jeltz/hostap
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
hostap/hostapd/Makefile

1353 lines
27 KiB
Makefile
Raw Normal View History

Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifndef CC
CC=gcc
endif
ifndef CFLAGS
CFLAGS = -MMD -O2 -Wall -g
endif
Clone default LIBS value to LIBS_* for other tools If LIBS is set with some global build system defaults, clone those for LIBS_c, LIBS_h, LIBS_n, and LIBS_p to cover wpa_cli, wpa_passphrase, hostapd_cli, hlr_auc_gw, and nt_password_hash as well. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-12-28 12:06:43 +01:00
ifdef LIBS
# If LIBS is set with some global build system defaults, clone those for
# LIBS_c, LIBS_h, and LIBS_n to cover hostapd_cli, hlr_auc_gw, and
# nt_password_hash as well.
ifndef LIBS_c
LIBS_c := $(LIBS)
endif
ifndef LIBS_h
LIBS_h := $(LIBS)
endif
ifndef LIBS_n
LIBS_n := $(LIBS)
endif
endif
Add a variable to handle extra CFLAGS values Some packages don't install its headers in the default directory (e.g.: In Arch Linux libiberty and libn13 includes are installed) in their own subdirectory under /usr/include) and the build fails trying to find the headers. This patch will allow passing extra CFLAGS values without discarding the assignments made in the Makefile. The CFLAGS values in the Makefile are ignored, if defined directly in the make command line. Signed-off-by: Roger Zanoni <roger.zanoni@openbossa.org>
2014-02-25 20:06:08 +01:00
CFLAGS += $(EXTRA_CFLAGS)
Add make lcov-html to generate code coverage report In addition, update build rules to compile object files in the same directory as the source code file if CONFIG_CODE_COVERAGE=y is set to make lcov find the source code files. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-12-25 12:44:38 +01:00
CFLAGS += -I$(abspath ../src)
CFLAGS += -I$(abspath ../src/utils)
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
hostapd: Make install path configurable Makefile always installs to /usr/local/bin and on some platforms, /usr/local/bin is not in default search path. Modify the Makefile such that bin path can be configurable so that build system can pass appropriate path for installation. If bin path is not specified then by default binaries are installed in /usr/local/bin. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2013-09-06 19:05:40 +02:00
export BINDIR ?= /usr/local/bin/
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
-include .config
Add "git describe" based version string postfix If hostapd or wpa_supplicant is built from a git repository, add a VERSION_STR postfix from the current git branch state. This is from "git describe --dirty=+". VERSION_STR will thus look something like "2.6-devel-hostap_2_5-132-g4363c0d+" for development builds from a modified repository. This behavior is enabled automatically if a build within git repository is detected (based on ../.git existing). This can be disabled with CONFIG_NO_GITVER=y in wpa_supplicant/.config and hostapd/.config. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-10-16 21:20:55 +02:00
ifndef CONFIG_NO_GITVER
# Add VERSION_STR postfix for builds from a git repository
ifeq ($(wildcard ../.git),../.git)
GITVER := $(shell git describe --dirty=+)
ifneq ($(GITVER),)
CFLAGS += -DGIT_VERSION_STR_POSTFIX=\"-$(GITVER)\"
endif
endif
endif
Make CONFIG_TESTING_OPTIONS=y enable all testing options This makes it easier to enable various testing parameters and functionality in build configuration. Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2013-11-28 14:34:24 +01:00
ifdef CONFIG_TESTING_OPTIONS
CFLAGS += -DCONFIG_TESTING_OPTIONS
CONFIG_WPS_TESTING=y
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifndef CONFIG_OS
ifdef CONFIG_NATIVE_WINDOWS
CONFIG_OS=win32
else
CONFIG_OS=unix
endif
endif
ifeq ($(CONFIG_OS), internal)
CFLAGS += -DOS_NO_C_LIB_DEFINES
endif
ifdef CONFIG_NATIVE_WINDOWS
CFLAGS += -DCONFIG_NATIVE_WINDOWS
LIBS += -lws2_32
endif
Move generic AP functionality implementation into src/ap This code can be shared by both hostapd and wpa_supplicant and this is an initial step in getting the generic code moved to be under the src directories. Couple of generic files still remain under the hostapd directory due to direct dependencies to files there. Once the dependencies have been removed, they will also be moved to the src/ap directory to allow wpa_supplicant to be built without requiring anything from the hostapd directory.
2009-12-25 00:12:50 +01:00
OBJS += main.o
OBJS += config_file.o
Move rest of the generic AP mode functionality into src/ap
2009-12-25 19:06:07 +01:00
OBJS += ../src/ap/hostapd.o
OBJS += ../src/ap/wpa_auth_glue.o
OBJS += ../src/ap/drv_callbacks.o
OBJS += ../src/ap/ap_drv_ops.o
Move wps_hostapd.c into src/ap
2009-12-25 00:26:37 +01:00
OBJS += ../src/ap/utils.o
Move authentication server setup into separate file
2009-12-25 12:43:43 +01:00
OBJS += ../src/ap/authsrv.o
Move generic AP functionality implementation into src/ap This code can be shared by both hostapd and wpa_supplicant and this is an initial step in getting the generic code moved to be under the src directories. Couple of generic files still remain under the hostapd directory due to direct dependencies to files there. Once the dependencies have been removed, they will also be moved to the src/ap directory to allow wpa_supplicant to be built without requiring anything from the hostapd directory.
2009-12-25 00:12:50 +01:00
OBJS += ../src/ap/ieee802_1x.o
Rename some src/ap files to avoid duplicate file names Doxygen and some build tools may get a bit confused about same file name being used in different directories. Clean this up a bit by renaming some of the duplicated file names in src/ap.
2009-12-25 23:05:40 +01:00
OBJS += ../src/ap/ap_config.o
Add preliminary support for using SQLite for eap_user database CONFIG_SQLITE=y option can now be used to allow the eap_user_file text file to be replaced with a SQLite database (eap_user_file=sqlite:/path/to/sqlite.db). hostapd.eap_user_sqlite shows an example of how the database tables can be created for this purpose. This commit does not yet include full functionality of the text file format, but at least basic EAP-TTLS/MSCHAPv2 style authentication mechanisms with plaintext passwords can be used for tests. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-11-20 23:47:47 +01:00
OBJS += ../src/ap/eap_user_db.o
Move generic AP functionality implementation into src/ap This code can be shared by both hostapd and wpa_supplicant and this is an initial step in getting the generic code moved to be under the src directories. Couple of generic files still remain under the hostapd directory due to direct dependencies to files there. Once the dependencies have been removed, they will also be moved to the src/ap directory to allow wpa_supplicant to be built without requiring anything from the hostapd directory.
2009-12-25 00:12:50 +01:00
OBJS += ../src/ap/ieee802_11_auth.o
OBJS += ../src/ap/sta_info.o
Rename some src/ap files to avoid duplicate file names Doxygen and some build tools may get a bit confused about same file name being used in different directories. Clean this up a bit by renaming some of the duplicated file names in src/ap.
2009-12-25 23:05:40 +01:00
OBJS += ../src/ap/wpa_auth.o
Move generic AP functionality implementation into src/ap This code can be shared by both hostapd and wpa_supplicant and this is an initial step in getting the generic code moved to be under the src directories. Couple of generic files still remain under the hostapd directory due to direct dependencies to files there. Once the dependencies have been removed, they will also be moved to the src/ap directory to allow wpa_supplicant to be built without requiring anything from the hostapd directory.
2009-12-25 00:12:50 +01:00
OBJS += ../src/ap/tkip_countermeasures.o
Rename some src/ap files to avoid duplicate file names Doxygen and some build tools may get a bit confused about same file name being used in different directories. Clean this up a bit by renaming some of the duplicated file names in src/ap.
2009-12-25 23:05:40 +01:00
OBJS += ../src/ap/ap_mlme.o
Move generic AP functionality implementation into src/ap This code can be shared by both hostapd and wpa_supplicant and this is an initial step in getting the generic code moved to be under the src directories. Couple of generic files still remain under the hostapd directory due to direct dependencies to files there. Once the dependencies have been removed, they will also be moved to the src/ap directory to allow wpa_supplicant to be built without requiring anything from the hostapd directory.
2009-12-25 00:12:50 +01:00
OBJS += ../src/ap/wpa_auth_ie.o
Rename some src/ap files to avoid duplicate file names Doxygen and some build tools may get a bit confused about same file name being used in different directories. Clean this up a bit by renaming some of the duplicated file names in src/ap.
2009-12-25 23:05:40 +01:00
OBJS += ../src/ap/preauth_auth.o
OBJS += ../src/ap/pmksa_cache_auth.o
Move SA Query mechanism into a file that can be shared more easily This is the first step in allowing SA Query mechanism in hostapd to be used with drivers that implement authentication and association MLME/SME (i.e., do not use ieee802_11.c).
2011-10-17 16:30:43 +02:00
OBJS += ../src/ap/ieee802_11_shared.o
Start deprecating various AP mode driver_ops The preferred way of configuring AP mode will be to use set_ap() instead of number of separate operations hostapd has collected over the years.
2011-10-17 17:35:25 +02:00
OBJS += ../src/ap/beacon.o
AP: Add support for BSS load element (STA Count, Channel Utilization) The new "bss_load_update_period" parameter can be used to configure hostapd to advertise its BSS Load element in Beacon and Probe Response frames. This parameter is in the units of BUs (Beacon Units). When enabled, the STA Count and the Channel Utilization value will be updated periodically in the BSS Load element. The AAC is set to 0 sinze explicit admission control is not supported. Channel Utilization is calculated based on the channel survey information from the driver and as such, requires a driver that supports providing that information for the current operating channel. Signed-off-by: Kyeyoon Park <kyeyoonp@qca.qualcomm.com>
2014-10-16 01:36:04 +02:00
OBJS += ../src/ap/bss_load.o
hostapd: Add a database of neighboring APs Add a configurable neighbor database that includes the content of Nighbor Report element, LCI and Location Civic subelements and SSID. All parameters for a neighbor must be updated at once; Neighbor Report element and SSID are mandatory, LCI and civic are optional. The age of LCI is set to the time of neighbor update. The control interface API is: SET_NEIGHBOR <BSSID> <ssid=SSID> <nr=data> [lci=<data>] [civic=<data>] To delete a neighbor use: REMOVE_NEIGHBOR <BSSID> <SSID> Signed-off-by: David Spinadel <david.spinadel@intel.com>
2016-04-06 18:42:07 +02:00
OBJS += ../src/ap/neighbor_db.o
hostapd: Handle Neighbor Report Request frame Process Neighbor Report Request frame and send Neighbor Report Response frame based on the configured neighbor report data. Signed-off-by: David Spinadel <david.spinadel@intel.com>
2016-04-06 18:42:09 +02:00
OBJS += ../src/ap/rrm.o
Move generic AP functionality implementation into src/ap This code can be shared by both hostapd and wpa_supplicant and this is an initial step in getting the generic code moved to be under the src directories. Couple of generic files still remain under the hostapd directory due to direct dependencies to files there. Once the dependencies have been removed, they will also be moved to the src/ap directory to allow wpa_supplicant to be built without requiring anything from the hostapd directory.
2009-12-25 00:12:50 +01:00
Move parts of wpa_cli to a new common file In preparation for adding further command completion support to hostapd_cli move some cli related utility functions out of wpa_cli into a new common cli file. Signed-off-by: Mikael Kanstrup <mikael.kanstrup@sonymobile.com>
2016-07-07 14:04:34 +02:00
OBJS_c = hostapd_cli.o
OBJS_c += ../src/common/wpa_ctrl.o
OBJS_c += ../src/utils/os_$(CONFIG_OS).o
OBJS_c += ../src/common/cli.o
hostapd_cli: Start using src/utils/edit*.c This brings hostapd_cli closer to the design used in wpa_cli and allows command history and editing mechanisms to be added.
2011-07-16 16:37:18 +02:00
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
NEED_RC4=y
NEED_AES=y
NEED_MD5=y
NEED_SHA1=y
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
Merge wpa_supplicant and hostapd driver wrapper implementations This commit merges the driver_ops structures and implementations from hostapd/driver*.[ch] into src/drivers. This is only an initial step and there is room for number of cleanups to share code between the hostapd and wpa_supplicant parts of the wrappers to avoid unnecessary source code duplication.
2009-04-09 12:40:12 +02:00
OBJS += ../src/drivers/drivers.o
CFLAGS += -DHOSTAPD
Passive Client Taxonomy Implement the signature mechanism described in the paper "Passive Taxonomy of Wifi Clients using MLME Frame Contents" published by Denton Gentry and Avery Pennarun. http://research.google.com/pubs/pub45429.html https://arxiv.org/abs/1608.01725 This involves: 1. Add a CONFIG_TAXONOMY compile option. Enabling taxonomy incurs a memory overhead of up to several kilobytes per associated station. 2. If enabled, store the Probe Request and (Re)Associate Request frame in struct sta_info. 3. Implement code to extract the ID of each Information Element, plus selected fields and bitmasks from certain IEs, into a descriptive text string. This is done in a new source file, src/ap/taxonomy.c. 4. Implement a "signature qq:rr:ss:tt:uu:vv" command in hostapd_cli to retrieve the signature. Signatures take the form of a text string. For example, a signature for the Nexus 5X is: wifi4|probe:0,1,127,45,191,htcap:01ef,htagg:03,htmcs:0000ffff,vhtcap:338061b2, vhtrxmcs:030cfffa,vhttxmcs:030cfffa,extcap:00000a0201000040|assoc:0,1,48,45, 221(0050f2,2),191,127,htcap:01ef,htagg:03,htmcs:0000ffff,vhtcap:339071b2, vhtrxmcs:030cfffa,vhttxmcs:030cfffa,extcap:0000000000000040 Signed-off-by: dgentry@google.com (Denton Gentry) Signed-off-by: denny@geekhold.com (Denton Gentry) Signed-off-by: rofrankel@google.com (Richard Frankel) Signed-off-by: richard@frankel.tv (Richard Frankel)
2016-08-15 06:42:48 +02:00
ifdef CONFIG_TAXONOMY
CFLAGS += -DCONFIG_TAXONOMY
OBJS += ../src/ap/taxonomy.o
endif
tests: Add a module test integration to hwsim tests CONFIG_MODULE_TESTS=y build option can now be used to build in module tests into hostapd and wpa_supplicant binaries. These test cases will be used to get better testing coverage for various details that are difficult to test otherwise through the control interface control. A single control interface command is used to executed these tests within the hwsim test framework. This commit adds just the new mechanism, but no module tests are yet integrated into this mechanism. Signed-off-by: Jouni Malinen <j@w1.fi>
2014-02-20 23:14:30 +01:00
ifdef CONFIG_MODULE_TESTS
CFLAGS += -DCONFIG_MODULE_TESTS
OBJS += hapd_module_tests.o
endif
Add backtrace support for debugging WPA_TRACE=y can now be used to enable internal backtrace support that will provide more details about implementation errors, e.g., when some resources are not released correctly. In addition, this will print out a backtrace automatically if SIGSEGV is received.
2009-12-19 17:40:54 +01:00
ifdef CONFIG_WPA_TRACE
CFLAGS += -DWPA_TRACE
OBJS += ../src/utils/trace.o
Fix hlr_auc_gw build with CONFIG_WPA_TRACE=y
2010-11-24 00:10:48 +01:00
HOBJS += ../src/utils/trace.o
Add option libbfd support for tracing code CONFIG_WPA_TRACE=y and CONFIG_WPA_TRACE_BFD=y can now be used to get even more complete symbols (func/file/line and inline functions) for backtraces.
2009-12-20 22:35:06 +01:00
LDFLAGS += -rdynamic
CFLAGS += -funwind-tables
ifdef CONFIG_WPA_TRACE_BFD
Fix hostapd and wpa_supplicant build with binutils >= 2.24.x Using binutils >= 2.24.x and setting CONFIG_WPA_TRACE/CONFIG_WPA_TRACE_BDF causes both builds to fail with "#error config.h must be included before this header" message. Since version 2.24.x, the bfd header checks for PACKAGE and PACKAGE_VERSION macros. As suggested in http://sourceware.org/bugzilla/show_bug.cgi?id=14243 projects that use bfd and don't use autotools should define a PACKAGE macro. Signed-off-by: Roger Zanoni <roger.zanoni@openbossa.org>
2014-02-17 20:02:47 +01:00
CFLAGS += -DPACKAGE="hostapd" -DWPA_TRACE_BFD
Avoid undefined references with CONFIG_WPA_TRACE_BFD=y libdl, libiberty, and libzlib are dependencies for libbfd. Signed-off-by: Roger Zanoni <roger.zanoni@openbossa.org>
2014-02-19 20:46:11 +01:00
LIBS += -lbfd -ldl -liberty -lz
LIBS_c += -lbfd -ldl -liberty -lz
LIBS_h += -lbfd -ldl -liberty -lz
Fix hostapd build with CONFIG_WPA_TRACE but no CONFIG_WPA_TRACE_BFD Otherwise, we may get linker failures: ld.lld: error: unable to find library -lbfd While we're at it, pull in the library selection fixes from commit 848905b12abf ("Avoid undefined references with CONFIG_WPA_TRACE_BFD=y"). Signed-off-by: Brian Norris <briannorris@chromium.org>
2019-10-18 01:19:15 +02:00
LIBS_n += -lbfd -ldl -liberty -lz
Add option libbfd support for tracing code CONFIG_WPA_TRACE=y and CONFIG_WPA_TRACE_BFD=y can now be used to get even more complete symbols (func/file/line and inline functions) for backtraces.
2009-12-20 22:35:06 +01:00
endif
Add backtrace support for debugging WPA_TRACE=y can now be used to enable internal backtrace support that will provide more details about implementation errors, e.g., when some resources are not released correctly. In addition, this will print out a backtrace automatically if SIGSEGV is received.
2009-12-19 17:40:54 +01:00
endif
hostapd_cli: Start using src/utils/edit*.c This brings hostapd_cli closer to the design used in wpa_cli and allows command history and editing mechanisms to be added.
2011-07-16 16:37:18 +02:00
ifndef CONFIG_ELOOP
CONFIG_ELOOP=eloop
endif
OBJS += ../src/utils/$(CONFIG_ELOOP).o
OBJS_c += ../src/utils/$(CONFIG_ELOOP).o
Use monotonic clock for relative time for eloop if available Relative time shouldn't be calculated based on gettimeofday because that clock can jump (e.g., when the time is adjusted by the system administrator.) On systems where that is available, use CLOCK_BOOTTIME (on fairly recent Linux systems, this clock takes into account the time spend suspended) or CLOCK_MONOTONIC (on Linux and some POSIX systems, this clock is just freely running with no adjustments.) Reported-by: Holger Schurig <holgerschurig@gmail.com> Signed-hostap: Johannes Berg <johannes.berg@intel.com>
2013-11-20 11:01:09 +01:00
ifeq ($(CONFIG_ELOOP), eloop)
# Using glibc < 2.17 requires -lrt for clock_gettime()
LIBS += -lrt
LIBS_c += -lrt
LIBS_h += -lrt
Fix nt_password_hash build This needs librt on some systems for clock_gettime(). Signed-off-by: Jouni Malinen <j@w1.fi>
2014-02-15 10:49:09 +01:00
LIBS_n += -lrt
Use monotonic clock for relative time for eloop if available Relative time shouldn't be calculated based on gettimeofday because that clock can jump (e.g., when the time is adjusted by the system administrator.) On systems where that is available, use CLOCK_BOOTTIME (on fairly recent Linux systems, this clock takes into account the time spend suspended) or CLOCK_MONOTONIC (on Linux and some POSIX systems, this clock is just freely running with no adjustments.) Reported-by: Holger Schurig <holgerschurig@gmail.com> Signed-hostap: Johannes Berg <johannes.berg@intel.com>
2013-11-20 11:01:09 +01:00
endif
hostapd: Add build options for selecting eloop type This adds CONFIG_ELOOP_POLL=y and CONFIG_ELOOP_EPOLL=y options to hostapd build options similarly to how these were implemented for wpa_supplicant. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-07-23 17:45:31 +02:00
ifdef CONFIG_ELOOP_POLL
CFLAGS += -DCONFIG_ELOOP_POLL
endif
ifdef CONFIG_ELOOP_EPOLL
CFLAGS += -DCONFIG_ELOOP_EPOLL
endif
Implement kqueue(2) support via CONFIG_ELOOP_KQUEUE NOTE: kqueue has to be closed and re-build after forking. epoll *should* do the same, but it seems that wpa_supplicant doesn't need it at least. I have re-worked a little bit of the epoll code (moved into a similar kqueue function) so it's trivial to requeue epoll if needed in the future. Signed-off-by: Roy Marples <roy@marples.name>
2016-01-22 21:28:25 +01:00
ifdef CONFIG_ELOOP_KQUEUE
CFLAGS += -DCONFIG_ELOOP_KQUEUE
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
OBJS += ../src/utils/common.o
Clear allocated debug message buffers explicitly When hostapd or wpa_supplicant is run in debug more with key material prints allowed (-K on the command line), it is possible for passwords and keying material to show up in debug prints. Since some of the debug cases end up allocating a temporary buffer from the heap for processing purposes, a copy of such password may remain in heap. Clear these temporary buffers explicitly to avoid causing issues for hwsim test cases that verify contents of memory against unexpected keys. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-06-17 15:30:34 +02:00
OBJS_c += ../src/utils/common.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
OBJS += ../src/utils/wpa_debug.o
Fix hostapd_cli linking without CONFIG_WPA_TRACE=y
2011-07-19 07:45:33 +02:00
OBJS_c += ../src/utils/wpa_debug.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
OBJS += ../src/utils/wpabuf.o
OBJS += ../src/utils/os_$(CONFIG_OS).o
OBJS += ../src/utils/ip_addr.o
AP: Determine Short SSID value for the BSS This can be used in the future to implement support for RNR and scanning extensions using a shorter field for the SSID. Signed-off-by: Andrei Otcheretianski <andrei.otcheretianski@intel.com>
2019-06-19 14:49:15 +02:00
OBJS += ../src/utils/crc32.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
Moved ieee802_11_parse_elems() into common code
2008-10-29 20:48:14 +01:00
OBJS += ../src/common/ieee802_11_common.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
OBJS += ../src/common/wpa_common.o
Introduce common hw features Introduce wpa_supplicant/hostapd hw features. Signed-off-by: Janusz Dziedzic <janusz.dziedzic@tieto.com>
2015-01-08 12:48:29 +01:00
OBJS += ../src/common/hw_features_common.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
Move EAPOL authenticator state machine into src/eapol_auth This is now completely independent from hostapd-specific code, so it can be moved to be under the src tree.
2009-11-29 19:03:28 +01:00
OBJS += ../src/eapol_auth/eapol_auth_sm.o
Make HOSTAPD_DUMP_STATE configurable with CONFIG_NO_DUMP_STATE This removes the hardcoded definition from Makefile and cleans up source code by moving the mail HOSTAPD_DUMP_STATE blocks into separate files to avoid conditional compilation within files.
2009-11-29 19:18:47 +01:00
Add CONFIG_CODE_COVERAGE=y option for gcov This can be used to measure code coverage from test scripts. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-11-24 18:16:12 +01:00
ifdef CONFIG_CODE_COVERAGE
CFLAGS += -O0 -fprofile-arcs -ftest-coverage
LIBS += -lgcov
LIBS_c += -lgcov
LIBS_h += -lgcov
LIBS_n += -lgcov
endif
Make HOSTAPD_DUMP_STATE configurable with CONFIG_NO_DUMP_STATE This removes the hardcoded definition from Makefile and cleans up source code by moving the mail HOSTAPD_DUMP_STATE blocks into separate files to avoid conditional compilation within files.
2009-11-29 19:18:47 +01:00
ifndef CONFIG_NO_DUMP_STATE
Remove hostapd dump_file functionality This debugging mechanism has now been deprecated by the control interface commands that can be used to fetch same internal information from hostapd in a more convenient way. Leave the empty USR1 signal handler and configuration file parameter for backwards compatibility. They can be removed in future versions of hostapd. Signed-hostap: Jouni Malinen <j@w1.fi>
2014-01-02 17:15:07 +01:00
# define HOSTAPD_DUMP_STATE to include support for dumping internal state
# through control interface commands (undefine it, if you want to save in
# binary size)
Make HOSTAPD_DUMP_STATE configurable with CONFIG_NO_DUMP_STATE This removes the hardcoded definition from Makefile and cleans up source code by moving the mail HOSTAPD_DUMP_STATE blocks into separate files to avoid conditional compilation within files.
2009-11-29 19:18:47 +01:00
CFLAGS += -DHOSTAPD_DUMP_STATE
OBJS += ../src/eapol_auth/eapol_auth_dump.o
endif
Added support for removing RADIUS accounting and RADIUS in general CONFIG_NO_ACCOUNTING=y and CONFIG_NO_RADIUS=y build options can now be used to remove RADIUS support from the hostapd build.
2009-01-08 18:15:25 +01:00
ifdef CONFIG_NO_RADIUS
CFLAGS += -DCONFIG_NO_RADIUS
CONFIG_NO_ACCOUNTING=y
else
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
OBJS += ../src/radius/radius.o
OBJS += ../src/radius/radius_client.o
Add preliminary RADIUS dynamic authorization server (RFC 5176) This adds the basic DAS mechanism to enable hostapd to be configured to request dynamic authorization requests (Disconnect-Request and CoA-Request). This commit does not add actual processing of the requests, i.e., this will only receive and authenticate the requests and NAK them regardless of what operation is requested. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-05-06 21:02:42 +02:00
OBJS += ../src/radius/radius_das.o
Added support for removing RADIUS accounting and RADIUS in general CONFIG_NO_ACCOUNTING=y and CONFIG_NO_RADIUS=y build options can now be used to remove RADIUS support from the hostapd build.
2009-01-08 18:15:25 +01:00
endif
ifdef CONFIG_NO_ACCOUNTING
CFLAGS += -DCONFIG_NO_ACCOUNTING
else
Move generic AP functionality implementation into src/ap This code can be shared by both hostapd and wpa_supplicant and this is an initial step in getting the generic code moved to be under the src directories. Couple of generic files still remain under the hostapd directory due to direct dependencies to files there. Once the dependencies have been removed, they will also be moved to the src/ap directory to allow wpa_supplicant to be built without requiring anything from the hostapd directory.
2009-12-25 00:12:50 +01:00
OBJS += ../src/ap/accounting.o
Added support for removing RADIUS accounting and RADIUS in general CONFIG_NO_ACCOUNTING=y and CONFIG_NO_RADIUS=y build options can now be used to remove RADIUS support from the hostapd build.
2009-01-08 18:15:25 +01:00
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
Added build option for removing VLAN support (CONFIG_NO_VLAN)
2009-01-12 20:39:19 +01:00
ifdef CONFIG_NO_VLAN
CFLAGS += -DCONFIG_NO_VLAN
else
Move generic AP functionality implementation into src/ap This code can be shared by both hostapd and wpa_supplicant and this is an initial step in getting the generic code moved to be under the src directories. Couple of generic files still remain under the hostapd directory due to direct dependencies to files there. Once the dependencies have been removed, they will also be moved to the src/ap directory to allow wpa_supplicant to be built without requiring anything from the hostapd directory.
2009-12-25 00:12:50 +01:00
OBJS += ../src/ap/vlan_init.o
vlan: Move ifconfig helpers to a separate file This removes final ioctl() use within vlan_init.c. Signed-off-by: Jouni Malinen <j@w1.fi>
2016-03-25 16:56:07 +01:00
OBJS += ../src/ap/vlan_ifconfig.o
VLAN: Separate station grouping and uplink configuration Separate uplink configuration (IEEE 802.1q VID) and grouping of stations into AP_VLAN interfaces. The int vlan_id will continue to identify the AP_VLAN interface the station should be assigned to. Each AP_VLAN interface corresponds to an instance of struct hostapd_vlan that is uniquely identified by int vlan_id within an BSS. New: Each station and struct hostapd_vlan holds a struct vlan_description vlan_desc member that describes the uplink configuration requested. Currently this is just an int untagged IEEE 802.1q VID, but can be extended to tagged VLANs and other settings easily. When the station was about to be assigned its vlan_id, vlan_desc and vlan_id will now be set simultaneously by ap_sta_set_vlan(). So sta->vlan_id can still be tested for whether the station needs to be moved to an AP_VLAN interface. To ease addition of tagged VLAN support, a member notempty is added to struct vlan_description. Is is set to 1 if an untagged or tagged VLAN assignment is requested and needs to be validated. The inverted form allows os_zalloc() to initialize an empty description. Though not depended on by the code, vlan_id assignment ensures: * vlan_id = 0 will continue to mean no AP_VLAN interface * vlan_id < 4096 will continue to mean vlan_id = untagged vlan id with no per_sta_vif and no extra tagged vlan. * vlan_id > 4096 will be used for per_sta_vif and/or tagged vlans. This way struct wpa_group and drivers API do not need to be changed in order to implement tagged VLANs or per_sta_vif support. DYNAMIC_VLAN_* will refer to (struct vlan_description).notempty only, thus grouping of the stations for per_sta_vif can be used with DYNAMIC_VLAN_DISABLED, but not with CONFIG_NO_VLAN, as struct hostapd_vlan is still used to manage AP_VLAN interfaces. MAX_VLAN_ID will be checked in hostapd_vlan_valid and during setup of VLAN interfaces and refer to IEEE 802.1q VID. VLAN_ID_WILDCARD will continue to refer to int vlan_id. Renaming vlan_id to vlan_desc when type changed from int to struct vlan_description was avoided when vlan_id was also used in a way that did not depend on its type (for example, when passed to another function). Output of "VLAN ID %d" continues to refer to int vlan_id, while "VLAN %d" will refer to untagged IEEE 802.1q VID. Signed-off-by: Michael Braun <michael-dev@fami-braun.de>
2016-01-21 14:51:56 +01:00
OBJS += ../src/ap/vlan.o
Add option to use netlink to create and remove VLAN interfaces CONFIG_VLAN_NETLINK=y build option can now be used to replace the ioctl()-based interface for creating and removing VLAN interfaces with netlink-based interface. Signed-hostap: M. Braun <michael-dev@fami-braun.de>
2012-08-10 11:55:33 +02:00
ifdef CONFIG_FULL_DYNAMIC_VLAN
vlan: Clean up netlink vs. ioctl API implementation Move the ioctl-based VLAN implementation to a separate file to avoid need for conditional blocks within vlan_ioctl.c. This removes the internal CONFIG_VLAN_NETLINK define, i.e., this is now used only in build configuration (.config) to select whether to include the vlan_util.c (netlink) or vlan_ioctl.c (ioctl) implementation of the functions. Signed-off-by: Jouni Malinen <j@w1.fi>
2016-03-25 16:21:41 +01:00
# Define CONFIG_FULL_DYNAMIC_VLAN to have hostapd manipulate bridges
# and VLAN interfaces for the VLAN feature.
CFLAGS += -DCONFIG_FULL_DYNAMIC_VLAN
vlan: Move CONFIG_FULL_DYNAMIC_VLAN functionality into a separate file This cleans up vlan_init.c by removing number of C pre-processor dependencies. Signed-off-by: Jouni Malinen <j@w1.fi>
2016-03-25 16:43:27 +01:00
OBJS += ../src/ap/vlan_full.o
vlan: Clean up netlink vs. ioctl API implementation Move the ioctl-based VLAN implementation to a separate file to avoid need for conditional blocks within vlan_ioctl.c. This removes the internal CONFIG_VLAN_NETLINK define, i.e., this is now used only in build configuration (.config) to select whether to include the vlan_util.c (netlink) or vlan_ioctl.c (ioctl) implementation of the functions. Signed-off-by: Jouni Malinen <j@w1.fi>
2016-03-25 16:21:41 +01:00
ifdef CONFIG_VLAN_NETLINK
Add option to use netlink to create and remove VLAN interfaces CONFIG_VLAN_NETLINK=y build option can now be used to replace the ioctl()-based interface for creating and removing VLAN interfaces with netlink-based interface. Signed-hostap: M. Braun <michael-dev@fami-braun.de>
2012-08-10 11:55:33 +02:00
OBJS += ../src/ap/vlan_util.o
vlan: Clean up netlink vs. ioctl API implementation Move the ioctl-based VLAN implementation to a separate file to avoid need for conditional blocks within vlan_ioctl.c. This removes the internal CONFIG_VLAN_NETLINK define, i.e., this is now used only in build configuration (.config) to select whether to include the vlan_util.c (netlink) or vlan_ioctl.c (ioctl) implementation of the functions. Signed-off-by: Jouni Malinen <j@w1.fi>
2016-03-25 16:21:41 +01:00
else
OBJS += ../src/ap/vlan_ioctl.o
Add option to use netlink to create and remove VLAN interfaces CONFIG_VLAN_NETLINK=y build option can now be used to replace the ioctl()-based interface for creating and removing VLAN interfaces with netlink-based interface. Signed-hostap: M. Braun <michael-dev@fami-braun.de>
2012-08-10 11:55:33 +02:00
endif
endif
Added build option for removing VLAN support (CONFIG_NO_VLAN)
2009-01-12 20:39:19 +01:00
endif
Added build option for disabling control interface (CONFIG_NO_CTRL_IFACE)
2009-01-12 20:44:57 +01:00
ifdef CONFIG_NO_CTRL_IFACE
CFLAGS += -DCONFIG_NO_CTRL_IFACE
else
hostapd: Add UDP support for ctrl_iface Add UDP support for ctrl_iface: New config option could be set: CONFIG_CTRL_IFACE=udp CONFIG_CTRL_IFACE=udp-remote CONFIG_CTRL_IFACE=udp6 CONFIG_CTRL_IFACE=udp6-remote And hostapd_cli usage: hostapd_cli -i localhost:8877 Signed-off-by: Janusz Dziedzic <janusz.dziedzic@tieto.com>
2016-03-04 10:20:24 +01:00
ifeq ($(CONFIG_CTRL_IFACE), udp)
CFLAGS += -DCONFIG_CTRL_IFACE_UDP
else
ifeq ($(CONFIG_CTRL_IFACE), udp6)
CFLAGS += -DCONFIG_CTRL_IFACE_UDP
CFLAGS += -DCONFIG_CTRL_IFACE_UDP_IPV6
else
ifeq ($(CONFIG_CTRL_IFACE), udp-remote)
CFLAGS += -DCONFIG_CTRL_IFACE_UDP
CFLAGS += -DCONFIG_CTRL_IFACE_UDP_REMOTE
else
ifeq ($(CONFIG_CTRL_IFACE), udp6-remote)
CFLAGS += -DCONFIG_CTRL_IFACE_UDP
CFLAGS += -DCONFIG_CTRL_IFACE_UDP_REMOTE
CFLAGS += -DCONFIG_CTRL_IFACE_UDP_IPV6
else
CFLAGS += -DCONFIG_CTRL_IFACE_UNIX
endif
endif
endif
endif
hostapd: Use common functions for ctrl_iface Use the common functions, structures when UNIX socket ctrl_iface used. Signed-off-by: Janusz Dziedzic <janusz.dziedzic@tieto.com>
2016-03-04 10:20:22 +01:00
OBJS += ../src/common/ctrl_iface_common.o
Added build option for disabling control interface (CONFIG_NO_CTRL_IFACE)
2009-01-12 20:44:57 +01:00
OBJS += ctrl_iface.o
Move ctrl_iface_ap.c into src/ap
2009-12-25 11:25:55 +01:00
OBJS += ../src/ap/ctrl_iface_ap.o
Added build option for disabling control interface (CONFIG_NO_CTRL_IFACE)
2009-01-12 20:44:57 +01:00
endif
hostapd: Add UDP support for ctrl_iface Add UDP support for ctrl_iface: New config option could be set: CONFIG_CTRL_IFACE=udp CONFIG_CTRL_IFACE=udp-remote CONFIG_CTRL_IFACE=udp6 CONFIG_CTRL_IFACE=udp6-remote And hostapd_cli usage: hostapd_cli -i localhost:8877 Signed-off-by: Janusz Dziedzic <janusz.dziedzic@tieto.com>
2016-03-04 10:20:24 +01:00
ifndef CONFIG_NO_CTRL_IFACE
CFLAGS += -DCONFIG_CTRL_IFACE
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifdef CONFIG_RSN_PREAUTH
CFLAGS += -DCONFIG_RSN_PREAUTH
CONFIG_L2_PACKET=y
endif
HS 2.0R2: Add common OSEN definitions Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2013-07-23 20:23:25 +02:00
ifdef CONFIG_HS20
AP: Add support for Proxy ARP, DHCP snooping mechanism Proxy ARP allows the AP devices to keep track of the hardware address to IP address mapping of the STA devices within the BSS. When a request for such information is made (i.e., ARP request, Neighbor Solicitation), the AP will respond on behalf of the STA device within the BSS. Such requests could originate from a device within the BSS or also from the bridge. In the process of the AP replying to the request (i.e., ARP reply, Neighbor Advertisement), the AP will drop the original request frame. The relevant STA will not even know that such information was ever requested. This feature is a requirement for Hotspot 2.0, and is defined in IEEE Std 802.11-2012, 10.23.13. While the Proxy ARP support code mainly resides in the kernel bridge code, in order to optimize the performance and simplify kernel implementation, the DHCP snooping code was added to the hostapd. Signed-off-by: Kyeyoon Park <kyeyoonp@qca.qualcomm.com>
2014-09-26 07:32:55 +02:00
CONFIG_PROXYARP=y
endif
ifdef CONFIG_PROXYARP
CONFIG_L2_PACKET=y
HS 2.0R2: Add common OSEN definitions Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2013-07-23 20:23:25 +02:00
endif
Suite B: PMKID derivation for AKM 00-0F-AC:11 The new AKM uses a different mechanism of deriving the PMKID based on KCK instead of PMK. hostapd was already doing this after the KCK had been derived, but wpa_supplicant functionality needs to be moved from processing of EAPOL-Key frame 1/4 to 3/4 to have the KCK available. Signed-off-by: Jouni Malinen <j@w1.fi>
2014-11-16 12:22:46 +01:00
ifdef CONFIG_SUITEB
CFLAGS += -DCONFIG_SUITEB
endif
Add Suite B 192-bit AKM WPA-EAP-SUITE-B-192 can now be used to select 192-bit level Suite B into use as the key management method. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-25 22:32:01 +01:00
ifdef CONFIG_SUITEB192
CFLAGS += -DCONFIG_SUITEB192
NEED_SHA384=y
endif
OCV: Add build configuration for channel validation support Add compilation flags for Operating Channel Verification (OCV) support. Signed-off-by: Mathy Vanhoef <Mathy.Vanhoef@cs.kuleuven.be>
2018-08-06 21:46:25 +02:00
ifdef CONFIG_OCV
CFLAGS += -DCONFIG_OCV
OCV: Add utility functions to insert OCI elements This commit adds utility functions to insert various encoding of the OCI element. Signed-off-by: Mathy Vanhoef <Mathy.Vanhoef@cs.kuleuven.be>
2018-08-06 21:46:26 +02:00
OBJS += ../src/common/ocv.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
ifdef CONFIG_IEEE80211R
FT: Differentiate between FT for station and for AP in build Previously, CONFIG_IEEE80211R enabled build that supports FT for both station mode and AP mode. However, in most wpa_supplicant cases only station mode FT is required and there is no need for AP mode FT. Add support to differentiate between station mode FT and AP mode FT in wpa_supplicant builds by adding CONFIG_IEEE80211R_AP that should be used when AP mode FT support is required in addition to station mode FT. This allows binary size to be reduced for builds that require only the station side FT functionality. Signed-off-by: Ilan Peer <ilan.peer@intel.com>
2016-10-27 14:18:32 +02:00
CFLAGS += -DCONFIG_IEEE80211R -DCONFIG_IEEE80211R_AP
Rename some src/ap files to avoid duplicate file names Doxygen and some build tools may get a bit confused about same file name being used in different directories. Clean this up a bit by renaming some of the duplicated file names in src/ap.
2009-12-25 23:05:40 +01:00
OBJS += ../src/ap/wpa_auth_ft.o
Include aes_unwrap in build when needed (FT and EAP-FAST server)
2009-10-12 08:10:24 +02:00
NEED_AES_UNWRAP=y
FT: New RRB message format Convert FT RRB into a new TLV based format. Use AES-SIV as AEAD cipher to protect the messages. This needs at least 32 byte long keys. These can be provided either by a config file change or letting a KDF derive the 32 byte key used from the 16 byte key given. This breaks backward compatibility, i.e., hostapd needs to be updated on all APs at the same time to allow FT to remain functional. Signed-off-by: Michael Braun <michael-dev@fami-braun.de>
2017-04-02 14:52:50 +02:00
NEED_AES_SIV=y
FT: Replace inter-AP protocol with use of OUI Extended Ethertype Replace the previously used extension of IEEE 802.11 managed Ethertype 89-0d (originally added for Remote Request/Response in IEEE 802.11r) with Ethertype 88-b7 (OUI Extended EtherType) for FT inter-AP communication. The new design uses a more properly assigned identifier for the messages. This assigns the OUI 00:13:74 vendor-specific subtype 0x0001 for the new hostapd AP-to-AP communication purposes. Subtypes 1 (PULL), 2 (RESP), and 3 (PUSH) are also assigned in this commit for the R0KH-R1KH protocol. This breaks backward compatibility, i.e., hostapd needs to be updated on all APs at the same time to allow FT to remain functional. Signed-off-by: Michael Braun <michael-dev@fami-braun.de>
2017-04-02 14:52:49 +02:00
NEED_ETH_P_OUI=y
FT: New RRB message format Convert FT RRB into a new TLV based format. Use AES-SIV as AEAD cipher to protect the messages. This needs at least 32 byte long keys. These can be provided either by a config file change or letting a KDF derive the 32 byte key used from the 16 byte key given. This breaks backward compatibility, i.e., hostapd needs to be updated on all APs at the same time to allow FT to remain functional. Signed-off-by: Michael Braun <michael-dev@fami-braun.de>
2017-04-02 14:52:50 +02:00
NEED_HMAC_SHA256_KDF=y
FT: Replace inter-AP protocol with use of OUI Extended Ethertype Replace the previously used extension of IEEE 802.11 managed Ethertype 89-0d (originally added for Remote Request/Response in IEEE 802.11r) with Ethertype 88-b7 (OUI Extended EtherType) for FT inter-AP communication. The new design uses a more properly assigned identifier for the messages. This assigns the OUI 00:13:74 vendor-specific subtype 0x0001 for the new hostapd AP-to-AP communication purposes. Subtypes 1 (PULL), 2 (RESP), and 3 (PUSH) are also assigned in this commit for the R0KH-R1KH protocol. This breaks backward compatibility, i.e., hostapd needs to be updated on all APs at the same time to allow FT to remain functional. Signed-off-by: Michael Braun <michael-dev@fami-braun.de>
2017-04-02 14:52:49 +02:00
endif
ifdef NEED_ETH_P_OUI
CFLAGS += -DCONFIG_ETH_P_OUI
OBJS += ../src/ap/eth_p_oui.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
Add initial parts for SAE This introduces new AKM for SAE and FT-SAE and adds the initial parts for going through the SAE Authentication frame exchange. The actual SAE algorithm and new fields in Authentication frames are not yet included in this commit and will be added separately. This version is able to complete a dummy authentication with the correct authentication algorithm and transaction values to allow cfg80211/mac80211 drivers to be tested (all the missing parts can be handled with hostapd/wpa_supplicant changes). Signed-hostap: Jouni Malinen <j@w1.fi>
2012-09-30 18:51:07 +02:00
ifdef CONFIG_SAE
CFLAGS += -DCONFIG_SAE
SAE: Add generation of the commit message fields This adds derivation of PWE and the needed commit values so that the full SAE commit message can be built. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-30 21:06:11 +01:00
OBJS += ../src/common/sae.o
SAE: Use crypto wrappers instead of direct OpenSSL calls This makes the SAE implementation independent of the crypto/bignum library. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-31 18:41:21 +01:00
NEED_ECC=y
SAE: Add support for FFC groups This allows FFC groups to be used with SAE. Though, these groups are not included in the default sae_groups value based on what is available since the FFC groups have the additional requirement of using a safe prime with the current implementation (or specification of the group order). Signed-hostap: Jouni Malinen <j@w1.fi>
2013-01-05 20:22:00 +01:00
NEED_DH_GROUPS=y
hostapd: Fix some compilation errors If NEED_AP_MLME=y is not defined, compilation might fail under some configurations: src/ap/drv_callbacks.c:594:2: warning: implicit declaration of function ‘hostapd_acs_completed’ [-Wimplicit-function-declaration] src/ap/sta_info.c:253: undefined reference to `sae_clear_retransmit_timer' Fix these errors by adding the missing hostapd_acs_completed() stub, and defining NEED_AP_MLME in case of CONFIG_SAE. Signed-off-by: Eliad Peller <eliad@wizery.com>
2015-03-29 14:03:25 +02:00
NEED_AP_MLME=y
Share common SAE and EAP-pwd functionality: suitable groups Start sharing common SAE and EAP-pwd functionality by adding a new source code file that can be included into both. This first step is bringing in a shared function to check whether a group is suitable. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-04-25 18:45:27 +02:00
NEED_DRAGONFLY=y
Add initial parts for SAE This introduces new AKM for SAE and FT-SAE and adds the initial parts for going through the SAE Authentication frame exchange. The actual SAE algorithm and new fields in Authentication frames are not yet included in this commit and will be added separately. This version is able to complete a dummy authentication with the correct authentication algorithm and transaction values to allow cfg80211/mac80211 drivers to be tested (all the missing parts can be handled with hostapd/wpa_supplicant changes). Signed-hostap: Jouni Malinen <j@w1.fi>
2012-09-30 18:51:07 +02:00
endif
OWE: Add CONFIG_OWE=y build option This can be used to enable OWE support in hostapd and wpa_supplicant builds. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-03-11 23:38:24 +01:00
ifdef CONFIG_OWE
CFLAGS += -DCONFIG_OWE
NEED_ECC=y
NEED_HMAC_SHA256_KDF=y
OWE: Support DH groups 20 (NIST P-384) and 21 (NIST P-521) in AP mode This extends OWE support in hostapd to allow DH groups 20 and 21 to be used in addition to the mandatory group 19 (NIST P-256). Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-10-08 15:37:32 +02:00
NEED_HMAC_SHA384_KDF=y
NEED_HMAC_SHA512_KDF=y
NEED_SHA384=y
NEED_SHA512=y
OWE: Add CONFIG_OWE=y build option This can be used to enable OWE support in hostapd and wpa_supplicant builds. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-03-11 23:38:24 +01:00
endif
hostapd: Add airtime policy configuration support This adds support to hostapd for configuring airtime policy settings for stations as they connect to the access point. This is the userspace component of the airtime policy enforcement system PoliFi described in this paper: https://arxiv.org/abs/1902.03439 The Linux kernel part has been merged into mac80211 for the 5.1 dev cycle. The configuration mechanism has three modes: Static, dynamic and limit. In static mode, weights can be set in the configuration file for individual MAC addresses, which will be applied when the configured stations connect. In dynamic mode, weights are instead set per BSS, which will be scaled by the number of active stations on that BSS, achieving the desired aggregate weighing between the configured BSSes. Limit mode works like dynamic mode, except that any BSS *not* marked as 'limited' is allowed to exceed its configured share if a per-station fairness share would assign more airtime to that BSS. See the paper for details on these modes. Signed-off-by: Toke Høiland-Jørgensen <toke@toke.dk>
2019-03-20 15:58:52 +01:00
ifdef CONFIG_AIRTIME_POLICY
CFLAGS += -DCONFIG_AIRTIME_POLICY
OBJS += ../src/ap/airtime_policy.o
endif
FILS: Add hostapd configuration options This adds CONFIG_FILS=y build configuration option and new key management options for FILS authentication. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-09-01 16:57:59 +02:00
ifdef CONFIG_FILS
CFLAGS += -DCONFIG_FILS
FILS: Move HLP request handling into a separate file This is independent functionality from the core IEEE 802.11 management handling and will increase significantly in size, so it is cleaner to maintain this in a separate source code file. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-01-31 13:00:12 +01:00
OBJS += ../src/ap/fils_hlp.o
FILS: Add hostapd configuration options This adds CONFIG_FILS=y build configuration option and new key management options for FILS authentication. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-09-01 16:57:59 +02:00
NEED_SHA384=y
FILS: Use AEAD cipher to check received EAPOL-Key frames (AP) This changes 4-way handshake authenticator processing to decrypt the EAPOL-Key frames using an AEAD cipher (AES-SIV with FILS AKMs) before processing the Key Data field. This replaces Key MIC validation for the cases where AEAD cipher is used. This needs to move the EAPOL-Key msg 2/4 RSN element processing to happen only after the PTK has been derived and validated. That is done for all AKMs to avoid extra complexity with having to maintain two code paths for this. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-09-03 14:59:44 +02:00
NEED_AES_SIV=y
FILS: Add FILS SK auth PFS support in AP mode This adds an option to configure hostapd to enable use of perfect forward secrecy option in FILS shared key authentication. A new build option CONFIG_FILS_SK_PFS=y can be used to include this functionality. A new runtime configuration parameter fils_dh_group is used to enable this by specifying which DH group to use. For example, fils_dh_group=19 would allow FILS SK PFS to be used with a 256-bit random ECP group. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-03-12 21:40:56 +01:00
ifdef CONFIG_FILS_SK_PFS
CFLAGS += -DCONFIG_FILS_SK_PFS
NEED_ECC=y
endif
FILS: Add hostapd configuration options This adds CONFIG_FILS=y build configuration option and new key management options for FILS authentication. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-09-01 16:57:59 +02:00
endif
WNM: Use CONFIG_WNM more consistently Replace CONFIG_IEEE80211V with CONFIG_WNM to get more consistent build options for WNM-Sleep Mode operations. Previously it was possible to define CONFIG_IEEE80211V without CONFIG_WNM which would break the build. In addition, IEEE 802.11v has been merged into IEEE Std 802.11-2012 and WNM is a better term to use for this new functionality anyway. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-16 17:22:54 +01:00
ifdef CONFIG_WNM
WNM: Differentiate between WNM for station and for AP in build Previously, CONFIG_WNM enabled build that supports WNM for both station mode and AP mode. However, in most wpa_supplicant cases only station mode WNM is required and there is no need for AP mode WNM. Add support to differentiate between station mode WNM and AP mode WNM in wpa_supplicant builds by adding CONFIG_WNM_AP that should be used when AP mode WNM support is required in addition to station mode WNM. This allows binary size to be reduced for builds that require only the station side WNM functionality. Signed-off-by: Avraham Stern <avraham.stern@intel.com>
2017-06-12 08:29:27 +02:00
CFLAGS += -DCONFIG_WNM -DCONFIG_WNM_AP
WNM: Add WNM-Sleep Mode implementation for AP Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2012-02-26 16:25:55 +01:00
OBJS += ../src/ap/wnm_ap.o
endif
hostapd: Initial IEEE 802.11ac (VHT) definitions Add IEEE 802.11ac definitions for config, IEEE structures, constants. Signed-hostap: Mahesh Palivela <maheshp@posedge.com>
2012-06-30 12:52:13 +02:00
ifdef CONFIG_IEEE80211AC
CFLAGS += -DCONFIG_IEEE80211AC
endif
hostapd: Initial IEEE 802.11ax (HE) definitions Add IEEE 802.11ax definitions for config, IEEE structures, and constants. These are still subject to change in the IEEE process. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-02-08 00:16:52 +01:00
ifdef CONFIG_IEEE80211AX
CFLAGS += -DCONFIG_IEEE80211AX
hostapd: Add IEEE 802.11ax HE IEs into Beacon/Probe Response frames IEEE 802.11ax HE changes to include HE IEs in Beacon and Probe Response frames. These elements are using vendor specific forms for now since the IEEE 802.11ax draft is not yet finalized and the element contents is subject to change. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2016-10-25 19:23:24 +02:00
OBJS += ../src/ap/ieee802_11_he.o
hostapd: Initial IEEE 802.11ax (HE) definitions Add IEEE 802.11ax definitions for config, IEEE structures, and constants. These are still subject to change in the IEEE process. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-02-08 00:16:52 +01:00
endif
hostapd: Add MBO IE to Beacon, Probe Response, Association Response Add MBO IE with AP capability attribute to Beacon, Probe Response, and (Re)Association Response frames to indicate the AP supports MBO. Add option to add Association Disallowed attribute to Beacon, Probe Response, and (Re)Association Response frames. Usage: SET mbo_assoc_disallow <reason code> Valid reason code values are between 1-5. Setting the reason code to 0 will remove the Association Disallowed attribute from the MBO IE and will allow new associations. MBO functionality is enabled by setting "mbo=1" in the config file. Signed-off-by: Avraham Stern <avraham.stern@intel.com>
2016-02-15 15:53:52 +01:00
ifdef CONFIG_MBO
CFLAGS += -DCONFIG_MBO
MBO: Track STA cellular data capability from association request This makes hostapd parse the MBO attribute in (Re)Association Request frame and track the cellular data capability (mbo_cell_capa=<val> in STA control interface command). Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2016-02-22 12:03:28 +01:00
OBJS += ../src/ap/mbo_ap.o
hostapd: Add MBO IE to Beacon, Probe Response, Association Response Add MBO IE with AP capability attribute to Beacon, Probe Response, and (Re)Association Response frames to indicate the AP supports MBO. Add option to add Association Disallowed attribute to Beacon, Probe Response, and (Re)Association Response frames. Usage: SET mbo_assoc_disallow <reason code> Valid reason code values are between 1-5. Setting the reason code to 0 will remove the Association Disallowed attribute from the MBO IE and will allow new associations. MBO functionality is enabled by setting "mbo=1" in the config file. Signed-off-by: Avraham Stern <avraham.stern@intel.com>
2016-02-15 15:53:52 +01:00
endif
Create a common drivers makefile snippet Instead of having all driver stuff collected across wpa_supplicant and hostapd, create a common snippet that they both include and that handles the build configuration.
2009-08-14 18:53:27 +02:00
include ../src/drivers/drivers.mak
OBJS += $(DRV_AP_OBJS)
CFLAGS += $(DRV_AP_CFLAGS)
LDFLAGS += $(DRV_AP_LDFLAGS)
LIBS += $(DRV_AP_LIBS)
Added a new driver wrapper, "none", for RADIUS server only configuration This can be used to limit hostapd code size and clean up debug output for configurations that do not use hostapd to control AP functionality.
2008-10-01 13:07:55 +02:00
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifdef CONFIG_L2_PACKET
ifdef CONFIG_DNET_PCAP
ifdef CONFIG_L2_FREEBSD
LIBS += -lpcap
OBJS += ../src/l2_packet/l2_packet_freebsd.o
else
LIBS += -ldnet -lpcap
OBJS += ../src/l2_packet/l2_packet_pcap.o
endif
else
OBJS += ../src/l2_packet/l2_packet_linux.o
endif
Fixed hostapd build without l2_packet (e.g., RADIUS server only).
2008-11-21 14:44:00 +01:00
else
OBJS += ../src/l2_packet/l2_packet_none.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
ERP: Add support for ERP on EAP server and authenticator Derive rRK and rIK on EAP server if ERP is enabled and use these keys to allow EAP re-authentication to be used and to derive rMSK. The new hostapd configuration parameter eap_server_erp=1 can now be used to configure the integrated EAP server to derive EMSK, rRK, and rIK at the successful completion of an EAP authentication method. This functionality is not included in the default build and can be enabled with CONFIG_ERP=y. Signed-off-by: Jouni Malinen <j@w1.fi>
2014-11-29 20:28:24 +01:00
ifdef CONFIG_ERP
CFLAGS += -DCONFIG_ERP
NEED_HMAC_SHA256_KDF=y
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifdef CONFIG_EAP_MD5
Rename EAP server defines from EAP_* to EAP_SERVER_* This allows separate set of EAP server and peer methods to be built into a single binary.
2009-03-25 11:06:19 +01:00
CFLAGS += -DEAP_SERVER_MD5
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_md5.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
CHAP=y
endif
ifdef CONFIG_EAP_TLS
Rename EAP server defines from EAP_* to EAP_SERVER_* This allows separate set of EAP server and peer methods to be built into a single binary.
2009-03-25 11:06:19 +01:00
CFLAGS += -DEAP_SERVER_TLS
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_tls.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
TLS_FUNCS=y
endif
Add UNAUTH-TLS vendor specific EAP type This EAP type uses a vendor specific expanded EAP header to encapsulate EAP-TLS with a configuration where the EAP server does not authenticate the EAP peer. In other words, this method includes only server authentication. The peer is configured with only the ca_cert parameter (similarly to other TLS-based EAP methods). This method can be used for cases where the network provides free access to anyone, but use of RSN with a securely derived unique PMK for each station is desired. The expanded EAP header uses the hostapd/wpa_supplicant vendor code 39068 and vendor type 1 to identify the UNAUTH-TLS method. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-22 21:34:11 +02:00
ifdef CONFIG_EAP_UNAUTH_TLS
CFLAGS += -DEAP_SERVER_UNAUTH_TLS
ifndef CONFIG_EAP_TLS
OBJS += ../src/eap_server/eap_server_tls.o
TLS_FUNCS=y
endif
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifdef CONFIG_EAP_PEAP
Rename EAP server defines from EAP_* to EAP_SERVER_* This allows separate set of EAP server and peer methods to be built into a single binary.
2009-03-25 11:06:19 +01:00
CFLAGS += -DEAP_SERVER_PEAP
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_peap.o
EAP-PEAP: Moved the common peap_prfplus() function into a shared file
2008-06-09 09:32:12 +02:00
OBJS += ../src/eap_common/eap_peap_common.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
TLS_FUNCS=y
CONFIG_EAP_MSCHAPV2=y
endif
ifdef CONFIG_EAP_TTLS
Rename EAP server defines from EAP_* to EAP_SERVER_* This allows separate set of EAP server and peer methods to be built into a single binary.
2009-03-25 11:06:19 +01:00
CFLAGS += -DEAP_SERVER_TTLS
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_ttls.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
TLS_FUNCS=y
CHAP=y
endif
ifdef CONFIG_EAP_MSCHAPV2
Rename EAP server defines from EAP_* to EAP_SERVER_* This allows separate set of EAP server and peer methods to be built into a single binary.
2009-03-25 11:06:19 +01:00
CFLAGS += -DEAP_SERVER_MSCHAPV2
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_mschapv2.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
MS_FUNCS=y
endif
ifdef CONFIG_EAP_GTC
Rename EAP server defines from EAP_* to EAP_SERVER_* This allows separate set of EAP server and peer methods to be built into a single binary.
2009-03-25 11:06:19 +01:00
CFLAGS += -DEAP_SERVER_GTC
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_gtc.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
ifdef CONFIG_EAP_SIM
Rename EAP server defines from EAP_* to EAP_SERVER_* This allows separate set of EAP server and peer methods to be built into a single binary.
2009-03-25 11:06:19 +01:00
CFLAGS += -DEAP_SERVER_SIM
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_sim.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
CONFIG_EAP_SIM_COMMON=y
Replace CONFIG_NO_AES_EXTRAS with auto-detection during build There is no need to do this manually since it is possible to figure out automatically which AES extra files need to be included in the build.
2009-10-11 21:23:50 +02:00
NEED_AES_CBC=y
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
ifdef CONFIG_EAP_AKA
Rename EAP server defines from EAP_* to EAP_SERVER_* This allows separate set of EAP server and peer methods to be built into a single binary.
2009-03-25 11:06:19 +01:00
CFLAGS += -DEAP_SERVER_AKA
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_aka.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
CONFIG_EAP_SIM_COMMON=y
Replace CONFIG_NO_AES_EXTRAS with auto-detection during build There is no need to do this manually since it is possible to figure out automatically which AES extra files need to be included in the build.
2009-10-11 21:23:50 +02:00
NEED_AES_CBC=y
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
Add a starting point for EAP-AKA' (draft-arkko-eap-aka-kdf-10) This is just making an as-is copy of EAP-AKA server and peer implementation into a new file and by using the different EAP method type that is allocated for EAP-AKA' (50). None of the other differences between EAP-AKA and EAP-AKA' are not yet included. It is likely that once EAP-AKA' implementation is done and is found to work correctly, large part of the EAP-AKA and EAP-AKA' code will be shared. However, it is not reasonable to destabilize EAP-AKA implementation at this point before it is clearer what the final differences will be.
2008-12-02 19:12:49 +01:00
ifdef CONFIG_EAP_AKA_PRIME
Rename EAP server defines from EAP_* to EAP_SERVER_* This allows separate set of EAP server and peer methods to be built into a single binary.
2009-03-25 11:06:19 +01:00
CFLAGS += -DEAP_SERVER_AKA_PRIME
Add a starting point for EAP-AKA' (draft-arkko-eap-aka-kdf-10) This is just making an as-is copy of EAP-AKA server and peer implementation into a new file and by using the different EAP method type that is allocated for EAP-AKA' (50). None of the other differences between EAP-AKA and EAP-AKA' are not yet included. It is likely that once EAP-AKA' implementation is done and is found to work correctly, large part of the EAP-AKA and EAP-AKA' code will be shared. However, it is not reasonable to destabilize EAP-AKA implementation at this point before it is clearer what the final differences will be.
2008-12-02 19:12:49 +01:00
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifdef CONFIG_EAP_SIM_COMMON
OBJS += ../src/eap_common/eap_sim_common.o
# Example EAP-SIM/AKA interface for GSM/UMTS authentication. This can be
# replaced with another file implementating the interface specified in
# eap_sim_db.h.
OBJS += ../src/eap_server/eap_sim_db.o
NEED_FIPS186_2_PRF=y
endif
ifdef CONFIG_EAP_PAX
Rename EAP server defines from EAP_* to EAP_SERVER_* This allows separate set of EAP server and peer methods to be built into a single binary.
2009-03-25 11:06:19 +01:00
CFLAGS += -DEAP_SERVER_PAX
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_pax.o ../src/eap_common/eap_pax_common.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
ifdef CONFIG_EAP_PSK
Rename EAP server defines from EAP_* to EAP_SERVER_* This allows separate set of EAP server and peer methods to be built into a single binary.
2009-03-25 11:06:19 +01:00
CFLAGS += -DEAP_SERVER_PSK
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_psk.o ../src/eap_common/eap_psk_common.o
Replace CONFIG_NO_AES_EXTRAS with auto-detection during build There is no need to do this manually since it is possible to figure out automatically which AES extra files need to be included in the build.
2009-10-11 21:23:50 +02:00
NEED_AES_ENCBLOCK=y
NEED_AES_EAX=y
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
ifdef CONFIG_EAP_SAKE
Rename EAP server defines from EAP_* to EAP_SERVER_* This allows separate set of EAP server and peer methods to be built into a single binary.
2009-03-25 11:06:19 +01:00
CFLAGS += -DEAP_SERVER_SAKE
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_sake.o ../src/eap_common/eap_sake_common.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
ifdef CONFIG_EAP_GPSK
Rename EAP server defines from EAP_* to EAP_SERVER_* This allows separate set of EAP server and peer methods to be built into a single binary.
2009-03-25 11:06:19 +01:00
CFLAGS += -DEAP_SERVER_GPSK
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_gpsk.o ../src/eap_common/eap_gpsk_common.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifdef CONFIG_EAP_GPSK_SHA256
Fix EAP-GPSK server compilation for SHA256 cipher suite Need to use common EAP_GPSK_SHA256 define for this instead of the server-specific EAP_SERVER_GPSK_SHA256 which was not really used anywhere. Signed-hostap: Jouni Malinen <j@w1.fi>
2014-01-05 13:11:14 +01:00
CFLAGS += -DEAP_GPSK_SHA256
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
endif
EAP-pwd: Add support for EAP-pwd server and peer functionality This adds an initial EAP-pwd (RFC 5931) implementation. For now, this requires OpenSSL.
2010-09-15 09:51:40 +02:00
ifdef CONFIG_EAP_PWD
CFLAGS += -DEAP_SERVER_PWD
OBJS += ../src/eap_server/eap_server_pwd.o ../src/eap_common/eap_pwd_common.o
EAP-pwd: Use abstract crypto API This makes it easier to use EAP-pwd with other crypto libraries than OpenSSL. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2017-10-16 07:45:09 +02:00
NEED_ECC=y
Share common SAE and EAP-pwd functionality: suitable groups Start sharing common SAE and EAP-pwd functionality by adding a new source code file that can be included into both. This first step is bringing in a shared function to check whether a group is suitable. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-04-25 18:45:27 +02:00
NEED_DRAGONFLY=y
EAP-pwd: Add support for EAP-pwd server and peer functionality This adds an initial EAP-pwd (RFC 5931) implementation. For now, this requires OpenSSL.
2010-09-15 09:51:40 +02:00
endif
EAP-EKE: Add server implementation This adds a new password-based EAP method defined in RFC 6124. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-07-06 17:47:25 +02:00
ifdef CONFIG_EAP_EKE
CFLAGS += -DEAP_SERVER_EKE
OBJS += ../src/eap_server/eap_server_eke.o ../src/eap_common/eap_eke_common.o
NEED_DH_GROUPS=y
NEED_DH_GROUPS_ALL=y
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifdef CONFIG_EAP_VENDOR_TEST
Rename EAP server defines from EAP_* to EAP_SERVER_* This allows separate set of EAP server and peer methods to be built into a single binary.
2009-03-25 11:06:19 +01:00
CFLAGS += -DEAP_SERVER_VENDOR_TEST
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_vendor_test.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
ifdef CONFIG_EAP_FAST
Rename EAP server defines from EAP_* to EAP_SERVER_* This allows separate set of EAP server and peer methods to be built into a single binary.
2009-03-25 11:06:19 +01:00
CFLAGS += -DEAP_SERVER_FAST
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_fast.o
EAP-FAST: Added shared helper functions for building TLVs
2008-02-28 02:56:30 +01:00
OBJS += ../src/eap_common/eap_fast_common.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
TLS_FUNCS=y
NEED_T_PRF=y
Include aes_unwrap in build when needed (FT and EAP-FAST server)
2009-10-12 08:10:24 +02:00
NEED_AES_UNWRAP=y
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
EAP-TEAP server and peer implementation (RFC 7170) This adds support for a new EAP method: EAP-TEAP (Tunnel Extensible Authentication Protocol). This should be considered experimental since RFC 7170 has number of conflicting statements and missing details to allow unambiguous interpretation. As such, there may be interoperability issues with other implementations and this version should not be deployed for production purposes until those unclear areas are resolved. This does not yet support use of NewSessionTicket message to deliver a new PAC (either in the server or peer implementation). In other words, only the in-tunnel distribution of PAC-Opaque is supported for now. Use of the NewSessionTicket mechanism would require TLS library support to allow arbitrary data to be specified as the contents of the message. Signed-off-by: Jouni Malinen <j@w1.fi>
2019-07-09 15:56:02 +02:00
ifdef CONFIG_EAP_TEAP
CFLAGS += -DEAP_SERVER_TEAP
OBJS += ../src/eap_server/eap_server_teap.o
OBJS += ../src/eap_common/eap_teap_common.o
TLS_FUNCS=y
NEED_T_PRF=y
NEED_SHA384=y
Add TLS-PRF using HMAC with P_SHA384 for TEAP This version of TLS PRF is needed when using TEAP with TLS ciphersuites that are defined to use SHA384 instead of SHA256. Signed-off-by: Jouni Malinen <j@w1.fi>
2019-08-16 20:15:32 +02:00
NEED_TLS_PRF_SHA256=y
NEED_TLS_PRF_SHA384=y
EAP-TEAP server and peer implementation (RFC 7170) This adds support for a new EAP method: EAP-TEAP (Tunnel Extensible Authentication Protocol). This should be considered experimental since RFC 7170 has number of conflicting statements and missing details to allow unambiguous interpretation. As such, there may be interoperability issues with other implementations and this version should not be deployed for production purposes until those unclear areas are resolved. This does not yet support use of NewSessionTicket message to deliver a new PAC (either in the server or peer implementation). In other words, only the in-tunnel distribution of PAC-Opaque is supported for now. Use of the NewSessionTicket mechanism would require TLS library support to allow arbitrary data to be specified as the contents of the message. Signed-off-by: Jouni Malinen <j@w1.fi>
2019-07-09 15:56:02 +02:00
NEED_AES_UNWRAP=y
endif
Added preliminary Wi-Fi Protected Setup (WPS) implementation This adds WPS support for both hostapd and wpa_supplicant. Both programs can be configured to act as WPS Enrollee and Registrar. Both PBC and PIN methods are supported. Currently, hostapd has more complete configuration option for WPS parameters and wpa_supplicant configuration style will likely change in the future. External Registrars are not yet supported in hostapd or wpa_supplicant. While wpa_supplicant has initial support for acting as an Registrar to configure an AP, this is still using number of hardcoded parameters which will need to be made configurable for proper operation.
2008-11-23 18:34:26 +01:00
ifdef CONFIG_WPS
Rename EAP server defines from EAP_* to EAP_SERVER_* This allows separate set of EAP server and peer methods to be built into a single binary.
2009-03-25 11:06:19 +01:00
CFLAGS += -DCONFIG_WPS -DEAP_SERVER_WSC
Added preliminary Wi-Fi Protected Setup (WPS) implementation This adds WPS support for both hostapd and wpa_supplicant. Both programs can be configured to act as WPS Enrollee and Registrar. Both PBC and PIN methods are supported. Currently, hostapd has more complete configuration option for WPS parameters and wpa_supplicant configuration style will likely change in the future. External Registrars are not yet supported in hostapd or wpa_supplicant. While wpa_supplicant has initial support for acting as an Registrar to configure an AP, this is still using number of hardcoded parameters which will need to be made configurable for proper operation.
2008-11-23 18:34:26 +01:00
OBJS += ../src/utils/uuid.o
Move wps_hostapd.c into src/ap
2009-12-25 00:26:37 +01:00
OBJS += ../src/ap/wps_hostapd.o
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_wsc.o ../src/eap_common/eap_wsc_common.o
Added preliminary Wi-Fi Protected Setup (WPS) implementation This adds WPS support for both hostapd and wpa_supplicant. Both programs can be configured to act as WPS Enrollee and Registrar. Both PBC and PIN methods are supported. Currently, hostapd has more complete configuration option for WPS parameters and wpa_supplicant configuration style will likely change in the future. External Registrars are not yet supported in hostapd or wpa_supplicant. While wpa_supplicant has initial support for acting as an Registrar to configure an AP, this is still using number of hardcoded parameters which will need to be made configurable for proper operation.
2008-11-23 18:34:26 +01:00
OBJS += ../src/wps/wps.o
OBJS += ../src/wps/wps_common.o
WPS: Split wps_common.c into parts To make it easier to find various functions, attribute functions were split into wps_attr_{build,parse,process}.c.
2008-11-29 12:16:26 +01:00
OBJS += ../src/wps/wps_attr_parse.o
OBJS += ../src/wps/wps_attr_build.o
OBJS += ../src/wps/wps_attr_process.o
Added preliminary Wi-Fi Protected Setup (WPS) implementation This adds WPS support for both hostapd and wpa_supplicant. Both programs can be configured to act as WPS Enrollee and Registrar. Both PBC and PIN methods are supported. Currently, hostapd has more complete configuration option for WPS parameters and wpa_supplicant configuration style will likely change in the future. External Registrars are not yet supported in hostapd or wpa_supplicant. While wpa_supplicant has initial support for acting as an Registrar to configure an AP, this is still using number of hardcoded parameters which will need to be made configurable for proper operation.
2008-11-23 18:34:26 +01:00
OBJS += ../src/wps/wps_dev_attr.o
OBJS += ../src/wps/wps_enrollee.o
OBJS += ../src/wps/wps_registrar.o
NEED_DH_GROUPS=y
NEED_BASE64 for WPS It looks like we need base64 routines when compiling WPS in hostapd (used in src/wps/wps_registrar.c:910).
2008-12-26 15:40:27 +01:00
NEED_BASE64=y
Fix crypto config for minimal builds
2009-10-11 19:19:12 +02:00
NEED_AES_CBC=y
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
NEED_MODEXP=y
WPS: Include CONFIG_EAP automatically if WPS is enabled
2010-04-17 21:05:18 +02:00
CONFIG_EAP=y
WPS: Add support for external Registrars using UPnP transport This adds mostly feature complete external Registrar support with the main missing part being proper support for multiple external Registrars working at the same time and processing of concurrent registrations when using an external Registrar. This code is based on Sony/Saice implementation (https://www.saice-wpsnfc.bz/) and the changes made by Ted Merrill (Atheros) to make it more suitable for hostapd design and embedded systems. Some of the UPnP code is based on Intel's libupnp. Copyrights and licensing are explained in src/wps/wps_upnp.c in more detail.
2009-01-29 17:47:02 +01:00
WPS: Add support for NFC out-of-band mechanism The new file wps_nfc.c and ndef.c implements NFC device independent operation, wps_nfc_pn531.c implements NFC device dependent operation. This patch is only for the following use case: - Enrollee = wpa_supplicant - Registrar = hostapd internal Registrar Following NFC methods can be used: - Enrollee PIN with NFC - Registrar PIN with NFC - unencrypted credential with NFC Encrypted credentials are not supported. Enrollee side operation: Registrar side operation: Example configuration. CONFIG_WPS=y CONFIG_WPS_NFC=y CONFIG_WPS_NFC_PN531=y I used NFC device "NXP PN531". The NFC device access method is confidential, so I used outer library. Please download below files from https://www.saice-wpsnfc.bz/index.php [WPS NFC Library] WpsNfcLibrary/WpsNfc.h WpsNfcLibrary/WpsNfcType.h WpsNfcLibrary/WpsNfcVersion.h WpsNfcLibrary/linux/libnfc_mapping_pn53x.dll WpsNfcLibrary/linux/wpsnfc.dll [NFC Reader/Writer Kernel Driver] NFCKernelDriver-1.0.3/linux/kobj/sonyrw.ko <WiFi test> The hostapd/wpa_supplicant with this patch passed below tests on "Wi-Fi WPS Test Plan Version 1.6". 4.2.5 Add device using NFC Method with password token (I used SONY STA instead of NXP STA.) 4.2.6 Add device using NFC Method with configuration token 5.1.9 Add to AP using NFC Method with password token through internal registrar (I used SONY AP instead of NXP AP.) 5.1.10 Add to AP using NFC Method with configuration token through internal registrar
2009-03-06 15:16:22 +01:00
ifdef CONFIG_WPS_NFC
CFLAGS += -DCONFIG_WPS_NFC
OBJS += ../src/wps/ndef.o
NEED_WPS_OOB=y
endif
WPS UFD: Build OOB functionality only if UFD is enabled
2009-02-26 21:10:21 +01:00
ifdef NEED_WPS_OOB
CFLAGS += -DCONFIG_WPS_OOB
WPS UFD: Make build conditional on CONFIG_WPS_UFD=y Not all embedded devices have USB interface and it is useful to be able to remove unneeded functionality from the binary. In addition, the current implementation has some UNIX specific calls in it which may make it not compile cleanly on all target systems.
2009-02-26 21:01:36 +01:00
endif
WPS: Add support for external Registrars using UPnP transport This adds mostly feature complete external Registrar support with the main missing part being proper support for multiple external Registrars working at the same time and processing of concurrent registrations when using an external Registrar. This code is based on Sony/Saice implementation (https://www.saice-wpsnfc.bz/) and the changes made by Ted Merrill (Atheros) to make it more suitable for hostapd design and embedded systems. Some of the UPnP code is based on Intel's libupnp. Copyrights and licensing are explained in src/wps/wps_upnp.c in more detail.
2009-01-29 17:47:02 +01:00
ifdef CONFIG_WPS_UPNP
CFLAGS += -DCONFIG_WPS_UPNP
OBJS += ../src/wps/wps_upnp.o
OBJS += ../src/wps/wps_upnp_ssdp.o
OBJS += ../src/wps/wps_upnp_web.o
OBJS += ../src/wps/wps_upnp_event.o
WPS: Handle Selected Registrar as a union of info from all Registrars Instead of using the latest selected registrar change, collect selected registrar information separately from all registrars and use the union of this information when building the WPS IE for Beacon and Probe Response frames. Note: SetSelectedRegistrar UPnP action does not include a unique identifier, so the ER matching routine is based only on the IP address of the ER. In theory, there could be multiple ERs using the same IP address (but different port or URL), so there may be some corner cases that would not always match the correct ER entry at the AP. Anyway, this is not really expected to occur in normal use cases and even if it did happen, the selected registrar information is not any worse than it was before when only the last change from any registrar for being advertized.
2009-12-12 15:54:59 +01:00
OBJS += ../src/wps/wps_upnp_ap.o
WPS: Move generic UPnP XML helper functionality into a separate file
2009-11-08 13:06:01 +01:00
OBJS += ../src/wps/upnp_xml.o
WPS: Add support for external Registrars using UPnP transport This adds mostly feature complete external Registrar support with the main missing part being proper support for multiple external Registrars working at the same time and processing of concurrent registrations when using an external Registrar. This code is based on Sony/Saice implementation (https://www.saice-wpsnfc.bz/) and the changes made by Ted Merrill (Atheros) to make it more suitable for hostapd design and embedded systems. Some of the UPnP code is based on Intel's libupnp. Copyrights and licensing are explained in src/wps/wps_upnp.c in more detail.
2009-01-29 17:47:02 +01:00
OBJS += ../src/wps/httpread.o
WPS: Add HTTP client module to clean up code Instead of implementing HTTP client functionality inside wps_upnp_event.c, use a generic HTTP client module to do this. The HTTP client code can now be shared more easily for other purposes, too.
2009-11-08 11:35:37 +01:00
OBJS += ../src/wps/http_client.o
WPS: Add HTTP server module Clean up code so that UPnP implementation does not need to include all the HTTP functionality. In addition, make it easier to share HTTP server functionality with other components in the future.
2009-11-08 16:26:55 +01:00
OBJS += ../src/wps/http_server.o
WPS: Add support for external Registrars using UPnP transport This adds mostly feature complete external Registrar support with the main missing part being proper support for multiple external Registrars working at the same time and processing of concurrent registrations when using an external Registrar. This code is based on Sony/Saice implementation (https://www.saice-wpsnfc.bz/) and the changes made by Ted Merrill (Atheros) to make it more suitable for hostapd design and embedded systems. Some of the UPnP code is based on Intel's libupnp. Copyrights and licensing are explained in src/wps/wps_upnp.c in more detail.
2009-01-29 17:47:02 +01:00
endif
WPS: Fix CONFIG_WPS_STRICT build option This was not supposed to be depending on CONFIG_WPS_NFC.
2010-07-21 07:15:06 +02:00
ifdef CONFIG_WPS_STRICT
CFLAGS += -DCONFIG_WPS_STRICT
OBJS += ../src/wps/wps_validate.o
endif
WPS: Make testing operations configurable at runtime Instead of build time options (CONFIG_WPS_TESTING_EXTRA_CRED and CONFIG_WPS_EXTENSIBILITY_TESTING), use a single build option (CONFIG_WPS_TESTING) and runtime configuration of which testing operations are enabled. This allows a single binary to be used for various tests. The runtime configuration can be done through control interface with wpa_cli/hostapd_cli commands: Enable extensibility tests: set wps_version_number 0x57 Disable extensibility tests (WPS2 build): set wps_version_number 0x20 Enable extra credential tests: set wps_testing_dummy_cred 1 Disable extra credential tests: set wps_testing_dummy_cred 0
2010-09-22 04:51:23 +02:00
ifdef CONFIG_WPS_TESTING
CFLAGS += -DCONFIG_WPS_TESTING
endif
Added preliminary Wi-Fi Protected Setup (WPS) implementation This adds WPS support for both hostapd and wpa_supplicant. Both programs can be configured to act as WPS Enrollee and Registrar. Both PBC and PIN methods are supported. Currently, hostapd has more complete configuration option for WPS parameters and wpa_supplicant configuration style will likely change in the future. External Registrars are not yet supported in hostapd or wpa_supplicant. While wpa_supplicant has initial support for acting as an Registrar to configure an AP, this is still using number of hardcoded parameters which will need to be made configurable for proper operation.
2008-11-23 18:34:26 +01:00
endif
DPP: Integration for hostapd This adds DPP bootstrapping, authentication, and configuration into hostapd similarly to how the design was integrated in wpa_supplicant. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 21:16:45 +02:00
ifdef CONFIG_DPP
CFLAGS += -DCONFIG_DPP
OBJS += ../src/common/dpp.o
OBJS += ../src/ap/dpp_hostapd.o
OBJS += ../src/ap/gas_query_ap.o
NEED_AES_SIV=y
NEED_HMAC_SHA256_KDF=y
NEED_HMAC_SHA384_KDF=y
NEED_HMAC_SHA512_KDF=y
NEED_SHA384=y
NEED_SHA512=y
DPP: Fix hostapd build dependencies for DPP-only build Fix CONFIG_DPP=y build for cases where the needed dependencies were not pulled in by other optional build parameters. Signed-off-by: Jouni Malinen <j@w1.fi>
2019-09-08 16:46:55 +02:00
NEED_ECC=y
DPP: Integration for hostapd This adds DPP bootstrapping, authentication, and configuration into hostapd similarly to how the design was integrated in wpa_supplicant. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 21:16:45 +02:00
NEED_JSON=y
NEED_GAS=y
DPP: Add base64 dependency in makefiles Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-09-01 20:15:34 +02:00
NEED_BASE64=y
DPP: Add ASN.1 support into build This will be needed in following patches to process DPPEnvelopedData. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-12-12 01:28:39 +01:00
NEED_ASN1=y
DPP2: Build configuration flags for DPP version 2 support The new CONFIG_DPP2=y build option for hostapd and wpa_supplicant is used to control whether new functionality defined after the DPP specification v1.0 is included. All such functionality are considered experimental and subject to change without notice and as such, not suitable for production use. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-03-13 11:00:09 +01:00
ifdef CONFIG_DPP2
CFLAGS += -DCONFIG_DPP2
endif
DPP: Integration for hostapd This adds DPP bootstrapping, authentication, and configuration into hostapd similarly to how the design was integrated in wpa_supplicant. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 21:16:45 +02:00
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifdef CONFIG_EAP_IKEV2
Rename EAP server defines from EAP_* to EAP_SERVER_* This allows separate set of EAP server and peer methods to be built into a single binary.
2009-03-25 11:06:19 +01:00
CFLAGS += -DEAP_SERVER_IKEV2
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_ikev2.o ../src/eap_server/ikev2.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
OBJS += ../src/eap_common/eap_ikev2_common.o ../src/eap_common/ikev2_common.o
NEED_DH_GROUPS=y
Include only the used DH groups in the build This reduces the binary size by 3 kB or so when WPS is included in the build, but IKEv2 is not.
2009-10-11 14:24:40 +02:00
NEED_DH_GROUPS_ALL=y
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
NEED_MODEXP=y
Split crypto_internal.c into parts to clean up build This makes it easier to make src/libcrypto.a and only link in code that is really used.
2009-12-06 13:37:46 +01:00
NEED_CIPHER=y
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
TNC: Added preliminary TNC implementation for hostapd This adds EAP-TNC method and TNCS (IF-IMV and IF-TNCCS) functionality. There is no integration with EAP-TTLS and EAP-FAST at this point, so this version is not yet suitable for real use (i.e., EAP-TNC can only be tested outside a tunnel which is not an allowed configuration for deployment). However, the basic TNCS functionality is more or less complete and this version seems to interoperate with wpa_supplicant.
2008-03-09 09:37:18 +01:00
ifdef CONFIG_EAP_TNC
Rename EAP server defines from EAP_* to EAP_SERVER_* This allows separate set of EAP server and peer methods to be built into a single binary.
2009-03-25 11:06:19 +01:00
CFLAGS += -DEAP_SERVER_TNC
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_tnc.o
TNC: Added preliminary TNC implementation for hostapd This adds EAP-TNC method and TNCS (IF-IMV and IF-TNCCS) functionality. There is no integration with EAP-TTLS and EAP-FAST at this point, so this version is not yet suitable for real use (i.e., EAP-TNC can only be tested outside a tunnel which is not an allowed configuration for deployment). However, the basic TNCS functionality is more or less complete and this version seems to interoperate with wpa_supplicant.
2008-03-09 09:37:18 +01:00
OBJS += ../src/eap_server/tncs.o
NEED_BASE64=y
Fix FreeBSD build by not adding -ldl Unlike Linux, FreeBSD does not use libdl.
2009-03-21 19:59:07 +01:00
ifndef CONFIG_DRIVER_BSD
Explicitly link against libdl when including TNC support If you don't choose OpenSSL as TLS implementation and choose to enable CONFIG_EAP_TNC you have to link against libdl. The OpenSSL libraries implicitly link against them, so this might be a reason why it wasn't noticed yet. I assume the same applies to hostapd.
2009-02-05 18:24:16 +01:00
LIBS += -ldl
TNC: Added preliminary TNC implementation for hostapd This adds EAP-TNC method and TNCS (IF-IMV and IF-TNCCS) functionality. There is no integration with EAP-TTLS and EAP-FAST at this point, so this version is not yet suitable for real use (i.e., EAP-TNC can only be tested outside a tunnel which is not an allowed configuration for deployment). However, the basic TNCS functionality is more or less complete and this version seems to interoperate with wpa_supplicant.
2008-03-09 09:37:18 +01:00
endif
Fix FreeBSD build by not adding -ldl Unlike Linux, FreeBSD does not use libdl.
2009-03-21 19:59:07 +01:00
endif
TNC: Added preliminary TNC implementation for hostapd This adds EAP-TNC method and TNCS (IF-IMV and IF-TNCCS) functionality. There is no integration with EAP-TTLS and EAP-FAST at this point, so this version is not yet suitable for real use (i.e., EAP-TNC can only be tested outside a tunnel which is not an allowed configuration for deployment). However, the basic TNCS functionality is more or less complete and this version seems to interoperate with wpa_supplicant.
2008-03-09 09:37:18 +01:00
macsec: Support IEEE 802.1X(EAP)/PSK MACsec Key Agreement in hostapd Signed-off-by: leiwei <leiwei@codeaurora.org>
2019-05-24 10:53:32 +02:00
ifdef CONFIG_MACSEC
CFLAGS += -DCONFIG_MACSEC
OBJS += ../src/ap/wpa_auth_kay.o
OBJS += ../src/pae/ieee802_1x_cp.o
OBJS += ../src/pae/ieee802_1x_kay.o
OBJS += ../src/pae/ieee802_1x_key.o
OBJS += ../src/pae/ieee802_1x_secy_ops.o
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
# Basic EAP functionality is needed for EAPOL
Move EAP method registration away from src/eap_{peer,server} This makes it easier to make a library out of EAP methods without losing possiblity of binary size optimization by linker dropping unreferenced code.
2009-12-06 10:28:41 +01:00
OBJS += eap_register.o
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
OBJS += ../src/eap_common/eap_common.o
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_methods.o
OBJS += ../src/eap_server/eap_server_identity.o
Move EAP method registration away from src/eap_{peer,server} This makes it easier to make a library out of EAP methods without losing possiblity of binary size optimization by linker dropping unreferenced code.
2009-12-06 10:28:41 +01:00
CFLAGS += -DEAP_SERVER_IDENTITY
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifdef CONFIG_EAP
CFLAGS += -DEAP_SERVER
endif
Move TLS_FUNCS and NEED_CRYPTO segment next to each other
2009-10-11 19:34:26 +02:00
ifdef CONFIG_PKCS12
CFLAGS += -DPKCS12_FUNCS
endif
Share common SAE and EAP-pwd functionality: suitable groups Start sharing common SAE and EAP-pwd functionality by adding a new source code file that can be included into both. This first step is bringing in a shared function to check whether a group is suitable. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-04-25 18:45:27 +02:00
ifdef NEED_DRAGONFLY
OBJS += ../src/common/dragonfly.o
endif
Move TLS_FUNCS and NEED_CRYPTO segment next to each other
2009-10-11 19:34:26 +02:00
ifdef MS_FUNCS
OBJS += ../src/crypto/ms_funcs.o
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
NEED_DES=y
NEED_MD4=y
Move TLS_FUNCS and NEED_CRYPTO segment next to each other
2009-10-11 19:34:26 +02:00
endif
ifdef CHAP
OBJS += ../src/eap_common/chap.o
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifdef TLS_FUNCS
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
NEED_DES=y
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
# Shared TLS functions (needed for EAP_TLS, EAP_PEAP, and EAP_TTLS)
CFLAGS += -DEAP_TLS_FUNCS
Rename EAP server source files to avoid duplicate names This makes it easier to build both EAP peer and server functionality into the same project with some toolchains.
2010-02-19 17:54:07 +01:00
OBJS += ../src/eap_server/eap_server_tls_common.o
Remove TLS-PRF from hostapd build if it is not needed
2009-01-12 14:20:12 +01:00
NEED_TLS_PRF=y
Cleaned up and unified some of the crypto Makefile code
2009-10-11 18:42:04 +02:00
endif
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
ifndef CONFIG_TLS
CONFIG_TLS=openssl
endif
TLS: Add support for TLS v1.1 (RFC 4346) with internal TLS This is disabled by defautl and can be enabled with CONFIG_TLSV11=y build configuration parameter.
2011-09-25 16:24:46 +02:00
ifdef CONFIG_TLSV11
CFLAGS += -DCONFIG_TLSV11
endif
TLS: Add build configuration for TLS v1.2 support This allows the internal TLS implementation to be built for TLS v1.2 support. In addition to the build option, this changes the TLS PRF based on the negotiated version number. Though, this commit does not yet complete support for TLS v1.2. Signed-hostap: Jouni Malinen <j@w1.fi>
2011-11-27 20:45:07 +01:00
ifdef CONFIG_TLSV12
CFLAGS += -DCONFIG_TLSV12
endif
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
ifeq ($(CONFIG_TLS), wolfssl)
CONFIG_CRYPTO=wolfssl
ifdef TLS_FUNCS
OBJS += ../src/crypto/tls_wolfssl.o
LIBS += -lwolfssl -lm
endif
OBJS += ../src/crypto/crypto_wolfssl.o
HOBJS += ../src/crypto/crypto_wolfssl.o
ifdef NEED_FIPS186_2_PRF
OBJS += ../src/crypto/fips_prf_wolfssl.o
endif
NEED_TLS_PRF_SHA256=y
LIBS += -lwolfssl -lm
LIBS_h += -lwolfssl -lm
ifdef CONFIG_TLS_ADD_DL
LIBS += -ldl
LIBS_h += -ldl
endif
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifeq ($(CONFIG_TLS), openssl)
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
CONFIG_CRYPTO=openssl
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
ifdef TLS_FUNCS
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
OBJS += ../src/crypto/tls_openssl.o
BoringSSL: Move OCSP implementation into a separate file This makes it easier to share the OCSP implementation needed for BoringSSL outside tls_openssl.c. For now, this is mainly for http_curl.c. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-12-04 13:04:31 +01:00
OBJS += ../src/crypto/tls_openssl_ocsp.o
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
LIBS += -lssl
endif
OBJS += ../src/crypto/crypto_openssl.o
HOBJS += ../src/crypto/crypto_openssl.o
ifdef NEED_FIPS186_2_PRF
OBJS += ../src/crypto/fips_prf_openssl.o
endif
OpenSSL: Add SHA256 support in openssl_tls_prf() for TLSv1.2 This is needed when enabling TLSv1.2 support for EAP-FAST since the SSL_export_keying_material() call does not support the needed parameters for TLS PRF and the external-to-OpenSSL PRF needs to be used instead. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-07-28 10:40:17 +02:00
NEED_TLS_PRF_SHA256=y
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
LIBS += -lcrypto
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
LIBS_h += -lcrypto
Fix building nt_password_hash with gnutls Even with CONFIG_TLS=gnutls CONFIG_CRYPTO=gnutls in .config, nt_password_hash was linked with libcrypto instead of libgcrypt, which caused linkage failure. Signed-off-by: Andrey Utkin <andrey_utkin@gentoo.org>
2018-04-15 01:34:35 +02:00
LIBS_n += -lcrypto
OpenSSL: Add CONFIG_TLS_ADD_DL=y build option for hostapd This behaves similarly to the same option in wpa_supplicant, i.e., adds -ldl when linking in libcrypto from OpenSSL. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-07-28 10:57:05 +02:00
ifdef CONFIG_TLS_ADD_DL
LIBS += -ldl
LIBS_h += -ldl
endif
OpenSSL: Add build option to select default ciphers Add a build option to select different default ciphers for OpenSSL instead of the hardcoded default "DEFAULT:!EXP:!LOW". This new option is useful on distributions where the security level should be consistent for all applications, as in Fedora [1]. In such cases the new configuration option would be set to "" or "PROFILE=SYSTEM" to select the global crypto policy by default. [1] https://fedoraproject.org/wiki/Changes/CryptoPolicy Signed-off-by: Beniamino Galvani <bgalvani@redhat.com>
2017-07-09 11:06:50 +02:00
ifndef CONFIG_TLS_DEFAULT_CIPHERS
CONFIG_TLS_DEFAULT_CIPHERS = "DEFAULT:!EXP:!LOW"
endif
CFLAGS += -DTLS_DEFAULT_CIPHERS=\"$(CONFIG_TLS_DEFAULT_CIPHERS)\"
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifeq ($(CONFIG_TLS), gnutls)
GnuTLS: Add option to build with libnettle instead of libgcrypt GnuTLS-based builds can now be done using either libnettle or libgcrypt for crypto functionality: CONFIG_TLS=gnutls CONFIG_CRYPTO=nettle CONFIG_TLS=gnutls CONFIG_CRYPTO=gnutls Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-29 16:11:21 +01:00
ifndef CONFIG_CRYPTO
# default to libgcrypt
CONFIG_CRYPTO=gnutls
endif
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
ifdef TLS_FUNCS
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
OBJS += ../src/crypto/tls_gnutls.o
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
LIBS += -lgnutls -lgpg-error
Cleaned up and unified some of the crypto Makefile code
2009-10-11 18:42:04 +02:00
endif
GnuTLS: Add option to build with libnettle instead of libgcrypt GnuTLS-based builds can now be done using either libnettle or libgcrypt for crypto functionality: CONFIG_TLS=gnutls CONFIG_CRYPTO=nettle CONFIG_TLS=gnutls CONFIG_CRYPTO=gnutls Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-29 16:11:21 +01:00
OBJS += ../src/crypto/crypto_$(CONFIG_CRYPTO).o
HOBJS += ../src/crypto/crypto_$(CONFIG_CRYPTO).o
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
ifdef NEED_FIPS186_2_PRF
Use internal FIPS 186-2 PRF if needed Previously, EAP-SIM/AKA/AKA' did not work with number of crypto libraries (GnuTLS, CryptoAPI, NSS) since the required FIPS 186-2 PRF function was not implemented. This resulted in somewhat confusing error messages since the placeholder functions were silently returning an error. Fix this by using the internal implementation of FIP 186-2 PRF (including internal SHA-1 implementation) with crypto libraries that do not implement this in case EAP-SIM/AKA/AKA' is included in the build. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2014-03-11 15:33:05 +01:00
OBJS += ../src/crypto/fips_prf_internal.o
SHA1OBJS += ../src/crypto/sha1-internal.o
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
endif
GnuTLS: Add option to build with libnettle instead of libgcrypt GnuTLS-based builds can now be done using either libnettle or libgcrypt for crypto functionality: CONFIG_TLS=gnutls CONFIG_CRYPTO=nettle CONFIG_TLS=gnutls CONFIG_CRYPTO=gnutls Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-29 16:11:21 +01:00
ifeq ($(CONFIG_CRYPTO), gnutls)
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
LIBS += -lgcrypt
LIBS_h += -lgcrypt
Fix building nt_password_hash with gnutls Even with CONFIG_TLS=gnutls CONFIG_CRYPTO=gnutls in .config, nt_password_hash was linked with libcrypto instead of libgcrypt, which caused linkage failure. Signed-off-by: Andrey Utkin <andrey_utkin@gentoo.org>
2018-04-15 01:34:35 +02:00
LIBS_n += -lgcrypt
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
CONFIG_INTERNAL_RC4=y
CONFIG_INTERNAL_DH_GROUP5=y
endif
GnuTLS: Add option to build with libnettle instead of libgcrypt GnuTLS-based builds can now be done using either libnettle or libgcrypt for crypto functionality: CONFIG_TLS=gnutls CONFIG_CRYPTO=nettle CONFIG_TLS=gnutls CONFIG_CRYPTO=gnutls Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-29 16:11:21 +01:00
ifeq ($(CONFIG_CRYPTO), nettle)
LIBS += -lnettle -lgmp
LIBS_p += -lnettle -lgmp
CONFIG_INTERNAL_RC4=y
CONFIG_INTERNAL_DH_GROUP5=y
endif
endif
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifeq ($(CONFIG_TLS), internal)
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
ifndef CONFIG_CRYPTO
CONFIG_CRYPTO=internal
endif
ifdef TLS_FUNCS
Split crypto_internal.c into parts to clean up build This makes it easier to make src/libcrypto.a and only link in code that is really used.
2009-12-06 13:37:46 +01:00
OBJS += ../src/crypto/crypto_internal-rsa.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
OBJS += ../src/crypto/tls_internal.o
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
OBJS += ../src/tls/tlsv1_common.o
OBJS += ../src/tls/tlsv1_record.o
OBJS += ../src/tls/tlsv1_cred.o
OBJS += ../src/tls/tlsv1_server.o
OBJS += ../src/tls/tlsv1_server_write.o
OBJS += ../src/tls/tlsv1_server_read.o
OBJS += ../src/tls/rsa.o
OBJS += ../src/tls/x509v3.o
Move PKCS# {1,5,8} functionality into separate files This functionality fits better with src/tls (i.e., internal TLS implementation), so move it there to make crypto_internal.c more of a wrapper like other crypto_*.c files.
2009-10-17 11:48:55 +02:00
OBJS += ../src/tls/pkcs1.o
OBJS += ../src/tls/pkcs5.o
OBJS += ../src/tls/pkcs8.o
DPP: Add ASN.1 support into build This will be needed in following patches to process DPPEnvelopedData. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-12-12 01:28:39 +01:00
NEED_ASN1=y
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
NEED_BASE64=y
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
NEED_TLS_PRF=y
TLS: Add build configuration for TLS v1.2 support This allows the internal TLS implementation to be built for TLS v1.2 support. In addition to the build option, this changes the TLS PRF based on the negotiated version number. Though, this commit does not yet complete support for TLS v1.2. Signed-hostap: Jouni Malinen <j@w1.fi>
2011-11-27 20:45:07 +01:00
ifdef CONFIG_TLSV12
NEED_TLS_PRF_SHA256=y
endif
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
NEED_MODEXP=y
Split crypto_internal.c into parts to clean up build This makes it easier to make src/libcrypto.a and only link in code that is really used.
2009-12-06 13:37:46 +01:00
NEED_CIPHER=y
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
CFLAGS += -DCONFIG_TLS_INTERNAL
CFLAGS += -DCONFIG_TLS_INTERNAL_SERVER
endif
Split crypto_internal.c into parts to clean up build This makes it easier to make src/libcrypto.a and only link in code that is really used.
2009-12-06 13:37:46 +01:00
ifdef NEED_CIPHER
NEED_DES=y
OBJS += ../src/crypto/crypto_internal-cipher.o
endif
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
ifdef NEED_MODEXP
Split crypto_internal.c into parts to clean up build This makes it easier to make src/libcrypto.a and only link in code that is really used.
2009-12-06 13:37:46 +01:00
OBJS += ../src/crypto/crypto_internal-modexp.o
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
OBJS += ../src/tls/bignum.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
ifeq ($(CONFIG_CRYPTO), libtomcrypt)
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
OBJS += ../src/crypto/crypto_libtomcrypt.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
LIBS += -ltomcrypt -ltfm
Cleaned up and unified some of the crypto Makefile code
2009-10-11 18:42:04 +02:00
LIBS_h += -ltomcrypt -ltfm
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
CONFIG_INTERNAL_SHA256=y
Move RC4 into crypto.h as a replaceable crypto function This allows crypto library wrappers to override the internal RC4 implementation in the same way as can already be done for other crypto algorithms.
2009-08-16 19:13:14 +02:00
CONFIG_INTERNAL_RC4=y
Allow the internal DH implementation to be overridden Crypto library wrappers can now override the internal DH (group 5) implementation. As a starting point, this is done with OpenSSL. The new mechanism is currently available only for WPS (i.e., IKEv2 still depends on the internal DH implementation).
2009-10-11 18:17:22 +02:00
CONFIG_INTERNAL_DH_GROUP5=y
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
ifeq ($(CONFIG_CRYPTO), internal)
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
OBJS += ../src/crypto/crypto_internal.o
Fix internal crypto build with some configurations crypto_internal.c requires both aes-internal-enc.o and aes-internal-dec.o, so make sure they get included in the build when using internal crypto.
2009-11-24 09:24:54 +01:00
NEED_AES_DEC=y
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
CFLAGS += -DCONFIG_CRYPTO_INTERNAL
hostapd: Fix internal crypto build without TLS
2009-05-26 16:09:04 +02:00
ifdef CONFIG_INTERNAL_LIBTOMMATH
CFLAGS += -DCONFIG_INTERNAL_LIBTOMMATH
ifdef CONFIG_INTERNAL_LIBTOMMATH_FAST
CFLAGS += -DLTM_FAST
endif
else
LIBS += -ltommath
Cleaned up and unified some of the crypto Makefile code
2009-10-11 18:42:04 +02:00
LIBS_h += -ltommath
hostapd: Fix internal crypto build without TLS
2009-05-26 16:09:04 +02:00
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
CONFIG_INTERNAL_AES=y
CONFIG_INTERNAL_DES=y
CONFIG_INTERNAL_SHA1=y
CONFIG_INTERNAL_MD4=y
CONFIG_INTERNAL_MD5=y
CONFIG_INTERNAL_SHA256=y
Add SHA384 and SHA512 implementations from LibTomCrypt library These will be used with the internal TLS implementation to extend hash algorithm support for new certificates and TLS v1.2. Signed-off-by: Pali Rohár <pali.rohar@gmail.com>
2015-11-22 02:02:57 +01:00
CONFIG_INTERNAL_SHA384=y
CONFIG_INTERNAL_SHA512=y
Move RC4 into crypto.h as a replaceable crypto function This allows crypto library wrappers to override the internal RC4 implementation in the same way as can already be done for other crypto algorithms.
2009-08-16 19:13:14 +02:00
CONFIG_INTERNAL_RC4=y
Allow the internal DH implementation to be overridden Crypto library wrappers can now override the internal DH (group 5) implementation. As a starting point, this is done with OpenSSL. The new mechanism is currently available only for WPS (i.e., IKEv2 still depends on the internal DH implementation).
2009-10-11 18:17:22 +02:00
CONFIG_INTERNAL_DH_GROUP5=y
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
ifeq ($(CONFIG_CRYPTO), cryptoapi)
OBJS += ../src/crypto/crypto_cryptoapi.o
OBJS_p += ../src/crypto/crypto_cryptoapi.o
CFLAGS += -DCONFIG_CRYPTO_CRYPTOAPI
CONFIG_INTERNAL_SHA256=y
CONFIG_INTERNAL_RC4=y
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
endif
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
ifeq ($(CONFIG_TLS), linux)
OBJS += ../src/crypto/crypto_linux.o
ifdef TLS_FUNCS
OBJS += ../src/crypto/crypto_internal-rsa.o
OBJS += ../src/crypto/tls_internal.o
OBJS += ../src/tls/tlsv1_common.o
OBJS += ../src/tls/tlsv1_record.o
OBJS += ../src/tls/tlsv1_cred.o
OBJS += ../src/tls/tlsv1_server.o
OBJS += ../src/tls/tlsv1_server_write.o
OBJS += ../src/tls/tlsv1_server_read.o
OBJS += ../src/tls/rsa.o
OBJS += ../src/tls/x509v3.o
OBJS += ../src/tls/pkcs1.o
OBJS += ../src/tls/pkcs5.o
OBJS += ../src/tls/pkcs8.o
DPP: Add ASN.1 support into build This will be needed in following patches to process DPPEnvelopedData. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-12-12 01:28:39 +01:00
NEED_ASN1=y
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
NEED_BASE64=y
NEED_TLS_PRF=y
ifdef CONFIG_TLSV12
NEED_TLS_PRF_SHA256=y
endif
NEED_MODEXP=y
NEED_CIPHER=y
CFLAGS += -DCONFIG_TLS_INTERNAL
CFLAGS += -DCONFIG_TLS_INTERNAL_SERVER
endif
ifdef NEED_MODEXP
OBJS += ../src/crypto/crypto_internal-modexp.o
OBJS += ../src/tls/bignum.o
CFLAGS += -DCONFIG_INTERNAL_LIBTOMMATH
CFLAGS += -DLTM_FAST
endif
CONFIG_INTERNAL_DH_GROUP5=y
ifdef NEED_FIPS186_2_PRF
OBJS += ../src/crypto/fips_prf_internal.o
OBJS += ../src/crypto/sha1-internal.o
endif
endif
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
ifeq ($(CONFIG_TLS), none)
ifdef TLS_FUNCS
OBJS += ../src/crypto/tls_none.o
CFLAGS += -DEAP_TLS_NONE
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
CONFIG_INTERNAL_AES=y
CONFIG_INTERNAL_SHA1=y
CONFIG_INTERNAL_MD5=y
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
endif
OBJS += ../src/crypto/crypto_none.o
OBJS_p += ../src/crypto/crypto_none.o
CONFIG_INTERNAL_SHA256=y
Move RC4 into crypto.h as a replaceable crypto function This allows crypto library wrappers to override the internal RC4 implementation in the same way as can already be done for other crypto algorithms.
2009-08-16 19:13:14 +02:00
CONFIG_INTERNAL_RC4=y
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
ifndef TLS_FUNCS
OBJS += ../src/crypto/tls_none.o
ifeq ($(CONFIG_TLS), internal)
CONFIG_INTERNAL_AES=y
CONFIG_INTERNAL_SHA1=y
CONFIG_INTERNAL_MD5=y
CONFIG_INTERNAL_RC4=y
endif
endif
AESOBJS = # none so far
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifdef CONFIG_INTERNAL_AES
Crypto build cleanup: remove CONFIG_NO_AES_ENCRYPT Instead of using a define and conditional building of AES parts, move the AES encryption routines into a separate file.
2009-08-13 10:21:32 +02:00
AESOBJS += ../src/crypto/aes-internal.o ../src/crypto/aes-internal-enc.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
OpenSSL: Implement aes_wrap() and aes_unwrap() This replaces the implementation in aes-wrap.c and aes-unwrap.c with OpenSSL AES_wrap_key() and AES_unwrap_key() functions when building hostapd or wpa_supplicant with OpenSSL. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-01-27 12:57:59 +01:00
ifneq ($(CONFIG_TLS), openssl)
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
ifneq ($(CONFIG_TLS), wolfssl)
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
AESOBJS += ../src/crypto/aes-wrap.o
OpenSSL: Implement aes_wrap() and aes_unwrap() This replaces the implementation in aes-wrap.c and aes-unwrap.c with OpenSSL AES_wrap_key() and AES_unwrap_key() functions when building hostapd or wpa_supplicant with OpenSSL. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-01-27 12:57:59 +01:00
endif
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
endif
Replace CONFIG_NO_AES_EXTRAS with auto-detection during build There is no need to do this manually since it is possible to figure out automatically which AES extra files need to be included in the build.
2009-10-11 21:23:50 +02:00
ifdef NEED_AES_EAX
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
AESOBJS += ../src/crypto/aes-eax.o
Replace CONFIG_NO_AES_EXTRAS with auto-detection during build There is no need to do this manually since it is possible to figure out automatically which AES extra files need to be included in the build.
2009-10-11 21:23:50 +02:00
NEED_AES_CTR=y
Fix AES-SIV build dependencies aes-siv.c needs functions from aes-ctr.c and aes-omac1.c, so set NEED_AES_CTR=y and NEED_AES_OMAC1=y if NEED_AES_SIV is defined. This fixes some build configuration combinations where either of those dependencies were not pulled in through other parameters. For example, some CONFIG_FILS=y cases were impacted. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-26 11:02:21 +01:00
endif
ifdef NEED_AES_SIV
AESOBJS += ../src/crypto/aes-siv.o
NEED_AES_CTR=y
Replace CONFIG_NO_AES_EXTRAS with auto-detection during build There is no need to do this manually since it is possible to figure out automatically which AES extra files need to be included in the build.
2009-10-11 21:23:50 +02:00
endif
ifdef NEED_AES_CTR
AESOBJS += ../src/crypto/aes-ctr.o
endif
ifdef NEED_AES_ENCBLOCK
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
AESOBJS += ../src/crypto/aes-encblock.o
Replace CONFIG_NO_AES_EXTRAS with auto-detection during build There is no need to do this manually since it is possible to figure out automatically which AES extra files need to be included in the build.
2009-10-11 21:23:50 +02:00
endif
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
ifneq ($(CONFIG_TLS), linux)
wolfSSL: Remove aes-omac1.o from hostapd build Avoid duplicated omac1_*() functions when building hostapd with wolfSSL. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-03-29 06:55:55 +02:00
ifneq ($(CONFIG_TLS), wolfssl)
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
AESOBJS += ../src/crypto/aes-omac1.o
Replace CONFIG_NO_AES_EXTRAS with auto-detection during build There is no need to do this manually since it is possible to figure out automatically which AES extra files need to be included in the build.
2009-10-11 21:23:50 +02:00
endif
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
endif
Replace CONFIG_NO_AES_EXTRAS with auto-detection during build There is no need to do this manually since it is possible to figure out automatically which AES extra files need to be included in the build.
2009-10-11 21:23:50 +02:00
ifdef NEED_AES_UNWRAP
OpenSSL: Implement aes_wrap() and aes_unwrap() This replaces the implementation in aes-wrap.c and aes-unwrap.c with OpenSSL AES_wrap_key() and AES_unwrap_key() functions when building hostapd or wpa_supplicant with OpenSSL. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-01-27 12:57:59 +01:00
ifneq ($(CONFIG_TLS), openssl)
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
ifneq ($(CONFIG_TLS), linux)
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
ifneq ($(CONFIG_TLS), wolfssl)
Fix IEEE 802.11r/w compilation error The hostapd/wpa_supplicant compilation failed with CONFIG_IEEE80211R=y or CONFIG_IEEE80211W=y option if CONFIG_EAP_PSK and CONFIG_EAP_GPSK are not used.
2009-10-13 09:04:46 +02:00
NEED_AES_DEC=y
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
AESOBJS += ../src/crypto/aes-unwrap.o
endif
OpenSSL: Implement aes_wrap() and aes_unwrap() This replaces the implementation in aes-wrap.c and aes-unwrap.c with OpenSSL AES_wrap_key() and AES_unwrap_key() functions when building hostapd or wpa_supplicant with OpenSSL. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-01-27 12:57:59 +01:00
endif
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
endif
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
endif
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
ifdef NEED_AES_CBC
Fix IEEE 802.11r/w compilation error The hostapd/wpa_supplicant compilation failed with CONFIG_IEEE80211R=y or CONFIG_IEEE80211W=y option if CONFIG_EAP_PSK and CONFIG_EAP_GPSK are not used.
2009-10-13 09:04:46 +02:00
NEED_AES_DEC=y
OpenSSL: Implement AES-128 CBC using EVP API This replaces the internal CBC mode implementation in aes_128_cbc_encrypt() and aes_128_cbc_decrypt() with the OpenSSL implementation for CONFIG_TLS=openssl builds. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-03-29 19:30:58 +02:00
ifneq ($(CONFIG_TLS), openssl)
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
ifneq ($(CONFIG_TLS), linux)
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
ifneq ($(CONFIG_TLS), wolfssl)
Fix IEEE 802.11r/w compilation error The hostapd/wpa_supplicant compilation failed with CONFIG_IEEE80211R=y or CONFIG_IEEE80211W=y option if CONFIG_EAP_PSK and CONFIG_EAP_GPSK are not used.
2009-10-13 09:04:46 +02:00
AESOBJS += ../src/crypto/aes-cbc.o
endif
OpenSSL: Implement AES-128 CBC using EVP API This replaces the internal CBC mode implementation in aes_128_cbc_encrypt() and aes_128_cbc_decrypt() with the OpenSSL implementation for CONFIG_TLS=openssl builds. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-03-29 19:30:58 +02:00
endif
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
endif
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
endif
Fix IEEE 802.11r/w compilation error The hostapd/wpa_supplicant compilation failed with CONFIG_IEEE80211R=y or CONFIG_IEEE80211W=y option if CONFIG_EAP_PSK and CONFIG_EAP_GPSK are not used.
2009-10-13 09:04:46 +02:00
ifdef NEED_AES_DEC
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
ifdef CONFIG_INTERNAL_AES
AESOBJS += ../src/crypto/aes-internal-dec.o
endif
endif
ifdef NEED_AES
OBJS += $(AESOBJS)
endif
ifdef NEED_SHA1
OpenSSL: Implement SHA1 HMAC functions using HMAC API Use the OpenSSL HMAC implementation instead of the internal sha1.c implementation of HMAC with SHA1. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 19:38:25 +02:00
ifneq ($(CONFIG_TLS), openssl)
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
ifneq ($(CONFIG_TLS), linux)
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
ifneq ($(CONFIG_TLS), gnutls)
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
ifneq ($(CONFIG_TLS), wolfssl)
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
SHA1OBJS += ../src/crypto/sha1.o
OpenSSL: Implement SHA1 HMAC functions using HMAC API Use the OpenSSL HMAC implementation instead of the internal sha1.c implementation of HMAC with SHA1. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 19:38:25 +02:00
endif
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
endif
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
endif
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
endif
Move SHA1-based PRF function into a separate C file This makes it easier to conditionally build in SHA1 functions based on which TLS/crypto library is used. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 19:23:12 +02:00
SHA1OBJS += ../src/crypto/sha1-prf.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifdef CONFIG_INTERNAL_SHA1
Crypto build cleanup: remove CONFIG_NO_T_PRF Instead of using a define and conditional building of sha1.c parts, move the T-PRF implementation into a separate file.
2009-08-11 19:19:37 +02:00
SHA1OBJS += ../src/crypto/sha1-internal.o
Crypto build cleanup: remove NEED_FIPS186_2_PRF Instead of using a define and conditional building of crypto wrapper parts, move the FIPS 186-2 PRF implementation into separate files.
2009-08-11 19:06:23 +02:00
ifdef NEED_FIPS186_2_PRF
Crypto build cleanup: remove CONFIG_NO_T_PRF Instead of using a define and conditional building of sha1.c parts, move the T-PRF implementation into a separate file.
2009-08-11 19:19:37 +02:00
SHA1OBJS += ../src/crypto/fips_prf_internal.o
Crypto build cleanup: remove NEED_FIPS186_2_PRF Instead of using a define and conditional building of crypto wrapper parts, move the FIPS 186-2 PRF implementation into separate files.
2009-08-11 19:06:23 +02:00
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
OpenSSL: Use library function for PBKDF2 passphrase-to-PSK Use the OpenSSL PKCS5_PBKDF2_HMAC_SHA1() function instead of the internal implementation in sha1-pbkdf2.c. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 19:13:02 +02:00
ifneq ($(CONFIG_TLS), openssl)
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
ifneq ($(CONFIG_TLS), wolfssl)
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
SHA1OBJS += ../src/crypto/sha1-pbkdf2.o
OpenSSL: Use library function for PBKDF2 passphrase-to-PSK Use the OpenSSL PKCS5_PBKDF2_HMAC_SHA1() function instead of the internal implementation in sha1-pbkdf2.c. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 19:13:02 +02:00
endif
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
endif
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
ifdef NEED_T_PRF
SHA1OBJS += ../src/crypto/sha1-tprf.o
endif
ifdef NEED_TLS_PRF
SHA1OBJS += ../src/crypto/sha1-tlsprf.o
endif
endif
ifdef NEED_SHA1
OBJS += $(SHA1OBJS)
endif
OpenSSL: Replace internal HMAC-MD5 implementation Use OpenSSL HMAC_* functions to implement HMAC-MD5 instead of depending on the src/crypto/md5.c implementation. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-01-27 12:26:01 +01:00
ifneq ($(CONFIG_TLS), openssl)
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
ifneq ($(CONFIG_TLS), linux)
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
ifneq ($(CONFIG_TLS), gnutls)
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
ifneq ($(CONFIG_TLS), wolfssl)
OpenSSL: Replace internal HMAC-MD5 implementation Use OpenSSL HMAC_* functions to implement HMAC-MD5 instead of depending on the src/crypto/md5.c implementation. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-01-27 12:26:01 +01:00
OBJS += ../src/crypto/md5.o
endif
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
endif
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
endif
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
endif
OpenSSL: Replace internal HMAC-MD5 implementation Use OpenSSL HMAC_* functions to implement HMAC-MD5 instead of depending on the src/crypto/md5.c implementation. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-01-27 12:26:01 +01:00
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
ifdef NEED_MD5
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifdef CONFIG_INTERNAL_MD5
Crypto build cleanup: remove INTERNAL_MD5 Instead of using a define and conditional building of md5.c parts, move the internal-MD5 into a separate file.
2009-07-28 20:36:13 +02:00
OBJS += ../src/crypto/md5-internal.o
Maintain internal entropy pool for augmenting random number generation By default, make hostapd and wpa_supplicant maintain an internal entropy pool that is fed with following information: hostapd: - Probe Request frames (timing, RSSI) - Association events (timing) - SNonce from Supplicants wpa_supplicant: - Scan results (timing, signal/noise) - Association events (timing) The internal pool is used to augment the random numbers generated with the OS mechanism (os_get_random()). While the internal implementation is not expected to be very strong due to limited amount of generic (non-platform specific) information to feed the pool, this may strengthen key derivation on some devices that are not configured to provide strong random numbers through os_get_random() (e.g., /dev/urandom on Linux/BSD). This new mechanism is not supposed to replace proper OS provided random number generation mechanism. The OS mechanism needs to be initialized properly (e.g., hw random number generator, maintaining entropy pool over reboots, etc.) for any of the security assumptions to hold. If the os_get_random() is known to provide strong ramdom data (e.g., on Linux/BSD, the board in question is known to have reliable source of random data from /dev/urandom), the internal hostapd random pool can be disabled. This will save some in binary size and CPU use. However, this should only be considered for builds that are known to be used on devices that meet the requirements described above. The internal pool is disabled by adding CONFIG_NO_RANDOM_POOL=y to the .config file.
2010-11-24 00:29:40 +01:00
HOBJS += ../src/crypto/md5-internal.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
endif
ifdef NEED_MD4
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifdef CONFIG_INTERNAL_MD4
Crypto build cleanup: remove INTERNAL_MD4 In addition, rename md4.c to md4-internal.c to match in style with SHA-1 conditionally built internal implementation.
2009-07-28 20:27:02 +02:00
OBJS += ../src/crypto/md4-internal.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
endif
ifdef NEED_DES
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
CFLAGS += -DCONFIG_DES
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifdef CONFIG_INTERNAL_DES
Crypto build cleanup: remove INTERNAL_DES In addition, rename des.c to des-internal.c to match in style with SHA-1 conditionally built internal implementation.
2009-07-28 20:00:44 +02:00
OBJS += ../src/crypto/des-internal.o
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
endif
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
endif
Add build option to remove all internal RC4 uses The new CONFIG_NO_RC4=y build option can be used to remove all internal hostapd and wpa_supplicant uses of RC4. It should be noted that external uses (e.g., within a TLS library) do not get disabled when doing this. This removes capability of supporting WPA/TKIP, dynamic WEP keys with IEEE 802.1X, WEP shared key authentication, and MSCHAPv2 password changes. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-08-01 22:37:07 +02:00
ifdef CONFIG_NO_RC4
CFLAGS += -DCONFIG_NO_RC4
endif
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
ifdef NEED_RC4
Move RC4 into crypto.h as a replaceable crypto function This allows crypto library wrappers to override the internal RC4 implementation in the same way as can already be done for other crypto algorithms.
2009-08-16 19:13:14 +02:00
ifdef CONFIG_INTERNAL_RC4
Add build option to remove all internal RC4 uses The new CONFIG_NO_RC4=y build option can be used to remove all internal hostapd and wpa_supplicant uses of RC4. It should be noted that external uses (e.g., within a TLS library) do not get disabled when doing this. This removes capability of supporting WPA/TKIP, dynamic WEP keys with IEEE 802.1X, WEP shared key authentication, and MSCHAPv2 password changes. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-08-01 22:37:07 +02:00
ifndef CONFIG_NO_RC4
Move RC4 into crypto.h as a replaceable crypto function This allows crypto library wrappers to override the internal RC4 implementation in the same way as can already be done for other crypto algorithms.
2009-08-16 19:13:14 +02:00
OBJS += ../src/crypto/rc4.o
endif
Clean up crypto makefile segments Reorganize the TLS/crypto library segments into a single set of blocks for each library instead of multiple locations handling library-specific operations. Group crypto functionality together and get wpa_supplicant and hostapd Makefile closer to eachother in order to make it easier to eventually move this into a shared makefile.
2009-10-11 21:04:29 +02:00
endif
Add build option to remove all internal RC4 uses The new CONFIG_NO_RC4=y build option can be used to remove all internal hostapd and wpa_supplicant uses of RC4. It should be noted that external uses (e.g., within a TLS library) do not get disabled when doing this. This removes capability of supporting WPA/TKIP, dynamic WEP keys with IEEE 802.1X, WEP shared key authentication, and MSCHAPv2 password changes. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-08-01 22:37:07 +02:00
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
hostapd: Define CONFIG_SHA256 for SHA256 builds wpa_supplicant was already doing this and hostapd will need to define this for future additions. Signed-hostap: Jouni Malinen <j@w1.fi>
2011-11-27 20:05:10 +01:00
CFLAGS += -DCONFIG_SHA256
OpenSSL: Implement SHA256 HMAC functions using HMAC API Use the OpenSSL HMAC implementation instead of the internal sha256.c implementation of HMAC with SHA256. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 21:34:35 +02:00
ifneq ($(CONFIG_TLS), openssl)
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
ifneq ($(CONFIG_TLS), linux)
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
ifneq ($(CONFIG_TLS), gnutls)
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
ifneq ($(CONFIG_TLS), wolfssl)
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
OBJS += ../src/crypto/sha256.o
OpenSSL: Implement SHA256 HMAC functions using HMAC API Use the OpenSSL HMAC implementation instead of the internal sha256.c implementation of HMAC with SHA256. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 21:34:35 +02:00
endif
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
endif
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
endif
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
endif
Move SHA256-based PRF function into a separate C file This makes it easier to conditionally build in SHA256 functions based on which TLS/crypto library is used. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-08-16 21:24:11 +02:00
OBJS += ../src/crypto/sha256-prf.o
Crypto build cleanup: remove INTERNAL_SHA256 Instead of using a define and conditional building of sha256.c parts, move the internal-SHA256 into a separate file.
2009-07-28 20:20:04 +02:00
ifdef CONFIG_INTERNAL_SHA256
OBJS += ../src/crypto/sha256-internal.o
endif
Add implementation of TLS v1.2 PRF (P_SHA256) Signed-hostap: Jouni Malinen <j@w1.fi>
2011-11-27 20:07:44 +01:00
ifdef NEED_TLS_PRF_SHA256
OBJS += ../src/crypto/sha256-tlsprf.o
endif
Add TLS-PRF using HMAC with P_SHA384 for TEAP This version of TLS PRF is needed when using TEAP with TLS ciphersuites that are defined to use SHA384 instead of SHA256. Signed-off-by: Jouni Malinen <j@w1.fi>
2019-08-16 20:15:32 +02:00
ifdef NEED_TLS_PRF_SHA384
OBJS += ../src/crypto/sha384-tlsprf.o
endif
ERP: Add support for ERP on EAP server and authenticator Derive rRK and rIK on EAP server if ERP is enabled and use these keys to allow EAP re-authentication to be used and to derive rMSK. The new hostapd configuration parameter eap_server_erp=1 can now be used to configure the integrated EAP server to derive EMSK, rRK, and rIK at the successful completion of an EAP authentication method. This functionality is not included in the default build and can be enabled with CONFIG_ERP=y. Signed-off-by: Jouni Malinen <j@w1.fi>
2014-11-29 20:28:24 +01:00
ifdef NEED_HMAC_SHA256_KDF
OBJS += ../src/crypto/sha256-kdf.o
endif
Extend SHA-384 and SHA-512 support to match SHA-256 The additional SHA-384 and SHA-512 functionality is needed to support DPP with various ECC curves. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 20:17:50 +02:00
ifdef NEED_HMAC_SHA384_KDF
OBJS += ../src/crypto/sha384-kdf.o
endif
ifdef NEED_HMAC_SHA512_KDF
OBJS += ../src/crypto/sha512-kdf.o
endif
Add HMAC-SHA384 For now, this is only implemented with OpenSSL. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-25 23:37:18 +01:00
ifdef NEED_SHA384
CFLAGS += -DCONFIG_SHA384
Add HMAC-SHA384 with internal crypto This is a copy of the internal HMAC-SHA256 implementation with the hash block size and output length updated to match SHA384 parameters. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-16 19:37:19 +01:00
ifneq ($(CONFIG_TLS), openssl)
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
ifneq ($(CONFIG_TLS), linux)
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
ifneq ($(CONFIG_TLS), gnutls)
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
ifneq ($(CONFIG_TLS), wolfssl)
Add HMAC-SHA384 with internal crypto This is a copy of the internal HMAC-SHA256 implementation with the hash block size and output length updated to match SHA384 parameters. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-16 19:37:19 +01:00
OBJS += ../src/crypto/sha384.o
endif
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
endif
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
endif
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
endif
Fix key derivation for Suite B 192-bit AKM to use SHA384 While the EAPOL-Key MIC derivation was already changed from SHA256 to SHA384 for the Suite B 192-bit AKM, KDF had not been updated similarly. Fix this by using HMAC-SHA384 instead of HMAC-SHA256 when deriving PTK from PMK when using the Suite B 192-bit AKM. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-08-27 19:42:14 +02:00
OBJS += ../src/crypto/sha384-prf.o
Add HMAC-SHA384 For now, this is only implemented with OpenSSL. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-25 23:37:18 +01:00
endif
Extend SHA-384 and SHA-512 support to match SHA-256 The additional SHA-384 and SHA-512 functionality is needed to support DPP with various ECC curves. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 20:17:50 +02:00
ifdef NEED_SHA512
CFLAGS += -DCONFIG_SHA512
ifneq ($(CONFIG_TLS), openssl)
ifneq ($(CONFIG_TLS), linux)
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
ifneq ($(CONFIG_TLS), gnutls)
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
ifneq ($(CONFIG_TLS), wolfssl)
Extend SHA-384 and SHA-512 support to match SHA-256 The additional SHA-384 and SHA-512 functionality is needed to support DPP with various ECC curves. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 20:17:50 +02:00
OBJS += ../src/crypto/sha512.o
endif
endif
GnuTLS: Implement HMAC functions using libgcrypt Replace the internal HMAC MD5, SHA-1, and SHA256 implementations with the ones from libgcrypt and also add the SHA384 and SHA512 versions. Signed-off-by: Jouni Malinen <j@w1.fi>
2017-12-27 22:35:26 +01:00
endif
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
endif
Extend SHA-384 and SHA-512 support to match SHA-256 The additional SHA-384 and SHA-512 functionality is needed to support DPP with various ECC curves. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 20:17:50 +02:00
OBJS += ../src/crypto/sha512-prf.o
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
Add SHA384 and SHA512 implementations from LibTomCrypt library These will be used with the internal TLS implementation to extend hash algorithm support for new certificates and TLS v1.2. Signed-off-by: Pali Rohár <pali.rohar@gmail.com>
2015-11-22 02:02:57 +01:00
ifdef CONFIG_INTERNAL_SHA384
CFLAGS += -DCONFIG_INTERNAL_SHA384
OBJS += ../src/crypto/sha384-internal.o
endif
ifdef CONFIG_INTERNAL_SHA512
CFLAGS += -DCONFIG_INTERNAL_SHA512
OBJS += ../src/crypto/sha512-internal.o
endif
DPP: Add ASN.1 support into build This will be needed in following patches to process DPPEnvelopedData. Signed-off-by: Jouni Malinen <jouni@codeaurora.org>
2019-12-12 01:28:39 +01:00
ifdef NEED_ASN1
OBJS += ../src/tls/asn1.o
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifdef NEED_DH_GROUPS
OBJS += ../src/crypto/dh_groups.o
endif
Allow the internal DH implementation to be overridden Crypto library wrappers can now override the internal DH (group 5) implementation. As a starting point, this is done with OpenSSL. The new mechanism is currently available only for WPS (i.e., IKEv2 still depends on the internal DH implementation).
2009-10-11 18:17:22 +02:00
ifdef NEED_DH_GROUPS_ALL
CFLAGS += -DALL_DH_GROUPS
endif
Fix dh_groups.o build for some configurations Need to include dh_groups.o in the build even if not all DH groups are included. Only internal crypto build case was doing this properly.
2009-12-11 16:24:42 +01:00
ifdef CONFIG_INTERNAL_DH_GROUP5
ifdef NEED_DH_GROUPS
OBJS += ../src/crypto/dh_group5.o
endif
Allow the internal DH implementation to be overridden Crypto library wrappers can now override the internal DH (group 5) implementation. As a starting point, this is done with OpenSSL. The new mechanism is currently available only for WPS (i.e., IKEv2 still depends on the internal DH implementation).
2009-10-11 18:17:22 +02:00
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
SAE: Use crypto wrappers instead of direct OpenSSL calls This makes the SAE implementation independent of the crypto/bignum library. Signed-hostap: Jouni Malinen <j@w1.fi>
2012-12-31 18:41:21 +01:00
ifdef NEED_ECC
CFLAGS += -DCONFIG_ECC
endif
Maintain internal entropy pool for augmenting random number generation By default, make hostapd and wpa_supplicant maintain an internal entropy pool that is fed with following information: hostapd: - Probe Request frames (timing, RSSI) - Association events (timing) - SNonce from Supplicants wpa_supplicant: - Scan results (timing, signal/noise) - Association events (timing) The internal pool is used to augment the random numbers generated with the OS mechanism (os_get_random()). While the internal implementation is not expected to be very strong due to limited amount of generic (non-platform specific) information to feed the pool, this may strengthen key derivation on some devices that are not configured to provide strong random numbers through os_get_random() (e.g., /dev/urandom on Linux/BSD). This new mechanism is not supposed to replace proper OS provided random number generation mechanism. The OS mechanism needs to be initialized properly (e.g., hw random number generator, maintaining entropy pool over reboots, etc.) for any of the security assumptions to hold. If the os_get_random() is known to provide strong ramdom data (e.g., on Linux/BSD, the board in question is known to have reliable source of random data from /dev/urandom), the internal hostapd random pool can be disabled. This will save some in binary size and CPU use. However, this should only be considered for builds that are known to be used on devices that meet the requirements described above. The internal pool is disabled by adding CONFIG_NO_RANDOM_POOL=y to the .config file.
2010-11-24 00:29:40 +01:00
ifdef CONFIG_NO_RANDOM_POOL
CFLAGS += -DCONFIG_NO_RANDOM_POOL
else
crypto: Add option to use getrandom() According to random(4) manual, /dev/random is essentially deprecated on Linux for quite some time: "The /dev/random interface is considered a legacy interface, and /dev/urandom is preferred and sufficient in all use cases, with the exception of applications which require randomness during early boot time; for these applications, getrandom(2) must be used instead, because it will block until the entropy pool is initialized." An attempt to use it would cause unnecessary blocking on machines without a good hwrng even when it shouldn't be needed. Since Linux 3.17, a getrandom(2) call is available that will block only until the randomness pool has been seeded. It is probably not a good default yet as it requires a fairly recent kernel and glibc (3.17 and 2.25 respectively). Signed-off-by: Lubomir Rintel <lkundrak@v3.sk>
2017-09-18 14:58:07 +02:00
ifdef CONFIG_GETRANDOM
CFLAGS += -DCONFIG_GETRANDOM
endif
Maintain internal entropy pool for augmenting random number generation By default, make hostapd and wpa_supplicant maintain an internal entropy pool that is fed with following information: hostapd: - Probe Request frames (timing, RSSI) - Association events (timing) - SNonce from Supplicants wpa_supplicant: - Scan results (timing, signal/noise) - Association events (timing) The internal pool is used to augment the random numbers generated with the OS mechanism (os_get_random()). While the internal implementation is not expected to be very strong due to limited amount of generic (non-platform specific) information to feed the pool, this may strengthen key derivation on some devices that are not configured to provide strong random numbers through os_get_random() (e.g., /dev/urandom on Linux/BSD). This new mechanism is not supposed to replace proper OS provided random number generation mechanism. The OS mechanism needs to be initialized properly (e.g., hw random number generator, maintaining entropy pool over reboots, etc.) for any of the security assumptions to hold. If the os_get_random() is known to provide strong ramdom data (e.g., on Linux/BSD, the board in question is known to have reliable source of random data from /dev/urandom), the internal hostapd random pool can be disabled. This will save some in binary size and CPU use. However, this should only be considered for builds that are known to be used on devices that meet the requirements described above. The internal pool is disabled by adding CONFIG_NO_RANDOM_POOL=y to the .config file.
2010-11-24 00:29:40 +01:00
OBJS += ../src/crypto/random.o
HOBJS += ../src/crypto/random.o
Fix object file list for hlr_auc_gw If CONFIG_NO_RANDOM_POOL is unset, src/crypto/random.o is linked into hlr_auc_gw. However, in this configuration, random.o requires symbols defined in src/utils/eloop.o. So add eloop.o to the object file list for hlr_auc_gw.
2011-10-15 15:52:51 +02:00
HOBJS += ../src/utils/eloop.o
Maintain internal entropy pool for augmenting random number generation By default, make hostapd and wpa_supplicant maintain an internal entropy pool that is fed with following information: hostapd: - Probe Request frames (timing, RSSI) - Association events (timing) - SNonce from Supplicants wpa_supplicant: - Scan results (timing, signal/noise) - Association events (timing) The internal pool is used to augment the random numbers generated with the OS mechanism (os_get_random()). While the internal implementation is not expected to be very strong due to limited amount of generic (non-platform specific) information to feed the pool, this may strengthen key derivation on some devices that are not configured to provide strong random numbers through os_get_random() (e.g., /dev/urandom on Linux/BSD). This new mechanism is not supposed to replace proper OS provided random number generation mechanism. The OS mechanism needs to be initialized properly (e.g., hw random number generator, maintaining entropy pool over reboots, etc.) for any of the security assumptions to hold. If the os_get_random() is known to provide strong ramdom data (e.g., on Linux/BSD, the board in question is known to have reliable source of random data from /dev/urandom), the internal hostapd random pool can be disabled. This will save some in binary size and CPU use. However, this should only be considered for builds that are known to be used on devices that meet the requirements described above. The internal pool is disabled by adding CONFIG_NO_RANDOM_POOL=y to the .config file.
2010-11-24 00:29:40 +01:00
HOBJS += $(SHA1OBJS)
Fix hlr_auc_gw build with OpenSSL Commit 983c6a606bc839248ea0c69090e60c095a655bc6 ('OpenSSL: Replace internal HMAC-MD5 implementation') forgot to make inclusion of md5.o conditional for hlr_auc_gw build. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-03-20 13:56:31 +01:00
ifneq ($(CONFIG_TLS), openssl)
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
ifneq ($(CONFIG_TLS), linux)
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
ifneq ($(CONFIG_TLS), wolfssl)
Maintain internal entropy pool for augmenting random number generation By default, make hostapd and wpa_supplicant maintain an internal entropy pool that is fed with following information: hostapd: - Probe Request frames (timing, RSSI) - Association events (timing) - SNonce from Supplicants wpa_supplicant: - Scan results (timing, signal/noise) - Association events (timing) The internal pool is used to augment the random numbers generated with the OS mechanism (os_get_random()). While the internal implementation is not expected to be very strong due to limited amount of generic (non-platform specific) information to feed the pool, this may strengthen key derivation on some devices that are not configured to provide strong random numbers through os_get_random() (e.g., /dev/urandom on Linux/BSD). This new mechanism is not supposed to replace proper OS provided random number generation mechanism. The OS mechanism needs to be initialized properly (e.g., hw random number generator, maintaining entropy pool over reboots, etc.) for any of the security assumptions to hold. If the os_get_random() is known to provide strong ramdom data (e.g., on Linux/BSD, the board in question is known to have reliable source of random data from /dev/urandom), the internal hostapd random pool can be disabled. This will save some in binary size and CPU use. However, this should only be considered for builds that are known to be used on devices that meet the requirements described above. The internal pool is disabled by adding CONFIG_NO_RANDOM_POOL=y to the .config file.
2010-11-24 00:29:40 +01:00
HOBJS += ../src/crypto/md5.o
endif
Fix hlr_auc_gw build with OpenSSL Commit 983c6a606bc839248ea0c69090e60c095a655bc6 ('OpenSSL: Replace internal HMAC-MD5 implementation') forgot to make inclusion of md5.o conditional for hlr_auc_gw build. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-03-20 13:56:31 +01:00
endif
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
endif
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
endif
Maintain internal entropy pool for augmenting random number generation By default, make hostapd and wpa_supplicant maintain an internal entropy pool that is fed with following information: hostapd: - Probe Request frames (timing, RSSI) - Association events (timing) - SNonce from Supplicants wpa_supplicant: - Scan results (timing, signal/noise) - Association events (timing) The internal pool is used to augment the random numbers generated with the OS mechanism (os_get_random()). While the internal implementation is not expected to be very strong due to limited amount of generic (non-platform specific) information to feed the pool, this may strengthen key derivation on some devices that are not configured to provide strong random numbers through os_get_random() (e.g., /dev/urandom on Linux/BSD). This new mechanism is not supposed to replace proper OS provided random number generation mechanism. The OS mechanism needs to be initialized properly (e.g., hw random number generator, maintaining entropy pool over reboots, etc.) for any of the security assumptions to hold. If the os_get_random() is known to provide strong ramdom data (e.g., on Linux/BSD, the board in question is known to have reliable source of random data from /dev/urandom), the internal hostapd random pool can be disabled. This will save some in binary size and CPU use. However, this should only be considered for builds that are known to be used on devices that meet the requirements described above. The internal pool is disabled by adding CONFIG_NO_RANDOM_POOL=y to the .config file.
2010-11-24 00:29:40 +01:00
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifdef CONFIG_RADIUS_SERVER
CFLAGS += -DRADIUS_SERVER
OBJS += ../src/radius/radius_server.o
endif
ifdef CONFIG_IPV6
CFLAGS += -DCONFIG_IPV6
endif
Support for RADIUS ACLs with drivers that do not use hostapd MLME Sam Leffler <sam@errno.com>: Attached are changes from Chris Zimmerman (cc'd) to allow drivers to handle radius ACL's. The patch is against 0.5.10 but I suspect will also apply to your latest code. These mods enable radius acl support in freebsd w/ my vap code. You may want to do the changes to ieee802_11_auth.c differently as they currently require all participating drivers to work the same. You might be able to check the return value from hostapd_set_radius_acl_auth and use that to decide whether the alternate code should be run so you can have 1 driver using this stuff while the other does not. (jm: Added without more dynamic check for now; in addition, none of the current in-tree driver wrappers actually implement these handlers, so this is in preparation for future changes)
2008-03-12 10:43:55 +01:00
ifdef CONFIG_DRIVER_RADIUS_ACL
CFLAGS += -DCONFIG_DRIVER_RADIUS_ACL
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ifdef NEED_BASE64
OBJS += ../src/utils/base64.o
endif
Add JavaScript Object Notation (JSON) parser (RFC7159) This is needed for DPP configuration attributes/objects. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 20:18:00 +02:00
ifdef NEED_JSON
OBJS += ../src/utils/json.o
CFLAGS += -DCONFIG_JSON
endif
Create a common drivers makefile snippet Instead of having all driver stuff collected across wpa_supplicant and hostapd, create a common snippet that they both include and that handles the build configuration.
2009-08-14 18:53:27 +02:00
ifdef NEED_AP_MLME
Move generic AP functionality implementation into src/ap This code can be shared by both hostapd and wpa_supplicant and this is an initial step in getting the generic code moved to be under the src directories. Couple of generic files still remain under the hostapd directory due to direct dependencies to files there. Once the dependencies have been removed, they will also be moved to the src/ap directory to allow wpa_supplicant to be built without requiring anything from the hostapd directory.
2009-12-25 00:12:50 +01:00
OBJS += ../src/ap/wmm.o
OBJS += ../src/ap/ap_list.o
OBJS += ../src/ap/ieee802_11.o
Move rest of the generic AP mode functionality into src/ap
2009-12-25 19:06:07 +01:00
OBJS += ../src/ap/hw_features.o
hostapd: Add AP DFS support Add DFS structures/events handlers, CAC handling, and radar detection. By default, after radar is detected or the channel became unavailable, a random channel will be chosen. This patches are based on the original work by Boris Presman and Victor Goldenshtein. Most of the DFS code is moved to a new dfs.c/dfs.h files. Cc: Boris Presman <boris.presman@ti.com> Cc: Victor Goldenshtein <victorg@ti.com> Signed-hostap: Simon Wunderlich <siwu@hrz.tu-chemnitz.de> Signed-hostap: Janusz Dziedzic <janusz.dziedzic@tieto.com>
2013-10-15 19:27:25 +02:00
OBJS += ../src/ap/dfs.o
Fix hostapd build with CONFIG_IEEE80211N but without NEED_AP_MLME
2010-09-05 11:41:15 +02:00
CFLAGS += -DNEED_AP_MLME
endif
Move generic AP functionality implementation into src/ap This code can be shared by both hostapd and wpa_supplicant and this is an initial step in getting the generic code moved to be under the src directories. Couple of generic files still remain under the hostapd directory due to direct dependencies to files there. Once the dependencies have been removed, they will also be moved to the src/ap directory to allow wpa_supplicant to be built without requiring anything from the hostapd directory.
2009-12-25 00:12:50 +01:00
OBJS += ../src/ap/ieee802_11_ht.o
Remove MLME code from build if none of the enabled drivers need it
2009-01-08 17:40:14 +01:00
hostapd: Add IEEE 802.11ac VHT IEs into Beacon/Probe Response IEEE 802.11ac VHT changes to include VHT IEs in Beacon and Probe Response frames. Signed-hostap: Mahesh Palivela <maheshp@posedge.com>
2012-06-30 12:57:52 +02:00
ifdef CONFIG_IEEE80211AC
OBJS += ../src/ap/ieee802_11_vht.o
endif
P2P: Extend P2P manager functionality to work with driver MLME Add P2P IE into Beacon, Probe Response, and (Re)Association Request frames for drivers that generate this frames internally.
2010-10-08 17:16:07 +02:00
ifdef CONFIG_P2P_MANAGER
CFLAGS += -DCONFIG_P2P_MANAGER
OBJS += ../src/ap/p2p_hostapd.o
endif
HS 2.0: Add configuration for Hotspot 2.0 AP support Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2011-09-08 19:52:23 +02:00
ifdef CONFIG_HS20
CFLAGS += -DCONFIG_HS20
HS 2.0: Add Hotspot 2.0 Indication for AP Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2011-09-08 19:52:23 +02:00
OBJS += ../src/ap/hs20.o
HS 2.0: Add configuration for Hotspot 2.0 AP support Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2011-09-08 19:52:23 +02:00
CONFIG_INTERWORKING=y
endif
IEEE 802.11u: Add configuration and advertisement for Interworking
2011-09-23 19:26:17 +02:00
ifdef CONFIG_INTERWORKING
CFLAGS += -DCONFIG_INTERWORKING
DPP: Integration for hostapd This adds DPP bootstrapping, authentication, and configuration into hostapd similarly to how the design was integrated in wpa_supplicant. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-06-15 21:16:45 +02:00
NEED_GAS=y
endif
ifdef NEED_GAS
Interworking: Add GAS server support for AP mode This adds GAS/ANQP implementation into hostapd. This commit brings in the basic GAS/ANQP functionality, but only the ANQP Capability List element is supported. For testing purposes, hostapd control interface SET command can be used to set the gas_frag_limit parameter dynamically. Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2012-02-26 21:34:19 +01:00
OBJS += ../src/common/gas.o
OBJS += ../src/ap/gas_serv.o
IEEE 802.11u: Add configuration and advertisement for Interworking
2011-09-23 19:26:17 +02:00
endif
AP: Add support for Proxy ARP, DHCP snooping mechanism Proxy ARP allows the AP devices to keep track of the hardware address to IP address mapping of the STA devices within the BSS. When a request for such information is made (i.e., ARP request, Neighbor Solicitation), the AP will respond on behalf of the STA device within the BSS. Such requests could originate from a device within the BSS or also from the bridge. In the process of the AP replying to the request (i.e., ARP reply, Neighbor Advertisement), the AP will drop the original request frame. The relevant STA will not even know that such information was ever requested. This feature is a requirement for Hotspot 2.0, and is defined in IEEE Std 802.11-2012, 10.23.13. While the Proxy ARP support code mainly resides in the kernel bridge code, in order to optimize the performance and simplify kernel implementation, the DHCP snooping code was added to the hostapd. Signed-off-by: Kyeyoon Park <kyeyoonp@qca.qualcomm.com>
2014-09-26 07:32:55 +02:00
ifdef CONFIG_PROXYARP
CFLAGS += -DCONFIG_PROXYARP
AP: Add a generic "x_snoop" infrastructure for Proxy ARP Signed-off-by: Kyeyoon Park <kyeyoonp@qca.qualcomm.com>
2014-11-01 02:18:35 +01:00
OBJS += ../src/ap/x_snoop.o
AP: Add support for Proxy ARP, DHCP snooping mechanism Proxy ARP allows the AP devices to keep track of the hardware address to IP address mapping of the STA devices within the BSS. When a request for such information is made (i.e., ARP request, Neighbor Solicitation), the AP will respond on behalf of the STA device within the BSS. Such requests could originate from a device within the BSS or also from the bridge. In the process of the AP replying to the request (i.e., ARP reply, Neighbor Advertisement), the AP will drop the original request frame. The relevant STA will not even know that such information was ever requested. This feature is a requirement for Hotspot 2.0, and is defined in IEEE Std 802.11-2012, 10.23.13. While the Proxy ARP support code mainly resides in the kernel bridge code, in order to optimize the performance and simplify kernel implementation, the DHCP snooping code was added to the hostapd. Signed-off-by: Kyeyoon Park <kyeyoonp@qca.qualcomm.com>
2014-09-26 07:32:55 +02:00
OBJS += ../src/ap/dhcp_snoop.o
proxyarp: Use C library header files and CONFIG_IPV6 This replaces the use of Linux kernel header files (linux/ip.h, linux/udp.h, linux/ipv6.h, and linux/icmpv6.h) with equivalent header files from C library. In addition, ndisc_snoop.c is now built conditionally on CONFIG_IPV6=y so that it is easier to handle hostapd builds with toolchains that do not support IPv6 even if Hotspot 2.0 is enabled in the build. Signed-off-by: Jouni Malinen <j@w1.fi>
2014-11-25 15:58:21 +01:00
ifdef CONFIG_IPV6
AP: Add Neighbor Discovery snooping mechanism for Proxy ARP This commit establishes the infrastructure, and handles the Neighbor Solicitation and Neighbor Advertisement frames. This will be extended in the future to handle other frames. Signed-off-by: Kyeyoon Park <kyeyoonp@qca.qualcomm.com>
2014-11-01 07:33:41 +01:00
OBJS += ../src/ap/ndisc_snoop.o
AP: Add support for Proxy ARP, DHCP snooping mechanism Proxy ARP allows the AP devices to keep track of the hardware address to IP address mapping of the STA devices within the BSS. When a request for such information is made (i.e., ARP request, Neighbor Solicitation), the AP will respond on behalf of the STA device within the BSS. Such requests could originate from a device within the BSS or also from the bridge. In the process of the AP replying to the request (i.e., ARP reply, Neighbor Advertisement), the AP will drop the original request frame. The relevant STA will not even know that such information was ever requested. This feature is a requirement for Hotspot 2.0, and is defined in IEEE Std 802.11-2012, 10.23.13. While the Proxy ARP support code mainly resides in the kernel bridge code, in order to optimize the performance and simplify kernel implementation, the DHCP snooping code was added to the hostapd. Signed-off-by: Kyeyoon Park <kyeyoonp@qca.qualcomm.com>
2014-09-26 07:32:55 +02:00
endif
proxyarp: Use C library header files and CONFIG_IPV6 This replaces the use of Linux kernel header files (linux/ip.h, linux/udp.h, linux/ipv6.h, and linux/icmpv6.h) with equivalent header files from C library. In addition, ndisc_snoop.c is now built conditionally on CONFIG_IPV6=y so that it is easier to handle hostapd builds with toolchains that do not support IPv6 even if Hotspot 2.0 is enabled in the build. Signed-off-by: Jouni Malinen <j@w1.fi>
2014-11-25 15:58:21 +01:00
endif
AP: Add support for Proxy ARP, DHCP snooping mechanism Proxy ARP allows the AP devices to keep track of the hardware address to IP address mapping of the STA devices within the BSS. When a request for such information is made (i.e., ARP request, Neighbor Solicitation), the AP will respond on behalf of the STA device within the BSS. Such requests could originate from a device within the BSS or also from the bridge. In the process of the AP replying to the request (i.e., ARP reply, Neighbor Advertisement), the AP will drop the original request frame. The relevant STA will not even know that such information was ever requested. This feature is a requirement for Hotspot 2.0, and is defined in IEEE Std 802.11-2012, 10.23.13. While the Proxy ARP support code mainly resides in the kernel bridge code, in order to optimize the performance and simplify kernel implementation, the DHCP snooping code was added to the hostapd. Signed-off-by: Kyeyoon Park <kyeyoonp@qca.qualcomm.com>
2014-09-26 07:32:55 +02:00
Move wpa_scan_results_free() into shared C file Replace the inline helper function with a new C file that can be used for common driver API related function. Signed-hostap: Jouni Malinen <j@w1.fi>
2011-11-13 17:56:26 +01:00
OBJS += ../src/drivers/driver_common.o
hostapd_cli: Start using src/utils/edit*.c This brings hostapd_cli closer to the design used in wpa_cli and allows command history and editing mechanisms to be added.
2011-07-16 16:37:18 +02:00
ifdef CONFIG_WPA_CLI_EDIT
OBJS_c += ../src/utils/edit.o
else
OBJS_c += ../src/utils/edit_simple.o
endif
hostapd: Add Automatic Channel Selection (ACS) support This adds ACS support to hostapd. Currently only survey-based algorithm is available. To use ACS you need to enable CONFIG_ACS=y in .config and use channel=0 (or channel=acs_survey) in hostapd.conf. For more details see wiki page [1] or comments in src/ap/acs.c. [1]: http://wireless.kernel.org/en/users/Documentation/acs Signed-hostap: Michal Kazior <michal.kazior@tieto.com>
2013-08-31 10:49:51 +02:00
ifdef CONFIG_ACS
CFLAGS += -DCONFIG_ACS
OBJS += ../src/ap/acs.o
LIBS += -lm
endif
Added CONFIG_NO_STDOUT_DEBUG for hostapd This is similar to one in wpa_supplicant and can be used to reduce the binary size by removing debugging messages.
2009-01-08 15:47:04 +01:00
ifdef CONFIG_NO_STDOUT_DEBUG
CFLAGS += -DCONFIG_NO_STDOUT_DEBUG
endif
hostapd: Add possibility to send debug messages to syslog We can only send module specific messages to syslog and not debug messages printed with wpa_printf. Add an extra command line parameter '-s' to allow it. The feature is enabled with compile flag CONFIG_DEBUG_SYSLOG as for wpa_supplicant and behaves in the same manner as the wpa_supplicant -s command line argument. Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@neratec.com>
2017-01-23 13:55:04 +01:00
ifdef CONFIG_DEBUG_SYSLOG
CFLAGS += -DCONFIG_DEBUG_SYSLOG
endif
hostapd: Add -T Linux tracing option Just like wpa_supplicant, give hostapd the -T option to send all debug messages into the Linux tracing buffer. Enable this option for hwsim test builds by default. Signed-hostap: Johannes Berg <johannes.berg@intel.com>
2013-10-30 19:29:58 +01:00
ifdef CONFIG_DEBUG_LINUX_TRACING
CFLAGS += -DCONFIG_DEBUG_LINUX_TRACING
endif
hostapd: Allow logging to file Also supports 'relog' CLI command to re-open the log file. Signed-off-by: Ben Greear <greearb@candelatech.com>
2011-02-06 19:24:16 +01:00
ifdef CONFIG_DEBUG_FILE
CFLAGS += -DCONFIG_DEBUG_FILE
endif
EAP-SIM DB: Optional use of SQLite database for pseudonyms This allows hostapd to use an SQLite database for storing EAP-SIM/AKA pseudonyms over process restarts. CONFIG_SQLITE=y build option adds support for this and the SQLite database file is specified in eap_sib_db configuration parameter. Signed-hostap: Jouni Malinen <jouni@qca.qualcomm.com>
2012-08-30 15:04:52 +02:00
ifdef CONFIG_SQLITE
CFLAGS += -DCONFIG_SQLITE
LIBS += -lsqlite3
LIBS_h += -lsqlite3
endif
FST: Add build rules for hostapd This patch integrates the FST into the hostapd. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-01-21 14:30:48 +01:00
ifdef CONFIG_FST
CFLAGS += -DCONFIG_FST
OBJS += ../src/fst/fst.o
OBJS += ../src/fst/fst_group.o
OBJS += ../src/fst/fst_iface.o
OBJS += ../src/fst/fst_session.o
OBJS += ../src/fst/fst_ctrl_aux.o
FST: Testing support This patch introduces infrastructure needed for FST module tests. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2014-12-04 18:20:56 +01:00
ifdef CONFIG_FST_TEST
CFLAGS += -DCONFIG_FST_TEST
endif
FST: Add build rules for hostapd This patch integrates the FST into the hostapd. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-01-21 14:30:48 +01:00
ifndef CONFIG_NO_CTRL_IFACE
OBJS += ../src/fst/fst_ctrl_iface.o
endif
endif
Make WEP functionality an optional build parameter WEP should not be used for anything anymore. As a step towards removing it completely, move all WEP related functionality to be within CONFIG_WEP blocks. This will be included in builds only if CONFIG_WEP=y is explicitly set in build configuration. Signed-off-by: Jouni Malinen <j@w1.fi>
2020-02-29 15:52:39 +01:00
ifdef CONFIG_WEP
CFLAGS += -DCONFIG_WEP
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
ALL=hostapd hostapd_cli
all: verify_config $(ALL)
make the build process quieter to see warnings
2009-07-24 02:11:29 +02:00
Q=@
E=echo
ifeq ($(V), 1)
Q=
E=true
endif
Add QUIET=1 option for make This can be used to reduce verbosity for build messages. Signed-off-by: Jouni Malinen <j@w1.fi>
2014-12-26 11:49:03 +01:00
ifeq ($(QUIET), 1)
Q=@
E=true
endif
make the build process quieter to see warnings
2009-07-24 02:11:29 +02:00
Add make lcov-html to generate code coverage report In addition, update build rules to compile object files in the same directory as the source code file if CONFIG_CODE_COVERAGE=y is set to make lcov find the source code files. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-12-25 12:44:38 +01:00
ifdef CONFIG_CODE_COVERAGE
%.o: %.c
@$(E) " CC " $<
$(Q)cd $(dir $@); $(CC) -c -o $(notdir $@) $(CFLAGS) $(notdir $<)
else
make the build process quieter to see warnings
2009-07-24 02:11:29 +02:00
%.o: %.c
$(Q)$(CC) -c -o $@ $(CFLAGS) $<
@$(E) " CC " $<
Add make lcov-html to generate code coverage report In addition, update build rules to compile object files in the same directory as the source code file if CONFIG_CODE_COVERAGE=y is set to make lcov find the source code files. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-12-25 12:44:38 +01:00
endif
make the build process quieter to see warnings
2009-07-24 02:11:29 +02:00
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
verify_config:
@if [ ! -r .config ]; then \
echo 'Building hostapd requires a configuration file'; \
echo '(.config). See README for more instructions. You can'; \
echo 'run "cp defconfig .config" to create an example'; \
echo 'configuration.'; \
exit 1; \
fi
hostapd: Make install path configurable Makefile always installs to /usr/local/bin and on some platforms, /usr/local/bin is not in default search path. Modify the Makefile such that bin path can be configurable so that build system can pass appropriate path for installation. If bin path is not specified then by default binaries are installed in /usr/local/bin. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2013-09-06 19:05:40 +02:00
$(DESTDIR)$(BINDIR)/%: %
install -D $(<) $(@)
install: $(addprefix $(DESTDIR)$(BINDIR)/,$(ALL))
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
Force rebuilding of src/drivers between hostapd and wpa_supplicant This is a (hopefully) temporary workaround to allow the same source code tree to be used for building hostapd and wpa_supplicant without having to manually force recompilation of some files. Currently, some of the driver wrapper files need to be built separately for hostapd and wpa_supplicant (#ifdef's in the files based on AP functionality). This is somewhat racy as far as parallel make execution is concerned, i.e., it may be necessary to run "make -j#" twice (plain "make" works fine. Since this is supposed to be a temporary workaround, there is not much point in trying to fix this with any more complex make processing.
2009-08-14 19:40:37 +02:00
../src/drivers/build.hostapd:
Support for Solaris default shell restriction Some shells (like Solaris default /bin/sh) doesn't allow -e option for file existence check. Use -f instead.
2010-04-17 16:15:23 +02:00
@if [ -f ../src/drivers/build.wpa_supplicant ]; then \
Force rebuilding of src/drivers between hostapd and wpa_supplicant This is a (hopefully) temporary workaround to allow the same source code tree to be used for building hostapd and wpa_supplicant without having to manually force recompilation of some files. Currently, some of the driver wrapper files need to be built separately for hostapd and wpa_supplicant (#ifdef's in the files based on AP functionality). This is somewhat racy as far as parallel make execution is concerned, i.e., it may be necessary to run "make -j#" twice (plain "make" works fine. Since this is supposed to be a temporary workaround, there is not much point in trying to fix this with any more complex make processing.
2009-08-14 19:40:37 +02:00
$(MAKE) -C ../src/drivers clean; \
fi
@touch ../src/drivers/build.hostapd
BCHECK=../src/drivers/build.hostapd
hostapd: $(BCHECK) $(OBJS)
Make the link process quieter unless V=1 is specified Hide the long command lines used for linking the binaries in the default build. "make V=1" can be used to show the actual commands if needed.
2011-03-17 11:31:38 +01:00
$(Q)$(CC) $(LDFLAGS) -o hostapd $(OBJS) $(LIBS)
@$(E) " LD " $@
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
Add memory allocation analyzer to verify OS wrapper use WPA_TRACE=y builds will now verify that memory allocation in done consistently using os_{zalloc,malloc,realloc,strdup,free} (i.e., no mixing of os_* functions and unwrapper functions). In addition, some common memory allocation issues (double-free, memory leaks, etc.) are detected automatically.
2009-12-19 20:47:56 +01:00
ifdef CONFIG_WPA_TRACE
OBJS_c += ../src/utils/trace.o
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
hostapd_cli: $(OBJS_c)
Make the link process quieter unless V=1 is specified Hide the long command lines used for linking the binaries in the default build. "make V=1" can be used to show the actual commands if needed.
2011-03-17 11:31:38 +01:00
$(Q)$(CC) $(LDFLAGS) -o hostapd_cli $(OBJS_c) $(LIBS_c)
@$(E) " LD " $@
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
OpenSSL: Replace internal HMAC-MD5 implementation Use OpenSSL HMAC_* functions to implement HMAC-MD5 instead of depending on the src/crypto/md5.c implementation. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2015-01-27 12:26:01 +01:00
NOBJS = nt_password_hash.o ../src/crypto/ms_funcs.o $(SHA1OBJS)
crypto: Clear temporary heap allocations before freeing This reduces the time private keys may remain in heap memory after use. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-05 17:05:09 +01:00
NOBJS += ../src/utils/common.o
Fix linking of nt_password_hash Need to use conditional linking of some crypto functionality and add couple of additional object files. [Bug 343]
2010-01-16 09:38:53 +01:00
ifdef NEED_RC4
ifdef CONFIG_INTERNAL_RC4
Add build option to remove all internal RC4 uses The new CONFIG_NO_RC4=y build option can be used to remove all internal hostapd and wpa_supplicant uses of RC4. It should be noted that external uses (e.g., within a TLS library) do not get disabled when doing this. This removes capability of supporting WPA/TKIP, dynamic WEP keys with IEEE 802.1X, WEP shared key authentication, and MSCHAPv2 password changes. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-08-01 22:37:07 +02:00
ifndef CONFIG_NO_RC4
Fix linking of nt_password_hash Need to use conditional linking of some crypto functionality and add couple of additional object files. [Bug 343]
2010-01-16 09:38:53 +01:00
NOBJS += ../src/crypto/rc4.o
endif
endif
Add build option to remove all internal RC4 uses The new CONFIG_NO_RC4=y build option can be used to remove all internal hostapd and wpa_supplicant uses of RC4. It should be noted that external uses (e.g., within a TLS library) do not get disabled when doing this. This removes capability of supporting WPA/TKIP, dynamic WEP keys with IEEE 802.1X, WEP shared key authentication, and MSCHAPv2 password changes. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-08-01 22:37:07 +02:00
endif
Crypto build cleanup: remove INTERNAL_MD5 Instead of using a define and conditional building of md5.c parts, move the internal-MD5 into a separate file.
2009-07-28 20:36:13 +02:00
ifdef CONFIG_INTERNAL_MD5
NOBJS += ../src/crypto/md5-internal.o
endif
Add support for wolfSSL cryptographic library Allow hostapd/wpa_supplicant to be compiled with the wolfSSL cryptography and TLS library. Signed-off-by: Sean Parkinson <sean@wolfssl.com>
2018-01-18 03:26:39 +01:00
NOBJS += ../src/crypto/crypto_$(CONFIG_CRYPTO).o
NOBJS += ../src/utils/os_$(CONFIG_OS).o
Fix linking of nt_password_hash Need to use conditional linking of some crypto functionality and add couple of additional object files. [Bug 343]
2010-01-16 09:38:53 +01:00
NOBJS += ../src/utils/wpa_debug.o
NOBJS += ../src/utils/wpabuf.o
ifdef CONFIG_WPA_TRACE
NOBJS += ../src/utils/trace.o
endif
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
Move hlr_auc_gw into hostapd directory This is a separate program and is used mainly with hostapd, so it is better to move this into the hostapd subdirectory now that Milenage code has already been moved into src/crypto. Milenage was the only generic component in hlr_auc_gw.
2009-12-06 15:33:19 +01:00
HOBJS += hlr_auc_gw.o ../src/utils/common.o ../src/utils/wpa_debug.o ../src/utils/os_$(CONFIG_OS).o ../src/utils/wpabuf.o ../src/crypto/milenage.o
Fix hlr_auc_gw build after crypto build cleanup
2009-08-13 10:50:52 +02:00
HOBJS += ../src/crypto/aes-encblock.o
ifdef CONFIG_INTERNAL_AES
HOBJS += ../src/crypto/aes-internal.o
HOBJS += ../src/crypto/aes-internal-enc.o
endif
af_alg: Crypto wrappers for Linux kernel crypto (AF_ALG) CONFIG_TLS=linux can now be used to select the crypto implementation that uses the user space socket interface (AF_ALG) for the Linux kernel crypto implementation. This commit includes some of the cipher, hash, and HMAC functions. The functions that are not available through AF_ALG (e.g., the actual TLS implementation) use the internal implementation (CONFIG_TLS=internal). Signed-off-by: Jouni Malinen <j@w1.fi>
2017-02-27 00:10:02 +01:00
ifeq ($(CONFIG_TLS), linux)
HOBJS += ../src/crypto/crypto_linux.o
endif
Crypto build cleanup: remove INTERNAL_AES In addition, rename aes.c to aes-internal.c to match in style with SHA-1 conditionally built internal implementation.
2009-07-28 20:09:57 +02:00
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
nt_password_hash: $(NOBJS)
Make the link process quieter unless V=1 is specified Hide the long command lines used for linking the binaries in the default build. "make V=1" can be used to show the actual commands if needed.
2011-03-17 11:31:38 +01:00
$(Q)$(CC) $(LDFLAGS) -o nt_password_hash $(NOBJS) $(LIBS_n)
@$(E) " LD " $@
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
hlr_auc_gw: $(HOBJS)
Make the link process quieter unless V=1 is specified Hide the long command lines used for linking the binaries in the default build. "make V=1" can be used to show the actual commands if needed.
2011-03-17 11:31:38 +01:00
$(Q)$(CC) $(LDFLAGS) -o hlr_auc_gw $(HOBJS) $(LIBS_h)
@$(E) " LD " $@
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
Add make lcov-html to generate code coverage report In addition, update build rules to compile object files in the same directory as the source code file if CONFIG_CODE_COVERAGE=y is set to make lcov find the source code files. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-12-25 12:44:38 +01:00
lcov-html:
lcov -c -d .. > lcov.info
genhtml lcov.info --output-directory lcov-html
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
clean:
$(MAKE) -C ../src clean
rm -f core *~ *.o hostapd hostapd_cli nt_password_hash hlr_auc_gw
Add CONFIG_CODE_COVERAGE=y option for gcov This can be used to measure code coverage from test scripts. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-11-24 18:16:12 +01:00
rm -f *.d *.gcno *.gcda *.gcov
Add make lcov-html to generate code coverage report In addition, update build rules to compile object files in the same directory as the source code file if CONFIG_CODE_COVERAGE=y is set to make lcov find the source code files. Signed-hostap: Jouni Malinen <j@w1.fi>
2013-12-25 12:44:38 +01:00
rm -f lcov.info
rm -rf lcov-html
Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release
2008-02-28 02:34:43 +01:00
-include $(OBJS:%.o=%.d)
Reference in a new issue Copy permalink