blob: 5aa4fccf91a33bfd360a3746adf8393d42a19b77 [file] [log] [blame]
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -07001# Example wpa_supplicant build time configuration
2#
3# This file lists the configuration options that are used when building the
4# hostapd binary. All lines starting with # are ignored. Configuration option
5# lines must be commented out complete, if they are not to be included, i.e.,
6# just setting VARIABLE=n is not disabling that variable.
7#
8# This file is included in Makefile, so variables like CFLAGS and LIBS can also
9# be modified from here. In most cases, these lines should use += in order not
10# to override previous values of the variables.
11
12
13# Uncomment following two lines and fix the paths if you have installed OpenSSL
14# or GnuTLS in non-default location
15#CFLAGS += -I/usr/local/openssl/include
16#LIBS += -L/usr/local/openssl/lib
17
18# Some Red Hat versions seem to include kerberos header files from OpenSSL, but
19# the kerberos files are not in the default include path. Following line can be
20# used to fix build issues on such systems (krb5.h not found).
21#CFLAGS += -I/usr/include/kerberos
22
23# Example configuration for various cross-compilation platforms
24
25#### sveasoft (e.g., for Linksys WRT54G) ######################################
26#CC=mipsel-uclibc-gcc
27#CC=/opt/brcm/hndtools-mipsel-uclibc/bin/mipsel-uclibc-gcc
28#CFLAGS += -Os
29#CPPFLAGS += -I../src/include -I../../src/router/openssl/include
30#LIBS += -L/opt/brcm/hndtools-mipsel-uclibc-0.9.19/lib -lssl
31###############################################################################
32
33#### openwrt (e.g., for Linksys WRT54G) #######################################
34#CC=mipsel-uclibc-gcc
35#CC=/opt/brcm/hndtools-mipsel-uclibc/bin/mipsel-uclibc-gcc
36#CFLAGS += -Os
37#CPPFLAGS=-I../src/include -I../openssl-0.9.7d/include \
38# -I../WRT54GS/release/src/include
39#LIBS = -lssl
40###############################################################################
41
42
43# Driver interface for Host AP driver
44#CONFIG_DRIVER_HOSTAP=y
45
46# Driver interface for Agere driver
47#CONFIG_DRIVER_HERMES=y
48# Change include directories to match with the local setup
49#CFLAGS += -I../../hcf -I../../include -I../../include/hcf
50#CFLAGS += -I../../include/wireless
51
52# Driver interface for madwifi driver
53# Deprecated; use CONFIG_DRIVER_WEXT=y instead.
54#CONFIG_DRIVER_MADWIFI=y
55# Set include directory to the madwifi source tree
56#CFLAGS += -I../../madwifi
57
58# Driver interface for Prism54 driver
59# (Note: Prism54 is not yet supported, i.e., this will not work as-is and is
60# for developers only)
61#CONFIG_DRIVER_PRISM54=y
62
63# Driver interface for ndiswrapper
64# Deprecated; use CONFIG_DRIVER_WEXT=y instead.
65#CONFIG_DRIVER_NDISWRAPPER=y
66
67# Driver interface for Atmel driver
68#CONFIG_DRIVER_ATMEL=y
69
70# Driver interface for old Broadcom driver
71# Please note that the newer Broadcom driver ("hybrid Linux driver") supports
72# Linux wireless extensions and does not need (or even work) with the old
73# driver wrapper. Use CONFIG_DRIVER_WEXT=y with that driver.
74#CONFIG_DRIVER_BROADCOM=y
75# Example path for wlioctl.h; change to match your configuration
76#CFLAGS += -I/opt/WRT54GS/release/src/include
77
78# Driver interface for Intel ipw2100/2200 driver
79# Deprecated; use CONFIG_DRIVER_WEXT=y instead.
80#CONFIG_DRIVER_IPW=y
81
82# Driver interface for Ralink driver
83#CONFIG_DRIVER_RALINK=y
84
85# Driver interface for generic Linux wireless extensions
86#CONFIG_DRIVER_WEXT=y
87
88# Driver interface for Linux drivers using the nl80211 kernel interface
89#CONFIG_DRIVER_NL80211=y
90CONFIG_LIBNL20=y
91
92# Driver interface for FreeBSD net80211 layer (e.g., Atheros driver)
93#CONFIG_DRIVER_BSD=y
94#CFLAGS += -I/usr/local/include
95#LIBS += -L/usr/local/lib
96
97# Driver interface for Windows NDIS
98#CONFIG_DRIVER_NDIS=y
99#CFLAGS += -I/usr/include/w32api/ddk
100#LIBS += -L/usr/local/lib
101# For native build using mingw
102#CONFIG_NATIVE_WINDOWS=y
103# Additional directories for cross-compilation on Linux host for mingw target
104#CFLAGS += -I/opt/mingw/mingw32/include/ddk
105#LIBS += -L/opt/mingw/mingw32/lib
106#CC=mingw32-gcc
107# By default, driver_ndis uses WinPcap for low-level operations. This can be
108# replaced with the following option which replaces WinPcap calls with NDISUIO.
109# However, this requires that WZC is disabled (net stop wzcsvc) before starting
110# wpa_supplicant.
111# CONFIG_USE_NDISUIO=y
112
113# Driver interface for development testing
114#CONFIG_DRIVER_TEST=y
115
116# Include client MLME (management frame processing) for test driver
117# This can be used to test MLME operations in hostapd with the test interface.
118# space.
119#CONFIG_CLIENT_MLME=y
120
121# Driver interface for wired Ethernet drivers
122#CONFIG_DRIVER_WIRED=y
123
124# Driver interface for the Broadcom RoboSwitch family
125#CONFIG_DRIVER_ROBOSWITCH=y
126
127# Driver interface for no driver (e.g., WPS ER only)
128#CONFIG_DRIVER_NONE=y
129
130# Enable IEEE 802.1X Supplicant (automatically included if any EAP method is
131# included)
132CONFIG_IEEE8021X_EAPOL=y
133
134# EAP-MD5
135CONFIG_EAP_MD5=y
136
137# EAP-MSCHAPv2
138CONFIG_EAP_MSCHAPV2=y
139
140# EAP-TLS
141CONFIG_EAP_TLS=y
142
143# EAL-PEAP
144CONFIG_EAP_PEAP=y
145
146# EAP-TTLS
147CONFIG_EAP_TTLS=y
148
149# EAP-FAST
150# Note: Default OpenSSL package does not include support for all the
151# functionality needed for EAP-FAST. If EAP-FAST is enabled with OpenSSL,
152# the OpenSSL library must be patched (openssl-0.9.8d-tls-extensions.patch)
153# to add the needed functions.
154CONFIG_EAP_FAST=y
155
156# EAP-GTC
157CONFIG_EAP_GTC=y
158
159# EAP-OTP
160CONFIG_EAP_OTP=y
161
162# EAP-SIM (enable CONFIG_PCSC, if EAP-SIM is used)
163CONFIG_EAP_SIM=y
164
165# EAP-PSK (experimental; this is _not_ needed for WPA-PSK)
166#CONFIG_EAP_PSK=y
167
168# EAP-PAX
169#CONFIG_EAP_PAX=y
170
171# LEAP
172CONFIG_EAP_LEAP=y
173
174# EAP-AKA (enable CONFIG_PCSC, if EAP-AKA is used)
175#CONFIG_EAP_AKA=y
176
177# EAP-AKA' (enable CONFIG_PCSC, if EAP-AKA' is used).
178# This requires CONFIG_EAP_AKA to be enabled, too.
179#CONFIG_EAP_AKA_PRIME=y
180
181# Enable USIM simulator (Milenage) for EAP-AKA
182#CONFIG_USIM_SIMULATOR=y
183
184# EAP-SAKE
185#CONFIG_EAP_SAKE=y
186
187# EAP-GPSK
188#CONFIG_EAP_GPSK=y
189# Include support for optional SHA256 cipher suite in EAP-GPSK
190#CONFIG_EAP_GPSK_SHA256=y
191
192# EAP-TNC and related Trusted Network Connect support (experimental)
193#CONFIG_EAP_TNC=y
194
195# Wi-Fi Protected Setup (WPS)
196CONFIG_WPS=y
197# Enable WSC 2.0 support
198CONFIG_WPS2=y
199
200# EAP-IKEv2
201#CONFIG_EAP_IKEV2=y
202
Dmitry Shmidta8d27d92012-01-06 10:07:01 -0800203# EAP-PWD
204CONFIG_EAP_PWD=y
205
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700206# PKCS#12 (PFX) support (used to read private key and certificate file from
207# a file that usually has extension .p12 or .pfx)
208CONFIG_PKCS12=y
209
210# Smartcard support (i.e., private key on a smartcard), e.g., with openssl
211# engine.
212CONFIG_SMARTCARD=y
213
214# PC/SC interface for smartcards (USIM, GSM SIM)
215# Enable this if EAP-SIM or EAP-AKA is included
216#CONFIG_PCSC=y
217
218# Development testing
219#CONFIG_EAPOL_TEST=y
220
221# Select control interface backend for external programs, e.g, wpa_cli:
222# unix = UNIX domain sockets (default for Linux/*BSD)
223# udp = UDP sockets using localhost (127.0.0.1)
224# named_pipe = Windows Named Pipe (default for Windows)
225# y = use default (backwards compatibility)
226# If this option is commented out, control interface is not included in the
227# build.
228CONFIG_CTRL_IFACE=y
229
230# Include support for GNU Readline and History Libraries in wpa_cli.
231# When building a wpa_cli binary for distribution, please note that these
232# libraries are licensed under GPL and as such, BSD license may not apply for
233# the resulting binary.
234#CONFIG_READLINE=y
235
236# Remove debugging code that is printing out debug message to stdout.
237# This can be used to reduce the size of the wpa_supplicant considerably
238# if debugging code is not needed. The size reduction can be around 35%
239# (e.g., 90 kB).
240#CONFIG_NO_STDOUT_DEBUG=y
241
242# Remove WPA support, e.g., for wired-only IEEE 802.1X supplicant, to save
243# 35-50 kB in code size.
244#CONFIG_NO_WPA=y
245
246# Remove WPA2 support. This allows WPA to be used, but removes WPA2 code to
247# save about 1 kB in code size when building only WPA-Personal (no EAP support)
248# or 6 kB if building for WPA-Enterprise.
249#CONFIG_NO_WPA2=y
250
251# Remove IEEE 802.11i/WPA-Personal ASCII passphrase support
252# This option can be used to reduce code size by removing support for
253# converting ASCII passphrases into PSK. If this functionality is removed, the
254# PSK can only be configured as the 64-octet hexstring (e.g., from
255# wpa_passphrase). This saves about 0.5 kB in code size.
256#CONFIG_NO_WPA_PASSPHRASE=y
257
258# Disable scan result processing (ap_mode=1) to save code size by about 1 kB.
259# This can be used if ap_scan=1 mode is never enabled.
260#CONFIG_NO_SCAN_PROCESSING=y
261
262# Select configuration backend:
263# file = text file (e.g., wpa_supplicant.conf; note: the configuration file
264# path is given on command line, not here; this option is just used to
265# select the backend that allows configuration files to be used)
266# winreg = Windows registry (see win_example.reg for an example)
267CONFIG_BACKEND=file
268
269# Remove configuration write functionality (i.e., to allow the configuration
270# file to be updated based on runtime configuration changes). The runtime
271# configuration can still be changed, the changes are just not going to be
272# persistent over restarts. This option can be used to reduce code size by
273# about 3.5 kB.
274#CONFIG_NO_CONFIG_WRITE=y
275
276# Remove support for configuration blobs to reduce code size by about 1.5 kB.
277#CONFIG_NO_CONFIG_BLOBS=y
278
279# Select program entry point implementation:
280# main = UNIX/POSIX like main() function (default)
281# main_winsvc = Windows service (read parameters from registry)
282# main_none = Very basic example (development use only)
283#CONFIG_MAIN=main
284
285# Select wrapper for operatins system and C library specific functions
286# unix = UNIX/POSIX like systems (default)
287# win32 = Windows systems
288# none = Empty template
289CONFIG_OS=unix
290
291# Select event loop implementation
292# eloop = select() loop (default)
293# eloop_win = Windows events and WaitForMultipleObject() loop
294# eloop_none = Empty template
295CONFIG_ELOOP=eloop
296
297# Select layer 2 packet implementation
298# linux = Linux packet socket (default)
299# pcap = libpcap/libdnet/WinPcap
300# freebsd = FreeBSD libpcap
301# winpcap = WinPcap with receive thread
302# ndis = Windows NDISUIO (note: requires CONFIG_USE_NDISUIO=y)
303# none = Empty template
304CONFIG_L2_PACKET=linux
305
306# PeerKey handshake for Station to Station Link (IEEE 802.11e DLS)
307CONFIG_PEERKEY=y
308
309# IEEE 802.11w (management frame protection)
310# This version is an experimental implementation based on IEEE 802.11w/D1.0
311# draft and is subject to change since the standard has not yet been finalized.
312# Driver support is also needed for IEEE 802.11w.
313#CONFIG_IEEE80211W=y
314
315# Select TLS implementation
316# openssl = OpenSSL (default)
317# gnutls = GnuTLS (needed for TLS/IA, see also CONFIG_GNUTLS_EXTRA)
318# internal = Internal TLSv1 implementation (experimental)
319# none = Empty template
320#CONFIG_TLS=openssl
321
322# Whether to enable TLS/IA support, which is required for EAP-TTLSv1.
323# You need CONFIG_TLS=gnutls for this to have any effect. Please note that
324# even though the core GnuTLS library is released under LGPL, this extra
325# library uses GPL and as such, the terms of GPL apply to the combination
326# of wpa_supplicant and GnuTLS if this option is enabled. BSD license may not
327# apply for distribution of the resulting binary.
328#CONFIG_GNUTLS_EXTRA=y
329
330# If CONFIG_TLS=internal is used, additional library and include paths are
331# needed for LibTomMath. Alternatively, an integrated, minimal version of
332# LibTomMath can be used. See beginning of libtommath.c for details on benefits
333# and drawbacks of this option.
334#CONFIG_INTERNAL_LIBTOMMATH=y
335#ifndef CONFIG_INTERNAL_LIBTOMMATH
336#LTM_PATH=/usr/src/libtommath-0.39
337#CFLAGS += -I$(LTM_PATH)
338#LIBS += -L$(LTM_PATH)
339#LIBS_p += -L$(LTM_PATH)
340#endif
341# At the cost of about 4 kB of additional binary size, the internal LibTomMath
342# can be configured to include faster routines for exptmod, sqr, and div to
343# speed up DH and RSA calculation considerably
344#CONFIG_INTERNAL_LIBTOMMATH_FAST=y
345
346# Include NDIS event processing through WMI into wpa_supplicant/wpasvc.
347# This is only for Windows builds and requires WMI-related header files and
348# WbemUuid.Lib from Platform SDK even when building with MinGW.
349#CONFIG_NDIS_EVENTS_INTEGRATED=y
350#PLATFORMSDKLIB="/opt/Program Files/Microsoft Platform SDK/Lib"
351
352# Add support for old DBus control interface
353# (fi.epitest.hostap.WPASupplicant)
354#CONFIG_CTRL_IFACE_DBUS=y
355
356# Add support for new DBus control interface
357# (fi.w1.hostap.wpa_supplicant1)
358#CONFIG_CTRL_IFACE_DBUS_NEW=y
359
360# Add introspection support for new DBus control interface (requires libxml2)
361#CONFIG_CTRL_IFACE_DBUS_INTRO=y
362
363# Add support for loading EAP methods dynamically as shared libraries.
364# When this option is enabled, each EAP method can be either included
365# statically (CONFIG_EAP_<method>=y) or dynamically (CONFIG_EAP_<method>=dyn).
366# Dynamic EAP methods are build as shared objects (eap_*.so) and they need to
367# be loaded in the beginning of the wpa_supplicant configuration file
368# (see load_dynamic_eap parameter in the example file) before being used in
369# the network blocks.
370#
371# Note that some shared parts of EAP methods are included in the main program
372# and in order to be able to use dynamic EAP methods using these parts, the
373# main program must have been build with the EAP method enabled (=y or =dyn).
374# This means that EAP-TLS/PEAP/TTLS/FAST cannot be added as dynamic libraries
375# unless at least one of them was included in the main build to force inclusion
376# of the shared code. Similarly, at least one of EAP-SIM/AKA must be included
377# in the main build to be able to load these methods dynamically.
378#
379# Please also note that using dynamic libraries will increase the total binary
380# size. Thus, it may not be the best option for targets that have limited
381# amount of memory/flash.
382#CONFIG_DYNAMIC_EAP_METHODS=y
383
384# IEEE Std 802.11r-2008 (Fast BSS Transition)
385#CONFIG_IEEE80211R=y
386
387# Add support for writing debug log to a file (/tmp/wpa_supplicant-log-#.txt)
388#CONFIG_DEBUG_FILE=y
389
390# Add support for writing debug log to Android logcat instead of standard output
391CONFIG_ANDROID_LOG=y
392
393# Enable privilege separation (see README 'Privilege separation' for details)
394#CONFIG_PRIVSEP=y
395
396# Enable mitigation against certain attacks against TKIP by delaying Michael
397# MIC error reports by a random amount of time between 0 and 60 seconds
398#CONFIG_DELAYED_MIC_ERROR_REPORT=y
Dmitry Shmidt497c1d52011-07-21 15:19:46 -0700399
Dmitry Shmidt006dedf2012-02-21 16:30:45 -0800400# Disable roaming in wpa_supplicant
401CONFIG_NO_ROAMING=y
402
Dmitry Shmidt497c1d52011-07-21 15:19:46 -0700403# Enable P2P
Dmitry Shmidt1f69aa52012-01-24 16:10:04 -0800404# IEEE 802.11n (High Throughput) support (mainly for AP mode)
405CONFIG_IEEE80211N=y
Dmitry Shmidt497c1d52011-07-21 15:19:46 -0700406CONFIG_P2P=y
407CONFIG_AP=y