Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 1 | # Example wpa_supplicant build time configuration |
| 2 | # |
| 3 | # This file lists the configuration options that are used when building the |
Dmitry Shmidt | ebd93af | 2017-02-21 13:40:44 -0800 | [diff] [blame] | 4 | # wpa_supplicant binary. All lines starting with # are ignored. Configuration |
| 5 | # option lines must be commented out complete, if they are not to be included, |
| 6 | # i.e., just setting VARIABLE=n is not disabling that variable. |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 7 | # |
| 8 | # This file is included in Makefile, so variables like CFLAGS and LIBS can also |
| 9 | # be modified from here. In most cases, these lines should use += in order not |
| 10 | # to override previous values of the variables. |
| 11 | |
| 12 | |
| 13 | # Uncomment following two lines and fix the paths if you have installed OpenSSL |
| 14 | # or GnuTLS in non-default location |
| 15 | #CFLAGS += -I/usr/local/openssl/include |
| 16 | #LIBS += -L/usr/local/openssl/lib |
| 17 | |
| 18 | # Some Red Hat versions seem to include kerberos header files from OpenSSL, but |
| 19 | # the kerberos files are not in the default include path. Following line can be |
| 20 | # used to fix build issues on such systems (krb5.h not found). |
| 21 | #CFLAGS += -I/usr/include/kerberos |
| 22 | |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 23 | # Driver interface for generic Linux wireless extensions |
Dmitry Shmidt | 0494959 | 2012-07-19 12:16:46 -0700 | [diff] [blame] | 24 | # Note: WEXT is deprecated in the current Linux kernel version and no new |
| 25 | # functionality is added to it. nl80211-based interface is the new |
| 26 | # replacement for WEXT and its use allows wpa_supplicant to properly control |
| 27 | # the driver to improve existing functionality like roaming and to support new |
| 28 | # functionality. |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 29 | #CONFIG_DRIVER_WEXT=y |
| 30 | |
| 31 | # Driver interface for Linux drivers using the nl80211 kernel interface |
| 32 | #CONFIG_DRIVER_NL80211=y |
| 33 | CONFIG_LIBNL20=y |
| 34 | |
| 35 | # Driver interface for FreeBSD net80211 layer (e.g., Atheros driver) |
| 36 | #CONFIG_DRIVER_BSD=y |
| 37 | #CFLAGS += -I/usr/local/include |
| 38 | #LIBS += -L/usr/local/lib |
Dmitry Shmidt | 0494959 | 2012-07-19 12:16:46 -0700 | [diff] [blame] | 39 | #LIBS_p += -L/usr/local/lib |
| 40 | #LIBS_c += -L/usr/local/lib |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 41 | |
| 42 | # Driver interface for Windows NDIS |
| 43 | #CONFIG_DRIVER_NDIS=y |
| 44 | #CFLAGS += -I/usr/include/w32api/ddk |
| 45 | #LIBS += -L/usr/local/lib |
| 46 | # For native build using mingw |
| 47 | #CONFIG_NATIVE_WINDOWS=y |
| 48 | # Additional directories for cross-compilation on Linux host for mingw target |
| 49 | #CFLAGS += -I/opt/mingw/mingw32/include/ddk |
| 50 | #LIBS += -L/opt/mingw/mingw32/lib |
| 51 | #CC=mingw32-gcc |
| 52 | # By default, driver_ndis uses WinPcap for low-level operations. This can be |
| 53 | # replaced with the following option which replaces WinPcap calls with NDISUIO. |
| 54 | # However, this requires that WZC is disabled (net stop wzcsvc) before starting |
| 55 | # wpa_supplicant. |
| 56 | # CONFIG_USE_NDISUIO=y |
| 57 | |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 58 | # Driver interface for wired Ethernet drivers |
| 59 | #CONFIG_DRIVER_WIRED=y |
| 60 | |
| 61 | # Driver interface for the Broadcom RoboSwitch family |
| 62 | #CONFIG_DRIVER_ROBOSWITCH=y |
| 63 | |
| 64 | # Driver interface for no driver (e.g., WPS ER only) |
| 65 | #CONFIG_DRIVER_NONE=y |
| 66 | |
Dmitry Shmidt | 0494959 | 2012-07-19 12:16:46 -0700 | [diff] [blame] | 67 | # Solaris libraries |
| 68 | #LIBS += -lsocket -ldlpi -lnsl |
| 69 | #LIBS_c += -lsocket |
| 70 | |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 71 | # Enable IEEE 802.1X Supplicant (automatically included if any EAP method is |
| 72 | # included) |
| 73 | CONFIG_IEEE8021X_EAPOL=y |
| 74 | |
| 75 | # EAP-MD5 |
| 76 | CONFIG_EAP_MD5=y |
| 77 | |
| 78 | # EAP-MSCHAPv2 |
| 79 | CONFIG_EAP_MSCHAPV2=y |
| 80 | |
| 81 | # EAP-TLS |
| 82 | CONFIG_EAP_TLS=y |
Jimmy Chen | a138f17 | 2022-10-06 15:25:46 +0800 | [diff] [blame] | 83 | CONFIG_EAP_TLSV1_3=y |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 84 | |
| 85 | # EAL-PEAP |
| 86 | CONFIG_EAP_PEAP=y |
| 87 | |
| 88 | # EAP-TTLS |
| 89 | CONFIG_EAP_TTLS=y |
| 90 | |
| 91 | # EAP-FAST |
Dmitry Shmidt | 849734c | 2016-05-27 09:59:01 -0700 | [diff] [blame] | 92 | #CONFIG_EAP_FAST=y |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 93 | |
| 94 | # EAP-GTC |
| 95 | CONFIG_EAP_GTC=y |
| 96 | |
| 97 | # EAP-OTP |
| 98 | CONFIG_EAP_OTP=y |
| 99 | |
| 100 | # EAP-SIM (enable CONFIG_PCSC, if EAP-SIM is used) |
| 101 | CONFIG_EAP_SIM=y |
| 102 | |
| 103 | # EAP-PSK (experimental; this is _not_ needed for WPA-PSK) |
| 104 | #CONFIG_EAP_PSK=y |
| 105 | |
Dmitry Shmidt | 0494959 | 2012-07-19 12:16:46 -0700 | [diff] [blame] | 106 | # EAP-pwd (secure authentication using only a password) |
| 107 | CONFIG_EAP_PWD=y |
| 108 | |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 109 | # EAP-PAX |
| 110 | #CONFIG_EAP_PAX=y |
| 111 | |
| 112 | # LEAP |
| 113 | CONFIG_EAP_LEAP=y |
| 114 | |
| 115 | # EAP-AKA (enable CONFIG_PCSC, if EAP-AKA is used) |
Dmitry Shmidt | 51b6ea8 | 2013-05-08 10:42:09 -0700 | [diff] [blame] | 116 | CONFIG_EAP_AKA=y |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 117 | |
| 118 | # EAP-AKA' (enable CONFIG_PCSC, if EAP-AKA' is used). |
| 119 | # This requires CONFIG_EAP_AKA to be enabled, too. |
Dmitry Shmidt | d11f019 | 2014-03-24 12:09:47 -0700 | [diff] [blame] | 120 | CONFIG_EAP_AKA_PRIME=y |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 121 | |
| 122 | # Enable USIM simulator (Milenage) for EAP-AKA |
| 123 | #CONFIG_USIM_SIMULATOR=y |
| 124 | |
| 125 | # EAP-SAKE |
| 126 | #CONFIG_EAP_SAKE=y |
| 127 | |
| 128 | # EAP-GPSK |
| 129 | #CONFIG_EAP_GPSK=y |
| 130 | # Include support for optional SHA256 cipher suite in EAP-GPSK |
| 131 | #CONFIG_EAP_GPSK_SHA256=y |
| 132 | |
| 133 | # EAP-TNC and related Trusted Network Connect support (experimental) |
| 134 | #CONFIG_EAP_TNC=y |
| 135 | |
| 136 | # Wi-Fi Protected Setup (WPS) |
| 137 | CONFIG_WPS=y |
Dmitry Shmidt | 0494959 | 2012-07-19 12:16:46 -0700 | [diff] [blame] | 138 | # Enable WPS external registrar functionality |
Dmitry Shmidt | 51b6ea8 | 2013-05-08 10:42:09 -0700 | [diff] [blame] | 139 | CONFIG_WPS_ER=y |
Dmitry Shmidt | 0494959 | 2012-07-19 12:16:46 -0700 | [diff] [blame] | 140 | # Disable credentials for an open network by default when acting as a WPS |
| 141 | # registrar. |
| 142 | #CONFIG_WPS_REG_DISABLE_OPEN=y |
Dmitry Shmidt | 51b6ea8 | 2013-05-08 10:42:09 -0700 | [diff] [blame] | 143 | # Enable WPS support with NFC config method |
| 144 | CONFIG_WPS_NFC=y |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 145 | |
| 146 | # EAP-IKEv2 |
| 147 | #CONFIG_EAP_IKEV2=y |
| 148 | |
Dmitry Shmidt | ebd93af | 2017-02-21 13:40:44 -0800 | [diff] [blame] | 149 | # EAP-EKE |
| 150 | #CONFIG_EAP_EKE=y |
| 151 | |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 152 | # PKCS#12 (PFX) support (used to read private key and certificate file from |
| 153 | # a file that usually has extension .p12 or .pfx) |
| 154 | CONFIG_PKCS12=y |
| 155 | |
| 156 | # Smartcard support (i.e., private key on a smartcard), e.g., with openssl |
| 157 | # engine. |
| 158 | CONFIG_SMARTCARD=y |
| 159 | |
| 160 | # PC/SC interface for smartcards (USIM, GSM SIM) |
| 161 | # Enable this if EAP-SIM or EAP-AKA is included |
| 162 | #CONFIG_PCSC=y |
| 163 | |
Dmitry Shmidt | 0494959 | 2012-07-19 12:16:46 -0700 | [diff] [blame] | 164 | # Support HT overrides (disable HT/HT40, mask MCS rates, etc.) |
| 165 | #CONFIG_HT_OVERRIDES=y |
| 166 | |
Dmitry Shmidt | 2f02319 | 2013-03-12 12:44:17 -0700 | [diff] [blame] | 167 | # Support VHT overrides (disable VHT, mask MCS rates, etc.) |
| 168 | #CONFIG_VHT_OVERRIDES=y |
| 169 | |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 170 | # Development testing |
| 171 | #CONFIG_EAPOL_TEST=y |
| 172 | |
| 173 | # Select control interface backend for external programs, e.g, wpa_cli: |
| 174 | # unix = UNIX domain sockets (default for Linux/*BSD) |
| 175 | # udp = UDP sockets using localhost (127.0.0.1) |
Dmitry Shmidt | ebd93af | 2017-02-21 13:40:44 -0800 | [diff] [blame] | 176 | # udp6 = UDP IPv6 sockets using localhost (::1) |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 177 | # named_pipe = Windows Named Pipe (default for Windows) |
Dmitry Shmidt | 51b6ea8 | 2013-05-08 10:42:09 -0700 | [diff] [blame] | 178 | # udp-remote = UDP sockets with remote access (only for tests systems/purpose) |
Dmitry Shmidt | ebd93af | 2017-02-21 13:40:44 -0800 | [diff] [blame] | 179 | # udp6-remote = UDP IPv6 sockets with remote access (only for tests purpose) |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 180 | # y = use default (backwards compatibility) |
| 181 | # If this option is commented out, control interface is not included in the |
| 182 | # build. |
| 183 | CONFIG_CTRL_IFACE=y |
| 184 | |
| 185 | # Include support for GNU Readline and History Libraries in wpa_cli. |
| 186 | # When building a wpa_cli binary for distribution, please note that these |
| 187 | # libraries are licensed under GPL and as such, BSD license may not apply for |
| 188 | # the resulting binary. |
| 189 | #CONFIG_READLINE=y |
| 190 | |
Dmitry Shmidt | 0494959 | 2012-07-19 12:16:46 -0700 | [diff] [blame] | 191 | # Include internal line edit mode in wpa_cli. This can be used as a replacement |
| 192 | # for GNU Readline to provide limited command line editing and history support. |
| 193 | CONFIG_WPA_CLI_EDIT=y |
| 194 | |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 195 | # Remove debugging code that is printing out debug message to stdout. |
| 196 | # This can be used to reduce the size of the wpa_supplicant considerably |
| 197 | # if debugging code is not needed. The size reduction can be around 35% |
| 198 | # (e.g., 90 kB). |
| 199 | #CONFIG_NO_STDOUT_DEBUG=y |
| 200 | |
| 201 | # Remove WPA support, e.g., for wired-only IEEE 802.1X supplicant, to save |
| 202 | # 35-50 kB in code size. |
| 203 | #CONFIG_NO_WPA=y |
| 204 | |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 205 | # Remove IEEE 802.11i/WPA-Personal ASCII passphrase support |
| 206 | # This option can be used to reduce code size by removing support for |
| 207 | # converting ASCII passphrases into PSK. If this functionality is removed, the |
| 208 | # PSK can only be configured as the 64-octet hexstring (e.g., from |
| 209 | # wpa_passphrase). This saves about 0.5 kB in code size. |
| 210 | #CONFIG_NO_WPA_PASSPHRASE=y |
| 211 | |
| 212 | # Disable scan result processing (ap_mode=1) to save code size by about 1 kB. |
| 213 | # This can be used if ap_scan=1 mode is never enabled. |
| 214 | #CONFIG_NO_SCAN_PROCESSING=y |
| 215 | |
| 216 | # Select configuration backend: |
| 217 | # file = text file (e.g., wpa_supplicant.conf; note: the configuration file |
| 218 | # path is given on command line, not here; this option is just used to |
| 219 | # select the backend that allows configuration files to be used) |
| 220 | # winreg = Windows registry (see win_example.reg for an example) |
| 221 | CONFIG_BACKEND=file |
| 222 | |
| 223 | # Remove configuration write functionality (i.e., to allow the configuration |
| 224 | # file to be updated based on runtime configuration changes). The runtime |
| 225 | # configuration can still be changed, the changes are just not going to be |
| 226 | # persistent over restarts. This option can be used to reduce code size by |
| 227 | # about 3.5 kB. |
| 228 | #CONFIG_NO_CONFIG_WRITE=y |
| 229 | |
| 230 | # Remove support for configuration blobs to reduce code size by about 1.5 kB. |
| 231 | #CONFIG_NO_CONFIG_BLOBS=y |
| 232 | |
| 233 | # Select program entry point implementation: |
| 234 | # main = UNIX/POSIX like main() function (default) |
| 235 | # main_winsvc = Windows service (read parameters from registry) |
| 236 | # main_none = Very basic example (development use only) |
| 237 | #CONFIG_MAIN=main |
| 238 | |
Dmitry Shmidt | 50b691d | 2014-05-21 14:01:45 -0700 | [diff] [blame] | 239 | # Select wrapper for operating system and C library specific functions |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 240 | # unix = UNIX/POSIX like systems (default) |
| 241 | # win32 = Windows systems |
| 242 | # none = Empty template |
| 243 | CONFIG_OS=unix |
| 244 | |
| 245 | # Select event loop implementation |
| 246 | # eloop = select() loop (default) |
| 247 | # eloop_win = Windows events and WaitForMultipleObject() loop |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 248 | CONFIG_ELOOP=eloop |
| 249 | |
Dmitry Shmidt | 0494959 | 2012-07-19 12:16:46 -0700 | [diff] [blame] | 250 | # Should we use poll instead of select? Select is used by default. |
| 251 | #CONFIG_ELOOP_POLL=y |
| 252 | |
Dmitry Shmidt | 50b691d | 2014-05-21 14:01:45 -0700 | [diff] [blame] | 253 | # Should we use epoll instead of select? Select is used by default. |
| 254 | #CONFIG_ELOOP_EPOLL=y |
| 255 | |
Dmitry Shmidt | ebd93af | 2017-02-21 13:40:44 -0800 | [diff] [blame] | 256 | # Should we use kqueue instead of select? Select is used by default. |
| 257 | #CONFIG_ELOOP_KQUEUE=y |
| 258 | |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 259 | # Select layer 2 packet implementation |
| 260 | # linux = Linux packet socket (default) |
| 261 | # pcap = libpcap/libdnet/WinPcap |
| 262 | # freebsd = FreeBSD libpcap |
| 263 | # winpcap = WinPcap with receive thread |
| 264 | # ndis = Windows NDISUIO (note: requires CONFIG_USE_NDISUIO=y) |
| 265 | # none = Empty template |
| 266 | CONFIG_L2_PACKET=linux |
| 267 | |
Dmitry Shmidt | ebd93af | 2017-02-21 13:40:44 -0800 | [diff] [blame] | 268 | # Disable Linux packet socket workaround applicable for station interface |
| 269 | # in a bridge for EAPOL frames. This should be uncommented only if the kernel |
| 270 | # is known to not have the regression issue in packet socket behavior with |
| 271 | # bridge interfaces (commit 'bridge: respect RFC2863 operational state')'). |
| 272 | #CONFIG_NO_LINUX_PACKET_SOCKET_WAR=y |
| 273 | |
Hai Shalom | 74f70d4 | 2019-02-11 14:42:39 -0800 | [diff] [blame] | 274 | # Support Operating Channel Validation |
| 275 | #CONFIG_OCV=y |
| 276 | |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 277 | # Select TLS implementation |
| 278 | # openssl = OpenSSL (default) |
Dmitry Shmidt | 0494959 | 2012-07-19 12:16:46 -0700 | [diff] [blame] | 279 | # gnutls = GnuTLS |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 280 | # internal = Internal TLSv1 implementation (experimental) |
| 281 | # none = Empty template |
| 282 | #CONFIG_TLS=openssl |
| 283 | |
Dmitry Shmidt | 0494959 | 2012-07-19 12:16:46 -0700 | [diff] [blame] | 284 | # TLS-based EAP methods require at least TLS v1.0. Newer version of TLS (v1.1) |
| 285 | # can be enabled to get a stronger construction of messages when block ciphers |
| 286 | # are used. It should be noted that some existing TLS v1.0 -based |
| 287 | # implementation may not be compatible with TLS v1.1 message (ClientHello is |
| 288 | # sent prior to negotiating which version will be used) |
| 289 | #CONFIG_TLSV11=y |
| 290 | |
| 291 | # TLS-based EAP methods require at least TLS v1.0. Newer version of TLS (v1.2) |
| 292 | # can be enabled to enable use of stronger crypto algorithms. It should be |
| 293 | # noted that some existing TLS v1.0 -based implementation may not be compatible |
| 294 | # with TLS v1.2 message (ClientHello is sent prior to negotiating which version |
| 295 | # will be used) |
| 296 | #CONFIG_TLSV12=y |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 297 | |
Dmitry Shmidt | d2986c2 | 2017-10-23 14:22:09 -0700 | [diff] [blame] | 298 | # Select which ciphers to use by default with OpenSSL if the user does not |
| 299 | # specify them. |
| 300 | #CONFIG_TLS_DEFAULT_CIPHERS="DEFAULT:!EXP:!LOW" |
| 301 | |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 302 | # If CONFIG_TLS=internal is used, additional library and include paths are |
| 303 | # needed for LibTomMath. Alternatively, an integrated, minimal version of |
| 304 | # LibTomMath can be used. See beginning of libtommath.c for details on benefits |
| 305 | # and drawbacks of this option. |
| 306 | #CONFIG_INTERNAL_LIBTOMMATH=y |
| 307 | #ifndef CONFIG_INTERNAL_LIBTOMMATH |
| 308 | #LTM_PATH=/usr/src/libtommath-0.39 |
| 309 | #CFLAGS += -I$(LTM_PATH) |
| 310 | #LIBS += -L$(LTM_PATH) |
| 311 | #LIBS_p += -L$(LTM_PATH) |
| 312 | #endif |
| 313 | # At the cost of about 4 kB of additional binary size, the internal LibTomMath |
| 314 | # can be configured to include faster routines for exptmod, sqr, and div to |
| 315 | # speed up DH and RSA calculation considerably |
| 316 | #CONFIG_INTERNAL_LIBTOMMATH_FAST=y |
| 317 | |
| 318 | # Include NDIS event processing through WMI into wpa_supplicant/wpasvc. |
| 319 | # This is only for Windows builds and requires WMI-related header files and |
| 320 | # WbemUuid.Lib from Platform SDK even when building with MinGW. |
| 321 | #CONFIG_NDIS_EVENTS_INTEGRATED=y |
| 322 | #PLATFORMSDKLIB="/opt/Program Files/Microsoft Platform SDK/Lib" |
| 323 | |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 324 | # Add support for new DBus control interface |
| 325 | # (fi.w1.hostap.wpa_supplicant1) |
| 326 | #CONFIG_CTRL_IFACE_DBUS_NEW=y |
| 327 | |
Dmitry Shmidt | 0494959 | 2012-07-19 12:16:46 -0700 | [diff] [blame] | 328 | # Add introspection support for new DBus control interface |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 329 | #CONFIG_CTRL_IFACE_DBUS_INTRO=y |
| 330 | |
Gabriel Biren | 57ededa | 2021-09-03 16:08:50 +0000 | [diff] [blame] | 331 | # Add support for Aidl control interface |
Dmitry Shmidt | e466304 | 2016-04-04 10:07:49 -0700 | [diff] [blame] | 332 | # Only applicable for Android platforms. |
Gabriel Biren | 57ededa | 2021-09-03 16:08:50 +0000 | [diff] [blame] | 333 | CONFIG_CTRL_IFACE_AIDL=y |
Dmitry Shmidt | e466304 | 2016-04-04 10:07:49 -0700 | [diff] [blame] | 334 | |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 335 | # Add support for loading EAP methods dynamically as shared libraries. |
| 336 | # When this option is enabled, each EAP method can be either included |
| 337 | # statically (CONFIG_EAP_<method>=y) or dynamically (CONFIG_EAP_<method>=dyn). |
| 338 | # Dynamic EAP methods are build as shared objects (eap_*.so) and they need to |
| 339 | # be loaded in the beginning of the wpa_supplicant configuration file |
| 340 | # (see load_dynamic_eap parameter in the example file) before being used in |
| 341 | # the network blocks. |
| 342 | # |
| 343 | # Note that some shared parts of EAP methods are included in the main program |
| 344 | # and in order to be able to use dynamic EAP methods using these parts, the |
| 345 | # main program must have been build with the EAP method enabled (=y or =dyn). |
| 346 | # This means that EAP-TLS/PEAP/TTLS/FAST cannot be added as dynamic libraries |
| 347 | # unless at least one of them was included in the main build to force inclusion |
| 348 | # of the shared code. Similarly, at least one of EAP-SIM/AKA must be included |
| 349 | # in the main build to be able to load these methods dynamically. |
| 350 | # |
| 351 | # Please also note that using dynamic libraries will increase the total binary |
| 352 | # size. Thus, it may not be the best option for targets that have limited |
| 353 | # amount of memory/flash. |
| 354 | #CONFIG_DYNAMIC_EAP_METHODS=y |
| 355 | |
Dmitry Shmidt | ebd93af | 2017-02-21 13:40:44 -0800 | [diff] [blame] | 356 | # IEEE Std 802.11r-2008 (Fast BSS Transition) for station mode |
Dmitry Shmidt | 10b4c79 | 2014-01-15 10:52:47 -0800 | [diff] [blame] | 357 | CONFIG_IEEE80211R=y |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 358 | |
| 359 | # Add support for writing debug log to a file (/tmp/wpa_supplicant-log-#.txt) |
| 360 | #CONFIG_DEBUG_FILE=y |
| 361 | |
Dmitry Shmidt | 0494959 | 2012-07-19 12:16:46 -0700 | [diff] [blame] | 362 | # Send debug messages to syslog instead of stdout |
| 363 | #CONFIG_DEBUG_SYSLOG=y |
| 364 | # Set syslog facility for debug messages |
| 365 | #CONFIG_DEBUG_SYSLOG_FACILITY=LOG_DAEMON |
| 366 | |
| 367 | # Add support for sending all debug messages (regardless of debug verbosity) |
| 368 | # to the Linux kernel tracing facility. This helps debug the entire stack by |
| 369 | # making it easy to record everything happening from the driver up into the |
| 370 | # same file, e.g., using trace-cmd. |
| 371 | #CONFIG_DEBUG_LINUX_TRACING=y |
| 372 | |
| 373 | # Add support for writing debug log to Android logcat instead of standard |
| 374 | # output |
Dmitry Shmidt | 8d520ff | 2011-05-09 14:06:53 -0700 | [diff] [blame] | 375 | CONFIG_ANDROID_LOG=y |
| 376 | |
| 377 | # Enable privilege separation (see README 'Privilege separation' for details) |
| 378 | #CONFIG_PRIVSEP=y |
| 379 | |
| 380 | # Enable mitigation against certain attacks against TKIP by delaying Michael |
| 381 | # MIC error reports by a random amount of time between 0 and 60 seconds |
| 382 | #CONFIG_DELAYED_MIC_ERROR_REPORT=y |
Dmitry Shmidt | 497c1d5 | 2011-07-21 15:19:46 -0700 | [diff] [blame] | 383 | |
Dmitry Shmidt | 0494959 | 2012-07-19 12:16:46 -0700 | [diff] [blame] | 384 | # Enable tracing code for developer debugging |
| 385 | # This tracks use of memory allocations and other registrations and reports |
| 386 | # incorrect use with a backtrace of call (or allocation) location. |
| 387 | #CONFIG_WPA_TRACE=y |
| 388 | # For BSD, uncomment these. |
| 389 | #LIBS += -lexecinfo |
| 390 | #LIBS_p += -lexecinfo |
| 391 | #LIBS_c += -lexecinfo |
| 392 | |
| 393 | # Use libbfd to get more details for developer debugging |
| 394 | # This enables use of libbfd to get more detailed symbols for the backtraces |
| 395 | # generated by CONFIG_WPA_TRACE=y. |
| 396 | #CONFIG_WPA_TRACE_BFD=y |
| 397 | # For BSD, uncomment these. |
| 398 | #LIBS += -lbfd -liberty -lz |
| 399 | #LIBS_p += -lbfd -liberty -lz |
| 400 | #LIBS_c += -lbfd -liberty -lz |
| 401 | |
| 402 | # wpa_supplicant depends on strong random number generation being available |
| 403 | # from the operating system. os_get_random() function is used to fetch random |
| 404 | # data when needed, e.g., for key generation. On Linux and BSD systems, this |
| 405 | # works by reading /dev/urandom. It should be noted that the OS entropy pool |
| 406 | # needs to be properly initialized before wpa_supplicant is started. This is |
| 407 | # important especially on embedded devices that do not have a hardware random |
| 408 | # number generator and may by default start up with minimal entropy available |
| 409 | # for random number generation. |
| 410 | # |
| 411 | # As a safety net, wpa_supplicant is by default trying to internally collect |
| 412 | # additional entropy for generating random data to mix in with the data fetched |
| 413 | # from the OS. This by itself is not considered to be very strong, but it may |
| 414 | # help in cases where the system pool is not initialized properly. However, it |
| 415 | # is very strongly recommended that the system pool is initialized with enough |
| 416 | # entropy either by using hardware assisted random number generator or by |
| 417 | # storing state over device reboots. |
| 418 | # |
| 419 | # wpa_supplicant can be configured to maintain its own entropy store over |
| 420 | # restarts to enhance random number generation. This is not perfect, but it is |
| 421 | # much more secure than using the same sequence of random numbers after every |
| 422 | # reboot. This can be enabled with -e<entropy file> command line option. The |
| 423 | # specified file needs to be readable and writable by wpa_supplicant. |
| 424 | # |
| 425 | # If the os_get_random() is known to provide strong random data (e.g., on |
| 426 | # Linux/BSD, the board in question is known to have reliable source of random |
| 427 | # data from /dev/urandom), the internal wpa_supplicant random pool can be |
| 428 | # disabled. This will save some in binary size and CPU use. However, this |
| 429 | # should only be considered for builds that are known to be used on devices |
| 430 | # that meet the requirements described above. |
Jeff Vander Stoep | c88b752 | 2017-11-30 11:13:52 -0800 | [diff] [blame] | 431 | |
| 432 | # Wpa_supplicant's random pool is not necessary on Android. Randomness is |
| 433 | # already provided by the entropymixer service which ensures sufficient |
| 434 | # entropy is maintained across reboots. Commit b410eb1913 'Initialize |
| 435 | # /dev/urandom earlier in boot' seeds /dev/urandom with that entropy before |
| 436 | # either wpa_supplicant or hostapd are run. |
| 437 | CONFIG_NO_RANDOM_POOL=y |
Dmitry Shmidt | 0494959 | 2012-07-19 12:16:46 -0700 | [diff] [blame] | 438 | |
Dmitry Shmidt | ebd93af | 2017-02-21 13:40:44 -0800 | [diff] [blame] | 439 | # IEEE 802.11ac (Very High Throughput) support (mainly for AP mode) |
Dmitry Shmidt | ebd93af | 2017-02-21 13:40:44 -0800 | [diff] [blame] | 440 | #CONFIG_IEEE80211AC=y |
| 441 | |
Dmitry Shmidt | 51b6ea8 | 2013-05-08 10:42:09 -0700 | [diff] [blame] | 442 | # Wireless Network Management (IEEE Std 802.11v-2011) |
| 443 | # Note: This is experimental and not complete implementation. |
Dmitry Shmidt | b9cc2c0 | 2014-01-15 10:54:39 -0800 | [diff] [blame] | 444 | CONFIG_WNM=y |
Dmitry Shmidt | 51b6ea8 | 2013-05-08 10:42:09 -0700 | [diff] [blame] | 445 | |
Dmitry Shmidt | 0494959 | 2012-07-19 12:16:46 -0700 | [diff] [blame] | 446 | # Interworking (IEEE 802.11u) |
| 447 | # This can be used to enable functionality to improve interworking with |
| 448 | # external networks (GAS/ANQP to learn more about the networks and network |
| 449 | # selection based on available credentials). |
Dmitry Shmidt | 384894a | 2013-10-25 14:41:58 -0700 | [diff] [blame] | 450 | CONFIG_INTERWORKING=y |
Dmitry Shmidt | 0494959 | 2012-07-19 12:16:46 -0700 | [diff] [blame] | 451 | |
Dmitry Shmidt | 9bce59c | 2012-09-11 15:06:38 -0700 | [diff] [blame] | 452 | # Hotspot 2.0 |
Dmitry Shmidt | 384894a | 2013-10-25 14:41:58 -0700 | [diff] [blame] | 453 | CONFIG_HS20=y |
Dmitry Shmidt | 9bce59c | 2012-09-11 15:06:38 -0700 | [diff] [blame] | 454 | |
Dmitry Shmidt | ebd93af | 2017-02-21 13:40:44 -0800 | [diff] [blame] | 455 | # Enable interface matching in wpa_supplicant |
| 456 | #CONFIG_MATCH_IFACE=y |
| 457 | |
Dmitry Shmidt | 006dedf | 2012-02-21 16:30:45 -0800 | [diff] [blame] | 458 | # Disable roaming in wpa_supplicant |
| 459 | CONFIG_NO_ROAMING=y |
| 460 | |
Dmitry Shmidt | 51b6ea8 | 2013-05-08 10:42:09 -0700 | [diff] [blame] | 461 | # AP mode operations with wpa_supplicant |
| 462 | # This can be used for controlling AP mode operations with wpa_supplicant. It |
| 463 | # should be noted that this is mainly aimed at simple cases like |
| 464 | # WPA2-Personal while more complex configurations like WPA2-Enterprise with an |
| 465 | # external RADIUS server can be supported with hostapd. |
Dmitry Shmidt | 497c1d5 | 2011-07-21 15:19:46 -0700 | [diff] [blame] | 466 | CONFIG_AP=y |
Dmitry Shmidt | 61d9df3 | 2012-08-29 16:22:06 -0700 | [diff] [blame] | 467 | |
Dmitry Shmidt | 51b6ea8 | 2013-05-08 10:42:09 -0700 | [diff] [blame] | 468 | # P2P (Wi-Fi Direct) |
| 469 | # This can be used to enable P2P support in wpa_supplicant. See README-P2P for |
| 470 | # more information on P2P operations. |
| 471 | CONFIG_P2P=y |
| 472 | |
Dmitry Shmidt | fa3fc4a | 2013-11-21 13:34:38 -0800 | [diff] [blame] | 473 | # Enable TDLS support |
Dmitry Shmidt | 51b6ea8 | 2013-05-08 10:42:09 -0700 | [diff] [blame] | 474 | CONFIG_TDLS=y |
| 475 | |
Hai Shalom | 021b0b5 | 2019-04-10 11:17:58 -0700 | [diff] [blame] | 476 | # Wi-Fi Display |
| 477 | # This can be used to enable Wi-Fi Display extensions for P2P using an external |
Dmitry Shmidt | fa3fc4a | 2013-11-21 13:34:38 -0800 | [diff] [blame] | 478 | # program to control the additional information exchanges in the messages. |
Dmitry Shmidt | 61d9df3 | 2012-08-29 16:22:06 -0700 | [diff] [blame] | 479 | CONFIG_WIFI_DISPLAY=y |
Dmitry Shmidt | 51b6ea8 | 2013-05-08 10:42:09 -0700 | [diff] [blame] | 480 | |
| 481 | # Autoscan |
| 482 | # This can be used to enable automatic scan support in wpa_supplicant. |
Dmitry Shmidt | cce0666 | 2013-11-04 18:44:24 -0800 | [diff] [blame] | 483 | # See wpa_supplicant.conf for more information on autoscan usage. |
Dmitry Shmidt | 51b6ea8 | 2013-05-08 10:42:09 -0700 | [diff] [blame] | 484 | # |
| 485 | # Enabling directly a module will enable autoscan support. |
| 486 | # For exponential module: |
| 487 | #CONFIG_AUTOSCAN_EXPONENTIAL=y |
| 488 | # For periodic module: |
| 489 | #CONFIG_AUTOSCAN_PERIODIC=y |
| 490 | |
| 491 | # Password (and passphrase, etc.) backend for external storage |
| 492 | # These optional mechanisms can be used to add support for storing passwords |
| 493 | # and other secrets in external (to wpa_supplicant) location. This allows, for |
| 494 | # example, operating system specific key storage to be used |
| 495 | # |
| 496 | # External password backend for testing purposes (developer use) |
| 497 | #CONFIG_EXT_PASSWORD_TEST=y |
| 498 | |
Dmitry Shmidt | d80a401 | 2015-11-05 16:35:40 -0800 | [diff] [blame] | 499 | # Enable Fast Session Transfer (FST) |
| 500 | #CONFIG_FST=y |
| 501 | |
Dmitry Shmidt | 57c2d39 | 2016-02-23 13:40:19 -0800 | [diff] [blame] | 502 | # Support Multi Band Operation |
Sunil Ravi | 598cc8e | 2019-10-31 14:53:51 -0700 | [diff] [blame] | 503 | CONFIG_MBO=y |
Dmitry Shmidt | 57c2d39 | 2016-02-23 13:40:19 -0800 | [diff] [blame] | 504 | |
Dmitry Shmidt | ebd93af | 2017-02-21 13:40:44 -0800 | [diff] [blame] | 505 | # Fast Initial Link Setup (FILS) (IEEE 802.11ai) |
Vamsi Krishna | 922a893 | 2019-12-14 16:32:07 +0530 | [diff] [blame] | 506 | CONFIG_FILS=y |
| 507 | |
| 508 | # EAP Re-authentication protocol |
| 509 | CONFIG_ERP=y |
Dmitry Shmidt | ebd93af | 2017-02-21 13:40:44 -0800 | [diff] [blame] | 510 | |
| 511 | # Support RSN on IBSS networks |
| 512 | # This is needed to be able to use mode=1 network profile with proto=RSN and |
| 513 | # key_mgmt=WPA-PSK (i.e., full key management instead of WPA-None). |
| 514 | #CONFIG_IBSS_RSN=y |
| 515 | |
Dmitry Shmidt | 2933359 | 2017-01-09 12:27:11 -0800 | [diff] [blame] | 516 | # External PMKSA cache control |
| 517 | # This can be used to enable control interface commands that allow the current |
| 518 | # PMKSA cache entries to be fetched and new entries to be added. |
| 519 | #CONFIG_PMKSA_CACHE_EXTERNAL=y |
| 520 | |
Dmitry Shmidt | ebd93af | 2017-02-21 13:40:44 -0800 | [diff] [blame] | 521 | # Mesh Networking (IEEE 802.11s) |
| 522 | #CONFIG_MESH=y |
| 523 | |
| 524 | # Background scanning modules |
| 525 | # These can be used to request wpa_supplicant to perform background scanning |
| 526 | # operations for roaming within an ESS (same SSID). See the bgscan parameter in |
| 527 | # the wpa_supplicant.conf file for more details. |
| 528 | # Periodic background scans based on signal strength |
| 529 | #CONFIG_BGSCAN_SIMPLE=y |
| 530 | # Learn channels used by the network and try to avoid bgscans on other |
| 531 | # channels (experimental) |
| 532 | #CONFIG_BGSCAN_LEARN=y |
| 533 | |
Dmitry Shmidt | d2986c2 | 2017-10-23 14:22:09 -0700 | [diff] [blame] | 534 | # Opportunistic Wireless Encryption (OWE) |
Hai Shalom | 749644d | 2018-09-06 11:50:46 -0700 | [diff] [blame] | 535 | CONFIG_OWE=y |
| 536 | |
Sunil Ravi | 512af04 | 2020-11-08 21:49:21 -0800 | [diff] [blame] | 537 | # Easy Connect (Device Provisioning Protocol - DPP R1 & R2) |
Hai Shalom | 749644d | 2018-09-06 11:50:46 -0700 | [diff] [blame] | 538 | CONFIG_DPP=y |
Sunil Ravi | 512af04 | 2020-11-08 21:49:21 -0800 | [diff] [blame] | 539 | CONFIG_DPP2=y |
Hai Shalom | 749644d | 2018-09-06 11:50:46 -0700 | [diff] [blame] | 540 | |
| 541 | # WPA3-Personal (SAE) |
| 542 | CONFIG_SAE=y |
Dmitry Shmidt | d2986c2 | 2017-10-23 14:22:09 -0700 | [diff] [blame] | 543 | |
Sunil Ravi | 427ada1 | 2023-06-02 00:38:43 +0000 | [diff] [blame] | 544 | # PASN |
| 545 | CONFIG_PASN=y |
| 546 | |
Hai Shalom | d5dd32f | 2019-01-14 10:15:39 -0800 | [diff] [blame] | 547 | # WPA3-Enterprise (SuiteB-192) |
Hai Shalom | 891bee1 | 2019-03-14 15:19:56 -0700 | [diff] [blame] | 548 | CONFIG_SUITEB=y |
Hai Shalom | d5dd32f | 2019-01-14 10:15:39 -0800 | [diff] [blame] | 549 | CONFIG_SUITEB192=y |
| 550 | |
Jimmy Chen | caaac07 | 2019-09-16 16:36:06 +0800 | [diff] [blame] | 551 | # WLAN Authentication and Privacy Infrastructure (WAPI): interface only. |
| 552 | # Configure the building of the interface which allows WAPI configuration. |
| 553 | # Note: does not configure WAPI implementation itself. |
| 554 | #CONFIG_WAPI_INTERFACE=y |
| 555 | |
Hai Shalom | fdcde76 | 2020-04-02 11:19:20 -0700 | [diff] [blame] | 556 | # Wired equivalent privacy (WEP) |
| 557 | # WEP is an obsolete cryptographic data confidentiality algorithm that is not |
| 558 | # considered secure. It should not be used for anything anymore. The |
| 559 | # functionality needed to use WEP is available in the current wpa_supplicant |
| 560 | # release under this optional build parameter. This functionality is subject to |
| 561 | # be completely removed in a future release. |
| 562 | CONFIG_WEP=y |
| 563 | |
Jimmy Chen | e9b0141 | 2020-10-16 14:10:36 +0800 | [diff] [blame] | 564 | # WPA3-Personal (SAE) PK (Public Key) mode |
| 565 | CONFIG_SAE_PK=y |
| 566 | |
Dmitry Shmidt | 51b6ea8 | 2013-05-08 10:42:09 -0700 | [diff] [blame] | 567 | include $(wildcard $(LOCAL_PATH)/android_config_*.inc) |