1 # Example wpa_supplicant build time configuration 2 # 3 # This file lists the configuration options that are used when building the 4 # wpa_supplicant binary. All lines starting with # are ignored. Configuration 5 # option lines must be commented out complete, if they are not to be included, 6 # i.e., just setting VARIABLE=n is not disabling that variable. 7 # 8 # This file is included in Makefile, so variables like CFLAGS and LIBS can also 9 # be modified from here. In most cases, these lines should use += in order not 10 # to override previous values of the variables. 11 12 13 # Uncomment following two lines and fix the paths if you have installed OpenSSL 14 # or GnuTLS in non-default location 15 #CFLAGS += -I/usr/local/openssl/include 16 #LIBS += -L/usr/local/openssl/lib 17 18 # Some Red Hat versions seem to include kerberos header files from OpenSSL, but 19 # the kerberos files are not in the default include path. Following line can be 20 # used to fix build issues on such systems (krb5.h not found). 21 #CFLAGS += -I/usr/include/kerberos 22 23 # Driver interface for generic Linux wireless extensions 24 # Note: WEXT is deprecated in the current Linux kernel version and no new 25 # functionality is added to it. nl80211-based interface is the new 26 # replacement for WEXT and its use allows wpa_supplicant to properly control 27 # the driver to improve existing functionality like roaming and to support new 28 # functionality. 29 #CONFIG_DRIVER_WEXT=y 30 31 # Driver interface for Linux drivers using the nl80211 kernel interface 32 #CONFIG_DRIVER_NL80211=y 33 CONFIG_LIBNL20=y 34 35 # QCA vendor extensions to nl80211 36 CONFIG_DRIVER_NL80211_QCA=y 37 38 # Driver interface for FreeBSD net80211 layer (e.g., Atheros driver) 39 #CONFIG_DRIVER_BSD=y 40 #CFLAGS += -I/usr/local/include 41 #LIBS += -L/usr/local/lib 42 #LIBS_p += -L/usr/local/lib 43 #LIBS_c += -L/usr/local/lib 44 45 # Driver interface for Windows NDIS 46 #CONFIG_DRIVER_NDIS=y 47 #CFLAGS += -I/usr/include/w32api/ddk 48 #LIBS += -L/usr/local/lib 49 # For native build using mingw 50 #CONFIG_NATIVE_WINDOWS=y 51 # Additional directories for cross-compilation on Linux host for mingw target 52 #CFLAGS += -I/opt/mingw/mingw32/include/ddk 53 #LIBS += -L/opt/mingw/mingw32/lib 54 #CC=mingw32-gcc 55 # By default, driver_ndis uses WinPcap for low-level operations. This can be 56 # replaced with the following option which replaces WinPcap calls with NDISUIO. 57 # However, this requires that WZC is disabled (net stop wzcsvc) before starting 58 # wpa_supplicant. 59 # CONFIG_USE_NDISUIO=y 60 61 # Driver interface for wired Ethernet drivers 62 #CONFIG_DRIVER_WIRED=y 63 64 # Driver interface for the Broadcom RoboSwitch family 65 #CONFIG_DRIVER_ROBOSWITCH=y 66 67 # Driver interface for no driver (e.g., WPS ER only) 68 #CONFIG_DRIVER_NONE=y 69 70 # Solaris libraries 71 #LIBS += -lsocket -ldlpi -lnsl 72 #LIBS_c += -lsocket 73 74 # Enable IEEE 802.1X Supplicant (automatically included if any EAP method is 75 # included) 76 CONFIG_IEEE8021X_EAPOL=y 77 78 # EAP-MD5 79 CONFIG_EAP_MD5=y 80 81 # EAP-MSCHAPv2 82 CONFIG_EAP_MSCHAPV2=y 83 84 # EAP-TLS 85 CONFIG_EAP_TLS=y 86 87 # EAL-PEAP 88 CONFIG_EAP_PEAP=y 89 90 # EAP-TTLS 91 CONFIG_EAP_TTLS=y 92 93 # EAP-FAST 94 # Note: If OpenSSL is used as the TLS library, OpenSSL 1.0 or newer is needed 95 # for EAP-FAST support. Older OpenSSL releases would need to be patched, e.g., 96 # with openssl-0.9.8x-tls-extensions.patch, to add the needed functions. 97 #CONFIG_EAP_FAST=y 98 99 # EAP-GTC 100 CONFIG_EAP_GTC=y 101 102 # EAP-OTP 103 CONFIG_EAP_OTP=y 104 105 # EAP-SIM (enable CONFIG_PCSC, if EAP-SIM is used) 106 CONFIG_EAP_SIM=y 107 108 # EAP-PSK (experimental; this is _not_ needed for WPA-PSK) 109 #CONFIG_EAP_PSK=y 110 111 # EAP-pwd (secure authentication using only a password) 112 CONFIG_EAP_PWD=y 113 114 # EAP-PAX 115 #CONFIG_EAP_PAX=y 116 117 # LEAP 118 CONFIG_EAP_LEAP=y 119 120 # EAP-AKA (enable CONFIG_PCSC, if EAP-AKA is used) 121 CONFIG_EAP_AKA=y 122 123 # EAP-AKA' (enable CONFIG_PCSC, if EAP-AKA' is used). 124 # This requires CONFIG_EAP_AKA to be enabled, too. 125 CONFIG_EAP_AKA_PRIME=y 126 127 # Enable USIM simulator (Milenage) for EAP-AKA 128 #CONFIG_USIM_SIMULATOR=y 129 130 # EAP-SAKE 131 #CONFIG_EAP_SAKE=y 132 133 # EAP-GPSK 134 #CONFIG_EAP_GPSK=y 135 # Include support for optional SHA256 cipher suite in EAP-GPSK 136 #CONFIG_EAP_GPSK_SHA256=y 137 138 # EAP-TNC and related Trusted Network Connect support (experimental) 139 #CONFIG_EAP_TNC=y 140 141 # Wi-Fi Protected Setup (WPS) 142 CONFIG_WPS=y 143 # Enable WPS external registrar functionality 144 CONFIG_WPS_ER=y 145 # Disable credentials for an open network by default when acting as a WPS 146 # registrar. 147 #CONFIG_WPS_REG_DISABLE_OPEN=y 148 # Enable WPS support with NFC config method 149 CONFIG_WPS_NFC=y 150 151 # EAP-IKEv2 152 #CONFIG_EAP_IKEV2=y 153 154 # EAP-EKE 155 #CONFIG_EAP_EKE=y 156 157 # PKCS#12 (PFX) support (used to read private key and certificate file from 158 # a file that usually has extension .p12 or .pfx) 159 CONFIG_PKCS12=y 160 161 # Smartcard support (i.e., private key on a smartcard), e.g., with openssl 162 # engine. 163 CONFIG_SMARTCARD=y 164 165 # PC/SC interface for smartcards (USIM, GSM SIM) 166 # Enable this if EAP-SIM or EAP-AKA is included 167 #CONFIG_PCSC=y 168 169 # Support HT overrides (disable HT/HT40, mask MCS rates, etc.) 170 #CONFIG_HT_OVERRIDES=y 171 172 # Support VHT overrides (disable VHT, mask MCS rates, etc.) 173 #CONFIG_VHT_OVERRIDES=y 174 175 # Development testing 176 #CONFIG_EAPOL_TEST=y 177 178 # Select control interface backend for external programs, e.g, wpa_cli: 179 # unix = UNIX domain sockets (default for Linux/*BSD) 180 # udp = UDP sockets using localhost (127.0.0.1) 181 # udp6 = UDP IPv6 sockets using localhost (::1) 182 # named_pipe = Windows Named Pipe (default for Windows) 183 # udp-remote = UDP sockets with remote access (only for tests systems/purpose) 184 # udp6-remote = UDP IPv6 sockets with remote access (only for tests purpose) 185 # y = use default (backwards compatibility) 186 # If this option is commented out, control interface is not included in the 187 # build. 188 CONFIG_CTRL_IFACE=y 189 190 # Include support for GNU Readline and History Libraries in wpa_cli. 191 # When building a wpa_cli binary for distribution, please note that these 192 # libraries are licensed under GPL and as such, BSD license may not apply for 193 # the resulting binary. 194 #CONFIG_READLINE=y 195 196 # Include internal line edit mode in wpa_cli. This can be used as a replacement 197 # for GNU Readline to provide limited command line editing and history support. 198 CONFIG_WPA_CLI_EDIT=y 199 200 # Remove debugging code that is printing out debug message to stdout. 201 # This can be used to reduce the size of the wpa_supplicant considerably 202 # if debugging code is not needed. The size reduction can be around 35% 203 # (e.g., 90 kB). 204 #CONFIG_NO_STDOUT_DEBUG=y 205 206 # Remove WPA support, e.g., for wired-only IEEE 802.1X supplicant, to save 207 # 35-50 kB in code size. 208 #CONFIG_NO_WPA=y 209 210 # Remove IEEE 802.11i/WPA-Personal ASCII passphrase support 211 # This option can be used to reduce code size by removing support for 212 # converting ASCII passphrases into PSK. If this functionality is removed, the 213 # PSK can only be configured as the 64-octet hexstring (e.g., from 214 # wpa_passphrase). This saves about 0.5 kB in code size. 215 #CONFIG_NO_WPA_PASSPHRASE=y 216 217 # Disable scan result processing (ap_mode=1) to save code size by about 1 kB. 218 # This can be used if ap_scan=1 mode is never enabled. 219 #CONFIG_NO_SCAN_PROCESSING=y 220 221 # Select configuration backend: 222 # file = text file (e.g., wpa_supplicant.conf; note: the configuration file 223 # path is given on command line, not here; this option is just used to 224 # select the backend that allows configuration files to be used) 225 # winreg = Windows registry (see win_example.reg for an example) 226 CONFIG_BACKEND=file 227 228 # Remove configuration write functionality (i.e., to allow the configuration 229 # file to be updated based on runtime configuration changes). The runtime 230 # configuration can still be changed, the changes are just not going to be 231 # persistent over restarts. This option can be used to reduce code size by 232 # about 3.5 kB. 233 #CONFIG_NO_CONFIG_WRITE=y 234 235 # Remove support for configuration blobs to reduce code size by about 1.5 kB. 236 #CONFIG_NO_CONFIG_BLOBS=y 237 238 # Select program entry point implementation: 239 # main = UNIX/POSIX like main() function (default) 240 # main_winsvc = Windows service (read parameters from registry) 241 # main_none = Very basic example (development use only) 242 #CONFIG_MAIN=main 243 244 # Select wrapper for operating system and C library specific functions 245 # unix = UNIX/POSIX like systems (default) 246 # win32 = Windows systems 247 # none = Empty template 248 CONFIG_OS=unix 249 250 # Select event loop implementation 251 # eloop = select() loop (default) 252 # eloop_win = Windows events and WaitForMultipleObject() loop 253 CONFIG_ELOOP=eloop 254 255 # Should we use poll instead of select? Select is used by default. 256 #CONFIG_ELOOP_POLL=y 257 258 # Should we use epoll instead of select? Select is used by default. 259 #CONFIG_ELOOP_EPOLL=y 260 261 # Should we use kqueue instead of select? Select is used by default. 262 #CONFIG_ELOOP_KQUEUE=y 263 264 # Select layer 2 packet implementation 265 # linux = Linux packet socket (default) 266 # pcap = libpcap/libdnet/WinPcap 267 # freebsd = FreeBSD libpcap 268 # winpcap = WinPcap with receive thread 269 # ndis = Windows NDISUIO (note: requires CONFIG_USE_NDISUIO=y) 270 # none = Empty template 271 CONFIG_L2_PACKET=linux 272 273 # Disable Linux packet socket workaround applicable for station interface 274 # in a bridge for EAPOL frames. This should be uncommented only if the kernel 275 # is known to not have the regression issue in packet socket behavior with 276 # bridge interfaces (commit 'bridge: respect RFC2863 operational state')'). 277 #CONFIG_NO_LINUX_PACKET_SOCKET_WAR=y 278 279 # PeerKey handshake for Station to Station Link (IEEE 802.11e DLS) 280 CONFIG_PEERKEY=y 281 282 # IEEE 802.11w (management frame protection), also known as PMF 283 # Driver support is also needed for IEEE 802.11w. 284 CONFIG_IEEE80211W=y 285 286 # Select TLS implementation 287 # openssl = OpenSSL (default) 288 # gnutls = GnuTLS 289 # internal = Internal TLSv1 implementation (experimental) 290 # none = Empty template 291 #CONFIG_TLS=openssl 292 293 # TLS-based EAP methods require at least TLS v1.0. Newer version of TLS (v1.1) 294 # can be enabled to get a stronger construction of messages when block ciphers 295 # are used. It should be noted that some existing TLS v1.0 -based 296 # implementation may not be compatible with TLS v1.1 message (ClientHello is 297 # sent prior to negotiating which version will be used) 298 #CONFIG_TLSV11=y 299 300 # TLS-based EAP methods require at least TLS v1.0. Newer version of TLS (v1.2) 301 # can be enabled to enable use of stronger crypto algorithms. It should be 302 # noted that some existing TLS v1.0 -based implementation may not be compatible 303 # with TLS v1.2 message (ClientHello is sent prior to negotiating which version 304 # will be used) 305 #CONFIG_TLSV12=y 306 307 # If CONFIG_TLS=internal is used, additional library and include paths are 308 # needed for LibTomMath. Alternatively, an integrated, minimal version of 309 # LibTomMath can be used. See beginning of libtommath.c for details on benefits 310 # and drawbacks of this option. 311 #CONFIG_INTERNAL_LIBTOMMATH=y 312 #ifndef CONFIG_INTERNAL_LIBTOMMATH 313 #LTM_PATH=/usr/src/libtommath-0.39 314 #CFLAGS += -I$(LTM_PATH) 315 #LIBS += -L$(LTM_PATH) 316 #LIBS_p += -L$(LTM_PATH) 317 #endif 318 # At the cost of about 4 kB of additional binary size, the internal LibTomMath 319 # can be configured to include faster routines for exptmod, sqr, and div to 320 # speed up DH and RSA calculation considerably 321 #CONFIG_INTERNAL_LIBTOMMATH_FAST=y 322 323 # Include NDIS event processing through WMI into wpa_supplicant/wpasvc. 324 # This is only for Windows builds and requires WMI-related header files and 325 # WbemUuid.Lib from Platform SDK even when building with MinGW. 326 #CONFIG_NDIS_EVENTS_INTEGRATED=y 327 #PLATFORMSDKLIB="/opt/Program Files/Microsoft Platform SDK/Lib" 328 329 # Add support for old DBus control interface 330 # (fi.epitest.hostap.WPASupplicant) 331 #CONFIG_CTRL_IFACE_DBUS=y 332 333 # Add support for new DBus control interface 334 # (fi.w1.hostap.wpa_supplicant1) 335 #CONFIG_CTRL_IFACE_DBUS_NEW=y 336 337 # Add introspection support for new DBus control interface 338 #CONFIG_CTRL_IFACE_DBUS_INTRO=y 339 340 # Add support for Hidl control interface 341 # Only applicable for Android platforms. 342 CONFIG_CTRL_IFACE_HIDL=y 343 344 # Add support for loading EAP methods dynamically as shared libraries. 345 # When this option is enabled, each EAP method can be either included 346 # statically (CONFIG_EAP_<method>=y) or dynamically (CONFIG_EAP_<method>=dyn). 347 # Dynamic EAP methods are build as shared objects (eap_*.so) and they need to 348 # be loaded in the beginning of the wpa_supplicant configuration file 349 # (see load_dynamic_eap parameter in the example file) before being used in 350 # the network blocks. 351 # 352 # Note that some shared parts of EAP methods are included in the main program 353 # and in order to be able to use dynamic EAP methods using these parts, the 354 # main program must have been build with the EAP method enabled (=y or =dyn). 355 # This means that EAP-TLS/PEAP/TTLS/FAST cannot be added as dynamic libraries 356 # unless at least one of them was included in the main build to force inclusion 357 # of the shared code. Similarly, at least one of EAP-SIM/AKA must be included 358 # in the main build to be able to load these methods dynamically. 359 # 360 # Please also note that using dynamic libraries will increase the total binary 361 # size. Thus, it may not be the best option for targets that have limited 362 # amount of memory/flash. 363 #CONFIG_DYNAMIC_EAP_METHODS=y 364 365 # IEEE Std 802.11r-2008 (Fast BSS Transition) for station mode 366 CONFIG_IEEE80211R=y 367 368 # IEEE Std 802.11r-2008 (Fast BSS Transition) for AP mode (implies 369 # CONFIG_IEEE80211R). 370 #CONFIG_IEEE80211R_AP=y 371 372 # Add support for writing debug log to a file (/tmp/wpa_supplicant-log-#.txt) 373 #CONFIG_DEBUG_FILE=y 374 375 # Send debug messages to syslog instead of stdout 376 #CONFIG_DEBUG_SYSLOG=y 377 # Set syslog facility for debug messages 378 #CONFIG_DEBUG_SYSLOG_FACILITY=LOG_DAEMON 379 380 # Add support for sending all debug messages (regardless of debug verbosity) 381 # to the Linux kernel tracing facility. This helps debug the entire stack by 382 # making it easy to record everything happening from the driver up into the 383 # same file, e.g., using trace-cmd. 384 #CONFIG_DEBUG_LINUX_TRACING=y 385 386 # Add support for writing debug log to Android logcat instead of standard 387 # output 388 CONFIG_ANDROID_LOG=y 389 390 # Enable privilege separation (see README 'Privilege separation' for details) 391 #CONFIG_PRIVSEP=y 392 393 # Enable mitigation against certain attacks against TKIP by delaying Michael 394 # MIC error reports by a random amount of time between 0 and 60 seconds 395 #CONFIG_DELAYED_MIC_ERROR_REPORT=y 396 397 # Enable tracing code for developer debugging 398 # This tracks use of memory allocations and other registrations and reports 399 # incorrect use with a backtrace of call (or allocation) location. 400 #CONFIG_WPA_TRACE=y 401 # For BSD, uncomment these. 402 #LIBS += -lexecinfo 403 #LIBS_p += -lexecinfo 404 #LIBS_c += -lexecinfo 405 406 # Use libbfd to get more details for developer debugging 407 # This enables use of libbfd to get more detailed symbols for the backtraces 408 # generated by CONFIG_WPA_TRACE=y. 409 #CONFIG_WPA_TRACE_BFD=y 410 # For BSD, uncomment these. 411 #LIBS += -lbfd -liberty -lz 412 #LIBS_p += -lbfd -liberty -lz 413 #LIBS_c += -lbfd -liberty -lz 414 415 # wpa_supplicant depends on strong random number generation being available 416 # from the operating system. os_get_random() function is used to fetch random 417 # data when needed, e.g., for key generation. On Linux and BSD systems, this 418 # works by reading /dev/urandom. It should be noted that the OS entropy pool 419 # needs to be properly initialized before wpa_supplicant is started. This is 420 # important especially on embedded devices that do not have a hardware random 421 # number generator and may by default start up with minimal entropy available 422 # for random number generation. 423 # 424 # As a safety net, wpa_supplicant is by default trying to internally collect 425 # additional entropy for generating random data to mix in with the data fetched 426 # from the OS. This by itself is not considered to be very strong, but it may 427 # help in cases where the system pool is not initialized properly. However, it 428 # is very strongly recommended that the system pool is initialized with enough 429 # entropy either by using hardware assisted random number generator or by 430 # storing state over device reboots. 431 # 432 # wpa_supplicant can be configured to maintain its own entropy store over 433 # restarts to enhance random number generation. This is not perfect, but it is 434 # much more secure than using the same sequence of random numbers after every 435 # reboot. This can be enabled with -e<entropy file> command line option. The 436 # specified file needs to be readable and writable by wpa_supplicant. 437 # 438 # If the os_get_random() is known to provide strong random data (e.g., on 439 # Linux/BSD, the board in question is known to have reliable source of random 440 # data from /dev/urandom), the internal wpa_supplicant random pool can be 441 # disabled. This will save some in binary size and CPU use. However, this 442 # should only be considered for builds that are known to be used on devices 443 # that meet the requirements described above. 444 #CONFIG_NO_RANDOM_POOL=y 445 446 # IEEE 802.11n (High Throughput) support (mainly for AP mode) 447 CONFIG_IEEE80211N=y 448 449 # IEEE 802.11ac (Very High Throughput) support (mainly for AP mode) 450 # (depends on CONFIG_IEEE80211N) 451 #CONFIG_IEEE80211AC=y 452 453 # Wireless Network Management (IEEE Std 802.11v-2011) 454 # Note: This is experimental and not complete implementation. 455 CONFIG_WNM=y 456 457 # Interworking (IEEE 802.11u) 458 # This can be used to enable functionality to improve interworking with 459 # external networks (GAS/ANQP to learn more about the networks and network 460 # selection based on available credentials). 461 CONFIG_INTERWORKING=y 462 463 # Hotspot 2.0 464 CONFIG_HS20=y 465 466 # Enable interface matching in wpa_supplicant 467 #CONFIG_MATCH_IFACE=y 468 469 # Disable roaming in wpa_supplicant 470 CONFIG_NO_ROAMING=y 471 472 # AP mode operations with wpa_supplicant 473 # This can be used for controlling AP mode operations with wpa_supplicant. It 474 # should be noted that this is mainly aimed at simple cases like 475 # WPA2-Personal while more complex configurations like WPA2-Enterprise with an 476 # external RADIUS server can be supported with hostapd. 477 CONFIG_AP=y 478 479 # P2P (Wi-Fi Direct) 480 # This can be used to enable P2P support in wpa_supplicant. See README-P2P for 481 # more information on P2P operations. 482 CONFIG_P2P=y 483 484 # Enable TDLS support 485 CONFIG_TDLS=y 486 487 # Wi-Fi Direct 488 # This can be used to enable Wi-Fi Direct extensions for P2P using an external 489 # program to control the additional information exchanges in the messages. 490 CONFIG_WIFI_DISPLAY=y 491 492 # Autoscan 493 # This can be used to enable automatic scan support in wpa_supplicant. 494 # See wpa_supplicant.conf for more information on autoscan usage. 495 # 496 # Enabling directly a module will enable autoscan support. 497 # For exponential module: 498 #CONFIG_AUTOSCAN_EXPONENTIAL=y 499 # For periodic module: 500 #CONFIG_AUTOSCAN_PERIODIC=y 501 502 # Password (and passphrase, etc.) backend for external storage 503 # These optional mechanisms can be used to add support for storing passwords 504 # and other secrets in external (to wpa_supplicant) location. This allows, for 505 # example, operating system specific key storage to be used 506 # 507 # External password backend for testing purposes (developer use) 508 #CONFIG_EXT_PASSWORD_TEST=y 509 510 # Enable Fast Session Transfer (FST) 511 #CONFIG_FST=y 512 513 # Support Multi Band Operation 514 #CONFIG_MBO=y 515 516 # Fast Initial Link Setup (FILS) (IEEE 802.11ai) 517 # Note: This is an experimental and not yet complete implementation. This 518 # should not be enabled for production use. 519 #CONFIG_FILS=y 520 521 # Support RSN on IBSS networks 522 # This is needed to be able to use mode=1 network profile with proto=RSN and 523 # key_mgmt=WPA-PSK (i.e., full key management instead of WPA-None). 524 #CONFIG_IBSS_RSN=y 525 526 # External PMKSA cache control 527 # This can be used to enable control interface commands that allow the current 528 # PMKSA cache entries to be fetched and new entries to be added. 529 #CONFIG_PMKSA_CACHE_EXTERNAL=y 530 531 # Mesh Networking (IEEE 802.11s) 532 #CONFIG_MESH=y 533 534 # Background scanning modules 535 # These can be used to request wpa_supplicant to perform background scanning 536 # operations for roaming within an ESS (same SSID). See the bgscan parameter in 537 # the wpa_supplicant.conf file for more details. 538 # Periodic background scans based on signal strength 539 #CONFIG_BGSCAN_SIMPLE=y 540 # Learn channels used by the network and try to avoid bgscans on other 541 # channels (experimental) 542 #CONFIG_BGSCAN_LEARN=y 543 544 include $(wildcard $(LOCAL_PATH)/android_config_*.inc) 545