7d2ed8bae8
Hardcode this to be defined and remove the separate build options for PMF since this functionality is needed with large number of newer protocol extensions and is also something that should be enabled in all WPA2/WPA3 networks. Signed-off-by: Jouni Malinen <j@w1.fi>
157 lines
2.8 KiB
Plaintext
157 lines
2.8 KiB
Plaintext
#CC=ccache gcc
|
|
|
|
CONFIG_TLS=openssl
|
|
#CONFIG_TLS=wolfssl
|
|
#CONFIG_TLS=internal
|
|
#CONFIG_INTERNAL_LIBTOMMATH=y
|
|
#CONFIG_INTERNAL_LIBTOMMATH_FAST=y
|
|
|
|
CONFIG_IEEE8021X_EAPOL=y
|
|
|
|
CONFIG_ERP=y
|
|
CONFIG_EAP_MD5=y
|
|
CONFIG_MSCHAPV2=y
|
|
CONFIG_EAP_TLS=y
|
|
CONFIG_EAP_PEAP=y
|
|
CONFIG_EAP_TTLS=y
|
|
CONFIG_EAP_GTC=y
|
|
CONFIG_EAP_OTP=y
|
|
CONFIG_EAP_PSK=y
|
|
CONFIG_EAP_PAX=y
|
|
CONFIG_EAP_LEAP=y
|
|
CONFIG_EAP_SIM=y
|
|
CONFIG_EAP_AKA=y
|
|
CONFIG_EAP_AKA_PRIME=y
|
|
CONFIG_EAP_VENDOR_TEST=y
|
|
CONFIG_EAP_TLV=y
|
|
CONFIG_EAP_SAKE=y
|
|
CONFIG_EAP_GPSK=y
|
|
CONFIG_EAP_GPSK_SHA256=y
|
|
CONFIG_EAP_EKE=y
|
|
CONFIG_EAP_TNC=y
|
|
CFLAGS += -DTNC_CONFIG_FILE=\"tnc/tnc_config\"
|
|
LIBS += -rdynamic
|
|
CONFIG_EAP_FAST=y
|
|
CONFIG_EAP_TEAP=y
|
|
CONFIG_EAP_IKEV2=y
|
|
|
|
ifeq ($(CONFIG_TLS), openssl)
|
|
CONFIG_EAP_PWD=y
|
|
endif
|
|
|
|
CONFIG_USIM_SIMULATOR=y
|
|
CONFIG_SIM_SIMULATOR=y
|
|
|
|
#CONFIG_PCSC=y
|
|
CONFIG_IPV6=y
|
|
CONFIG_DRIVER_NONE=y
|
|
CONFIG_PKCS12=y
|
|
CONFIG_CTRL_IFACE=unix
|
|
|
|
CONFIG_WPA_CLI_EDIT=y
|
|
|
|
CONFIG_OCSP=y
|
|
|
|
#CONFIG_ELOOP_POLL=y
|
|
|
|
CONFIG_CTRL_IFACE_DBUS_NEW=y
|
|
CONFIG_CTRL_IFACE_DBUS_INTRO=y
|
|
|
|
CONFIG_IEEE80211R=y
|
|
CONFIG_IEEE80211N=y
|
|
CONFIG_IEEE80211AC=y
|
|
CONFIG_IEEE80211AX=y
|
|
|
|
CONFIG_OCV=y
|
|
|
|
CONFIG_DEBUG_FILE=y
|
|
|
|
CONFIG_WPS=y
|
|
#CONFIG_WPS_STRICT=y
|
|
CONFIG_WPS_UPNP=y
|
|
CONFIG_WPS_NFC=y
|
|
CONFIG_WPS_ER=y
|
|
#CONFIG_WPS_REG_DISABLE_OPEN=y
|
|
|
|
CONFIG_DRIVER_WEXT=y
|
|
|
|
CONFIG_DRIVER_NL80211=y
|
|
CFLAGS += -I/usr/include/libnl3
|
|
CONFIG_LIBNL32=y
|
|
|
|
CONFIG_IBSS_RSN=y
|
|
|
|
CONFIG_AP=y
|
|
CONFIG_MESH=y
|
|
CONFIG_P2P=y
|
|
CONFIG_WIFI_DISPLAY=y
|
|
|
|
CONFIG_ACS=y
|
|
|
|
CONFIG_BGSCAN_SIMPLE=y
|
|
CONFIG_BGSCAN_LEARN=y
|
|
|
|
CONFIG_WPA_TRACE=y
|
|
CONFIG_WPA_TRACE_BFD=y
|
|
|
|
CONFIG_TDLS=y
|
|
CONFIG_TDLS_TESTING=y
|
|
CONFIG_NO_RANDOM_POOL=y
|
|
|
|
CONFIG_TLSV11=y
|
|
CONFIG_TLSV12=y
|
|
|
|
CONFIG_HT_OVERRIDES=y
|
|
CONFIG_VHT_OVERRIDES=y
|
|
|
|
CONFIG_DEBUG_LINUX_TRACING=y
|
|
|
|
CONFIG_INTERWORKING=y
|
|
CONFIG_HS20=y
|
|
|
|
CONFIG_AUTOSCAN_EXPONENTIAL=y
|
|
CONFIG_AUTOSCAN_PERIODIC=y
|
|
|
|
CONFIG_EXT_PASSWORD_TEST=y
|
|
|
|
CONFIG_EAP_UNAUTH_TLS=y
|
|
|
|
CONFIG_SAE=y
|
|
CFLAGS += -DALL_DH_GROUPS
|
|
|
|
CONFIG_WNM=y
|
|
|
|
CONFIG_FST=y
|
|
CONFIG_FST_TEST=y
|
|
|
|
CONFIG_TESTING_OPTIONS=y
|
|
CONFIG_MODULE_TESTS=y
|
|
|
|
CONFIG_SUITEB=y
|
|
|
|
# AddressSanitizer (ASan) can be enabled by uncommenting the following lines.
|
|
# This can be used as a more efficient memory error detector than valgrind
|
|
# (though, with still some CPU and memory cost, so VM cases will need more
|
|
# memory allocated for the guest).
|
|
#CFLAGS += -fsanitize=address -O1 -fno-omit-frame-pointer -g
|
|
#LIBS += -fsanitize=address -fno-omit-frame-pointer -g
|
|
#LIBS_c += -fsanitize=address -fno-omit-frame-pointer -g
|
|
#LIBS_p += -fsanitize=address -fno-omit-frame-pointer -g
|
|
|
|
# Undefined Behavior Sanitizer (UBSan) can be enabled by uncommenting the
|
|
# following lines.
|
|
#CFLAGS += -Wno-format-nonliteral
|
|
#CFLAGS += -fsanitize=undefined
|
|
##CFLAGS += -fno-sanitize-recover
|
|
#LIBS += -fsanitize=undefined
|
|
##LIBS += -fno-sanitize-recover
|
|
#LIBS_c += -fsanitize=undefined
|
|
#LIBS_p += -fsanitize=undefined
|
|
CONFIG_MBO=y
|
|
CONFIG_FILS=y
|
|
CONFIG_FILS_SK_PFS=y
|
|
CONFIG_PMKSA_CACHE_EXTERNAL=y
|
|
CONFIG_OWE=y
|
|
CONFIG_DPP=y
|
|
CONFIG_DPP2=y
|