]>
Commit | Line | Data |
---|---|---|
756f72b4 AO |
1 | --- hostapd-2.3/hostapd/.config.orig 2014-10-23 00:21:18.960978755 +0200 |
2 | +++ hostapd-2.3/hostapd/.config 2014-10-23 00:26:22.354654638 +0200 | |
3 | @@ -0,0 +1,319 @@ | |
8aaedcb6 | 4 | +# Example hostapd build time configuration |
5 | +# | |
6 | +# This file lists the configuration options that are used when building the | |
7 | +# hostapd binary. All lines starting with # are ignored. Configuration option | |
8 | +# lines must be commented out complete, if they are not to be included, i.e., | |
9 | +# just setting VARIABLE=n is not disabling that variable. | |
10 | +# | |
11 | +# This file is included in Makefile, so variables like CFLAGS and LIBS can also | |
12 | +# be modified from here. In most cass, these lines should use += in order not | |
13 | +# to override previous values of the variables. | |
14 | + | |
15 | +# Driver interface for Host AP driver | |
16 | +CONFIG_DRIVER_HOSTAP=y | |
17 | + | |
18 | +# Driver interface for wired authenticator | |
756f72b4 | 19 | +CONFIG_DRIVER_WIRED=y |
8aaedcb6 | 20 | + |
21 | +# Driver interface for madwifi driver | |
22 | +CONFIG_DRIVER_MADWIFI=y | |
7f5cb6c4 | 23 | +CFLAGS += -I/usr/include/madwifi # change to the madwifi source directory |
8aaedcb6 | 24 | + |
31a0b335 | 25 | +# Driver interface for drivers using the nl80211 kernel interface |
26 | +CONFIG_DRIVER_NL80211=y | |
8aaedcb6 | 27 | + |
756f72b4 AO |
28 | +# driver_nl80211.c requires libnl. If you are compiling it yourself |
29 | +# you may need to point hostapd to your version of libnl. | |
30 | +# | |
31 | +#CFLAGS += -I$<path to libnl include files> | |
32 | +#LIBS += -L$<path to libnl library files> | |
33 | + | |
34 | +# Use libnl v2.0 (or 3.0) libraries. | |
35 | +#CONFIG_LIBNL20=y | |
36 | + | |
37 | +# Use libnl 3.2 libraries (if this is selected, CONFIG_LIBNL20 is ignored) | |
38 | +CONFIG_LIBNL32=y | |
39 | + | |
40 | + | |
8aaedcb6 | 41 | +# Driver interface for FreeBSD net80211 layer (e.g., Atheros driver) |
42 | +#CONFIG_DRIVER_BSD=y | |
43 | +#CFLAGS += -I/usr/local/include | |
44 | +#LIBS += -L/usr/local/lib | |
7f5cb6c4 JB |
45 | +#LIBS_p += -L/usr/local/lib |
46 | +#LIBS_c += -L/usr/local/lib | |
47 | + | |
48 | +# Driver interface for no driver (e.g., RADIUS server only) | |
756f72b4 | 49 | +CONFIG_DRIVER_NONE=y |
8aaedcb6 | 50 | + |
51 | +# IEEE 802.11F/IAPP | |
52 | +CONFIG_IAPP=y | |
53 | + | |
54 | +# WPA2/IEEE 802.11i RSN pre-authentication | |
55 | +CONFIG_RSN_PREAUTH=y | |
56 | + | |
31a0b335 | 57 | +# PeerKey handshake for Station to Station Link (IEEE 802.11e DLS) |
58 | +CONFIG_PEERKEY=y | |
59 | + | |
60 | +# IEEE 802.11w (management frame protection) | |
31a0b335 | 61 | +CONFIG_IEEE80211W=y |
8aaedcb6 | 62 | + |
63 | +# Integrated EAP server | |
64 | +CONFIG_EAP=y | |
65 | + | |
66 | +# EAP-MD5 for the integrated EAP server | |
67 | +CONFIG_EAP_MD5=y | |
68 | + | |
69 | +# EAP-TLS for the integrated EAP server | |
70 | +CONFIG_EAP_TLS=y | |
71 | + | |
72 | +# EAP-MSCHAPv2 for the integrated EAP server | |
73 | +CONFIG_EAP_MSCHAPV2=y | |
74 | + | |
75 | +# EAP-PEAP for the integrated EAP server | |
76 | +CONFIG_EAP_PEAP=y | |
77 | + | |
78 | +# EAP-GTC for the integrated EAP server | |
79 | +CONFIG_EAP_GTC=y | |
80 | + | |
81 | +# EAP-TTLS for the integrated EAP server | |
82 | +CONFIG_EAP_TTLS=y | |
83 | + | |
84 | +# EAP-SIM for the integrated EAP server | |
85 | +CONFIG_EAP_SIM=y | |
86 | + | |
87 | +# EAP-AKA for the integrated EAP server | |
88 | +CONFIG_EAP_AKA=y | |
89 | + | |
7f5cb6c4 JB |
90 | +# EAP-AKA' for the integrated EAP server |
91 | +# This requires CONFIG_EAP_AKA to be enabled, too. | |
92 | +CONFIG_EAP_AKA_PRIME=y | |
93 | + | |
8aaedcb6 | 94 | +# EAP-PAX for the integrated EAP server |
95 | +CONFIG_EAP_PAX=y | |
96 | + | |
97 | +# EAP-PSK for the integrated EAP server (this is _not_ needed for WPA-PSK) | |
31a0b335 | 98 | +CONFIG_EAP_PSK=y |
99 | + | |
7f5cb6c4 JB |
100 | +# EAP-pwd for the integrated EAP server (secure authentication with a password) |
101 | +CONFIG_EAP_PWD=y | |
102 | + | |
31a0b335 | 103 | +# EAP-SAKE for the integrated EAP server |
104 | +CONFIG_EAP_SAKE=y | |
105 | + | |
106 | +# EAP-GPSK for the integrated EAP server | |
107 | +CONFIG_EAP_GPSK=y | |
108 | +# Include support for optional SHA256 cipher suite in EAP-GPSK | |
109 | +CONFIG_EAP_GPSK_SHA256=y | |
110 | + | |
111 | +# EAP-FAST for the integrated EAP server | |
756f72b4 AO |
112 | +# Note: If OpenSSL is used as the TLS library, OpenSSL 1.0 or newer is needed |
113 | +# for EAP-FAST support. Older OpenSSL releases would need to be patched, e.g., | |
114 | +# with openssl-0.9.8x-tls-extensions.patch, to add the needed functions. | |
115 | +CONFIG_EAP_FAST=y | |
31a0b335 | 116 | + |
7f5cb6c4 JB |
117 | +# Wi-Fi Protected Setup (WPS) |
118 | +CONFIG_WPS=y | |
119 | +# Enable WSC 2.0 support | |
120 | +CONFIG_WPS2=y | |
121 | +# Enable UPnP support for external WPS Registrars | |
122 | +CONFIG_WPS_UPNP=y | |
756f72b4 AO |
123 | +# Enable WPS support with NFC config method |
124 | +CONFIG_WPS_NFC=y | |
7f5cb6c4 | 125 | + |
31a0b335 | 126 | +# EAP-IKEv2 |
127 | +CONFIG_EAP_IKEV2=y | |
128 | + | |
129 | +# Trusted Network Connect (EAP-TNC) | |
130 | +CONFIG_EAP_TNC=y | |
8aaedcb6 | 131 | + |
756f72b4 AO |
132 | +# EAP-EKE for the integrated EAP server |
133 | +CONFIG_EAP_EKE=y | |
134 | + | |
8aaedcb6 | 135 | +# PKCS#12 (PFX) support (used to read private key and certificate file from |
136 | +# a file that usually has extension .p12 or .pfx) | |
137 | +CONFIG_PKCS12=y | |
138 | + | |
139 | +# RADIUS authentication server. This provides access to the integrated EAP | |
140 | +# server from external hosts using RADIUS. | |
141 | +CONFIG_RADIUS_SERVER=y | |
142 | + | |
143 | +# Build IPv6 support for RADIUS operations | |
144 | +CONFIG_IPV6=y | |
31a0b335 | 145 | + |
7f5cb6c4 | 146 | +# IEEE Std 802.11r-2008 (Fast BSS Transition) |
31a0b335 | 147 | +CONFIG_IEEE80211R=y |
148 | + | |
149 | +# Use the hostapd's IEEE 802.11 authentication (ACL), but without | |
150 | +# the IEEE 802.11 Management capability (e.g., madwifi or FreeBSD/net80211) | |
151 | +CONFIG_DRIVER_RADIUS_ACL=y | |
7f5cb6c4 JB |
152 | + |
153 | +# IEEE 802.11n (High Throughput) support | |
154 | +CONFIG_IEEE80211N=y | |
155 | + | |
756f72b4 AO |
156 | +# Wireless Network Management (IEEE Std 802.11v-2011) |
157 | +# Note: This is experimental and not complete implementation. | |
158 | +CONFIG_WNM=y | |
159 | + | |
160 | +# IEEE 802.11ac (Very High Throughput) support | |
161 | +CONFIG_IEEE80211AC=y | |
162 | + | |
7f5cb6c4 JB |
163 | +# Remove debugging code that is printing out debug messages to stdout. |
164 | +# This can be used to reduce the size of the hostapd considerably if debugging | |
165 | +# code is not needed. | |
166 | +#CONFIG_NO_STDOUT_DEBUG=y | |
167 | + | |
168 | +# Add support for writing debug log to a file: -f /tmp/hostapd.log | |
169 | +# Disabled by default. | |
170 | +#CONFIG_DEBUG_FILE=y | |
171 | + | |
756f72b4 AO |
172 | +# Add support for sending all debug messages (regardless of debug verbosity) |
173 | +# to the Linux kernel tracing facility. This helps debug the entire stack by | |
174 | +# making it easy to record everything happening from the driver up into the | |
175 | +# same file, e.g., using trace-cmd. | |
176 | +#CONFIG_DEBUG_LINUX_TRACING=y | |
177 | + | |
7f5cb6c4 JB |
178 | +# Remove support for RADIUS accounting |
179 | +#CONFIG_NO_ACCOUNTING=y | |
180 | + | |
181 | +# Remove support for RADIUS | |
182 | +#CONFIG_NO_RADIUS=y | |
183 | + | |
184 | +# Remove support for VLANs | |
185 | +#CONFIG_NO_VLAN=y | |
186 | + | |
187 | +# Enable support for fully dynamic VLANs. This enables hostapd to | |
188 | +# automatically create bridge and VLAN interfaces if necessary. | |
189 | +CONFIG_FULL_DYNAMIC_VLAN=y | |
190 | + | |
756f72b4 AO |
191 | +# Use netlink-based kernel API for VLAN operations instead of ioctl() |
192 | +# Note: This requires libnl 3.1 or newer. | |
193 | +CONFIG_VLAN_NETLINK=y | |
194 | + | |
195 | +# Remove support for dumping internal state through control interface commands | |
7f5cb6c4 JB |
196 | +# This can be used to reduce binary size at the cost of disabling a debugging |
197 | +# option. | |
198 | +#CONFIG_NO_DUMP_STATE=y | |
199 | + | |
200 | +# Enable tracing code for developer debugging | |
201 | +# This tracks use of memory allocations and other registrations and reports | |
202 | +# incorrect use with a backtrace of call (or allocation) location. | |
203 | +#CONFIG_WPA_TRACE=y | |
204 | +# For BSD, comment out these. | |
205 | +#LIBS += -lexecinfo | |
206 | +#LIBS_p += -lexecinfo | |
207 | +#LIBS_c += -lexecinfo | |
208 | + | |
209 | +# Use libbfd to get more details for developer debugging | |
210 | +# This enables use of libbfd to get more detailed symbols for the backtraces | |
211 | +# generated by CONFIG_WPA_TRACE=y. | |
212 | +#CONFIG_WPA_TRACE_BFD=y | |
213 | +# For BSD, comment out these. | |
214 | +#LIBS += -lbfd -liberty -lz | |
215 | +#LIBS_p += -lbfd -liberty -lz | |
216 | +#LIBS_c += -lbfd -liberty -lz | |
217 | + | |
218 | +# hostapd depends on strong random number generation being available from the | |
219 | +# operating system. os_get_random() function is used to fetch random data when | |
220 | +# needed, e.g., for key generation. On Linux and BSD systems, this works by | |
221 | +# reading /dev/urandom. It should be noted that the OS entropy pool needs to be | |
222 | +# properly initialized before hostapd is started. This is important especially | |
223 | +# on embedded devices that do not have a hardware random number generator and | |
224 | +# may by default start up with minimal entropy available for random number | |
225 | +# generation. | |
226 | +# | |
227 | +# As a safety net, hostapd is by default trying to internally collect | |
228 | +# additional entropy for generating random data to mix in with the data | |
229 | +# fetched from the OS. This by itself is not considered to be very strong, but | |
230 | +# it may help in cases where the system pool is not initialized properly. | |
231 | +# However, it is very strongly recommended that the system pool is initialized | |
232 | +# with enough entropy either by using hardware assisted random number | |
233 | +# generator or by storing state over device reboots. | |
234 | +# | |
235 | +# hostapd can be configured to maintain its own entropy store over restarts to | |
236 | +# enhance random number generation. This is not perfect, but it is much more | |
237 | +# secure than using the same sequence of random numbers after every reboot. | |
238 | +# This can be enabled with -e<entropy file> command line option. The specified | |
239 | +# file needs to be readable and writable by hostapd. | |
240 | +# | |
241 | +# If the os_get_random() is known to provide strong random data (e.g., on | |
242 | +# Linux/BSD, the board in question is known to have reliable source of random | |
243 | +# data from /dev/urandom), the internal hostapd random pool can be disabled. | |
244 | +# This will save some in binary size and CPU use. However, this should only be | |
245 | +# considered for builds that are known to be used on devices that meet the | |
246 | +# requirements described above. | |
247 | +#CONFIG_NO_RANDOM_POOL=y | |
248 | + | |
249 | +# Select TLS implementation | |
250 | +# openssl = OpenSSL (default) | |
251 | +# gnutls = GnuTLS | |
252 | +# internal = Internal TLSv1 implementation (experimental) | |
253 | +# none = Empty template | |
254 | +CONFIG_TLS=openssl | |
255 | + | |
256 | +# TLS-based EAP methods require at least TLS v1.0. Newer version of TLS (v1.1) | |
257 | +# can be enabled to get a stronger construction of messages when block ciphers | |
258 | +# are used. | |
259 | +CONFIG_TLSV11=y | |
260 | + | |
756f72b4 AO |
261 | +# TLS-based EAP methods require at least TLS v1.0. Newer version of TLS (v1.2) |
262 | +# can be enabled to enable use of stronger crypto algorithms. | |
263 | +CONFIG_TLSV12=y | |
264 | + | |
7f5cb6c4 JB |
265 | +# If CONFIG_TLS=internal is used, additional library and include paths are |
266 | +# needed for LibTomMath. Alternatively, an integrated, minimal version of | |
267 | +# LibTomMath can be used. See beginning of libtommath.c for details on benefits | |
268 | +# and drawbacks of this option. | |
269 | +#CONFIG_INTERNAL_LIBTOMMATH=y | |
270 | +#ifndef CONFIG_INTERNAL_LIBTOMMATH | |
271 | +#LTM_PATH=/usr/src/libtommath-0.39 | |
272 | +#CFLAGS += -I$(LTM_PATH) | |
273 | +#LIBS += -L$(LTM_PATH) | |
274 | +#LIBS_p += -L$(LTM_PATH) | |
275 | +#endif | |
276 | +# At the cost of about 4 kB of additional binary size, the internal LibTomMath | |
277 | +# can be configured to include faster routines for exptmod, sqr, and div to | |
278 | +# speed up DH and RSA calculation considerably | |
279 | +#CONFIG_INTERNAL_LIBTOMMATH_FAST=y | |
280 | + | |
281 | +# Interworking (IEEE 802.11u) | |
282 | +# This can be used to enable functionality to improve interworking with | |
283 | +# external networks. | |
284 | +CONFIG_INTERWORKING=y | |
285 | + | |
756f72b4 AO |
286 | +# Hotspot 2.0 |
287 | +CONFIG_HS20=y | |
288 | + | |
289 | +# Enable SQLite database support in hlr_auc_gw, EAP-SIM DB, and eap_user_file | |
290 | +CONFIG_SQLITE=y | |
291 | + | |
292 | +# Testing options | |
293 | +# This can be used to enable some testing options (see also the example | |
294 | +# configuration file) that are really useful only for testing clients that | |
295 | +# connect to this hostapd. These options allow, for example, to drop a | |
296 | +# certain percentage of probe requests or auth/(re)assoc frames. | |
297 | +# | |
298 | +#CONFIG_TESTING_OPTIONS=y | |
299 | + | |
300 | +# Automatic Channel Selection | |
301 | +# This will allow hostapd to pick the channel automatically when channel is set | |
302 | +# to "acs_survey" or "0". Eventually, other ACS algorithms can be added in | |
303 | +# similar way. | |
304 | +# | |
305 | +# Automatic selection is currently only done through initialization, later on | |
306 | +# we hope to do background checks to keep us moving to more ideal channels as | |
307 | +# time goes by. ACS is currently only supported through the nl80211 driver and | |
308 | +# your driver must have survey dump capability that is filled by the driver | |
309 | +# during scanning. | |
310 | +# | |
311 | +# You can customize the ACS survey algorithm with the hostapd.conf variable | |
312 | +# acs_num_scans. | |
313 | +# | |
314 | +# Supported ACS drivers: | |
315 | +# * ath9k | |
316 | +# * ath5k | |
317 | +# * ath10k | |
318 | +# | |
319 | +# For more details refer to: | |
320 | +# http://wireless.kernel.org/en/users/Documentation/acs | |
321 | +# | |
322 | +CONFIG_ACS=y |