blob: 4cc3808444e072e7008db2ed5dd6ade377f9daab [file] [log] [blame]
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -07001# Example wpa_supplicant build time configuration
2#
3# This file lists the configuration options that are used when building the
Dmitry Shmidtebd93af2017-02-21 13:40:44 -08004# wpa_supplicant binary. All lines starting with # are ignored. Configuration
5# option lines must be commented out complete, if they are not to be included,
6# i.e., just setting VARIABLE=n is not disabling that variable.
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -07007#
8# This file is included in Makefile, so variables like CFLAGS and LIBS can also
9# be modified from here. In most cases, these lines should use += in order not
10# to override previous values of the variables.
11
12
13# Uncomment following two lines and fix the paths if you have installed OpenSSL
14# or GnuTLS in non-default location
15#CFLAGS += -I/usr/local/openssl/include
16#LIBS += -L/usr/local/openssl/lib
17
18# Some Red Hat versions seem to include kerberos header files from OpenSSL, but
19# the kerberos files are not in the default include path. Following line can be
20# used to fix build issues on such systems (krb5.h not found).
21#CFLAGS += -I/usr/include/kerberos
22
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -070023# Driver interface for generic Linux wireless extensions
Dmitry Shmidt04949592012-07-19 12:16:46 -070024# Note: WEXT is deprecated in the current Linux kernel version and no new
25# functionality is added to it. nl80211-based interface is the new
26# replacement for WEXT and its use allows wpa_supplicant to properly control
27# the driver to improve existing functionality like roaming and to support new
28# functionality.
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -070029#CONFIG_DRIVER_WEXT=y
30
31# Driver interface for Linux drivers using the nl80211 kernel interface
32#CONFIG_DRIVER_NL80211=y
33CONFIG_LIBNL20=y
34
35# Driver interface for FreeBSD net80211 layer (e.g., Atheros driver)
36#CONFIG_DRIVER_BSD=y
37#CFLAGS += -I/usr/local/include
38#LIBS += -L/usr/local/lib
Dmitry Shmidt04949592012-07-19 12:16:46 -070039#LIBS_p += -L/usr/local/lib
40#LIBS_c += -L/usr/local/lib
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -070041
42# Driver interface for Windows NDIS
43#CONFIG_DRIVER_NDIS=y
44#CFLAGS += -I/usr/include/w32api/ddk
45#LIBS += -L/usr/local/lib
46# For native build using mingw
47#CONFIG_NATIVE_WINDOWS=y
48# Additional directories for cross-compilation on Linux host for mingw target
49#CFLAGS += -I/opt/mingw/mingw32/include/ddk
50#LIBS += -L/opt/mingw/mingw32/lib
51#CC=mingw32-gcc
52# By default, driver_ndis uses WinPcap for low-level operations. This can be
53# replaced with the following option which replaces WinPcap calls with NDISUIO.
54# However, this requires that WZC is disabled (net stop wzcsvc) before starting
55# wpa_supplicant.
56# CONFIG_USE_NDISUIO=y
57
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -070058# Driver interface for wired Ethernet drivers
59#CONFIG_DRIVER_WIRED=y
60
61# Driver interface for the Broadcom RoboSwitch family
62#CONFIG_DRIVER_ROBOSWITCH=y
63
64# Driver interface for no driver (e.g., WPS ER only)
65#CONFIG_DRIVER_NONE=y
66
Dmitry Shmidt04949592012-07-19 12:16:46 -070067# Solaris libraries
68#LIBS += -lsocket -ldlpi -lnsl
69#LIBS_c += -lsocket
70
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -070071# Enable IEEE 802.1X Supplicant (automatically included if any EAP method is
72# included)
73CONFIG_IEEE8021X_EAPOL=y
74
75# EAP-MD5
76CONFIG_EAP_MD5=y
77
78# EAP-MSCHAPv2
79CONFIG_EAP_MSCHAPV2=y
80
81# EAP-TLS
82CONFIG_EAP_TLS=y
Jimmy Chena138f172022-10-06 15:25:46 +080083CONFIG_EAP_TLSV1_3=y
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -070084
85# EAL-PEAP
86CONFIG_EAP_PEAP=y
87
88# EAP-TTLS
89CONFIG_EAP_TTLS=y
90
91# EAP-FAST
Dmitry Shmidt849734c2016-05-27 09:59:01 -070092#CONFIG_EAP_FAST=y
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -070093
94# EAP-GTC
95CONFIG_EAP_GTC=y
96
97# EAP-OTP
98CONFIG_EAP_OTP=y
99
100# EAP-SIM (enable CONFIG_PCSC, if EAP-SIM is used)
101CONFIG_EAP_SIM=y
102
103# EAP-PSK (experimental; this is _not_ needed for WPA-PSK)
104#CONFIG_EAP_PSK=y
105
Dmitry Shmidt04949592012-07-19 12:16:46 -0700106# EAP-pwd (secure authentication using only a password)
107CONFIG_EAP_PWD=y
108
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700109# EAP-PAX
110#CONFIG_EAP_PAX=y
111
112# LEAP
113CONFIG_EAP_LEAP=y
114
115# EAP-AKA (enable CONFIG_PCSC, if EAP-AKA is used)
Dmitry Shmidt51b6ea82013-05-08 10:42:09 -0700116CONFIG_EAP_AKA=y
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700117
118# EAP-AKA' (enable CONFIG_PCSC, if EAP-AKA' is used).
119# This requires CONFIG_EAP_AKA to be enabled, too.
Dmitry Shmidtd11f0192014-03-24 12:09:47 -0700120CONFIG_EAP_AKA_PRIME=y
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700121
122# Enable USIM simulator (Milenage) for EAP-AKA
123#CONFIG_USIM_SIMULATOR=y
124
125# EAP-SAKE
126#CONFIG_EAP_SAKE=y
127
128# EAP-GPSK
129#CONFIG_EAP_GPSK=y
130# Include support for optional SHA256 cipher suite in EAP-GPSK
131#CONFIG_EAP_GPSK_SHA256=y
132
133# EAP-TNC and related Trusted Network Connect support (experimental)
134#CONFIG_EAP_TNC=y
135
136# Wi-Fi Protected Setup (WPS)
137CONFIG_WPS=y
Dmitry Shmidt04949592012-07-19 12:16:46 -0700138# Enable WPS external registrar functionality
Dmitry Shmidt51b6ea82013-05-08 10:42:09 -0700139CONFIG_WPS_ER=y
Dmitry Shmidt04949592012-07-19 12:16:46 -0700140# Disable credentials for an open network by default when acting as a WPS
141# registrar.
142#CONFIG_WPS_REG_DISABLE_OPEN=y
Dmitry Shmidt51b6ea82013-05-08 10:42:09 -0700143# Enable WPS support with NFC config method
144CONFIG_WPS_NFC=y
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700145
146# EAP-IKEv2
147#CONFIG_EAP_IKEV2=y
148
Dmitry Shmidtebd93af2017-02-21 13:40:44 -0800149# EAP-EKE
150#CONFIG_EAP_EKE=y
151
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700152# PKCS#12 (PFX) support (used to read private key and certificate file from
153# a file that usually has extension .p12 or .pfx)
154CONFIG_PKCS12=y
155
156# Smartcard support (i.e., private key on a smartcard), e.g., with openssl
157# engine.
158CONFIG_SMARTCARD=y
159
160# PC/SC interface for smartcards (USIM, GSM SIM)
161# Enable this if EAP-SIM or EAP-AKA is included
162#CONFIG_PCSC=y
163
Dmitry Shmidt04949592012-07-19 12:16:46 -0700164# Support HT overrides (disable HT/HT40, mask MCS rates, etc.)
165#CONFIG_HT_OVERRIDES=y
166
Dmitry Shmidt2f023192013-03-12 12:44:17 -0700167# Support VHT overrides (disable VHT, mask MCS rates, etc.)
168#CONFIG_VHT_OVERRIDES=y
169
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700170# Development testing
171#CONFIG_EAPOL_TEST=y
172
173# Select control interface backend for external programs, e.g, wpa_cli:
174# unix = UNIX domain sockets (default for Linux/*BSD)
175# udp = UDP sockets using localhost (127.0.0.1)
Dmitry Shmidtebd93af2017-02-21 13:40:44 -0800176# udp6 = UDP IPv6 sockets using localhost (::1)
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700177# named_pipe = Windows Named Pipe (default for Windows)
Dmitry Shmidt51b6ea82013-05-08 10:42:09 -0700178# udp-remote = UDP sockets with remote access (only for tests systems/purpose)
Dmitry Shmidtebd93af2017-02-21 13:40:44 -0800179# udp6-remote = UDP IPv6 sockets with remote access (only for tests purpose)
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700180# y = use default (backwards compatibility)
181# If this option is commented out, control interface is not included in the
182# build.
183CONFIG_CTRL_IFACE=y
184
185# Include support for GNU Readline and History Libraries in wpa_cli.
186# When building a wpa_cli binary for distribution, please note that these
187# libraries are licensed under GPL and as such, BSD license may not apply for
188# the resulting binary.
189#CONFIG_READLINE=y
190
Dmitry Shmidt04949592012-07-19 12:16:46 -0700191# Include internal line edit mode in wpa_cli. This can be used as a replacement
192# for GNU Readline to provide limited command line editing and history support.
193CONFIG_WPA_CLI_EDIT=y
194
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700195# Remove debugging code that is printing out debug message to stdout.
196# This can be used to reduce the size of the wpa_supplicant considerably
197# if debugging code is not needed. The size reduction can be around 35%
198# (e.g., 90 kB).
199#CONFIG_NO_STDOUT_DEBUG=y
200
201# Remove WPA support, e.g., for wired-only IEEE 802.1X supplicant, to save
202# 35-50 kB in code size.
203#CONFIG_NO_WPA=y
204
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700205# Remove IEEE 802.11i/WPA-Personal ASCII passphrase support
206# This option can be used to reduce code size by removing support for
207# converting ASCII passphrases into PSK. If this functionality is removed, the
208# PSK can only be configured as the 64-octet hexstring (e.g., from
209# wpa_passphrase). This saves about 0.5 kB in code size.
210#CONFIG_NO_WPA_PASSPHRASE=y
211
212# Disable scan result processing (ap_mode=1) to save code size by about 1 kB.
213# This can be used if ap_scan=1 mode is never enabled.
214#CONFIG_NO_SCAN_PROCESSING=y
215
216# Select configuration backend:
217# file = text file (e.g., wpa_supplicant.conf; note: the configuration file
218# path is given on command line, not here; this option is just used to
219# select the backend that allows configuration files to be used)
220# winreg = Windows registry (see win_example.reg for an example)
221CONFIG_BACKEND=file
222
223# Remove configuration write functionality (i.e., to allow the configuration
224# file to be updated based on runtime configuration changes). The runtime
225# configuration can still be changed, the changes are just not going to be
226# persistent over restarts. This option can be used to reduce code size by
227# about 3.5 kB.
228#CONFIG_NO_CONFIG_WRITE=y
229
230# Remove support for configuration blobs to reduce code size by about 1.5 kB.
231#CONFIG_NO_CONFIG_BLOBS=y
232
233# Select program entry point implementation:
234# main = UNIX/POSIX like main() function (default)
235# main_winsvc = Windows service (read parameters from registry)
236# main_none = Very basic example (development use only)
237#CONFIG_MAIN=main
238
Dmitry Shmidt50b691d2014-05-21 14:01:45 -0700239# Select wrapper for operating system and C library specific functions
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700240# unix = UNIX/POSIX like systems (default)
241# win32 = Windows systems
242# none = Empty template
243CONFIG_OS=unix
244
245# Select event loop implementation
246# eloop = select() loop (default)
247# eloop_win = Windows events and WaitForMultipleObject() loop
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700248CONFIG_ELOOP=eloop
249
Dmitry Shmidt04949592012-07-19 12:16:46 -0700250# Should we use poll instead of select? Select is used by default.
251#CONFIG_ELOOP_POLL=y
252
Dmitry Shmidt50b691d2014-05-21 14:01:45 -0700253# Should we use epoll instead of select? Select is used by default.
254#CONFIG_ELOOP_EPOLL=y
255
Dmitry Shmidtebd93af2017-02-21 13:40:44 -0800256# Should we use kqueue instead of select? Select is used by default.
257#CONFIG_ELOOP_KQUEUE=y
258
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700259# Select layer 2 packet implementation
260# linux = Linux packet socket (default)
261# pcap = libpcap/libdnet/WinPcap
262# freebsd = FreeBSD libpcap
263# winpcap = WinPcap with receive thread
264# ndis = Windows NDISUIO (note: requires CONFIG_USE_NDISUIO=y)
265# none = Empty template
266CONFIG_L2_PACKET=linux
267
Dmitry Shmidtebd93af2017-02-21 13:40:44 -0800268# Disable Linux packet socket workaround applicable for station interface
269# in a bridge for EAPOL frames. This should be uncommented only if the kernel
270# is known to not have the regression issue in packet socket behavior with
271# bridge interfaces (commit 'bridge: respect RFC2863 operational state')').
272#CONFIG_NO_LINUX_PACKET_SOCKET_WAR=y
273
Hai Shalom74f70d42019-02-11 14:42:39 -0800274# Support Operating Channel Validation
275#CONFIG_OCV=y
276
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700277# Select TLS implementation
278# openssl = OpenSSL (default)
Dmitry Shmidt04949592012-07-19 12:16:46 -0700279# gnutls = GnuTLS
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700280# internal = Internal TLSv1 implementation (experimental)
281# none = Empty template
282#CONFIG_TLS=openssl
283
Dmitry Shmidt04949592012-07-19 12:16:46 -0700284# TLS-based EAP methods require at least TLS v1.0. Newer version of TLS (v1.1)
285# can be enabled to get a stronger construction of messages when block ciphers
286# are used. It should be noted that some existing TLS v1.0 -based
287# implementation may not be compatible with TLS v1.1 message (ClientHello is
288# sent prior to negotiating which version will be used)
289#CONFIG_TLSV11=y
290
291# TLS-based EAP methods require at least TLS v1.0. Newer version of TLS (v1.2)
292# can be enabled to enable use of stronger crypto algorithms. It should be
293# noted that some existing TLS v1.0 -based implementation may not be compatible
294# with TLS v1.2 message (ClientHello is sent prior to negotiating which version
295# will be used)
296#CONFIG_TLSV12=y
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700297
Dmitry Shmidtd2986c22017-10-23 14:22:09 -0700298# Select which ciphers to use by default with OpenSSL if the user does not
299# specify them.
300#CONFIG_TLS_DEFAULT_CIPHERS="DEFAULT:!EXP:!LOW"
301
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700302# If CONFIG_TLS=internal is used, additional library and include paths are
303# needed for LibTomMath. Alternatively, an integrated, minimal version of
304# LibTomMath can be used. See beginning of libtommath.c for details on benefits
305# and drawbacks of this option.
306#CONFIG_INTERNAL_LIBTOMMATH=y
307#ifndef CONFIG_INTERNAL_LIBTOMMATH
308#LTM_PATH=/usr/src/libtommath-0.39
309#CFLAGS += -I$(LTM_PATH)
310#LIBS += -L$(LTM_PATH)
311#LIBS_p += -L$(LTM_PATH)
312#endif
313# At the cost of about 4 kB of additional binary size, the internal LibTomMath
314# can be configured to include faster routines for exptmod, sqr, and div to
315# speed up DH and RSA calculation considerably
316#CONFIG_INTERNAL_LIBTOMMATH_FAST=y
317
318# Include NDIS event processing through WMI into wpa_supplicant/wpasvc.
319# This is only for Windows builds and requires WMI-related header files and
320# WbemUuid.Lib from Platform SDK even when building with MinGW.
321#CONFIG_NDIS_EVENTS_INTEGRATED=y
322#PLATFORMSDKLIB="/opt/Program Files/Microsoft Platform SDK/Lib"
323
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700324# Add support for new DBus control interface
325# (fi.w1.hostap.wpa_supplicant1)
326#CONFIG_CTRL_IFACE_DBUS_NEW=y
327
Dmitry Shmidt04949592012-07-19 12:16:46 -0700328# Add introspection support for new DBus control interface
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700329#CONFIG_CTRL_IFACE_DBUS_INTRO=y
330
Gabriel Biren57ededa2021-09-03 16:08:50 +0000331# Add support for Aidl control interface
Dmitry Shmidte4663042016-04-04 10:07:49 -0700332# Only applicable for Android platforms.
Gabriel Biren57ededa2021-09-03 16:08:50 +0000333CONFIG_CTRL_IFACE_AIDL=y
Dmitry Shmidte4663042016-04-04 10:07:49 -0700334
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700335# Add support for loading EAP methods dynamically as shared libraries.
336# When this option is enabled, each EAP method can be either included
337# statically (CONFIG_EAP_<method>=y) or dynamically (CONFIG_EAP_<method>=dyn).
338# Dynamic EAP methods are build as shared objects (eap_*.so) and they need to
339# be loaded in the beginning of the wpa_supplicant configuration file
340# (see load_dynamic_eap parameter in the example file) before being used in
341# the network blocks.
342#
343# Note that some shared parts of EAP methods are included in the main program
344# and in order to be able to use dynamic EAP methods using these parts, the
345# main program must have been build with the EAP method enabled (=y or =dyn).
346# This means that EAP-TLS/PEAP/TTLS/FAST cannot be added as dynamic libraries
347# unless at least one of them was included in the main build to force inclusion
348# of the shared code. Similarly, at least one of EAP-SIM/AKA must be included
349# in the main build to be able to load these methods dynamically.
350#
351# Please also note that using dynamic libraries will increase the total binary
352# size. Thus, it may not be the best option for targets that have limited
353# amount of memory/flash.
354#CONFIG_DYNAMIC_EAP_METHODS=y
355
Dmitry Shmidtebd93af2017-02-21 13:40:44 -0800356# IEEE Std 802.11r-2008 (Fast BSS Transition) for station mode
Dmitry Shmidt10b4c792014-01-15 10:52:47 -0800357CONFIG_IEEE80211R=y
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700358
359# Add support for writing debug log to a file (/tmp/wpa_supplicant-log-#.txt)
360#CONFIG_DEBUG_FILE=y
361
Dmitry Shmidt04949592012-07-19 12:16:46 -0700362# Send debug messages to syslog instead of stdout
363#CONFIG_DEBUG_SYSLOG=y
364# Set syslog facility for debug messages
365#CONFIG_DEBUG_SYSLOG_FACILITY=LOG_DAEMON
366
367# Add support for sending all debug messages (regardless of debug verbosity)
368# to the Linux kernel tracing facility. This helps debug the entire stack by
369# making it easy to record everything happening from the driver up into the
370# same file, e.g., using trace-cmd.
371#CONFIG_DEBUG_LINUX_TRACING=y
372
373# Add support for writing debug log to Android logcat instead of standard
374# output
Dmitry Shmidt8d520ff2011-05-09 14:06:53 -0700375CONFIG_ANDROID_LOG=y
376
377# Enable privilege separation (see README 'Privilege separation' for details)
378#CONFIG_PRIVSEP=y
379
380# Enable mitigation against certain attacks against TKIP by delaying Michael
381# MIC error reports by a random amount of time between 0 and 60 seconds
382#CONFIG_DELAYED_MIC_ERROR_REPORT=y
Dmitry Shmidt497c1d52011-07-21 15:19:46 -0700383
Dmitry Shmidt04949592012-07-19 12:16:46 -0700384# Enable tracing code for developer debugging
385# This tracks use of memory allocations and other registrations and reports
386# incorrect use with a backtrace of call (or allocation) location.
387#CONFIG_WPA_TRACE=y
388# For BSD, uncomment these.
389#LIBS += -lexecinfo
390#LIBS_p += -lexecinfo
391#LIBS_c += -lexecinfo
392
393# Use libbfd to get more details for developer debugging
394# This enables use of libbfd to get more detailed symbols for the backtraces
395# generated by CONFIG_WPA_TRACE=y.
396#CONFIG_WPA_TRACE_BFD=y
397# For BSD, uncomment these.
398#LIBS += -lbfd -liberty -lz
399#LIBS_p += -lbfd -liberty -lz
400#LIBS_c += -lbfd -liberty -lz
401
402# wpa_supplicant depends on strong random number generation being available
403# from the operating system. os_get_random() function is used to fetch random
404# data when needed, e.g., for key generation. On Linux and BSD systems, this
405# works by reading /dev/urandom. It should be noted that the OS entropy pool
406# needs to be properly initialized before wpa_supplicant is started. This is
407# important especially on embedded devices that do not have a hardware random
408# number generator and may by default start up with minimal entropy available
409# for random number generation.
410#
411# As a safety net, wpa_supplicant is by default trying to internally collect
412# additional entropy for generating random data to mix in with the data fetched
413# from the OS. This by itself is not considered to be very strong, but it may
414# help in cases where the system pool is not initialized properly. However, it
415# is very strongly recommended that the system pool is initialized with enough
416# entropy either by using hardware assisted random number generator or by
417# storing state over device reboots.
418#
419# wpa_supplicant can be configured to maintain its own entropy store over
420# restarts to enhance random number generation. This is not perfect, but it is
421# much more secure than using the same sequence of random numbers after every
422# reboot. This can be enabled with -e<entropy file> command line option. The
423# specified file needs to be readable and writable by wpa_supplicant.
424#
425# If the os_get_random() is known to provide strong random data (e.g., on
426# Linux/BSD, the board in question is known to have reliable source of random
427# data from /dev/urandom), the internal wpa_supplicant random pool can be
428# disabled. This will save some in binary size and CPU use. However, this
429# should only be considered for builds that are known to be used on devices
430# that meet the requirements described above.
Jeff Vander Stoepc88b7522017-11-30 11:13:52 -0800431
432# Wpa_supplicant's random pool is not necessary on Android. Randomness is
433# already provided by the entropymixer service which ensures sufficient
434# entropy is maintained across reboots. Commit b410eb1913 'Initialize
435# /dev/urandom earlier in boot' seeds /dev/urandom with that entropy before
436# either wpa_supplicant or hostapd are run.
437CONFIG_NO_RANDOM_POOL=y
Dmitry Shmidt04949592012-07-19 12:16:46 -0700438
Dmitry Shmidtebd93af2017-02-21 13:40:44 -0800439# IEEE 802.11ac (Very High Throughput) support (mainly for AP mode)
Dmitry Shmidtebd93af2017-02-21 13:40:44 -0800440#CONFIG_IEEE80211AC=y
441
Dmitry Shmidt51b6ea82013-05-08 10:42:09 -0700442# Wireless Network Management (IEEE Std 802.11v-2011)
443# Note: This is experimental and not complete implementation.
Dmitry Shmidtb9cc2c02014-01-15 10:54:39 -0800444CONFIG_WNM=y
Dmitry Shmidt51b6ea82013-05-08 10:42:09 -0700445
Dmitry Shmidt04949592012-07-19 12:16:46 -0700446# Interworking (IEEE 802.11u)
447# This can be used to enable functionality to improve interworking with
448# external networks (GAS/ANQP to learn more about the networks and network
449# selection based on available credentials).
Dmitry Shmidt384894a2013-10-25 14:41:58 -0700450CONFIG_INTERWORKING=y
Dmitry Shmidt04949592012-07-19 12:16:46 -0700451
Dmitry Shmidt9bce59c2012-09-11 15:06:38 -0700452# Hotspot 2.0
Dmitry Shmidt384894a2013-10-25 14:41:58 -0700453CONFIG_HS20=y
Dmitry Shmidt9bce59c2012-09-11 15:06:38 -0700454
Dmitry Shmidtebd93af2017-02-21 13:40:44 -0800455# Enable interface matching in wpa_supplicant
456#CONFIG_MATCH_IFACE=y
457
Dmitry Shmidt006dedf2012-02-21 16:30:45 -0800458# Disable roaming in wpa_supplicant
459CONFIG_NO_ROAMING=y
460
Dmitry Shmidt51b6ea82013-05-08 10:42:09 -0700461# AP mode operations with wpa_supplicant
462# This can be used for controlling AP mode operations with wpa_supplicant. It
463# should be noted that this is mainly aimed at simple cases like
464# WPA2-Personal while more complex configurations like WPA2-Enterprise with an
465# external RADIUS server can be supported with hostapd.
Dmitry Shmidt497c1d52011-07-21 15:19:46 -0700466CONFIG_AP=y
Dmitry Shmidt61d9df32012-08-29 16:22:06 -0700467
Dmitry Shmidt51b6ea82013-05-08 10:42:09 -0700468# P2P (Wi-Fi Direct)
469# This can be used to enable P2P support in wpa_supplicant. See README-P2P for
470# more information on P2P operations.
471CONFIG_P2P=y
472
Dmitry Shmidtfa3fc4a2013-11-21 13:34:38 -0800473# Enable TDLS support
Dmitry Shmidt51b6ea82013-05-08 10:42:09 -0700474CONFIG_TDLS=y
475
Hai Shalom021b0b52019-04-10 11:17:58 -0700476# Wi-Fi Display
477# This can be used to enable Wi-Fi Display extensions for P2P using an external
Dmitry Shmidtfa3fc4a2013-11-21 13:34:38 -0800478# program to control the additional information exchanges in the messages.
Dmitry Shmidt61d9df32012-08-29 16:22:06 -0700479CONFIG_WIFI_DISPLAY=y
Dmitry Shmidt51b6ea82013-05-08 10:42:09 -0700480
481# Autoscan
482# This can be used to enable automatic scan support in wpa_supplicant.
Dmitry Shmidtcce06662013-11-04 18:44:24 -0800483# See wpa_supplicant.conf for more information on autoscan usage.
Dmitry Shmidt51b6ea82013-05-08 10:42:09 -0700484#
485# Enabling directly a module will enable autoscan support.
486# For exponential module:
487#CONFIG_AUTOSCAN_EXPONENTIAL=y
488# For periodic module:
489#CONFIG_AUTOSCAN_PERIODIC=y
490
491# Password (and passphrase, etc.) backend for external storage
492# These optional mechanisms can be used to add support for storing passwords
493# and other secrets in external (to wpa_supplicant) location. This allows, for
494# example, operating system specific key storage to be used
495#
496# External password backend for testing purposes (developer use)
497#CONFIG_EXT_PASSWORD_TEST=y
498
Dmitry Shmidtd80a4012015-11-05 16:35:40 -0800499# Enable Fast Session Transfer (FST)
500#CONFIG_FST=y
501
Dmitry Shmidt57c2d392016-02-23 13:40:19 -0800502# Support Multi Band Operation
Sunil Ravi598cc8e2019-10-31 14:53:51 -0700503CONFIG_MBO=y
Dmitry Shmidt57c2d392016-02-23 13:40:19 -0800504
Dmitry Shmidtebd93af2017-02-21 13:40:44 -0800505# Fast Initial Link Setup (FILS) (IEEE 802.11ai)
Vamsi Krishna922a8932019-12-14 16:32:07 +0530506CONFIG_FILS=y
507
508# EAP Re-authentication protocol
509CONFIG_ERP=y
Dmitry Shmidtebd93af2017-02-21 13:40:44 -0800510
511# Support RSN on IBSS networks
512# This is needed to be able to use mode=1 network profile with proto=RSN and
513# key_mgmt=WPA-PSK (i.e., full key management instead of WPA-None).
514#CONFIG_IBSS_RSN=y
515
Dmitry Shmidt29333592017-01-09 12:27:11 -0800516# External PMKSA cache control
517# This can be used to enable control interface commands that allow the current
518# PMKSA cache entries to be fetched and new entries to be added.
519#CONFIG_PMKSA_CACHE_EXTERNAL=y
520
Dmitry Shmidtebd93af2017-02-21 13:40:44 -0800521# Mesh Networking (IEEE 802.11s)
522#CONFIG_MESH=y
523
524# Background scanning modules
525# These can be used to request wpa_supplicant to perform background scanning
526# operations for roaming within an ESS (same SSID). See the bgscan parameter in
527# the wpa_supplicant.conf file for more details.
528# Periodic background scans based on signal strength
529#CONFIG_BGSCAN_SIMPLE=y
530# Learn channels used by the network and try to avoid bgscans on other
531# channels (experimental)
532#CONFIG_BGSCAN_LEARN=y
533
Dmitry Shmidtd2986c22017-10-23 14:22:09 -0700534# Opportunistic Wireless Encryption (OWE)
Hai Shalom749644d2018-09-06 11:50:46 -0700535CONFIG_OWE=y
536
Sunil Ravi512af042020-11-08 21:49:21 -0800537# Easy Connect (Device Provisioning Protocol - DPP R1 & R2)
Hai Shalom749644d2018-09-06 11:50:46 -0700538CONFIG_DPP=y
Sunil Ravi512af042020-11-08 21:49:21 -0800539CONFIG_DPP2=y
Hai Shalom749644d2018-09-06 11:50:46 -0700540
541# WPA3-Personal (SAE)
542CONFIG_SAE=y
Dmitry Shmidtd2986c22017-10-23 14:22:09 -0700543
Sunil Ravi427ada12023-06-02 00:38:43 +0000544# PASN
545CONFIG_PASN=y
546
Hai Shalomd5dd32f2019-01-14 10:15:39 -0800547# WPA3-Enterprise (SuiteB-192)
Hai Shalom891bee12019-03-14 15:19:56 -0700548CONFIG_SUITEB=y
Hai Shalomd5dd32f2019-01-14 10:15:39 -0800549CONFIG_SUITEB192=y
550
Jimmy Chencaaac072019-09-16 16:36:06 +0800551# WLAN Authentication and Privacy Infrastructure (WAPI): interface only.
552# Configure the building of the interface which allows WAPI configuration.
553# Note: does not configure WAPI implementation itself.
554#CONFIG_WAPI_INTERFACE=y
555
Hai Shalomfdcde762020-04-02 11:19:20 -0700556# Wired equivalent privacy (WEP)
557# WEP is an obsolete cryptographic data confidentiality algorithm that is not
558# considered secure. It should not be used for anything anymore. The
559# functionality needed to use WEP is available in the current wpa_supplicant
560# release under this optional build parameter. This functionality is subject to
561# be completely removed in a future release.
562CONFIG_WEP=y
563
Jimmy Chene9b01412020-10-16 14:10:36 +0800564# WPA3-Personal (SAE) PK (Public Key) mode
565CONFIG_SAE_PK=y
566
Dmitry Shmidt51b6ea82013-05-08 10:42:09 -0700567include $(wildcard $(LOCAL_PATH)/android_config_*.inc)