1# Example hostapd build time configuration
2#
3# This file lists the configuration options that are used when building the
4# hostapd binary. All lines starting with # are ignored. Configuration option
5# lines must be commented out complete, if they are not to be included, i.e.,
6# just setting VARIABLE=n is not disabling that variable.
7#
8# This file is included in Makefile, so variables like CFLAGS and LIBS can also
9# be modified from here. In most cass, these lines should use += in order not
10# to override previous values of the variables.
11
12# Driver interface for Host AP driver
13#CONFIG_DRIVER_HOSTAP=y
14
15# Driver interface for wired authenticator
16#CONFIG_DRIVER_WIRED=y
17
18# Driver interface for drivers using the nl80211 kernel interface
19#CONFIG_DRIVER_NL80211=y
20# driver_nl80211.c requires a rather new libnl (version 1.1) which may not be
21# shipped with your distribution yet. If that is the case, you need to build
22# newer libnl version and point the hostapd build to use it.
23#LIBNL=/usr/src/libnl
24#CFLAGS += -I$(LIBNL)/include
25#LIBS += -L$(LIBNL)/lib
26CONFIG_LIBNL20=y
27
28# QCA vendor extensions to nl80211
29CONFIG_DRIVER_NL80211_QCA=y
30
31# Broadcom vendor extensions to nl80211
32#CONFIG_DRIVER_NL80211_BRCM=y
33
34# Driver interface for FreeBSD net80211 layer (e.g., Atheros driver)
35#CONFIG_DRIVER_BSD=y
36#CFLAGS += -I/usr/local/include
37#LIBS += -L/usr/local/lib
38#LIBS_p += -L/usr/local/lib
39#LIBS_c += -L/usr/local/lib
40
41# Driver interface for no driver (e.g., RADIUS server only)
42#CONFIG_DRIVER_NONE=y
43
44# WPA2/IEEE 802.11i RSN pre-authentication
45#CONFIG_RSN_PREAUTH=y
46
47# Support Operating Channel Validation
48#CONFIG_OCV=y
49
50# Integrated EAP server
51#CONFIG_EAP=y
52
53# EAP-MD5 for the integrated EAP server
54#CONFIG_EAP_MD5=y
55
56# EAP-TLS for the integrated EAP server
57#CONFIG_EAP_TLS=y
58
59# EAP-MSCHAPv2 for the integrated EAP server
60#CONFIG_EAP_MSCHAPV2=y
61
62# EAP-PEAP for the integrated EAP server
63#CONFIG_EAP_PEAP=y
64
65# EAP-GTC for the integrated EAP server
66#CONFIG_EAP_GTC=y
67
68# EAP-TTLS for the integrated EAP server
69#CONFIG_EAP_TTLS=y
70
71# EAP-SIM for the integrated EAP server
72#CONFIG_EAP_SIM=y
73
74# EAP-AKA for the integrated EAP server
75#CONFIG_EAP_AKA=y
76
77# EAP-AKA' for the integrated EAP server
78# This requires CONFIG_EAP_AKA to be enabled, too.
79#CONFIG_EAP_AKA_PRIME=y
80
81# EAP-PAX for the integrated EAP server
82#CONFIG_EAP_PAX=y
83
84# EAP-PSK for the integrated EAP server (this is _not_ needed for WPA-PSK)
85#CONFIG_EAP_PSK=y
86
87# EAP-SAKE for the integrated EAP server
88#CONFIG_EAP_SAKE=y
89
90# EAP-GPSK for the integrated EAP server
91#CONFIG_EAP_GPSK=y
92# Include support for optional SHA256 cipher suite in EAP-GPSK
93#CONFIG_EAP_GPSK_SHA256=y
94
95# EAP-FAST for the integrated EAP server
96# Note: Default OpenSSL package does not include support for all the
97# functionality needed for EAP-FAST. If EAP-FAST is enabled with OpenSSL,
98# the OpenSSL library must be patched (openssl-0.9.9-session-ticket.patch)
99# to add the needed functions.
100#CONFIG_EAP_FAST=y
101
102# Wi-Fi Protected Setup (WPS)
103CONFIG_WPS=y
104# Enable UPnP support for external WPS Registrars
105#CONFIG_WPS_UPNP=y
106
107# EAP-IKEv2
108#CONFIG_EAP_IKEV2=y
109
110# Trusted Network Connect (EAP-TNC)
111#CONFIG_EAP_TNC=y
112
113# PKCS#12 (PFX) support (used to read private key and certificate file from
114# a file that usually has extension .p12 or .pfx)
115CONFIG_PKCS12=y
116
117# RADIUS authentication server. This provides access to the integrated EAP
118# server from external hosts using RADIUS.
119#CONFIG_RADIUS_SERVER=y
120
121# Build IPv6 support for RADIUS operations
122CONFIG_IPV6=y
123
124# IEEE Std 802.11r-2008 (Fast BSS Transition)
125#CONFIG_IEEE80211R=y
126
127# Use the hostapd's IEEE 802.11 authentication (ACL), but without
128# the IEEE 802.11 Management capability (e.g., FreeBSD/net80211)
129#CONFIG_DRIVER_RADIUS_ACL=y
130
131# Remove debugging code that is printing out debug messages to stdout.
132# This can be used to reduce the size of the hostapd considerably if debugging
133# code is not needed.
134#CONFIG_NO_STDOUT_DEBUG=y
135
136# Add support for writing debug log to Android logcat instead of standard output
137CONFIG_ANDROID_LOG=y
138
139# Remove support for RADIUS accounting
140#CONFIG_NO_ACCOUNTING=y
141
142# Remove support for RADIUS
143CONFIG_NO_RADIUS=y
144
145# Remove support for VLANs
146#CONFIG_NO_VLAN=y
147
148# Remove support for dumping internal state through control interface commands
149# This can be used to reduce binary size at the cost of disabling a debugging
150# option.
151#CONFIG_NO_DUMP_STATE=y
152
153# Select wrapper for operatins system and C library specific functions
154# unix = UNIX/POSIX like systems (default)
155# win32 = Windows systems
156# none = Empty template
157CONFIG_OS=unix
158
159# Enable tracing code for developer debugging
160# This tracks use of memory allocations and other registrations and reports
161# incorrect use with a backtrace of call (or allocation) location.
162#CONFIG_WPA_TRACE=y
163# For BSD, comment out these.
164#LIBS += -lexecinfo
165#LIBS_p += -lexecinfo
166#LIBS_c += -lexecinfo
167
168# Use libbfd to get more details for developer debugging
169# This enables use of libbfd to get more detailed symbols for the backtraces
170# generated by CONFIG_WPA_TRACE=y.
171#CONFIG_WPA_TRACE_BFD=y
172# For BSD, comment out these.
173#LIBS += -lbfd -liberty -lz
174#LIBS_p += -lbfd -liberty -lz
175#LIBS_c += -lbfd -liberty -lz
176
177# Should we use poll instead of select? Select is used by default.
178#CONFIG_ELOOP_POLL=y
179
180# Should we use epoll instead of select? Select is used by default.
181#CONFIG_ELOOP_EPOLL=y
182
183# Enable AP
184CONFIG_AP=y
185
186# Enable Fast Session Transfer (FST)
187#CONFIG_FST=y
188
189# Multiband Operation support
190# These extensions facilitate efficient use of multiple frequency bands
191# available to the AP and the devices that may associate with it.
192#CONFIG_MBO=y
193
194# Include internal line edit mode in hostapd_cli.
195CONFIG_WPA_CLI_EDIT=y
196
197# Opportunistic Wireless Encryption (OWE)
198# Experimental implementation of draft-harkins-owe-07.txt
199#CONFIG_OWE=y
200
201# Wpa_supplicant's random pool is not necessary on Android. Randomness is
202# already provided by the entropymixer service which ensures sufficient
203# entropy is maintained across reboots. Commit b410eb1913 'Initialize
204# /dev/urandom earlier in boot' seeds /dev/urandom with that entropy before
205# either wpa_supplicant or hostapd are run.
206CONFIG_NO_RANDOM_POOL=y
207
208# Wired equivalent privacy (WEP)
209# WEP is an obsolete cryptographic data confidentiality algorithm that is not
210# considered secure. It should not be used for anything anymore. The
211# functionality needed to use WEP is available in the current hostapd
212# release under this optional build parameter. This functionality is subject to
213# be completely removed in a future release.
214CONFIG_WEP=y
215