Home | History | Annotate | Download | only in hostapd
      1 # Example hostapd build time configuration
      2 #
      3 # This file lists the configuration options that are used when building the
      4 # hostapd binary. All lines starting with # are ignored. Configuration option
      5 # lines must be commented out complete, if they are not to be included, i.e.,
      6 # just setting VARIABLE=n is not disabling that variable.
      7 #
      8 # This file is included in Makefile, so variables like CFLAGS and LIBS can also
      9 # be modified from here. In most cass, these lines should use += in order not
     10 # to override previous values of the variables.
     11 
     12 # Driver interface for Host AP driver
     13 CONFIG_DRIVER_HOSTAP=y
     14 
     15 # Driver interface for wired authenticator
     16 #CONFIG_DRIVER_WIRED=y
     17 
     18 # Driver interface for madwifi driver
     19 #CONFIG_DRIVER_MADWIFI=y
     20 #CFLAGS += -I../../madwifi # change to the madwifi source directory
     21 
     22 # Driver interface for drivers using the nl80211 kernel interface
     23 CONFIG_DRIVER_NL80211=y
     24 
     25 # Driver interface for FreeBSD net80211 layer (e.g., Atheros driver)
     26 #CONFIG_DRIVER_BSD=y
     27 #CFLAGS += -I/usr/local/include
     28 #LIBS += -L/usr/local/lib
     29 #LIBS_p += -L/usr/local/lib
     30 #LIBS_c += -L/usr/local/lib
     31 
     32 # Driver interface for no driver (e.g., RADIUS server only)
     33 #CONFIG_DRIVER_NONE=y
     34 
     35 # IEEE 802.11F/IAPP
     36 CONFIG_IAPP=y
     37 
     38 # WPA2/IEEE 802.11i RSN pre-authentication
     39 CONFIG_RSN_PREAUTH=y
     40 
     41 # PeerKey handshake for Station to Station Link (IEEE 802.11e DLS)
     42 CONFIG_PEERKEY=y
     43 
     44 # IEEE 802.11w (management frame protection)
     45 # This version is an experimental implementation based on IEEE 802.11w/D1.0
     46 # draft and is subject to change since the standard has not yet been finalized.
     47 # Driver support is also needed for IEEE 802.11w.
     48 #CONFIG_IEEE80211W=y
     49 
     50 # Integrated EAP server
     51 CONFIG_EAP=y
     52 
     53 # EAP-MD5 for the integrated EAP server
     54 CONFIG_EAP_MD5=y
     55 
     56 # EAP-TLS for the integrated EAP server
     57 CONFIG_EAP_TLS=y
     58 
     59 # EAP-MSCHAPv2 for the integrated EAP server
     60 CONFIG_EAP_MSCHAPV2=y
     61 
     62 # EAP-PEAP for the integrated EAP server
     63 CONFIG_EAP_PEAP=y
     64 
     65 # EAP-GTC for the integrated EAP server
     66 CONFIG_EAP_GTC=y
     67 
     68 # EAP-TTLS for the integrated EAP server
     69 CONFIG_EAP_TTLS=y
     70 
     71 # EAP-SIM for the integrated EAP server
     72 #CONFIG_EAP_SIM=y
     73 
     74 # EAP-AKA for the integrated EAP server
     75 #CONFIG_EAP_AKA=y
     76 
     77 # EAP-AKA' for the integrated EAP server
     78 # This requires CONFIG_EAP_AKA to be enabled, too.
     79 #CONFIG_EAP_AKA_PRIME=y
     80 
     81 # EAP-PAX for the integrated EAP server
     82 #CONFIG_EAP_PAX=y
     83 
     84 # EAP-PSK for the integrated EAP server (this is _not_ needed for WPA-PSK)
     85 #CONFIG_EAP_PSK=y
     86 
     87 # EAP-SAKE for the integrated EAP server
     88 #CONFIG_EAP_SAKE=y
     89 
     90 # EAP-GPSK for the integrated EAP server
     91 #CONFIG_EAP_GPSK=y
     92 # Include support for optional SHA256 cipher suite in EAP-GPSK
     93 #CONFIG_EAP_GPSK_SHA256=y
     94 
     95 # EAP-FAST for the integrated EAP server
     96 # Note: Default OpenSSL package does not include support for all the
     97 # functionality needed for EAP-FAST. If EAP-FAST is enabled with OpenSSL,
     98 # the OpenSSL library must be patched (openssl-0.9.9-session-ticket.patch)
     99 # to add the needed functions.
    100 #CONFIG_EAP_FAST=y
    101 
    102 # Wi-Fi Protected Setup (WPS)
    103 #CONFIG_WPS=y
    104 # Enable WSC 2.0 support
    105 #CONFIG_WPS2=y
    106 # Enable UPnP support for external WPS Registrars
    107 #CONFIG_WPS_UPNP=y
    108 
    109 # EAP-IKEv2
    110 #CONFIG_EAP_IKEV2=y
    111 
    112 # Trusted Network Connect (EAP-TNC)
    113 #CONFIG_EAP_TNC=y
    114 
    115 # PKCS#12 (PFX) support (used to read private key and certificate file from
    116 # a file that usually has extension .p12 or .pfx)
    117 CONFIG_PKCS12=y
    118 
    119 # RADIUS authentication server. This provides access to the integrated EAP
    120 # server from external hosts using RADIUS.
    121 #CONFIG_RADIUS_SERVER=y
    122 
    123 # Build IPv6 support for RADIUS operations
    124 CONFIG_IPV6=y
    125 
    126 # IEEE Std 802.11r-2008 (Fast BSS Transition)
    127 #CONFIG_IEEE80211R=y
    128 
    129 # Use the hostapd's IEEE 802.11 authentication (ACL), but without
    130 # the IEEE 802.11 Management capability (e.g., madwifi or FreeBSD/net80211)
    131 #CONFIG_DRIVER_RADIUS_ACL=y
    132 
    133 # IEEE 802.11n (High Throughput) support
    134 #CONFIG_IEEE80211N=y
    135 
    136 # Remove debugging code that is printing out debug messages to stdout.
    137 # This can be used to reduce the size of the hostapd considerably if debugging
    138 # code is not needed.
    139 #CONFIG_NO_STDOUT_DEBUG=y
    140 
    141 # Add support for writing debug log to a file: -f /tmp/hostapd.log
    142 # Disabled by default.
    143 #CONFIG_DEBUG_FILE=y
    144 
    145 # Remove support for RADIUS accounting
    146 #CONFIG_NO_ACCOUNTING=y
    147 
    148 # Remove support for RADIUS
    149 #CONFIG_NO_RADIUS=y
    150 
    151 # Remove support for VLANs
    152 #CONFIG_NO_VLAN=y
    153 
    154 # Enable support for fully dynamic VLANs. This enables hostapd to
    155 # automatically create bridge and VLAN interfaces if necessary.
    156 #CONFIG_FULL_DYNAMIC_VLAN=y
    157 
    158 # Remove support for dumping state into a file on SIGUSR1 signal
    159 # This can be used to reduce binary size at the cost of disabling a debugging
    160 # option.
    161 #CONFIG_NO_DUMP_STATE=y
    162 
    163 # Enable tracing code for developer debugging
    164 # This tracks use of memory allocations and other registrations and reports
    165 # incorrect use with a backtrace of call (or allocation) location.
    166 #CONFIG_WPA_TRACE=y
    167 # For BSD, comment out these.
    168 #LIBS += -lexecinfo
    169 #LIBS_p += -lexecinfo
    170 #LIBS_c += -lexecinfo
    171 
    172 # Use libbfd to get more details for developer debugging
    173 # This enables use of libbfd to get more detailed symbols for the backtraces
    174 # generated by CONFIG_WPA_TRACE=y.
    175 #CONFIG_WPA_TRACE_BFD=y
    176 # For BSD, comment out these.
    177 #LIBS += -lbfd -liberty -lz
    178 #LIBS_p += -lbfd -liberty -lz
    179 #LIBS_c += -lbfd -liberty -lz
    180 
    181 # hostapd depends on strong random number generation being available from the
    182 # operating system. os_get_random() function is used to fetch random data when
    183 # needed, e.g., for key generation. On Linux and BSD systems, this works by
    184 # reading /dev/urandom. It should be noted that the OS entropy pool needs to be
    185 # properly initialized before hostapd is started. This is important especially
    186 # on embedded devices that do not have a hardware random number generator and
    187 # may by default start up with minimal entropy available for random number
    188 # generation.
    189 #
    190 # As a safety net, hostapd is by default trying to internally collect
    191 # additional entropy for generating random data to mix in with the data
    192 # fetched from the OS. This by itself is not considered to be very strong, but
    193 # it may help in cases where the system pool is not initialized properly.
    194 # However, it is very strongly recommended that the system pool is initialized
    195 # with enough entropy either by using hardware assisted random number
    196 # generator or by storing state over device reboots.
    197 #
    198 # hostapd can be configured to maintain its own entropy store over restarts to
    199 # enhance random number generation. This is not perfect, but it is much more
    200 # secure than using the same sequence of random numbers after every reboot.
    201 # This can be enabled with -e<entropy file> command line option. The specified
    202 # file needs to be readable and writable by hostapd.
    203 #
    204 # If the os_get_random() is known to provide strong random data (e.g., on
    205 # Linux/BSD, the board in question is known to have reliable source of random
    206 # data from /dev/urandom), the internal hostapd random pool can be disabled.
    207 # This will save some in binary size and CPU use. However, this should only be
    208 # considered for builds that are known to be used on devices that meet the
    209 # requirements described above.
    210 #CONFIG_NO_RANDOM_POOL=y
    211