.config 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346
  1. # Example hostapd build time configuration
  2. #
  3. # This file lists the configuration options that are used when building the
  4. # hostapd binary. All lines starting with # are ignored. Configuration option
  5. # lines must be commented out complete, if they are not to be included, i.e.,
  6. # just setting VARIABLE=n is not disabling that variable.
  7. #
  8. # This file is included in Makefile, so variables like CFLAGS and LIBS can also
  9. # be modified from here. In most cass, these lines should use += in order not
  10. # to override previous values of the variables.
  11. # Driver interface for Host AP driver
  12. CONFIG_DRIVER_HOSTAP=y
  13. # Driver interface for wired authenticator
  14. #CONFIG_DRIVER_WIRED=y
  15. # Driver interface for drivers using the nl80211 kernel interface
  16. CONFIG_DRIVER_NL80211=y
  17. CFLAGS += -I/opt/ti-processor-sdk-linux-am335x-evm-04.02.00.09/EVSE/GPL/libnl-3.2.25/release/include/libnl3
  18. CONFIG_LIBNL32=y
  19. # QCA vendor extensions to nl80211
  20. #CONFIG_DRIVER_NL80211_QCA=y
  21. # driver_nl80211.c requires libnl. If you are compiling it yourself
  22. # you may need to point hostapd to your version of libnl.
  23. #
  24. #CFLAGS += -I$<path to libnl include files>
  25. #LIBS += -L$<path to libnl library files>
  26. # Use libnl v2.0 (or 3.0) libraries.
  27. #CONFIG_LIBNL20=y
  28. # Use libnl 3.2 libraries (if this is selected, CONFIG_LIBNL20 is ignored)
  29. #CONFIG_LIBNL32=y
  30. # Driver interface for FreeBSD net80211 layer (e.g., Atheros driver)
  31. #CONFIG_DRIVER_BSD=y
  32. #CFLAGS += -I/usr/local/include
  33. #LIBS += -L/usr/local/lib
  34. #LIBS_p += -L/usr/local/lib
  35. #LIBS_c += -L/usr/local/lib
  36. # Driver interface for no driver (e.g., RADIUS server only)
  37. #CONFIG_DRIVER_NONE=y
  38. # IEEE 802.11F/IAPP
  39. CONFIG_IAPP=y
  40. # WPA2/IEEE 802.11i RSN pre-authentication
  41. CONFIG_RSN_PREAUTH=y
  42. # PeerKey handshake for Station to Station Link (IEEE 802.11e DLS)
  43. CONFIG_PEERKEY=y
  44. # IEEE 802.11w (management frame protection)
  45. CONFIG_IEEE80211W=y
  46. # Integrated EAP server
  47. CONFIG_EAP=y
  48. # EAP Re-authentication Protocol (ERP) in integrated EAP server
  49. CONFIG_ERP=y
  50. # EAP-MD5 for the integrated EAP server
  51. CONFIG_EAP_MD5=y
  52. # EAP-TLS for the integrated EAP server
  53. CONFIG_EAP_TLS=y
  54. # EAP-MSCHAPv2 for the integrated EAP server
  55. CONFIG_EAP_MSCHAPV2=y
  56. # EAP-PEAP for the integrated EAP server
  57. CONFIG_EAP_PEAP=y
  58. # EAP-GTC for the integrated EAP server
  59. CONFIG_EAP_GTC=y
  60. # EAP-TTLS for the integrated EAP server
  61. CONFIG_EAP_TTLS=y
  62. # EAP-SIM for the integrated EAP server
  63. #CONFIG_EAP_SIM=y
  64. # EAP-AKA for the integrated EAP server
  65. #CONFIG_EAP_AKA=y
  66. # EAP-AKA' for the integrated EAP server
  67. # This requires CONFIG_EAP_AKA to be enabled, too.
  68. #CONFIG_EAP_AKA_PRIME=y
  69. # EAP-PAX for the integrated EAP server
  70. #CONFIG_EAP_PAX=y
  71. # EAP-PSK for the integrated EAP server (this is _not_ needed for WPA-PSK)
  72. #CONFIG_EAP_PSK=y
  73. # EAP-pwd for the integrated EAP server (secure authentication with a password)
  74. #CONFIG_EAP_PWD=y
  75. # EAP-SAKE for the integrated EAP server
  76. #CONFIG_EAP_SAKE=y
  77. # EAP-GPSK for the integrated EAP server
  78. #CONFIG_EAP_GPSK=y
  79. # Include support for optional SHA256 cipher suite in EAP-GPSK
  80. #CONFIG_EAP_GPSK_SHA256=y
  81. # EAP-FAST for the integrated EAP server
  82. # Note: If OpenSSL is used as the TLS library, OpenSSL 1.0 or newer is needed
  83. # for EAP-FAST support. Older OpenSSL releases would need to be patched, e.g.,
  84. # with openssl-0.9.8x-tls-extensions.patch, to add the needed functions.
  85. #CONFIG_EAP_FAST=y
  86. # Wi-Fi Protected Setup (WPS)
  87. #CONFIG_WPS=y
  88. # Enable UPnP support for external WPS Registrars
  89. #CONFIG_WPS_UPNP=y
  90. # Enable WPS support with NFC config method
  91. #CONFIG_WPS_NFC=y
  92. # EAP-IKEv2
  93. #CONFIG_EAP_IKEV2=y
  94. # Trusted Network Connect (EAP-TNC)
  95. #CONFIG_EAP_TNC=y
  96. # EAP-EKE for the integrated EAP server
  97. #CONFIG_EAP_EKE=y
  98. # PKCS#12 (PFX) support (used to read private key and certificate file from
  99. # a file that usually has extension .p12 or .pfx)
  100. CONFIG_PKCS12=y
  101. # RADIUS authentication server. This provides access to the integrated EAP
  102. # server from external hosts using RADIUS.
  103. #CONFIG_RADIUS_SERVER=y
  104. # Build IPv6 support for RADIUS operations
  105. CONFIG_IPV6=y
  106. # IEEE Std 802.11r-2008 (Fast BSS Transition)
  107. #CONFIG_IEEE80211R=y
  108. # Use the hostapd's IEEE 802.11 authentication (ACL), but without
  109. # the IEEE 802.11 Management capability (e.g., FreeBSD/net80211)
  110. #CONFIG_DRIVER_RADIUS_ACL=y
  111. # IEEE 802.11n (High Throughput) support
  112. #CONFIG_IEEE80211N=y
  113. # Wireless Network Management (IEEE Std 802.11v-2011)
  114. # Note: This is experimental and not complete implementation.
  115. #CONFIG_WNM=y
  116. # IEEE 802.11ac (Very High Throughput) support
  117. #CONFIG_IEEE80211AC=y
  118. # Remove debugging code that is printing out debug messages to stdout.
  119. # This can be used to reduce the size of the hostapd considerably if debugging
  120. # code is not needed.
  121. #CONFIG_NO_STDOUT_DEBUG=y
  122. # Add support for writing debug log to a file: -f /tmp/hostapd.log
  123. # Disabled by default.
  124. #CONFIG_DEBUG_FILE=y
  125. # Add support for sending all debug messages (regardless of debug verbosity)
  126. # to the Linux kernel tracing facility. This helps debug the entire stack by
  127. # making it easy to record everything happening from the driver up into the
  128. # same file, e.g., using trace-cmd.
  129. #CONFIG_DEBUG_LINUX_TRACING=y
  130. # Remove support for RADIUS accounting
  131. #CONFIG_NO_ACCOUNTING=y
  132. # Remove support for RADIUS
  133. #CONFIG_NO_RADIUS=y
  134. # Remove support for VLANs
  135. #CONFIG_NO_VLAN=y
  136. # Enable support for fully dynamic VLANs. This enables hostapd to
  137. # automatically create bridge and VLAN interfaces if necessary.
  138. #CONFIG_FULL_DYNAMIC_VLAN=y
  139. # Use netlink-based kernel API for VLAN operations instead of ioctl()
  140. # Note: This requires libnl 3.1 or newer.
  141. #CONFIG_VLAN_NETLINK=y
  142. # Remove support for dumping internal state through control interface commands
  143. # This can be used to reduce binary size at the cost of disabling a debugging
  144. # option.
  145. #CONFIG_NO_DUMP_STATE=y
  146. # Enable tracing code for developer debugging
  147. # This tracks use of memory allocations and other registrations and reports
  148. # incorrect use with a backtrace of call (or allocation) location.
  149. #CONFIG_WPA_TRACE=y
  150. # For BSD, comment out these.
  151. #LIBS += -lexecinfo
  152. #LIBS_p += -lexecinfo
  153. #LIBS_c += -lexecinfo
  154. # Use libbfd to get more details for developer debugging
  155. # This enables use of libbfd to get more detailed symbols for the backtraces
  156. # generated by CONFIG_WPA_TRACE=y.
  157. #CONFIG_WPA_TRACE_BFD=y
  158. # For BSD, comment out these.
  159. #LIBS += -lbfd -liberty -lz
  160. #LIBS_p += -lbfd -liberty -lz
  161. #LIBS_c += -lbfd -liberty -lz
  162. # hostapd depends on strong random number generation being available from the
  163. # operating system. os_get_random() function is used to fetch random data when
  164. # needed, e.g., for key generation. On Linux and BSD systems, this works by
  165. # reading /dev/urandom. It should be noted that the OS entropy pool needs to be
  166. # properly initialized before hostapd is started. This is important especially
  167. # on embedded devices that do not have a hardware random number generator and
  168. # may by default start up with minimal entropy available for random number
  169. # generation.
  170. #
  171. # As a safety net, hostapd is by default trying to internally collect
  172. # additional entropy for generating random data to mix in with the data
  173. # fetched from the OS. This by itself is not considered to be very strong, but
  174. # it may help in cases where the system pool is not initialized properly.
  175. # However, it is very strongly recommended that the system pool is initialized
  176. # with enough entropy either by using hardware assisted random number
  177. # generator or by storing state over device reboots.
  178. #
  179. # hostapd can be configured to maintain its own entropy store over restarts to
  180. # enhance random number generation. This is not perfect, but it is much more
  181. # secure than using the same sequence of random numbers after every reboot.
  182. # This can be enabled with -e<entropy file> command line option. The specified
  183. # file needs to be readable and writable by hostapd.
  184. #
  185. # If the os_get_random() is known to provide strong random data (e.g., on
  186. # Linux/BSD, the board in question is known to have reliable source of random
  187. # data from /dev/urandom), the internal hostapd random pool can be disabled.
  188. # This will save some in binary size and CPU use. However, this should only be
  189. # considered for builds that are known to be used on devices that meet the
  190. # requirements described above.
  191. #CONFIG_NO_RANDOM_POOL=y
  192. # Should we use poll instead of select? Select is used by default.
  193. #CONFIG_ELOOP_POLL=y
  194. # Should we use epoll instead of select? Select is used by default.
  195. #CONFIG_ELOOP_EPOLL=y
  196. # Should we use kqueue instead of select? Select is used by default.
  197. #CONFIG_ELOOP_KQUEUE=y
  198. # Select TLS implementation
  199. # openssl = OpenSSL (default)
  200. # gnutls = GnuTLS
  201. # internal = Internal TLSv1 implementation (experimental)
  202. # none = Empty template
  203. #CONFIG_TLS=openssl
  204. # TLS-based EAP methods require at least TLS v1.0. Newer version of TLS (v1.1)
  205. # can be enabled to get a stronger construction of messages when block ciphers
  206. # are used.
  207. #CONFIG_TLSV11=y
  208. # TLS-based EAP methods require at least TLS v1.0. Newer version of TLS (v1.2)
  209. # can be enabled to enable use of stronger crypto algorithms.
  210. #CONFIG_TLSV12=y
  211. # If CONFIG_TLS=internal is used, additional library and include paths are
  212. # needed for LibTomMath. Alternatively, an integrated, minimal version of
  213. # LibTomMath can be used. See beginning of libtommath.c for details on benefits
  214. # and drawbacks of this option.
  215. #CONFIG_INTERNAL_LIBTOMMATH=y
  216. #ifndef CONFIG_INTERNAL_LIBTOMMATH
  217. #LTM_PATH=/usr/src/libtommath-0.39
  218. #CFLAGS += -I$(LTM_PATH)
  219. #LIBS += -L$(LTM_PATH)
  220. #LIBS_p += -L$(LTM_PATH)
  221. #endif
  222. # At the cost of about 4 kB of additional binary size, the internal LibTomMath
  223. # can be configured to include faster routines for exptmod, sqr, and div to
  224. # speed up DH and RSA calculation considerably
  225. #CONFIG_INTERNAL_LIBTOMMATH_FAST=y
  226. # Interworking (IEEE 802.11u)
  227. # This can be used to enable functionality to improve interworking with
  228. # external networks.
  229. #CONFIG_INTERWORKING=y
  230. # Hotspot 2.0
  231. #CONFIG_HS20=y
  232. # Enable SQLite database support in hlr_auc_gw, EAP-SIM DB, and eap_user_file
  233. #CONFIG_SQLITE=y
  234. # Enable Fast Session Transfer (FST)
  235. #CONFIG_FST=y
  236. # Enable CLI commands for FST testing
  237. #CONFIG_FST_TEST=y
  238. # Testing options
  239. # This can be used to enable some testing options (see also the example
  240. # configuration file) that are really useful only for testing clients that
  241. # connect to this hostapd. These options allow, for example, to drop a
  242. # certain percentage of probe requests or auth/(re)assoc frames.
  243. #
  244. #CONFIG_TESTING_OPTIONS=y
  245. # Automatic Channel Selection
  246. # This will allow hostapd to pick the channel automatically when channel is set
  247. # to "acs_survey" or "0". Eventually, other ACS algorithms can be added in
  248. # similar way.
  249. #
  250. # Automatic selection is currently only done through initialization, later on
  251. # we hope to do background checks to keep us moving to more ideal channels as
  252. # time goes by. ACS is currently only supported through the nl80211 driver and
  253. # your driver must have survey dump capability that is filled by the driver
  254. # during scanning.
  255. #
  256. # You can customize the ACS survey algorithm with the hostapd.conf variable
  257. # acs_num_scans.
  258. #
  259. # Supported ACS drivers:
  260. # * ath9k
  261. # * ath5k
  262. # * ath10k
  263. #
  264. # For more details refer to:
  265. # http://wireless.kernel.org/en/users/Documentation/acs
  266. #
  267. #CONFIG_ACS=y
  268. # Multiband Operation support
  269. # These extentions facilitate efficient use of multiple frequency bands
  270. # available to the AP and the devices that may associate with it.
  271. #CONFIG_MBO=y
  272. # Client Taxonomy
  273. # Has the AP retain the Probe Request and (Re)Association Request frames from
  274. # a client, from which a signature can be produced which can identify the model
  275. # of client device like "Nexus 6P" or "iPhone 5s".
  276. #CONFIG_TAXONOMY=y