ad08c3633c
This adds WPS support for both hostapd and wpa_supplicant. Both programs can be configured to act as WPS Enrollee and Registrar. Both PBC and PIN methods are supported. Currently, hostapd has more complete configuration option for WPS parameters and wpa_supplicant configuration style will likely change in the future. External Registrars are not yet supported in hostapd or wpa_supplicant. While wpa_supplicant has initial support for acting as an Registrar to configure an AP, this is still using number of hardcoded parameters which will need to be made configurable for proper operation.
129 lines
3.7 KiB
Text
129 lines
3.7 KiB
Text
# Example hostapd build time configuration
|
|
#
|
|
# This file lists the configuration options that are used when building the
|
|
# hostapd binary. All lines starting with # are ignored. Configuration option
|
|
# lines must be commented out complete, if they are not to be included, i.e.,
|
|
# just setting VARIABLE=n is not disabling that variable.
|
|
#
|
|
# This file is included in Makefile, so variables like CFLAGS and LIBS can also
|
|
# be modified from here. In most cass, these lines should use += in order not
|
|
# to override previous values of the variables.
|
|
|
|
# Driver interface for Host AP driver
|
|
CONFIG_DRIVER_HOSTAP=y
|
|
|
|
# Driver interface for wired authenticator
|
|
#CONFIG_DRIVER_WIRED=y
|
|
|
|
# Driver interface for madwifi driver
|
|
#CONFIG_DRIVER_MADWIFI=y
|
|
#CFLAGS += -I../head # change to reflect local setup; directory for madwifi src
|
|
|
|
# Driver interface for Prism54 driver
|
|
#CONFIG_DRIVER_PRISM54=y
|
|
|
|
# Driver interface for drivers using the nl80211 kernel interface
|
|
#CONFIG_DRIVER_NL80211=y
|
|
# driver_nl80211.c requires a rather new libnl, probably not
|
|
# shipped with your distribution yet
|
|
#LIBNL=/usr/src/libnl
|
|
#CFLAGS += -I$(LIBNL)/include
|
|
#LIBS += -L$(LIBNL)/lib
|
|
|
|
# Driver interface for FreeBSD net80211 layer (e.g., Atheros driver)
|
|
#CONFIG_DRIVER_BSD=y
|
|
#CFLAGS += -I/usr/local/include
|
|
#LIBS += -L/usr/local/lib
|
|
|
|
# Driver interface for no driver (e.g., RADIUS server only)
|
|
#CONFIG_DRIVER_NONE=y
|
|
|
|
# IEEE 802.11F/IAPP
|
|
CONFIG_IAPP=y
|
|
|
|
# WPA2/IEEE 802.11i RSN pre-authentication
|
|
CONFIG_RSN_PREAUTH=y
|
|
|
|
# PeerKey handshake for Station to Station Link (IEEE 802.11e DLS)
|
|
CONFIG_PEERKEY=y
|
|
|
|
# IEEE 802.11w (management frame protection)
|
|
# This version is an experimental implementation based on IEEE 802.11w/D1.0
|
|
# draft and is subject to change since the standard has not yet been finalized.
|
|
# Driver support is also needed for IEEE 802.11w.
|
|
#CONFIG_IEEE80211W=y
|
|
|
|
# Integrated EAP server
|
|
CONFIG_EAP=y
|
|
|
|
# EAP-MD5 for the integrated EAP server
|
|
CONFIG_EAP_MD5=y
|
|
|
|
# EAP-TLS for the integrated EAP server
|
|
CONFIG_EAP_TLS=y
|
|
|
|
# EAP-MSCHAPv2 for the integrated EAP server
|
|
CONFIG_EAP_MSCHAPV2=y
|
|
|
|
# EAP-PEAP for the integrated EAP server
|
|
CONFIG_EAP_PEAP=y
|
|
|
|
# EAP-GTC for the integrated EAP server
|
|
CONFIG_EAP_GTC=y
|
|
|
|
# EAP-TTLS for the integrated EAP server
|
|
CONFIG_EAP_TTLS=y
|
|
|
|
# EAP-SIM for the integrated EAP server
|
|
#CONFIG_EAP_SIM=y
|
|
|
|
# EAP-AKA for the integrated EAP server
|
|
#CONFIG_EAP_AKA=y
|
|
|
|
# EAP-PAX for the integrated EAP server
|
|
#CONFIG_EAP_PAX=y
|
|
|
|
# EAP-PSK for the integrated EAP server (this is _not_ needed for WPA-PSK)
|
|
#CONFIG_EAP_PSK=y
|
|
|
|
# EAP-SAKE for the integrated EAP server
|
|
#CONFIG_EAP_SAKE=y
|
|
|
|
# EAP-GPSK for the integrated EAP server
|
|
#CONFIG_EAP_GPSK=y
|
|
# Include support for optional SHA256 cipher suite in EAP-GPSK
|
|
#CONFIG_EAP_GPSK_SHA256=y
|
|
|
|
# EAP-FAST for the integrated EAP server
|
|
# Note: Default OpenSSL package does not include support for all the
|
|
# functionality needed for EAP-FAST. If EAP-FAST is enabled with OpenSSL,
|
|
# the OpenSSL library must be patched (openssl-0.9.9-session-ticket.patch)
|
|
# to add the needed functions.
|
|
#CONFIG_EAP_FAST=y
|
|
|
|
# Wi-Fi Protected Setup (WPS)
|
|
#CONFIG_WPS=y
|
|
|
|
# EAP-IKEv2
|
|
#CONFIG_EAP_IKEV2=y
|
|
|
|
# Trusted Network Connect (EAP-TNC)
|
|
#CONFIG_EAP_TNC=y
|
|
|
|
# PKCS#12 (PFX) support (used to read private key and certificate file from
|
|
# a file that usually has extension .p12 or .pfx)
|
|
CONFIG_PKCS12=y
|
|
|
|
# RADIUS authentication server. This provides access to the integrated EAP
|
|
# server from external hosts using RADIUS.
|
|
#CONFIG_RADIUS_SERVER=y
|
|
|
|
# Build IPv6 support for RADIUS operations
|
|
CONFIG_IPV6=y
|
|
|
|
# IEEE Std 802.11r-2008 (Fast BSS Transition)
|
|
#CONFIG_IEEE80211R=y
|
|
|
|
# Use the hostapd's IEEE 802.11 authentication (ACL), but without
|
|
# the IEEE 802.11 Management capability (e.g., madwifi or FreeBSD/net80211)
|
|
#CONFIG_DRIVER_RADIUS_ACL=y
|