request '%s'", custom + 17);
-                       return;
-               }
-               wpa_supplicant_event(ctx, EVENT_STKSTART, &data);
-#endif /* CONFIG_PEERKEY */
-       }
-}
-#endif /* WEXT_COMPAT */
-
-
-static int wpa_driver_nl80211_event_wireless_michaelmicfailure(
-       void *ctx, const char *ev, size_t len)
-{
-       const struct iw_michaelmicfailure *mic;
-       union wpa_event_data data;
-
-       if (len < sizeof(*mic))
-               return -1;
-
-       mic = (const struct iw_michaelmicfailure *) ev;
-
-       wpa_printf(MSG_DEBUG, "Michael MIC failure wireless event: "
-                  "flags=0x%x src_addr=" MACSTR, mic->flags,
-                  MAC2STR(mic->src_addr.sa_data));
-
-       os_memset(&data, 0, sizeof(data));
-       data.michael_mic_failure.unicast = !(mic->flags & IW_MICFAILURE_GROUP);
-       wpa_supplicant_event(ctx, EVENT_MICHAEL_MIC_FAILURE, &data);
-
-       return 0;
-}
-
-
-static int wpa_driver_nl80211_event_wireless_pmkidcand(
-       struct wpa_driver_nl80211_data *drv, const char *ev, size_t len)
-{
-       const struct iw_pmkid_cand *cand;
-       union wpa_event_data data;
-       const u8 *addr;
-
-       if (len < sizeof(*cand))
-               return -1;
-
-       cand = (const struct iw_pmkid_cand *) ev;
-       addr = (const u8 *) cand->bssid.sa_data;
-
-       wpa_printf(MSG_DEBUG, "PMKID candidate wireless event: "
-                  "flags=0x%x index=%d bssid=" MACSTR, cand->flags,
-                  cand->index, MAC2STR(addr));
-
-       os_memset(&data, 0, sizeof(data));
-       os_memcpy(data.pmkid_candidate.bssid, addr, ETH_ALEN);
-       data.pmkid_candidate.index = cand->index;
-       data.pmkid_candidate.preauth = cand->flags & IW_PMKID_CAND_PREAUTH;
-       wpa_supplicant_event(drv->ctx, EVENT_PMKID_CANDIDATE, &data);
-
-       return 0;
-}
-
-
-#ifdef WEXT_COMPAT
-static int wpa_driver_nl80211_event_wireless_assocreqie(
-       struct wpa_driver_nl80211_data *drv, const char *ev, int len)
-{
-       if (len < 0)
-               return -1;
-
-       wpa_hexdump(MSG_DEBUG, "AssocReq IE wireless event", (const u8 *) ev,
-                   len);
-       os_free(drv->assoc_req_ies);
-       drv->assoc_req_ies = os_malloc(len);
-       if (drv->assoc_req_ies == NULL) {
-               drv->assoc_req_ies_len = 0;
-               return -1;
-       }
-       os_memcpy(drv->assoc_req_ies, ev, len);
-       drv->assoc_req_ies_len = len;
-
-       return 0;
-}
-
-
-static int wpa_driver_nl80211_event_wireless_assocrespie(
-       struct wpa_driver_nl80211_data *drv, const char *ev, int len)
-{
-       if (len < 0)
-               return -1;
-
-       wpa_hexdump(MSG_DEBUG, "AssocResp IE wireless event", (const u8 *) ev,
-                   len);
-       os_free(drv->assoc_resp_ies);
-       drv->assoc_resp_ies = os_malloc(len);
-       if (drv->assoc_resp_ies == NULL) {
-               drv->assoc_resp_ies_len = 0;
+       if (!drv->associated)
                return -1;
-       }
-       os_memcpy(drv->assoc_resp_ies, ev, len);
-       drv->assoc_resp_ies_len = len;
-
-       return 0;
-}
-
-
-static void wpa_driver_nl80211_event_assoc_ies(struct wpa_driver_nl80211_data *drv)
-{
-       union wpa_event_data data;
-
-       if (drv->assoc_req_ies == NULL && drv->assoc_resp_ies == NULL)
-               return;
-
-       os_memset(&data, 0, sizeof(data));
-       if (drv->assoc_req_ies) {
-               data.assoc_info.req_ies = drv->assoc_req_ies;
-               drv->assoc_req_ies = NULL;
-               data.assoc_info.req_ies_len = drv->assoc_req_ies_len;
-       }
-       if (drv->assoc_resp_ies) {
-               data.assoc_info.resp_ies = drv->assoc_resp_ies;
-               drv->assoc_resp_ies = NULL;
-               data.assoc_info.resp_ies_len = drv->assoc_resp_ies_len;
-       }
-
-       wpa_supplicant_event(drv->ctx, EVENT_ASSOCINFO, &data);
-
-       os_free(data.assoc_info.req_ies);
-       os_free(data.assoc_info.resp_ies);
-}
-#endif /* WEXT_COMPAT */
-
-
-static void wpa_driver_nl80211_event_wireless(struct wpa_driver_nl80211_data *drv,
-                                          void *ctx, char *data, int len)
-{
-       struct iw_event iwe_buf, *iwe = &iwe_buf;
-       char *pos, *end, *custom;
-#ifdef WEXT_COMPAT
-       char *buf;
-#endif /* WEXT_COMPAT */
-
-       pos = data;
-       end = data + len;
-
-       while (pos + IW_EV_LCP_LEN <= end) {
-               /* Event data may be unaligned, so make a local, aligned copy
-                * before processing. */
-               os_memcpy(&iwe_buf, pos, IW_EV_LCP_LEN);
-               wpa_printf(MSG_DEBUG, "Wireless event: cmd=0x%x len=%d",
-                          iwe->cmd, iwe->len);
-               if (iwe->len <= IW_EV_LCP_LEN)
-                       return;
-
-               custom = pos + IW_EV_POINT_LEN;
-               if (drv->we_version_compiled > 18 &&
-                   (iwe->cmd == IWEVMICHAELMICFAILURE ||
-                    iwe->cmd == IWEVCUSTOM ||
-                    iwe->cmd == IWEVASSOCREQIE ||
-                    iwe->cmd == IWEVASSOCRESPIE ||
-                    iwe->cmd == IWEVPMKIDCAND)) {
-                       /* WE-19 removed the pointer from struct iw_point */
-                       char *dpos = (char *) &iwe_buf.u.data.length;
-                       int dlen = dpos - (char *) &iwe_buf;
-                       os_memcpy(dpos, pos + IW_EV_LCP_LEN,
-                                 sizeof(struct iw_event) - dlen);
-               } else {
-                       os_memcpy(&iwe_buf, pos, sizeof(struct iw_event));
-                       custom += IW_EV_POINT_OFF;
-               }
-
-               switch (iwe->cmd) {
-#ifdef WEXT_COMPAT
-               case SIOCGIWAP:
-                       if (drv->capa.flags & WPA_DRIVER_FLAGS_SME)
-                               break;
-                       wpa_printf(MSG_DEBUG, "Wireless event: new AP: "
-                                  MACSTR,
-                                  MAC2STR((u8 *) iwe->u.ap_addr.sa_data));
-                       if (is_zero_ether_addr(
-                                   (const u8 *) iwe->u.ap_addr.sa_data) ||
-                           os_memcmp(iwe->u.ap_addr.sa_data,
-                                     "\x44\x44\x44\x44\x44\x44", ETH_ALEN) ==
-                           0) {
-                               os_free(drv->assoc_req_ies);
-                               drv->assoc_req_ies = NULL;
-                               os_free(drv->assoc_resp_ies);
-                               drv->assoc_resp_ies = NULL;
-                               wpa_supplicant_event(ctx, EVENT_DISASSOC,
-                                                    NULL);
-                       
-                       } else {
-                               wpa_driver_nl80211_event_assoc_ies(drv);
-                               wpa_supplicant_event(ctx, EVENT_ASSOC, NULL);
-                       }
-                       break;
-#endif /* WEXT_COMPAT */
-               case IWEVMICHAELMICFAILURE:
-                       wpa_driver_nl80211_event_wireless_michaelmicfailure(
-                               ctx, custom, iwe->u.data.length);
-                       break;
-#ifdef WEXT_COMPAT
-               case IWEVCUSTOM:
-                       if (drv->capa.flags & WPA_DRIVER_FLAGS_SME)
-                               break;
-                       if (custom + iwe->u.data.length > end)
-                               return;
-                       buf = os_malloc(iwe->u.data.length + 1);
-                       if (buf == NULL)
-                               return;
-                       os_memcpy(buf, custom, iwe->u.data.length);
-                       buf[iwe->u.data.length] = '\0';
-                       wpa_driver_nl80211_event_wireless_custom(ctx, buf);
-                       os_free(buf);
-                       break;
-               case IWEVASSOCREQIE:
-                       if (drv->capa.flags & WPA_DRIVER_FLAGS_SME)
-                               break;
-                       wpa_driver_nl80211_event_wireless_assocreqie(
-                               drv, custom, iwe->u.data.length);
-                       break;
-               case IWEVASSOCRESPIE:
-                       if (drv->capa.flags & WPA_DRIVER_FLAGS_SME)
-                               break;
-                       wpa_driver_nl80211_event_wireless_assocrespie(
-                               drv, custom, iwe->u.data.length);
-                       break;
-#endif /* WEXT_COMPAT */
-               case IWEVPMKIDCAND:
-                       wpa_driver_nl80211_event_wireless_pmkidcand(
-                               drv, custom, iwe->u.data.length);
-                       break;
-               }
-
-               pos += iwe->len;
-       }
+       os_memcpy(ssid, drv->ssid, drv->ssid_len);
+       return drv->ssid_len;
 }
 
 
@@ -882,11 +426,7 @@ static void wpa_driver_nl80211_event_rtm_newlink(struct wpa_driver_nl80211_data
 
        rta_len = RTA_ALIGN(sizeof(struct rtattr));
        while (RTA_OK(attr, attrlen)) {
-               if (attr->rta_type == IFLA_WIRELESS) {
-                       wpa_driver_nl80211_event_wireless(
-                               drv, ctx, ((char *) attr) + rta_len,
-                               attr->rta_len - rta_len);
-               } else if (attr->rta_type == IFLA_IFNAME) {
+               if (attr->rta_type == IFLA_IFNAME) {
                        wpa_driver_nl80211_event_link(
                                drv, ctx,
                                ((char *) attr) + rta_len,
@@ -931,7 +471,7 @@ static void wpa_driver_nl80211_event_rtm_dellink(struct wpa_driver_nl80211_data
 }
 
 
-static void wpa_driver_nl80211_event_receive_wext(int sock, void *eloop_ctx,
+static void wpa_driver_nl80211_event_receive_link(int sock, void *eloop_ctx,
                                                  void *sock_ctx)
 {
        char buf[8192];
@@ -1266,338 +806,111 @@ nla_put_failure:
 }
 
 
-#ifdef CONFIG_CLIENT_MLME
-
-static int nl80211_set_vif(struct wpa_driver_nl80211_data *drv,
-                          int drop_unencrypted, int userspace_mlme)
-{
-#ifdef NL80211_CMD_SET_VIF
-       struct nl_msg *msg;
-       int ret = -1;
-
-       msg = nlmsg_alloc();
-       if (!msg)
-               return -ENOMEM;
-
-       genlmsg_put(msg, 0, 0, genl_family_get_id(drv->nl80211), 0, 0,
-                   NL80211_CMD_SET_VIF, 0);
-
-       if (drop_unencrypted >= 0)
-               NLA_PUT_U8(msg, NL80211_ATTR_VIF_DROP_UNENCRYPTED,
-                          drop_unencrypted);
-       if (userspace_mlme >= 0)
-               NLA_PUT_U8(msg, NL80211_ATTR_VIF_USERSPACE_MLME,
-                          userspace_mlme);
+struct wiphy_info_data {
+       int max_scan_ssids;
+       int ap_supported;
+};
 
-       ret = 0;
 
-       NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, drv->ifindex);
+static int wiphy_info_handler(struct nl_msg *msg, void *arg)
+{
+       struct nlattr *tb[NL80211_ATTR_MAX + 1];
+       struct genlmsghdr *gnlh = nlmsg_data(nlmsg_hdr(msg));
+       struct wiphy_info_data *info = arg;
 
-       ret = send_and_recv_msgs(drv, msg, NULL, NULL);
-       return ret;
+       nla_parse(tb, NL80211_ATTR_MAX, genlmsg_attrdata(gnlh, 0),
+                 genlmsg_attrlen(gnlh, 0), NULL);
 
-nla_put_failure:
-       return -ENOBUFS;
-#else /* NL80211_CMD_SET_VIF */
-       return -1;
-#endif /* NL80211_CMD_SET_VIF */
-}
+       if (tb[NL80211_ATTR_MAX_NUM_SCAN_SSIDS])
+               info->max_scan_ssids =
+                       nla_get_u8(tb[NL80211_ATTR_MAX_NUM_SCAN_SSIDS]);
 
+       if (tb[NL80211_ATTR_SUPPORTED_IFTYPES]) {
+               struct nlattr *nl_mode;
+               int i;
+               nla_for_each_nested(nl_mode,
+                                   tb[NL80211_ATTR_SUPPORTED_IFTYPES], i) {
+                       if (nl_mode->nla_type == NL80211_IFTYPE_AP) {
+                               info->ap_supported = 1;
+                               break;
+                       }
+               }
+       }
 
-static int wpa_driver_nl80211_set_userspace_mlme(
-       struct wpa_driver_nl80211_data *drv, int enabled)
-{
-       return nl80211_set_vif(drv, -1, enabled);
+       return NL_SKIP;
 }
 
 
-static void nl80211_remove_iface(struct wpa_driver_nl80211_data *drv,
-                                int ifidx)
+static int wpa_driver_nl80211_get_info(struct wpa_driver_nl80211_data *drv,
+                                      struct wiphy_info_data *info)
 {
        struct nl_msg *msg;
 
+       os_memset(info, 0, sizeof(*info));
        msg = nlmsg_alloc();
        if (!msg)
-               goto nla_put_failure;
+               return -1;
 
        genlmsg_put(msg, 0, 0, genl_family_get_id(drv->nl80211), 0,
-                   0, NL80211_CMD_DEL_INTERFACE, 0);
-       NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, ifidx);
-       if (send_and_recv_msgs(drv, msg, NULL, NULL) == 0)
-               return;
+                   0, NL80211_CMD_GET_WIPHY, 0);
+
+       NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, drv->ifindex);
+
+       if (send_and_recv_msgs(drv, msg, wiphy_info_handler, info) == 0)
+               return 0;
+       msg = NULL;
 nla_put_failure:
-       wpa_printf(MSG_ERROR, "nl80211: Failed to remove interface.");
+       nlmsg_free(msg);
+       return -1;
 }
 
 
-static int nl80211_create_iface(struct wpa_driver_nl80211_data *drv,
-                               const char *ifname, enum nl80211_iftype iftype)
+static void wpa_driver_nl80211_capa(struct wpa_driver_nl80211_data *drv)
 {
-       struct nl_msg *msg, *flags = NULL;
-       int ifidx, err;
-       int ret = -ENOBUFS;
-
-       msg = nlmsg_alloc();
-       if (!msg)
-               return -1;
+       struct wiphy_info_data info;
+       if (wpa_driver_nl80211_get_info(drv, &info))
+               return;
+       drv->has_capability = 1;
+       /* For now, assume TKIP, CCMP, WPA, WPA2 are supported */
+       drv->capa.key_mgmt = WPA_DRIVER_CAPA_KEY_MGMT_WPA |
+               WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK |
+               WPA_DRIVER_CAPA_KEY_MGMT_WPA2 |
+               WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK;
+       drv->capa.enc = WPA_DRIVER_CAPA_ENC_WEP40 |
+               WPA_DRIVER_CAPA_ENC_WEP104 |
+               WPA_DRIVER_CAPA_ENC_TKIP |
+               WPA_DRIVER_CAPA_ENC_CCMP;
 
-       genlmsg_put(msg, 0, 0, genl_family_get_id(drv->nl80211), 0,
-                   0, NL80211_CMD_NEW_INTERFACE, 0);
-       NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, if_nametoindex(drv->ifname));
-       NLA_PUT_STRING(msg, NL80211_ATTR_IFNAME, ifname);
-       NLA_PUT_U32(msg, NL80211_ATTR_IFTYPE, iftype);
-
-       if (iftype == NL80211_IFTYPE_MONITOR) {
-               flags = nlmsg_alloc();
-               if (!flags)
-                       goto nla_put_failure;
+       drv->capa.max_scan_ssids = info.max_scan_ssids;
+       if (info.ap_supported)
+               drv->capa.flags |= WPA_DRIVER_FLAGS_AP;
+}
 
-               NLA_PUT_FLAG(flags, NL80211_MNTR_FLAG_COOK_FRAMES);
 
-               err = nla_put_nested(msg, NL80211_ATTR_MNTR_FLAGS, flags);
+/**
+ * wpa_driver_nl80211_init - Initialize nl80211 driver interface
+ * @ctx: context to be used when calling wpa_supplicant functions,
+ * e.g., wpa_supplicant_event()
+ * @ifname: interface name, e.g., wlan0
+ * Returns: Pointer to private data, %NULL on failure
+ */
+static void * wpa_driver_nl80211_init(void *ctx, const char *ifname)
+{
+       int s, ret;
+       struct sockaddr_nl local;
+       struct wpa_driver_nl80211_data *drv;
 
-               nlmsg_free(flags);
+       drv = os_zalloc(sizeof(*drv));
+       if (drv == NULL)
+               return NULL;
+       drv->ctx = ctx;
+       os_strlcpy(drv->ifname, ifname, sizeof(drv->ifname));
 
-               if (err)
-                       goto nla_put_failure;
-       }
-
-       ret = send_and_recv_msgs(drv, msg, NULL, NULL);
-       if (ret) {
-       nla_put_failure:
-               wpa_printf(MSG_ERROR, "nl80211: Failed to create interface %d",
-                          ret);
-               return ret;
-       }
-
-       ifidx = if_nametoindex(ifname);
-       if (ifidx <= 0)
-               return -1;
-
-       return ifidx;
-}
-
-
-static void handle_monitor_read(int sock, void *eloop_ctx, void *sock_ctx)
-{
-       struct wpa_driver_nl80211_data *drv = eloop_ctx;
-       int len;
-       unsigned char buf[3000];
-       struct ieee80211_radiotap_iterator iter;
-       int ret;
-       int injected = 0, failed = 0, rxflags = 0;
-       struct ieee80211_rx_status rx_status;
-
-       len = recv(sock, buf, sizeof(buf), 0);
-       if (len < 0) {
-               perror("recv");
-               return;
-       }
-
-       if (ieee80211_radiotap_iterator_init(&iter, (void *) buf, len)) {
-               wpa_printf(MSG_DEBUG, "nl80211: received invalid radiotap "
-                          "frame");
-               return;
-       }
-
-       os_memset(&rx_status, 0, sizeof(rx_status));
-
-       while (1) {
-               ret = ieee80211_radiotap_iterator_next(&iter);
-               if (ret == -ENOENT)
-                       break;
-               if (ret) {
-                       wpa_printf(MSG_DEBUG, "nl80211: received invalid "
-                                  "radiotap frame (%d)", ret);
-                       return;
-               }
-               switch (iter.this_arg_index) {
-               case IEEE80211_RADIOTAP_FLAGS:
-                       if (*iter.this_arg & IEEE80211_RADIOTAP_F_FCS)
-                               len -= 4;
-                       break;
-               case IEEE80211_RADIOTAP_RX_FLAGS:
-                       rxflags = 1;
-                       break;
-               case IEEE80211_RADIOTAP_TX_FLAGS:
-                       injected = 1;
-                       failed = le_to_host16((*(u16 *) iter.this_arg)) &
-                               IEEE80211_RADIOTAP_F_TX_FAIL;
-                       break;
-               case IEEE80211_RADIOTAP_DATA_RETRIES:
-                       break;
-               case IEEE80211_RADIOTAP_CHANNEL:
-                       /* TODO convert from freq/flags to channel number
-                        * rx_status.channel = XXX;
-                       */
-                       break;
-               case IEEE80211_RADIOTAP_RATE:
-                       break;
-               case IEEE80211_RADIOTAP_DB_ANTSIGNAL:
-                       rx_status.ssi = *iter.this_arg;
-                       break;
-               }
-       }
-
-       if (rxflags && injected)
-               return;
-
-       if (!injected) {
-               wpa_supplicant_sta_rx(drv->ctx, buf + iter.max_length,
-                                     len - iter.max_length, &rx_status);
-       } else if (failed) {
-               /* TX failure callback */
-       } else {
-               /* TX success (ACK) callback */
-       }
-}
-
-
-static int wpa_driver_nl80211_create_monitor_interface(
-       struct wpa_driver_nl80211_data *drv)
-{
-       char buf[IFNAMSIZ];
-       struct sockaddr_ll ll;
-       int optval, flags;
-       socklen_t optlen;
-
-       os_snprintf(buf, IFNAMSIZ, "mon.%s", drv->ifname);
-       buf[IFNAMSIZ - 1] = '\0';
-
-       drv->monitor_ifidx =
-               nl80211_create_iface(drv, buf, NL80211_IFTYPE_MONITOR);
-
-       if (drv->monitor_ifidx < 0)
-               return -1;
-
-       if (wpa_driver_nl80211_get_ifflags_ifname(drv, buf, &flags) != 0 ||
-           wpa_driver_nl80211_set_ifflags_ifname(drv, buf, flags | IFF_UP) !=
-           0) {
-               wpa_printf(MSG_ERROR, "nl80211: Could not set interface '%s' "
-                          "UP", buf);
-               goto error;
-       }
-
-       os_memset(&ll, 0, sizeof(ll));
-       ll.sll_family = AF_PACKET;
-       ll.sll_ifindex = drv->monitor_ifidx;
-       drv->monitor_sock = socket(PF_PACKET, SOCK_RAW, htons(ETH_P_ALL));
-       if (drv->monitor_sock < 0) {
-               perror("socket[PF_PACKET,SOCK_RAW]");
-               goto error;
-       }
-
-       if (bind(drv->monitor_sock, (struct sockaddr *) &ll,
-                sizeof(ll)) < 0) {
-               perror("monitor socket bind");
-               goto error;
-       }
-
-       optlen = sizeof(optval);
-       optval = 20;
-       if (setsockopt
-           (drv->monitor_sock, SOL_SOCKET, SO_PRIORITY, &optval, optlen)) {
-               perror("Failed to set socket priority");
-               goto error;
-       }
-
-       if (eloop_register_read_sock(drv->monitor_sock, handle_monitor_read,
-                                    drv, NULL)) {
-               wpa_printf(MSG_ERROR, "nl80211: Could not register monitor "
-                          "read socket");
-               goto error;
-       }
-
-       return 0;
-
- error:
-       nl80211_remove_iface(drv, drv->monitor_ifidx);
-       return -1;
-}
-
-#endif /* CONFIG_CLIENT_MLME */
-
-
-struct wiphy_info_data {
-       int max_scan_ssids;
-};
-
-
-static int wiphy_info_handler(struct nl_msg *msg, void *arg)
-{
-       struct nlattr *tb[NL80211_ATTR_MAX + 1];
-       struct genlmsghdr *gnlh = nlmsg_data(nlmsg_hdr(msg));
-       struct wiphy_info_data *info = arg;
-
-       nla_parse(tb, NL80211_ATTR_MAX, genlmsg_attrdata(gnlh, 0),
-                 genlmsg_attrlen(gnlh, 0), NULL);
-
-       if (tb[NL80211_ATTR_MAX_NUM_SCAN_SSIDS])
-               info->max_scan_ssids =
-                       nla_get_u8(tb[NL80211_ATTR_MAX_NUM_SCAN_SSIDS]);
-
-       return NL_SKIP;
-}
-
-
-static int wpa_driver_nl80211_get_info(struct wpa_driver_nl80211_data *drv,
-                                      struct wiphy_info_data *info)
-{
-       struct nl_msg *msg;
-
-       os_memset(info, 0, sizeof(*info));
-       msg = nlmsg_alloc();
-       if (!msg)
-               return -1;
-
-       genlmsg_put(msg, 0, 0, genl_family_get_id(drv->nl80211), 0,
-                   0, NL80211_CMD_GET_WIPHY, 0);
-
-       NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, drv->ifindex);
-
-       if (send_and_recv_msgs(drv, msg, wiphy_info_handler, info) == 0)
-               return 0;
-       msg = NULL;
-nla_put_failure:
-       nlmsg_free(msg);
-       return -1;
-}
-
-
-static void wpa_driver_nl80211_capa(struct wpa_driver_nl80211_data *drv)
-{
-       struct wiphy_info_data info;
-       if (wpa_driver_nl80211_get_info(drv, &info))
-               return;
-       drv->has_capability = 1;
-       drv->capa.max_scan_ssids = info.max_scan_ssids;
-}
-
-
-/**
- * wpa_driver_nl80211_init - Initialize nl80211 driver interface
- * @ctx: context to be used when calling wpa_supplicant functions,
- * e.g., wpa_supplicant_event()
- * @ifname: interface name, e.g., wlan0
- * Returns: Pointer to private data, %NULL on failure
- */
-static void * wpa_driver_nl80211_init(void *ctx, const char *ifname)
-{
-       int s, ret;
-       struct sockaddr_nl local;
-       struct wpa_driver_nl80211_data *drv;
-
-       drv = os_zalloc(sizeof(*drv));
-       if (drv == NULL)
-               return NULL;
-       drv->ctx = ctx;
-       os_strlcpy(drv->ifname, ifname, sizeof(drv->ifname));
-
-       drv->nl_cb = nl_cb_alloc(NL_CB_DEFAULT);
-       if (drv->nl_cb == NULL) {
-               wpa_printf(MSG_ERROR, "nl80211: Failed to allocate netlink "
-                          "callbacks");
-               goto err1;
+       drv->nl_cb = nl_cb_alloc(NL_CB_DEFAULT);
+       if (drv->nl_cb == NULL) {
+               wpa_printf(MSG_ERROR, "nl80211: Failed to allocate netlink "
+                          "callbacks");
+               goto err1;
        }
 
        drv->nl_handle = nl_handle_alloc_cb(drv->nl_cb);
@@ -1640,15 +953,6 @@ static void * wpa_driver_nl80211_init(void *ctx, const char *ifname)
        ret = nl_get_multicast_id(drv, "nl80211", "mlme");
        if (ret >= 0)
                ret = nl_socket_add_membership(drv->nl_handle, ret);
-#ifdef WEXT_COMPAT
-       if (ret < 0) {
-               wpa_printf(MSG_DEBUG, "nl80211: Could not add multicast "
-                          "membership for mlme events: %d (%s)",
-                          ret, strerror(-ret));
-               /* Use WEXT for association request */
-       } else
-               drv->capa.flags |= WPA_DRIVER_FLAGS_SME;
-#else /* WEXT_COMPAT */
        if (ret < 0) {
                wpa_printf(MSG_ERROR, "nl80211: Could not add multicast "
                           "membership for mlme events: %d (%s)",
@@ -1656,7 +960,6 @@ static void * wpa_driver_nl80211_init(void *ctx, const char *ifname)
                goto err4;
        }
        drv->capa.flags |= WPA_DRIVER_FLAGS_SME;
-#endif /* WEXT_COMPAT */
 
        eloop_register_read_sock(nl_socket_get_fd(drv->nl_handle),
                                 wpa_driver_nl80211_event_receive, drv, ctx);
@@ -1682,9 +985,9 @@ static void * wpa_driver_nl80211_init(void *ctx, const char *ifname)
                goto err6;
        }
 
-       eloop_register_read_sock(s, wpa_driver_nl80211_event_receive_wext, drv,
+       eloop_register_read_sock(s, wpa_driver_nl80211_event_receive_link, drv,
                                 ctx);
-       drv->wext_event_sock = s;
+       drv->link_event_sock = s;
 
        if (wpa_driver_nl80211_finish_drv_init(drv))
                goto err7;
@@ -1692,8 +995,8 @@ static void * wpa_driver_nl80211_init(void *ctx, const char *ifname)
        return drv;
 
 err7:
-       eloop_unregister_read_sock(drv->wext_event_sock);
-       close(drv->wext_event_sock);
+       eloop_unregister_read_sock(drv->link_event_sock);
+       close(drv->link_event_sock);
 err6:
        close(drv->ioctl_sock);
 err5:
@@ -1715,6 +1018,13 @@ wpa_driver_nl80211_finish_drv_init(struct wpa_driver_nl80211_data *drv)
 {
        int flags;
 
+       drv->ifindex = if_nametoindex(drv->ifname);
+
+       if (wpa_driver_nl80211_set_mode(drv, 0) < 0) {
+               wpa_printf(MSG_DEBUG, "nl80211: Could not configure driver to "
+                          "use managed mode");
+       }
+
        if (wpa_driver_nl80211_get_ifflags(drv, &flags) != 0) {
                wpa_printf(MSG_ERROR, "Could not get interface '%s' flags",
                           drv->ifname);
@@ -1728,19 +1038,6 @@ wpa_driver_nl80211_finish_drv_init(struct wpa_driver_nl80211_data *drv)
                }
        }
 
-       /*
-        * Make sure that the driver does not have any obsolete PMKID entries.
-        */
-       wpa_driver_nl80211_flush_pmkid(drv);
-
-       if (wpa_driver_nl80211_set_mode(drv, 0) < 0) {
-               printf("Could not configure driver to use managed mode\n");
-       }
-
-       wpa_driver_nl80211_get_range(drv);
-
-       drv->ifindex = if_nametoindex(drv->ifname);
-
        wpa_driver_nl80211_capa(drv);
 
        wpa_driver_nl80211_send_oper_ifla(drv, 1, IF_OPER_DORMANT);
@@ -1761,39 +1058,20 @@ static void wpa_driver_nl80211_deinit(void *priv)
        struct wpa_driver_nl80211_data *drv = priv;
        int flags;
 
-#ifdef CONFIG_CLIENT_MLME
-       if (drv->monitor_sock >= 0) {
-               eloop_unregister_read_sock(drv->monitor_sock);
-               close(drv->monitor_sock);
-       }
-       if (drv->monitor_ifidx > 0)
-               nl80211_remove_iface(drv, drv->monitor_ifidx);
-       if (drv->capa.flags & WPA_DRIVER_FLAGS_USER_SPACE_MLME)
-               wpa_driver_nl80211_set_userspace_mlme(drv, 0);
-#endif /* CONFIG_CLIENT_MLME */
-
        eloop_cancel_timeout(wpa_driver_nl80211_scan_timeout, drv, drv->ctx);
 
-       /*
-        * Clear possibly configured driver parameters in order to make it
-        * easier to use the driver after wpa_supplicant has been terminated.
-        */
-       (void) wpa_driver_nl80211_set_bssid(drv,
-                                        (u8 *) "\x00\x00\x00\x00\x00\x00");
+       wpa_driver_nl80211_set_auth_param(drv, IW_AUTH_DROP_UNENCRYPTED, 0);
 
        wpa_driver_nl80211_send_oper_ifla(priv, 0, IF_OPER_UP);
 
-       eloop_unregister_read_sock(drv->wext_event_sock);
+       eloop_unregister_read_sock(drv->link_event_sock);
 
        if (wpa_driver_nl80211_get_ifflags(drv, &flags) == 0)
                (void) wpa_driver_nl80211_set_ifflags(drv, flags & ~IFF_UP);
+       wpa_driver_nl80211_set_mode(drv, 0);
 
-       close(drv->wext_event_sock);
+       close(drv->link_event_sock);
        close(drv->ioctl_sock);
-#ifdef WEXT_COMPAT
-       os_free(drv->assoc_req_ies);
-       os_free(drv->assoc_resp_ies);
-#endif /* WEXT_COMPAT */
 
        eloop_unregister_read_sock(nl_socket_get_fd(drv->nl_handle));
        genl_family_put(drv->nl80211);
@@ -1831,14 +1109,16 @@ static int wpa_driver_nl80211_scan(void *priv,
 {
        struct wpa_driver_nl80211_data *drv = priv;
        int ret = 0, timeout;
-       struct nl_msg *msg, *ssids;
+       struct nl_msg *msg, *ssids, *freqs;
        size_t i;
 
        msg = nlmsg_alloc();
        ssids = nlmsg_alloc();
-       if (!msg || !ssids) {
+       freqs = nlmsg_alloc();
+       if (!msg || !ssids || !freqs) {
                nlmsg_free(msg);
                nlmsg_free(ssids);
+               nlmsg_free(freqs);
                return -1;
        }
 
@@ -1859,6 +1139,12 @@ static int wpa_driver_nl80211_scan(void *priv,
                        params->extra_ies);
        }
 
+       if (params->freqs) {
+               for (i = 0; params->freqs[i]; i++)
+                       NLA_PUT_U32(freqs, i + 1, params->freqs[i]);
+               nla_put_nested(msg, NL80211_ATTR_SCAN_FREQUENCIES, freqs);
+       }
+
        ret = send_and_recv_msgs(drv, msg, NULL, NULL);
        msg = NULL;
        if (ret) {
@@ -1887,6 +1173,7 @@ static int wpa_driver_nl80211_scan(void *priv,
 nla_put_failure:
        nlmsg_free(ssids);
        nlmsg_free(msg);
+       nlmsg_free(freqs);
        return ret;
 }
 
@@ -2008,84 +1295,6 @@ nla_put_failure:
 }
 
 
-static int wpa_driver_nl80211_get_range(void *priv)
-{
-       struct wpa_driver_nl80211_data *drv = priv;
-       struct iw_range *range;
-       struct iwreq iwr;
-       int minlen;
-       size_t buflen;
-
-       /*
-        * Use larger buffer than struct iw_range in order to allow the
-        * structure to grow in the future.
-        */
-       buflen = sizeof(struct iw_range) + 500;
-       range = os_zalloc(buflen);
-       if (range == NULL)
-               return -1;
-
-       os_memset(&iwr, 0, sizeof(iwr));
-       os_strlcpy(iwr.ifr_name, drv->ifname, IFNAMSIZ);
-       iwr.u.data.pointer = (caddr_t) range;
-       iwr.u.data.length = buflen;
-
-       minlen = ((char *) &range->enc_capa) - (char *) range +
-               sizeof(range->enc_capa);
-
-       if (ioctl(drv->ioctl_sock, SIOCGIWRANGE, &iwr) < 0) {
-               perror("ioctl[SIOCGIWRANGE]");
-               os_free(range);
-               return -1;
-       } else if (iwr.u.data.length >= minlen &&
-                  range->we_version_compiled >= 18) {
-               wpa_printf(MSG_DEBUG, "SIOCGIWRANGE: WE(compiled)=%d "
-                          "WE(source)=%d enc_capa=0x%x",
-                          range->we_version_compiled,
-                          range->we_version_source,
-                          range->enc_capa);
-               drv->has_capability = 1;
-               drv->we_version_compiled = range->we_version_compiled;
-               if (range->enc_capa & IW_ENC_CAPA_WPA) {
-                       drv->capa.key_mgmt |= WPA_DRIVER_CAPA_KEY_MGMT_WPA |
-                               WPA_DRIVER_CAPA_KEY_MGMT_WPA_PSK;
-               }
-               if (range->enc_capa & IW_ENC_CAPA_WPA2) {
-                       drv->capa.key_mgmt |= WPA_DRIVER_CAPA_KEY_MGMT_WPA2 |
-                               WPA_DRIVER_CAPA_KEY_MGMT_WPA2_PSK;
-               }
-               drv->capa.enc |= WPA_DRIVER_CAPA_ENC_WEP40 |
-                       WPA_DRIVER_CAPA_ENC_WEP104;
-               if (range->enc_capa & IW_ENC_CAPA_CIPHER_TKIP)
-                       drv->capa.enc |= WPA_DRIVER_CAPA_ENC_TKIP;
-               if (range->enc_capa & IW_ENC_CAPA_CIPHER_CCMP)
-                       drv->capa.enc |= WPA_DRIVER_CAPA_ENC_CCMP;
-               wpa_printf(MSG_DEBUG, "  capabilities: key_mgmt 0x%x enc 0x%x",
-                          drv->capa.key_mgmt, drv->capa.enc);
-       } else {
-               wpa_printf(MSG_DEBUG, "SIOCGIWRANGE: too old (short) data - "
-                          "assuming WPA is not supported");
-       }
-
-       os_free(range);
-       return 0;
-}
-
-
-#ifdef WEXT_COMPAT
-static int wpa_driver_nl80211_set_wpa(void *priv, int enabled)
-{
-       struct wpa_driver_nl80211_data *drv = priv;
-       if (drv->capa.flags & WPA_DRIVER_FLAGS_SME)
-               return 0;
-       wpa_printf(MSG_DEBUG, "%s", __FUNCTION__);
-
-       return wpa_driver_nl80211_set_auth_param(drv, IW_AUTH_WPA_ENABLED,
-                                             enabled);
-}
-#endif /* WEXT_COMPAT */
-
-
 static int wpa_driver_nl80211_set_key(void *priv, wpa_alg alg,
                                      const u8 *addr, int key_idx,
                                      int set_tx, const u8 *seq,
@@ -2173,63 +1382,6 @@ nla_put_failure:
 }
 
 
-#ifdef WEXT_COMPAT
-static int wpa_driver_nl80211_set_countermeasures(void *priv,
-                                              int enabled)
-{
-       struct wpa_driver_nl80211_data *drv = priv;
-       if (drv->capa.flags & WPA_DRIVER_FLAGS_SME)
-               return 0;
-       wpa_printf(MSG_DEBUG, "%s", __FUNCTION__);
-       return wpa_driver_nl80211_set_auth_param(drv,
-                                             IW_AUTH_TKIP_COUNTERMEASURES,
-                                             enabled);
-}
-#endif /* WEXT_COMPAT */
-
-
-static int wpa_driver_nl80211_set_drop_unencrypted(void *priv,
-                                               int enabled)
-{
-       struct wpa_driver_nl80211_data *drv = priv;
-       wpa_printf(MSG_DEBUG, "%s", __FUNCTION__);
-#ifdef WEXT_COMPAT
-       drv->use_crypt = enabled;
-#endif /* WEXT_COMPAT */
-       return wpa_driver_nl80211_set_auth_param(drv, IW_AUTH_DROP_UNENCRYPTED,
-                                             enabled);
-}
-
-
-#ifdef WEXT_COMPAT
-static int wpa_driver_nl80211_mlme_wext(struct wpa_driver_nl80211_data *drv,
-                                       const u8 *addr, int cmd,
-                                       int reason_code)
-{
-       struct iwreq iwr;
-       struct iw_mlme mlme;
-       int ret = 0;
-
-       os_memset(&iwr, 0, sizeof(iwr));
-       os_strlcpy(iwr.ifr_name, drv->ifname, IFNAMSIZ);
-       os_memset(&mlme, 0, sizeof(mlme));
-       mlme.cmd = cmd;
-       mlme.reason_code = reason_code;
-       mlme.addr.sa_family = ARPHRD_ETHER;
-       os_memcpy(mlme.addr.sa_data, addr, ETH_ALEN);
-       iwr.u.data.pointer = (caddr_t) &mlme;
-       iwr.u.data.length = sizeof(mlme);
-
-       if (ioctl(drv->ioctl_sock, SIOCSIWMLME, &iwr) < 0) {
-               perror("ioctl[SIOCSIWMLME]");
-               ret = -1;
-       }
-
-       return ret;
-}
-#endif /* WEXT_COMPAT */
-
-
 static int wpa_driver_nl80211_mlme(struct wpa_driver_nl80211_data *drv,
                                   const u8 *addr, int cmd, u16 reason_code)
 {
@@ -2266,12 +1418,6 @@ static int wpa_driver_nl80211_deauthenticate(void *priv, const u8 *addr,
 {
        struct wpa_driver_nl80211_data *drv = priv;
        wpa_printf(MSG_DEBUG, "%s", __func__);
-#ifdef WEXT_COMPAT
-       if (!(drv->capa.flags & WPA_DRIVER_FLAGS_SME))
-               return wpa_driver_nl80211_mlme_wext(drv, addr, IW_MLME_DEAUTH,
-                                                   reason_code);
-#endif /* WEXT_COMPAT */
-
        return wpa_driver_nl80211_mlme(drv, addr, NL80211_CMD_DEAUTHENTICATE,
                                       reason_code);
 }
@@ -2282,251 +1428,35 @@ static int wpa_driver_nl80211_disassociate(void *priv, const u8 *addr,
 {
        struct wpa_driver_nl80211_data *drv = priv;
        wpa_printf(MSG_DEBUG, "%s", __func__);
-#ifdef WEXT_COMPAT
-       if (!(drv->capa.flags & WPA_DRIVER_FLAGS_SME))
-               return wpa_driver_nl80211_mlme_wext(drv, addr,
-                                                   IW_MLME_DISASSOC,
-                                                   reason_code);
-#endif /* WEXT_COMPAT */
        return wpa_driver_nl80211_mlme(drv, addr, NL80211_CMD_DISASSOCIATE,
                                       reason_code);
 }
 
 
-#ifdef WEXT_COMPAT
-static int wpa_driver_nl80211_set_gen_ie(void *priv, const u8 *ie,
-                                     size_t ie_len)
+static int wpa_driver_nl80211_authenticate(
+       void *priv, struct wpa_driver_auth_params *params)
 {
        struct wpa_driver_nl80211_data *drv = priv;
-       struct iwreq iwr;
-       int ret = 0;
-
-       if (drv->capa.flags & WPA_DRIVER_FLAGS_SME)
-               return 0;
-       os_memset(&iwr, 0, sizeof(iwr));
-       os_strlcpy(iwr.ifr_name, drv->ifname, IFNAMSIZ);
-       iwr.u.data.pointer = (caddr_t) ie;
-       iwr.u.data.length = ie_len;
+       int ret = -1;
+       struct nl_msg *msg;
+       enum nl80211_auth_type type;
 
-       if (ioctl(drv->ioctl_sock, SIOCSIWGENIE, &iwr) < 0) {
-               perror("ioctl[SIOCSIWGENIE]");
-               ret = -1;
-       }
+       drv->associated = 0;
 
-       return ret;
-}
+       msg = nlmsg_alloc();
+       if (!msg)
+               return -1;
 
+       wpa_printf(MSG_DEBUG, "nl80211: Authenticate (ifindex=%d)",
+                  drv->ifindex);
+       genlmsg_put(msg, 0, 0, genl_family_get_id(drv->nl80211), 0, 0,
+                   NL80211_CMD_AUTHENTICATE, 0);
 
-static int wpa_driver_nl80211_cipher2wext(int cipher)
-{
-       switch (cipher) {
-       case CIPHER_NONE:
-               return IW_AUTH_CIPHER_NONE;
-       case CIPHER_WEP40:
-               return IW_AUTH_CIPHER_WEP40;
-       case CIPHER_TKIP:
-               return IW_AUTH_CIPHER_TKIP;
-       case CIPHER_CCMP:
-               return IW_AUTH_CIPHER_CCMP;
-       case CIPHER_WEP104:
-               return IW_AUTH_CIPHER_WEP104;
-       default:
-               return 0;
-       }
-}
-
-
-static int wpa_driver_nl80211_keymgmt2wext(int keymgmt)
-{
-       switch (keymgmt) {
-       case KEY_MGMT_802_1X:
-       case KEY_MGMT_802_1X_NO_WPA:
-               return IW_AUTH_KEY_MGMT_802_1X;
-       case KEY_MGMT_PSK:
-               return IW_AUTH_KEY_MGMT_PSK;
-       default:
-               return 0;
-       }
-}
-
-
-static int
-wpa_driver_nl80211_auth_alg_fallback(struct wpa_driver_nl80211_data *drv,
-                                 struct wpa_driver_associate_params *params)
-{
-       struct iwreq iwr;
-       int ret = 0;
-
-       wpa_printf(MSG_DEBUG, "WEXT: Driver did not support "
-                  "SIOCSIWAUTH for AUTH_ALG, trying SIOCSIWENCODE");
-
-       os_memset(&iwr, 0, sizeof(iwr));
-       os_strlcpy(iwr.ifr_name, drv->ifname, IFNAMSIZ);
-       /* Just changing mode, not actual keys */
-       iwr.u.encoding.flags = 0;
-       iwr.u.encoding.pointer = (caddr_t) NULL;
-       iwr.u.encoding.length = 0;
-
-       /*
-        * Note: IW_ENCODE_{OPEN,RESTRICTED} can be interpreted to mean two
-        * different things. Here they are used to indicate Open System vs.
-        * Shared Key authentication algorithm. However, some drivers may use
-        * them to select between open/restricted WEP encrypted (open = allow
-        * both unencrypted and encrypted frames; restricted = only allow
-        * encrypted frames).
-        */
-
-       if (!drv->use_crypt) {
-               iwr.u.encoding.flags |= IW_ENCODE_DISABLED;
-       } else {
-               if (params->auth_alg & AUTH_ALG_OPEN_SYSTEM)
-                       iwr.u.encoding.flags |= IW_ENCODE_OPEN;
-               if (params->auth_alg & AUTH_ALG_SHARED_KEY)
-                       iwr.u.encoding.flags |= IW_ENCODE_RESTRICTED;
-       }
-
-       if (ioctl(drv->ioctl_sock, SIOCSIWENCODE, &iwr) < 0) {
-               perror("ioctl[SIOCSIWENCODE]");
-               ret = -1;
-       }
-
-       return ret;
-}
-
-
-static int wpa_driver_nl80211_associate_wext(
-       void *priv, struct wpa_driver_associate_params *params)
-{
-       struct wpa_driver_nl80211_data *drv = priv;
-       int ret = 0;
-       int allow_unencrypted_eapol;
-       int value;
-
-       wpa_printf(MSG_DEBUG, "%s", __FUNCTION__);
-
-       /*
-        * If the driver did not support SIOCSIWAUTH, fallback to
-        * SIOCSIWENCODE here.
-        */
-       if (drv->auth_alg_fallback &&
-           wpa_driver_nl80211_auth_alg_fallback(drv, params) < 0)
-               ret = -1;
-
-       if (!params->bssid &&
-           wpa_driver_nl80211_set_bssid(drv, NULL) < 0)
-               ret = -1;
-
-       /* TODO: should consider getting wpa version and cipher/key_mgmt suites
-        * from configuration, not from here, where only the selected suite is
-        * available */
-       if (wpa_driver_nl80211_set_gen_ie(drv, params->wpa_ie, params->wpa_ie_len)
-           < 0)
-               ret = -1;
-       if (params->wpa_ie == NULL || params->wpa_ie_len == 0)
-               value = IW_AUTH_WPA_VERSION_DISABLED;
-       else if (params->wpa_ie[0] == WLAN_EID_RSN)
-               value = IW_AUTH_WPA_VERSION_WPA2;
-       else
-               value = IW_AUTH_WPA_VERSION_WPA;
-       if (wpa_driver_nl80211_set_auth_param(drv,
-                                          IW_AUTH_WPA_VERSION, value) < 0)
-               ret = -1;
-       value = wpa_driver_nl80211_cipher2wext(params->pairwise_suite);
-       if (wpa_driver_nl80211_set_auth_param(drv,
-                                          IW_AUTH_CIPHER_PAIRWISE, value) < 0)
-               ret = -1;
-       value = wpa_driver_nl80211_cipher2wext(params->group_suite);
-       if (wpa_driver_nl80211_set_auth_param(drv,
-                                          IW_AUTH_CIPHER_GROUP, value) < 0)
-               ret = -1;
-       value = wpa_driver_nl80211_keymgmt2wext(params->key_mgmt_suite);
-       if (wpa_driver_nl80211_set_auth_param(drv,
-                                          IW_AUTH_KEY_MGMT, value) < 0)
-               ret = -1;
-       value = params->key_mgmt_suite != KEY_MGMT_NONE ||
-               params->pairwise_suite != CIPHER_NONE ||
-               params->group_suite != CIPHER_NONE ||
-               params->wpa_ie_len;
-       if (wpa_driver_nl80211_set_auth_param(drv,
-                                          IW_AUTH_PRIVACY_INVOKED, value) < 0)
-               ret = -1;
-
-       /* Allow unencrypted EAPOL messages even if pairwise keys are set when
-        * not using WPA. IEEE 802.1X specifies that these frames are not
-        * encrypted, but WPA encrypts them when pairwise keys are in use. */
-       if (params->key_mgmt_suite == KEY_MGMT_802_1X ||
-           params->key_mgmt_suite == KEY_MGMT_PSK)
-               allow_unencrypted_eapol = 0;
-       else
-               allow_unencrypted_eapol = 1;
-       
-       if (wpa_driver_nl80211_set_auth_param(drv,
-                                          IW_AUTH_RX_UNENCRYPTED_EAPOL,
-                                          allow_unencrypted_eapol) < 0)
-               ret = -1;
-       if (params->freq && wpa_driver_nl80211_set_freq(drv, params->freq) < 0)
-               ret = -1;
-       if (wpa_driver_nl80211_set_ssid(drv, params->ssid, params->ssid_len) < 0)
-               ret = -1;
-       if (params->bssid &&
-           wpa_driver_nl80211_set_bssid(drv, params->bssid) < 0)
-               ret = -1;
-
-       return ret;
-}
-
-
-static int wpa_driver_nl80211_set_auth_alg(void *priv, int auth_alg)
-{
-       struct wpa_driver_nl80211_data *drv = priv;
-       int algs = 0, res;
-
-       if (drv->capa.flags & WPA_DRIVER_FLAGS_SME)
-               return 0;
-
-       if (auth_alg & AUTH_ALG_OPEN_SYSTEM)
-               algs |= IW_AUTH_ALG_OPEN_SYSTEM;
-       if (auth_alg & AUTH_ALG_SHARED_KEY)
-               algs |= IW_AUTH_ALG_SHARED_KEY;
-       if (auth_alg & AUTH_ALG_LEAP)
-               algs |= IW_AUTH_ALG_LEAP;
-       if (algs == 0) {
-               /* at least one algorithm should be set */
-               algs = IW_AUTH_ALG_OPEN_SYSTEM;
-       }
-
-       res = wpa_driver_nl80211_set_auth_param(drv, IW_AUTH_80211_AUTH_ALG,
-                                            algs);
-       drv->auth_alg_fallback = res == -2;
-       return res;
-}
-#endif /* WEXT_COMPAT */
-
-
-static int wpa_driver_nl80211_authenticate(
-       void *priv, struct wpa_driver_auth_params *params)
-{
-       struct wpa_driver_nl80211_data *drv = priv;
-       int ret = -1;
-       struct nl_msg *msg;
-       enum nl80211_auth_type type;
-
-       drv->associated = 0;
-
-       msg = nlmsg_alloc();
-       if (!msg)
-               return -1;
-
-       wpa_printf(MSG_DEBUG, "nl80211: Authenticate (ifindex=%d)",
-                  drv->ifindex);
-       genlmsg_put(msg, 0, 0, genl_family_get_id(drv->nl80211), 0, 0,
-                   NL80211_CMD_AUTHENTICATE, 0);
-
-       NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, drv->ifindex);
-       if (params->bssid) {
-               wpa_printf(MSG_DEBUG, "  * bssid=" MACSTR,
-                          MAC2STR(params->bssid));
-               NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, params->bssid);
+       NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, drv->ifindex);
+       if (params->bssid) {
+               wpa_printf(MSG_DEBUG, "  * bssid=" MACSTR,
+                          MAC2STR(params->bssid));
+               NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, params->bssid);
        }
        if (params->freq) {
                wpa_printf(MSG_DEBUG, "  * freq=%d", params->freq);
@@ -2575,6 +1505,48 @@ nla_put_failure:
 }
 
 
+#ifdef CONFIG_AP
+static int wpa_driver_nl80211_set_freq2(
+       struct wpa_driver_nl80211_data *drv,
+       struct wpa_driver_associate_params *params)
+{
+       struct nl_msg *msg;
+
+       msg = nlmsg_alloc();
+       if (!msg)
+               return -1;
+
+       genlmsg_put(msg, 0, 0, genl_family_get_id(drv->nl80211), 0, 0,
+                   NL80211_CMD_SET_WIPHY, 0);
+
+       NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, drv->ifindex);
+
+       /* TODO: proper channel configuration */
+       NLA_PUT_U32(msg, NL80211_ATTR_WIPHY_FREQ, 2437);
+
+       if (send_and_recv_msgs(drv, msg, NULL, NULL) == 0)
+               return 0;
+nla_put_failure:
+       return -1;
+}
+
+
+static int wpa_driver_nl80211_ap(struct wpa_driver_nl80211_data *drv,
+                                struct wpa_driver_associate_params *params)
+{
+       if (wpa_driver_nl80211_set_mode(drv, params->mode) ||
+           wpa_driver_nl80211_set_freq2(drv, params))
+               return -1;
+
+       /* TODO: setup monitor interface (and add code somewhere to remove this
+        * when AP mode is stopped; associate with mode != 2 or drv_deinit) */
+       /* TODO: setup beacon */
+
+       return 0;
+}
+#endif /* CONFIG_AP */
+
+
 static int wpa_driver_nl80211_associate(
        void *priv, struct wpa_driver_associate_params *params)
 {
@@ -2582,10 +1554,13 @@ static int wpa_driver_nl80211_associate(
        int ret = -1;
        struct nl_msg *msg;
 
-#ifdef WEXT_COMPAT
-       if (!(drv->capa.flags & WPA_DRIVER_FLAGS_SME))
-               return wpa_driver_nl80211_associate_wext(drv, params);
-#endif /* WEXT_COMPAT */
+#ifdef CONFIG_AP
+       if (params->mode == 2)
+               return wpa_driver_nl80211_ap(drv, params);
+#endif /* CONFIG_AP */
+
+       wpa_driver_nl80211_set_auth_param(drv, IW_AUTH_DROP_UNENCRYPTED,
+                                         params->drop_unencrypted);
 
        drv->associated = 0;
 
@@ -2613,6 +1588,10 @@ static int wpa_driver_nl80211_associate(
                                  params->ssid, params->ssid_len);
                NLA_PUT(msg, NL80211_ATTR_SSID, params->ssid_len,
                        params->ssid);
+               if (params->ssid_len > sizeof(drv->ssid))
+                       goto nla_put_failure;
+               os_memcpy(drv->ssid, params->ssid, params->ssid_len);
+               drv->ssid_len = params->ssid_len;
        }
        wpa_hexdump(MSG_DEBUG, "  * IEs", params->wpa_ie, params->wpa_ie_len);
        if (params->wpa_ie)
@@ -2638,15 +1617,30 @@ nla_put_failure:
 
 /**
  * wpa_driver_nl80211_set_mode - Set wireless mode (infra/adhoc), SIOCSIWMODE
- * @priv: Pointer to private wext data from wpa_driver_nl80211_init()
+ * @drv: Pointer to private driver data from wpa_driver_nl80211_init()
  * @mode: 0 = infra/BSS (associate with an AP), 1 = adhoc/IBSS
  * Returns: 0 on success, -1 on failure
  */
-static int wpa_driver_nl80211_set_mode(void *priv, int mode)
+static int wpa_driver_nl80211_set_mode(struct wpa_driver_nl80211_data *drv,
+                                      int mode)
 {
-       struct wpa_driver_nl80211_data *drv = priv;
        int ret = -1, flags;
        struct nl_msg *msg;
+       int nlmode;
+
+       switch (mode) {
+       case 0:
+               nlmode = NL80211_IFTYPE_STATION;
+               break;
+       case 1:
+               nlmode = NL80211_IFTYPE_ADHOC;
+               break;
+       case 2:
+               nlmode = NL80211_IFTYPE_AP;
+               break;
+       default:
+               return -1;
+       }
 
        msg = nlmsg_alloc();
        if (!msg)
@@ -2655,8 +1649,7 @@ static int wpa_driver_nl80211_set_mode(void *priv, int mode)
        genlmsg_put(msg, 0, 0, genl_family_get_id(drv->nl80211), 0,
                    0, NL80211_CMD_SET_INTERFACE, 0);
        NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, drv->ifindex);
-       NLA_PUT_U32(msg, NL80211_ATTR_IFTYPE,
-                   mode ? NL80211_IFTYPE_ADHOC : NL80211_IFTYPE_STATION);
+       NLA_PUT_U32(msg, NL80211_ATTR_IFTYPE, nlmode);
 
        ret = send_and_recv_msgs(drv, msg, NULL, NULL);
        if (!ret)
@@ -2665,7 +1658,8 @@ static int wpa_driver_nl80211_set_mode(void *priv, int mode)
                goto try_again;
 
 nla_put_failure:
-       wpa_printf(MSG_ERROR, "nl80211: Failed to set interface mode");
+       wpa_printf(MSG_ERROR, "nl80211: Failed to set interface mode: %d (%s)",
+                  ret, strerror(-ret));
        return -1;
 
 try_again:
@@ -2684,13 +1678,12 @@ try_again:
                genlmsg_put(msg, 0, 0, genl_family_get_id(drv->nl80211), 0,
                            0, NL80211_CMD_SET_INTERFACE, 0);
                NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, drv->ifindex);
-               NLA_PUT_U32(msg, NL80211_ATTR_IFTYPE,
-                           mode ? NL80211_IFTYPE_ADHOC :
-                           NL80211_IFTYPE_STATION);
+               NLA_PUT_U32(msg, NL80211_ATTR_IFTYPE, nlmode);
                ret = send_and_recv_msgs(drv, msg, NULL, NULL);
                if (ret) {
                        wpa_printf(MSG_ERROR, "Failed to set interface %s "
-                                  "mode", drv->ifname);
+                                  "mode(try_again): %d (%s)",
+                                  drv->ifname, ret, strerror(-ret));
                }
 
                /* Ignore return value of get_ifflags to ensure that the device
@@ -2704,58 +1697,6 @@ try_again:
 }
 
 
-static int wpa_driver_nl80211_pmksa(struct wpa_driver_nl80211_data *drv,
-                                u32 cmd, const u8 *bssid, const u8 *pmkid)
-{
-       struct iwreq iwr;
-       struct iw_pmksa pmksa;
-       int ret = 0;
-
-       os_memset(&iwr, 0, sizeof(iwr));
-       os_strlcpy(iwr.ifr_name, drv->ifname, IFNAMSIZ);
-       os_memset(&pmksa, 0, sizeof(pmksa));
-       pmksa.cmd = cmd;
-       pmksa.bssid.sa_family = ARPHRD_ETHER;
-       if (bssid)
-               os_memcpy(pmksa.bssid.sa_data, bssid, ETH_ALEN);
-       if (pmkid)
-               os_memcpy(pmksa.pmkid, pmkid, IW_PMKID_LEN);
-       iwr.u.data.pointer = (caddr_t) &pmksa;
-       iwr.u.data.length = sizeof(pmksa);
-
-       if (ioctl(drv->ioctl_sock, SIOCSIWPMKSA, &iwr) < 0) {
-               if (errno != EOPNOTSUPP)
-                       perror("ioctl[SIOCSIWPMKSA]");
-               ret = -1;
-       }
-
-       return ret;
-}
-
-
-static int wpa_driver_nl80211_add_pmkid(void *priv, const u8 *bssid,
-                                    const u8 *pmkid)
-{
-       struct wpa_driver_nl80211_data *drv = priv;
-       return wpa_driver_nl80211_pmksa(drv, IW_PMKSA_ADD, bssid, pmkid);
-}
-
-
-static int wpa_driver_nl80211_remove_pmkid(void *priv, const u8 *bssid,
-                                       const u8 *pmkid)
-{
-       struct wpa_driver_nl80211_data *drv = priv;
-       return wpa_driver_nl80211_pmksa(drv, IW_PMKSA_REMOVE, bssid, pmkid);
-}
-
-
-static int wpa_driver_nl80211_flush_pmkid(void *priv)
-{
-       struct wpa_driver_nl80211_data *drv = priv;
-       return wpa_driver_nl80211_pmksa(drv, IW_PMKSA_FLUSH, NULL, NULL);
-}
-
-
 static int wpa_driver_nl80211_get_capa(void *priv,
                                       struct wpa_driver_capa *capa)
 {
@@ -2779,389 +1720,21 @@ static int wpa_driver_nl80211_set_operstate(void *priv, int state)
 }
 
 
-#ifdef CONFIG_CLIENT_MLME
-static int wpa_driver_nl80211_open_mlme(struct wpa_driver_nl80211_data *drv)
-{
-       if (wpa_driver_nl80211_set_userspace_mlme(drv, 1) < 0) {
-               wpa_printf(MSG_ERROR, "nl80211: Failed to enable userspace "
-                          "MLME");
-               return -1;
-       }
-       if (wpa_driver_nl80211_create_monitor_interface(drv)) {
-               wpa_printf(MSG_ERROR, "nl80211: Failed to create monitor "
-                          "interface");
-               return -1;
-       }
-       return 0;
-}
-#endif /* CONFIG_CLIENT_MLME */
-
-
-static int wpa_driver_nl80211_set_param(void *priv, const char *param)
-{
-#ifdef CONFIG_CLIENT_MLME
-       struct wpa_driver_nl80211_data *drv = priv;
-
-       if (param == NULL)
-               return 0;
-
-       wpa_printf(MSG_DEBUG, "%s: param='%s'", __func__, param);
-
-       if (os_strstr(param, "use_mlme=1")) {
-               wpa_printf(MSG_DEBUG, "nl80211: Using user space MLME");
-               drv->capa.flags |= WPA_DRIVER_FLAGS_USER_SPACE_MLME;
-
-               if (wpa_driver_nl80211_open_mlme(drv))
-                       return -1;
-       }
-#endif /* CONFIG_CLIENT_MLME */
-
-       return 0;
-}
-
-
-#ifdef CONFIG_CLIENT_MLME
-
-struct phy_info_arg {
-       u16 *num_modes;
-       struct wpa_hw_modes *modes;
-};
-
-
-static int phy_info_handler(struct nl_msg *msg, void *arg)
-{
-       struct nlattr *tb_msg[NL80211_ATTR_MAX + 1];
-       struct genlmsghdr *gnlh = nlmsg_data(nlmsg_hdr(msg));
-       struct phy_info_arg *phy_info = arg;
-
-       struct nlattr *tb_band[NL80211_BAND_ATTR_MAX + 1];
-
-       struct nlattr *tb_freq[NL80211_FREQUENCY_ATTR_MAX + 1];
-       static struct nla_policy freq_policy[NL80211_FREQUENCY_ATTR_MAX + 1]
-               = {
-               [NL80211_FREQUENCY_ATTR_FREQ] = { .type = NLA_U32 },
-               [NL80211_FREQUENCY_ATTR_DISABLED] = { .type = NLA_FLAG },
-               [NL80211_FREQUENCY_ATTR_PASSIVE_SCAN] = { .type = NLA_FLAG },
-               [NL80211_FREQUENCY_ATTR_NO_IBSS] = { .type = NLA_FLAG },
-               [NL80211_FREQUENCY_ATTR_RADAR] = { .type = NLA_FLAG },
-       };
-
-       struct nlattr *tb_rate[NL80211_BITRATE_ATTR_MAX + 1];
-       static struct nla_policy rate_policy[NL80211_BITRATE_ATTR_MAX + 1] = {
-               [NL80211_BITRATE_ATTR_RATE] = { .type = NLA_U32 },
-               [NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE] =
-               { .type = NLA_FLAG },
-       };
-
-       struct nlattr *nl_band;
-       struct nlattr *nl_freq;
-       struct nlattr *nl_rate;
-       int rem_band, rem_freq, rem_rate;
-       struct wpa_hw_modes *mode;
-       int idx, mode_is_set;
-
-       nla_parse(tb_msg, NL80211_ATTR_MAX, genlmsg_attrdata(gnlh, 0),
-                 genlmsg_attrlen(gnlh, 0), NULL);
-
-       if (!tb_msg[NL80211_ATTR_WIPHY_BANDS])
-               return NL_SKIP;
-
-       nla_for_each_nested(nl_band, tb_msg[NL80211_ATTR_WIPHY_BANDS],
-                           rem_band) {
-               mode = os_realloc(phy_info->modes,
-                                 (*phy_info->num_modes + 1) * sizeof(*mode));
-               if (!mode)
-                       return NL_SKIP;
-               phy_info->modes = mode;
-
-               mode_is_set = 0;
-
-               mode = &phy_info->modes[*(phy_info->num_modes)];
-               os_memset(mode, 0, sizeof(*mode));
-               *(phy_info->num_modes) += 1;
-
-               nla_parse(tb_band, NL80211_BAND_ATTR_MAX, nla_data(nl_band),
-                         nla_len(nl_band), NULL);
-
-               nla_for_each_nested(nl_freq, tb_band[NL80211_BAND_ATTR_FREQS],
-                                   rem_freq) {
-                       nla_parse(tb_freq, NL80211_FREQUENCY_ATTR_MAX,
-                                 nla_data(nl_freq), nla_len(nl_freq),
-                                 freq_policy);
-                       if (!tb_freq[NL80211_FREQUENCY_ATTR_FREQ])
-                               continue;
-                       mode->num_channels++;
-               }
-
-               mode->channels = os_zalloc(mode->num_channels *
-                                          sizeof(struct wpa_channel_data));
-               if (!mode->channels)
-                       return NL_SKIP;
-
-               idx = 0;
-
-               nla_for_each_nested(nl_freq, tb_band[NL80211_BAND_ATTR_FREQS],
-                                   rem_freq) {
-                       nla_parse(tb_freq, NL80211_FREQUENCY_ATTR_MAX,
-                                 nla_data(nl_freq), nla_len(nl_freq),
-                                 freq_policy);
-                       if (!tb_freq[NL80211_FREQUENCY_ATTR_FREQ])
-                               continue;
-
-                       mode->channels[idx].freq = nla_get_u32(
-                               tb_freq[NL80211_FREQUENCY_ATTR_FREQ]);
-                       mode->channels[idx].flag |= WPA_CHAN_W_SCAN |
-                               WPA_CHAN_W_ACTIVE_SCAN |
-                               WPA_CHAN_W_IBSS;
-
-                       if (!mode_is_set) {
-                               /* crude heuristic */
-                               if (mode->channels[idx].freq < 4000)
-                                       mode->mode = WPA_MODE_IEEE80211B;
-                               else
-                                       mode->mode = WPA_MODE_IEEE80211A;
-                               mode_is_set = 1;
-                       }
-
-                       /* crude heuristic */
-                       if (mode->channels[idx].freq < 4000) {
-                               if (mode->channels[idx].freq == 2848)
-                                       mode->channels[idx].chan = 14;
-                               else
-                                       mode->channels[idx].chan =
-                                               (mode->channels[idx].freq -
-                                                2407) / 5;
-                       } else
-                               mode->channels[idx].chan =
-                                       mode->channels[idx].freq / 5 - 1000;
-
-                       if (tb_freq[NL80211_FREQUENCY_ATTR_DISABLED])
-                               mode->channels[idx].flag &= ~WPA_CHAN_W_SCAN;
-                       if (tb_freq[NL80211_FREQUENCY_ATTR_PASSIVE_SCAN])
-                               mode->channels[idx].flag &=
-                                       ~WPA_CHAN_W_ACTIVE_SCAN;
-                       if (tb_freq[NL80211_FREQUENCY_ATTR_NO_IBSS])
-                               mode->channels[idx].flag &= ~WPA_CHAN_W_IBSS;
-                       idx++;
-               }
-
-               nla_for_each_nested(nl_rate, tb_band[NL80211_BAND_ATTR_RATES],
-                                   rem_rate) {
-                       nla_parse(tb_rate, NL80211_BITRATE_ATTR_MAX,
-                                 nla_data(nl_rate), nla_len(nl_rate),
-                                 rate_policy);
-                       if (!tb_rate[NL80211_BITRATE_ATTR_RATE])
-                               continue;
-                       mode->num_rates++;
-               }
-
-               mode->rates = os_zalloc(mode->num_rates *
-                                       sizeof(struct wpa_rate_data));
-               if (!mode->rates)
-                       return NL_SKIP;
-
-               idx = 0;
-
-               nla_for_each_nested(nl_rate, tb_band[NL80211_BAND_ATTR_RATES],
-                                   rem_rate) {
-                       nla_parse(tb_rate, NL80211_BITRATE_ATTR_MAX,
-                                 nla_data(nl_rate), nla_len(nl_rate),
-                                 rate_policy);
-                       if (!tb_rate[NL80211_BITRATE_ATTR_RATE])
-                               continue;
-                       mode->rates[idx].rate = nla_get_u32(
-                               tb_rate[NL80211_BITRATE_ATTR_RATE]);
-
-                       /* crude heuristic */
-                       if (mode->mode == WPA_MODE_IEEE80211B &&
-                           mode->rates[idx].rate > 200)
-                               mode->mode = WPA_MODE_IEEE80211G;
-
-                       if (tb_rate[NL80211_BITRATE_ATTR_2GHZ_SHORTPREAMBLE])
-                               mode->rates[idx].flags |= WPA_RATE_PREAMBLE2;
-
-                       idx++;
-               }
-       }
-
-       return NL_SKIP;
-}
-
-
-static struct wpa_hw_modes *
-wpa_driver_nl80211_get_hw_feature_data(void *priv, u16 *num_modes, u16 *flags)
-{
-       struct wpa_driver_nl80211_data *drv = priv;
-       struct nl_msg *msg;
-       struct phy_info_arg result = {
-               .num_modes = num_modes,
-               .modes = NULL,
-       };
-
-       *num_modes = 0;
-       *flags = 0;
-
-       msg = nlmsg_alloc();
-       if (!msg)
-               return NULL;
-
-       genlmsg_put(msg, 0, 0, genl_family_get_id(drv->nl80211), 0,
-                   0, NL80211_CMD_GET_WIPHY, 0);
-
-       NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, drv->ifindex);
-
-       if (send_and_recv_msgs(drv, msg, phy_info_handler, &result) == 0)
-               return result.modes;
-nla_put_failure:
-       return NULL;
-}
-
-
-static int wpa_driver_nl80211_set_channel(void *priv, wpa_hw_mode phymode,
-                                         int chan, int freq)
-{
-       return wpa_driver_nl80211_set_freq(priv, freq);
-}
-
-
-static int wpa_driver_nl80211_send_mlme(void *priv, const u8 *data,
-                                       size_t data_len)
-{
-       struct wpa_driver_nl80211_data *drv = priv;
-       __u8 rtap_hdr[] = {
-               0x00, 0x00, /* radiotap version */
-               0x0e, 0x00, /* radiotap length */
-               0x02, 0xc0, 0x00, 0x00, /* bmap: flags, tx and rx flags */
-               0x0c,       /* F_WEP | F_FRAG (encrypt/fragment if required) */
-               0x00,       /* padding */
-               0x00, 0x00, /* RX and TX flags to indicate that */
-               0x00, 0x00, /* this is the injected frame directly */
-       };
-       struct iovec iov[2] = {
-               {
-                       .iov_base = &rtap_hdr,
-                       .iov_len = sizeof(rtap_hdr),
-               },
-               {
-                       .iov_base = (void *) data,
-                       .iov_len = data_len,
-               }
-       };
-       struct msghdr msg = {
-               .msg_name = NULL,
-               .msg_namelen = 0,
-               .msg_iov = iov,
-               .msg_iovlen = 2,
-               .msg_control = NULL,
-               .msg_controllen = 0,
-               .msg_flags = 0,
-       };
-
-       if (sendmsg(drv->monitor_sock, &msg, 0) < 0) {
-               perror("send[MLME]");
-               return -1;
-       }
-
-       return 0;
-}
-
-
-static int wpa_driver_nl80211_mlme_add_sta(void *priv, const u8 *addr,
-                                          const u8 *supp_rates,
-                                          size_t supp_rates_len)
-{
-       struct wpa_driver_nl80211_data *drv = priv;
-       struct nl_msg *msg;
-       int ret = -1;
-
-       msg = nlmsg_alloc();
-       if (!msg)
-               return -ENOMEM;
-
-       genlmsg_put(msg, 0, 0, genl_family_get_id(drv->nl80211), 0,
-                   0, NL80211_CMD_NEW_STATION, 0);
-
-       NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, drv->ifindex);
-       NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, addr);
-       /* TODO: Get proper Association ID and listen interval */
-       NLA_PUT_U16(msg, NL80211_ATTR_STA_AID, 1);
-       NLA_PUT(msg, NL80211_ATTR_STA_SUPPORTED_RATES, supp_rates_len,
-               supp_rates);
-       NLA_PUT_U16(msg, NL80211_ATTR_STA_LISTEN_INTERVAL, 1);
-
-       ret = send_and_recv_msgs(drv, msg, NULL, NULL);
-       /* ignore EEXIST, this happens if a STA associates while associated */
-       if (ret == -EEXIST || ret >= 0)
-               ret = 0;
-
-nla_put_failure:
-       return ret;
-}
-
-
-static int wpa_driver_nl80211_mlme_remove_sta(void *priv, const u8 *addr)
-{
-       struct wpa_driver_nl80211_data *drv = priv;
-       struct nl_msg *msg;
-       int ret = -1;
-
-       msg = nlmsg_alloc();
-       if (!msg)
-               return -ENOMEM;
-
-       genlmsg_put(msg, 0, 0, genl_family_get_id(drv->nl80211), 0,
-                   0, NL80211_CMD_DEL_STATION, 0);
-
-       NLA_PUT_U32(msg, NL80211_ATTR_IFINDEX, drv->ifindex);
-       NLA_PUT(msg, NL80211_ATTR_MAC, ETH_ALEN, addr);
-
-       ret = 0;
-
-       ret = send_and_recv_msgs(drv, msg, NULL, NULL);
-       return ret;
-
-nla_put_failure:
-       return -ENOBUFS;
-}
-
-#endif /* CONFIG_CLIENT_MLME */
-
-
 const struct wpa_driver_ops wpa_driver_nl80211_ops = {
        .name = "nl80211",
        .desc = "Linux nl80211/cfg80211",
        .get_bssid = wpa_driver_nl80211_get_bssid,
        .get_ssid = wpa_driver_nl80211_get_ssid,
        .set_key = wpa_driver_nl80211_set_key,
-       .set_drop_unencrypted = wpa_driver_nl80211_set_drop_unencrypted,
        .scan2 = wpa_driver_nl80211_scan,
        .get_scan_results2 = wpa_driver_nl80211_get_scan_results,
        .deauthenticate = wpa_driver_nl80211_deauthenticate,
        .disassociate = wpa_driver_nl80211_disassociate,
-       .set_mode = wpa_driver_nl80211_set_mode,
        .authenticate = wpa_driver_nl80211_authenticate,
        .associate = wpa_driver_nl80211_associate,
        .init = wpa_driver_nl80211_init,
        .deinit = wpa_driver_nl80211_deinit,
-       .set_param = wpa_driver_nl80211_set_param,
-       .add_pmkid = wpa_driver_nl80211_add_pmkid,
-       .remove_pmkid = wpa_driver_nl80211_remove_pmkid,
-       .flush_pmkid = wpa_driver_nl80211_flush_pmkid,
        .get_capa = wpa_driver_nl80211_get_capa,
        .set_operstate = wpa_driver_nl80211_set_operstate,
        .set_country = wpa_driver_nl80211_set_country,
-#ifdef CONFIG_CLIENT_MLME
-       .get_hw_feature_data = wpa_driver_nl80211_get_hw_feature_data,
-       .set_channel = wpa_driver_nl80211_set_channel,
-       .set_ssid = wpa_driver_nl80211_set_ssid,
-       .set_bssid = wpa_driver_nl80211_set_bssid,
-       .send_mlme = wpa_driver_nl80211_send_mlme,
-       .mlme_add_sta = wpa_driver_nl80211_mlme_add_sta,
-       .mlme_remove_sta = wpa_driver_nl80211_mlme_remove_sta,
-#endif /* CONFIG_CLIENT_MLME */
-#ifdef WEXT_COMPAT
-       .set_wpa = wpa_driver_nl80211_set_wpa,
-       .set_countermeasures = wpa_driver_nl80211_set_countermeasures,
-       .set_auth_alg = wpa_driver_nl80211_set_auth_alg,
-#endif /* WEXT_COMPAT */
 };