6 CFLAGS = -MMD -O2 -Wall -g
10 CFLAGS += -I../src/utils
12 # Uncomment following line and set the path to your kernel tree include
13 # directory if your C library does not include all header files.
14 # CFLAGS += -DUSE_KERNEL_HEADERS -I/usr/src/linux/include
19 ifdef CONFIG_NATIVE_WINDOWS
26 ifeq ($(CONFIG_OS), internal)
27 CFLAGS += -DOS_NO_C_LIB_DEFINES
30 ifdef CONFIG_NATIVE_WINDOWS
31 CFLAGS += -DCONFIG_NATIVE_WINDOWS
38 OBJS += ../src/ap/hostapd.o
39 OBJS += ../src/ap/wpa_auth_glue.o
40 OBJS += ../src/ap/drv_callbacks.o
41 OBJS += ../src/ap/ap_drv_ops.o
42 OBJS += ../src/ap/utils.o
43 OBJS += ../src/ap/authsrv.o
44 OBJS += ../src/ap/ieee802_1x.o
45 OBJS += ../src/ap/ap_config.o
46 OBJS += ../src/ap/ieee802_11_auth.o
47 OBJS += ../src/ap/sta_info.o
48 OBJS += ../src/ap/wpa_auth.o
49 OBJS += ../src/ap/tkip_countermeasures.o
50 OBJS += ../src/ap/ap_mlme.o
51 OBJS += ../src/ap/wpa_auth_ie.o
52 OBJS += ../src/ap/preauth_auth.o
53 OBJS += ../src/ap/pmksa_cache_auth.o
60 OBJS += ../src/drivers/drivers.o
63 ifdef CONFIG_WPA_TRACE
65 OBJS += ../src/utils/trace.o
67 CFLAGS += -funwind-tables
68 ifdef CONFIG_WPA_TRACE_BFD
69 CFLAGS += -DWPA_TRACE_BFD
75 OBJS += ../src/utils/eloop.o
76 OBJS += ../src/utils/common.o
77 OBJS += ../src/utils/wpa_debug.o
78 OBJS += ../src/utils/wpabuf.o
79 OBJS += ../src/utils/os_$(CONFIG_OS).o
80 OBJS += ../src/utils/ip_addr.o
82 OBJS += ../src/common/ieee802_11_common.o
83 OBJS += ../src/common/wpa_common.o
85 OBJS += ../src/eapol_auth/eapol_auth_sm.o
88 ifndef CONFIG_NO_DUMP_STATE
89 # define HOSTAPD_DUMP_STATE to include SIGUSR1 handler for dumping state to
90 # a file (undefine it, if you want to save in binary size)
91 CFLAGS += -DHOSTAPD_DUMP_STATE
93 OBJS += ../src/eapol_auth/eapol_auth_dump.o
96 ifdef CONFIG_NO_RADIUS
97 CFLAGS += -DCONFIG_NO_RADIUS
98 CONFIG_NO_ACCOUNTING=y
100 OBJS += ../src/radius/radius.o
101 OBJS += ../src/radius/radius_client.o
104 ifdef CONFIG_NO_ACCOUNTING
105 CFLAGS += -DCONFIG_NO_ACCOUNTING
107 OBJS += ../src/ap/accounting.o
111 CFLAGS += -DCONFIG_NO_VLAN
113 OBJS += ../src/ap/vlan_init.o
116 ifdef CONFIG_NO_CTRL_IFACE
117 CFLAGS += -DCONFIG_NO_CTRL_IFACE
120 OBJS += ../src/ap/ctrl_iface_ap.o
123 OBJS += ../src/crypto/md5.o
125 CFLAGS += -DCONFIG_CTRL_IFACE -DCONFIG_CTRL_IFACE_UNIX
128 CFLAGS += -DCONFIG_IAPP
129 OBJS += ../src/ap/iapp.o
132 ifdef CONFIG_RSN_PREAUTH
133 CFLAGS += -DCONFIG_RSN_PREAUTH
138 CFLAGS += -DCONFIG_PEERKEY
139 OBJS += ../src/ap/peerkey_auth.o
142 ifdef CONFIG_IEEE80211W
143 CFLAGS += -DCONFIG_IEEE80211W
148 ifdef CONFIG_IEEE80211R
149 CFLAGS += -DCONFIG_IEEE80211R
150 OBJS += ../src/ap/wpa_auth_ft.o
156 ifdef CONFIG_IEEE80211N
157 CFLAGS += -DCONFIG_IEEE80211N
160 include ../src/drivers/drivers.mak
161 OBJS += $(DRV_AP_OBJS)
162 CFLAGS += $(DRV_AP_CFLAGS)
163 LDFLAGS += $(DRV_AP_LDFLAGS)
164 LIBS += $(DRV_AP_LIBS)
166 ifdef CONFIG_L2_PACKET
167 ifdef CONFIG_DNET_PCAP
168 ifdef CONFIG_L2_FREEBSD
170 OBJS += ../src/l2_packet/l2_packet_freebsd.o
172 LIBS += -ldnet -lpcap
173 OBJS += ../src/l2_packet/l2_packet_pcap.o
176 OBJS += ../src/l2_packet/l2_packet_linux.o
179 OBJS += ../src/l2_packet/l2_packet_none.o
184 CFLAGS += -DEAP_SERVER_MD5
185 OBJS += ../src/eap_server/eap_server_md5.o
190 CFLAGS += -DEAP_SERVER_TLS
191 OBJS += ../src/eap_server/eap_server_tls.o
195 ifdef CONFIG_EAP_PEAP
196 CFLAGS += -DEAP_SERVER_PEAP
197 OBJS += ../src/eap_server/eap_server_peap.o
198 OBJS += ../src/eap_common/eap_peap_common.o
200 CONFIG_EAP_MSCHAPV2=y
203 ifdef CONFIG_EAP_TTLS
204 CFLAGS += -DEAP_SERVER_TTLS
205 OBJS += ../src/eap_server/eap_server_ttls.o
210 ifdef CONFIG_EAP_MSCHAPV2
211 CFLAGS += -DEAP_SERVER_MSCHAPV2
212 OBJS += ../src/eap_server/eap_server_mschapv2.o
217 CFLAGS += -DEAP_SERVER_GTC
218 OBJS += ../src/eap_server/eap_server_gtc.o
222 CFLAGS += -DEAP_SERVER_SIM
223 OBJS += ../src/eap_server/eap_server_sim.o
224 CONFIG_EAP_SIM_COMMON=y
229 CFLAGS += -DEAP_SERVER_AKA
230 OBJS += ../src/eap_server/eap_server_aka.o
231 CONFIG_EAP_SIM_COMMON=y
236 ifdef CONFIG_EAP_AKA_PRIME
237 CFLAGS += -DEAP_SERVER_AKA_PRIME
240 ifdef CONFIG_EAP_SIM_COMMON
241 OBJS += ../src/eap_common/eap_sim_common.o
242 # Example EAP-SIM/AKA interface for GSM/UMTS authentication. This can be
243 # replaced with another file implementating the interface specified in
245 OBJS += ../src/eap_server/eap_sim_db.o
250 CFLAGS += -DEAP_SERVER_PAX
251 OBJS += ../src/eap_server/eap_server_pax.o ../src/eap_common/eap_pax_common.o
255 CFLAGS += -DEAP_SERVER_PSK
256 OBJS += ../src/eap_server/eap_server_psk.o ../src/eap_common/eap_psk_common.o
262 ifdef CONFIG_EAP_SAKE
263 CFLAGS += -DEAP_SERVER_SAKE
264 OBJS += ../src/eap_server/eap_server_sake.o ../src/eap_common/eap_sake_common.o
267 ifdef CONFIG_EAP_GPSK
268 CFLAGS += -DEAP_SERVER_GPSK
269 OBJS += ../src/eap_server/eap_server_gpsk.o ../src/eap_common/eap_gpsk_common.o
270 ifdef CONFIG_EAP_GPSK_SHA256
271 CFLAGS += -DEAP_SERVER_GPSK_SHA256
277 ifdef CONFIG_EAP_VENDOR_TEST
278 CFLAGS += -DEAP_SERVER_VENDOR_TEST
279 OBJS += ../src/eap_server/eap_server_vendor_test.o
282 ifdef CONFIG_EAP_FAST
283 CFLAGS += -DEAP_SERVER_FAST
284 OBJS += ../src/eap_server/eap_server_fast.o
285 OBJS += ../src/eap_common/eap_fast_common.o
292 CFLAGS += -DCONFIG_WPS -DEAP_SERVER_WSC
293 OBJS += ../src/utils/uuid.o
294 OBJS += ../src/ap/wps_hostapd.o
295 OBJS += ../src/eap_server/eap_server_wsc.o ../src/eap_common/eap_wsc_common.o
296 OBJS += ../src/wps/wps.o
297 OBJS += ../src/wps/wps_common.o
298 OBJS += ../src/wps/wps_attr_parse.o
299 OBJS += ../src/wps/wps_attr_build.o
300 OBJS += ../src/wps/wps_attr_process.o
301 OBJS += ../src/wps/wps_dev_attr.o
302 OBJS += ../src/wps/wps_enrollee.o
303 OBJS += ../src/wps/wps_registrar.o
312 CFLAGS += -DCONFIG_WPS_UFD
313 OBJS += ../src/wps/wps_ufd.o
318 CFLAGS += -DCONFIG_WPS_NFC
319 OBJS += ../src/wps/ndef.o
320 OBJS += ../src/wps/wps_nfc.o
322 ifdef CONFIG_WPS_NFC_PN531
323 PN531_PATH ?= /usr/local/src/nfc
324 CFLAGS += -DCONFIG_WPS_NFC_PN531
325 CFLAGS += -I${PN531_PATH}/inc
326 OBJS += ../src/wps/wps_nfc_pn531.o
327 LIBS += ${PN531_PATH}/lib/wpsnfc.dll
328 LIBS += ${PN531_PATH}/lib/libnfc_mapping_pn53x.dll
331 ifdef CONFIG_WPS_STRICT
332 CFLAGS += -DCONFIG_WPS_STRICT
333 OBJS += ../src/wps/wps_validate.o
338 CFLAGS += -DCONFIG_WPS_OOB
341 ifdef CONFIG_WPS_UPNP
342 CFLAGS += -DCONFIG_WPS_UPNP
343 OBJS += ../src/wps/wps_upnp.o
344 OBJS += ../src/wps/wps_upnp_ssdp.o
345 OBJS += ../src/wps/wps_upnp_web.o
346 OBJS += ../src/wps/wps_upnp_event.o
347 OBJS += ../src/wps/wps_upnp_ap.o
348 OBJS += ../src/wps/upnp_xml.o
349 OBJS += ../src/wps/httpread.o
350 OBJS += ../src/wps/http_client.o
351 OBJS += ../src/wps/http_server.o
356 ifdef CONFIG_EAP_IKEV2
357 CFLAGS += -DEAP_SERVER_IKEV2
358 OBJS += ../src/eap_server/eap_server_ikev2.o ../src/eap_server/ikev2.o
359 OBJS += ../src/eap_common/eap_ikev2_common.o ../src/eap_common/ikev2_common.o
367 CFLAGS += -DEAP_SERVER_TNC
368 OBJS += ../src/eap_server/eap_server_tnc.o
369 OBJS += ../src/eap_server/tncs.o
371 ifndef CONFIG_DRIVER_BSD
376 # Basic EAP functionality is needed for EAPOL
377 OBJS += eap_register.o
378 OBJS += ../src/eap_server/eap_server.o
379 OBJS += ../src/eap_common/eap_common.o
380 OBJS += ../src/eap_server/eap_server_methods.o
381 OBJS += ../src/eap_server/eap_server_identity.o
382 CFLAGS += -DEAP_SERVER_IDENTITY
385 CFLAGS += -DEAP_SERVER
389 CFLAGS += -DPKCS12_FUNCS
393 OBJS += ../src/crypto/ms_funcs.o
399 OBJS += ../src/eap_common/chap.o
404 # Shared TLS functions (needed for EAP_TLS, EAP_PEAP, and EAP_TTLS)
405 CFLAGS += -DEAP_TLS_FUNCS
406 OBJS += ../src/eap_server/eap_server_tls_common.o
414 ifeq ($(CONFIG_TLS), openssl)
416 OBJS += ../src/crypto/tls_openssl.o
419 OBJS += ../src/crypto/crypto_openssl.o
420 HOBJS += ../src/crypto/crypto_openssl.o
421 ifdef NEED_FIPS186_2_PRF
422 OBJS += ../src/crypto/fips_prf_openssl.o
428 ifeq ($(CONFIG_TLS), gnutls)
430 OBJS += ../src/crypto/tls_gnutls.o
431 LIBS += -lgnutls -lgpg-error
432 ifdef CONFIG_GNUTLS_EXTRA
433 CFLAGS += -DCONFIG_GNUTLS_EXTRA
434 LIBS += -lgnutls-extra
437 OBJS += ../src/crypto/crypto_gnutls.o
438 HOBJS += ../src/crypto/crypto_gnutls.o
439 ifdef NEED_FIPS186_2_PRF
440 OBJS += ../src/crypto/fips_prf_gnutls.o
444 CONFIG_INTERNAL_SHA256=y
445 CONFIG_INTERNAL_RC4=y
446 CONFIG_INTERNAL_DH_GROUP5=y
449 ifeq ($(CONFIG_TLS), schannel)
451 OBJS += ../src/crypto/tls_schannel.o
453 OBJS += ../src/crypto/crypto_cryptoapi.o
454 OBJS_p += ../src/crypto/crypto_cryptoapi.o
455 CONFIG_INTERNAL_SHA256=y
456 CONFIG_INTERNAL_RC4=y
457 CONFIG_INTERNAL_DH_GROUP5=y
460 ifeq ($(CONFIG_TLS), nss)
462 OBJS += ../src/crypto/tls_nss.o
465 OBJS += ../src/crypto/crypto_nss.o
466 ifdef NEED_FIPS186_2_PRF
467 OBJS += ../src/crypto/fips_prf_nss.o
471 CONFIG_INTERNAL_MD4=y
472 CONFIG_INTERNAL_DH_GROUP5=y
475 ifeq ($(CONFIG_TLS), internal)
477 CONFIG_CRYPTO=internal
480 OBJS += ../src/crypto/crypto_internal-rsa.o
481 OBJS += ../src/crypto/tls_internal.o
482 OBJS += ../src/tls/tlsv1_common.o
483 OBJS += ../src/tls/tlsv1_record.o
484 OBJS += ../src/tls/tlsv1_cred.o
485 OBJS += ../src/tls/tlsv1_server.o
486 OBJS += ../src/tls/tlsv1_server_write.o
487 OBJS += ../src/tls/tlsv1_server_read.o
488 OBJS += ../src/tls/asn1.o
489 OBJS += ../src/tls/rsa.o
490 OBJS += ../src/tls/x509v3.o
491 OBJS += ../src/tls/pkcs1.o
492 OBJS += ../src/tls/pkcs5.o
493 OBJS += ../src/tls/pkcs8.o
499 CFLAGS += -DCONFIG_TLS_INTERNAL
500 CFLAGS += -DCONFIG_TLS_INTERNAL_SERVER
504 OBJS += ../src/crypto/crypto_internal-cipher.o
507 OBJS += ../src/crypto/crypto_internal-modexp.o
508 OBJS += ../src/tls/bignum.o
510 ifeq ($(CONFIG_CRYPTO), libtomcrypt)
511 OBJS += ../src/crypto/crypto_libtomcrypt.o
512 LIBS += -ltomcrypt -ltfm
513 LIBS_h += -ltomcrypt -ltfm
514 CONFIG_INTERNAL_SHA256=y
515 CONFIG_INTERNAL_RC4=y
516 CONFIG_INTERNAL_DH_GROUP5=y
518 ifeq ($(CONFIG_CRYPTO), internal)
519 OBJS += ../src/crypto/crypto_internal.o
521 CFLAGS += -DCONFIG_CRYPTO_INTERNAL
522 ifdef CONFIG_INTERNAL_LIBTOMMATH
523 CFLAGS += -DCONFIG_INTERNAL_LIBTOMMATH
524 ifdef CONFIG_INTERNAL_LIBTOMMATH_FAST
531 CONFIG_INTERNAL_AES=y
532 CONFIG_INTERNAL_DES=y
533 CONFIG_INTERNAL_SHA1=y
534 CONFIG_INTERNAL_MD4=y
535 CONFIG_INTERNAL_MD5=y
536 CONFIG_INTERNAL_SHA256=y
537 CONFIG_INTERNAL_RC4=y
538 CONFIG_INTERNAL_DH_GROUP5=y
540 ifeq ($(CONFIG_CRYPTO), cryptoapi)
541 OBJS += ../src/crypto/crypto_cryptoapi.o
542 OBJS_p += ../src/crypto/crypto_cryptoapi.o
543 CFLAGS += -DCONFIG_CRYPTO_CRYPTOAPI
544 CONFIG_INTERNAL_SHA256=y
545 CONFIG_INTERNAL_RC4=y
549 ifeq ($(CONFIG_TLS), none)
551 OBJS += ../src/crypto/tls_none.o
552 CFLAGS += -DEAP_TLS_NONE
553 CONFIG_INTERNAL_AES=y
554 CONFIG_INTERNAL_SHA1=y
555 CONFIG_INTERNAL_MD5=y
557 OBJS += ../src/crypto/crypto_none.o
558 OBJS_p += ../src/crypto/crypto_none.o
559 CONFIG_INTERNAL_SHA256=y
560 CONFIG_INTERNAL_RC4=y
564 OBJS += ../src/crypto/tls_none.o
565 ifeq ($(CONFIG_TLS), internal)
566 CONFIG_INTERNAL_AES=y
567 CONFIG_INTERNAL_SHA1=y
568 CONFIG_INTERNAL_MD5=y
569 CONFIG_INTERNAL_RC4=y
573 AESOBJS = # none so far
574 ifdef CONFIG_INTERNAL_AES
575 AESOBJS += ../src/crypto/aes-internal.o ../src/crypto/aes-internal-enc.o
578 AESOBJS += ../src/crypto/aes-wrap.o
580 AESOBJS += ../src/crypto/aes-eax.o
584 AESOBJS += ../src/crypto/aes-ctr.o
586 ifdef NEED_AES_ENCBLOCK
587 AESOBJS += ../src/crypto/aes-encblock.o
590 AESOBJS += ../src/crypto/aes-omac1.o
592 ifdef NEED_AES_UNWRAP
594 AESOBJS += ../src/crypto/aes-unwrap.o
598 AESOBJS += ../src/crypto/aes-cbc.o
601 ifdef CONFIG_INTERNAL_AES
602 AESOBJS += ../src/crypto/aes-internal-dec.o
610 SHA1OBJS += ../src/crypto/sha1.o
611 ifdef CONFIG_INTERNAL_SHA1
612 SHA1OBJS += ../src/crypto/sha1-internal.o
613 ifdef NEED_FIPS186_2_PRF
614 SHA1OBJS += ../src/crypto/fips_prf_internal.o
617 SHA1OBJS += ../src/crypto/sha1-pbkdf2.o
619 SHA1OBJS += ../src/crypto/sha1-tprf.o
622 SHA1OBJS += ../src/crypto/sha1-tlsprf.o
631 ifdef CONFIG_INTERNAL_MD5
632 OBJS += ../src/crypto/md5-internal.o
637 ifdef CONFIG_INTERNAL_MD4
638 OBJS += ../src/crypto/md4-internal.o
643 ifdef CONFIG_INTERNAL_DES
644 OBJS += ../src/crypto/des-internal.o
649 ifdef CONFIG_INTERNAL_RC4
650 OBJS += ../src/crypto/rc4.o
655 OBJS += ../src/crypto/sha256.o
656 ifdef CONFIG_INTERNAL_SHA256
657 OBJS += ../src/crypto/sha256-internal.o
662 OBJS += ../src/crypto/dh_groups.o
664 ifdef NEED_DH_GROUPS_ALL
665 CFLAGS += -DALL_DH_GROUPS
667 ifdef CONFIG_INTERNAL_DH_GROUP5
669 OBJS += ../src/crypto/dh_group5.o
673 ifdef CONFIG_RADIUS_SERVER
674 CFLAGS += -DRADIUS_SERVER
675 OBJS += ../src/radius/radius_server.o
679 CFLAGS += -DCONFIG_IPV6
682 ifdef CONFIG_DRIVER_RADIUS_ACL
683 CFLAGS += -DCONFIG_DRIVER_RADIUS_ACL
686 ifdef CONFIG_FULL_DYNAMIC_VLAN
687 # define CONFIG_FULL_DYNAMIC_VLAN to have hostapd manipulate bridges
688 # and vlan interfaces for the vlan feature.
689 CFLAGS += -DCONFIG_FULL_DYNAMIC_VLAN
693 OBJS += ../src/utils/base64.o
697 OBJS += ../src/ap/beacon.o
698 OBJS += ../src/ap/wmm.o
699 OBJS += ../src/ap/ap_list.o
700 OBJS += ../src/ap/ieee802_11.o
701 OBJS += ../src/ap/hw_features.o
702 CFLAGS += -DNEED_AP_MLME
704 ifdef CONFIG_IEEE80211N
705 OBJS += ../src/ap/ieee802_11_ht.o
708 ifdef CONFIG_NO_STDOUT_DEBUG
709 CFLAGS += -DCONFIG_NO_STDOUT_DEBUG
712 ALL=hostapd hostapd_cli
714 all: verify_config $(ALL)
724 $(Q)$(CC) -c -o $@ $(CFLAGS) $<
728 @if [ ! -r .config ]; then \
729 echo 'Building hostapd requires a configuration file'; \
730 echo '(.config). See README for more instructions. You can'; \
731 echo 'run "cp defconfig .config" to create an example'; \
732 echo 'configuration.'; \
737 for i in $(ALL); do cp -f $$i /usr/local/bin/$$i; done
739 ../src/drivers/build.hostapd:
740 @if [ -f ../src/drivers/build.wpa_supplicant ]; then \
741 $(MAKE) -C ../src/drivers clean; \
743 @touch ../src/drivers/build.hostapd
745 BCHECK=../src/drivers/build.hostapd
747 hostapd: $(BCHECK) $(OBJS)
748 $(CC) $(LDFLAGS) -o hostapd $(OBJS) $(LIBS)
750 OBJS_c = hostapd_cli.o ../src/common/wpa_ctrl.o ../src/utils/os_$(CONFIG_OS).o
751 ifdef CONFIG_WPA_TRACE
752 OBJS_c += ../src/utils/trace.o
753 OBJS_c += ../src/utils/wpa_debug.o
755 hostapd_cli: $(OBJS_c)
756 $(CC) $(LDFLAGS) -o hostapd_cli $(OBJS_c) $(LIBS_c)
758 NOBJS = nt_password_hash.o ../src/crypto/ms_funcs.o $(SHA1OBJS) ../src/crypto/md5.o
760 ifdef CONFIG_INTERNAL_RC4
761 NOBJS += ../src/crypto/rc4.o
764 ifdef CONFIG_INTERNAL_MD5
765 NOBJS += ../src/crypto/md5-internal.o
767 NOBJS += ../src/crypto/crypto_openssl.o ../src/utils/os_$(CONFIG_OS).o
768 NOBJS += ../src/utils/wpa_debug.o
769 NOBJS += ../src/utils/wpabuf.o
770 ifdef CONFIG_WPA_TRACE
771 NOBJS += ../src/utils/trace.o
778 HOBJS += hlr_auc_gw.o ../src/utils/common.o ../src/utils/wpa_debug.o ../src/utils/os_$(CONFIG_OS).o ../src/utils/wpabuf.o ../src/crypto/milenage.o
779 HOBJS += ../src/crypto/aes-encblock.o
780 ifdef CONFIG_INTERNAL_AES
781 HOBJS += ../src/crypto/aes-internal.o
782 HOBJS += ../src/crypto/aes-internal-enc.o
785 nt_password_hash: $(NOBJS)
786 $(CC) $(LDFLAGS) -o nt_password_hash $(NOBJS) $(LIBS_n)
789 $(CC) $(LDFLAGS) -o hlr_auc_gw $(HOBJS) $(LIBS_h)
792 $(MAKE) -C ../src clean
793 rm -f core *~ *.o hostapd hostapd_cli nt_password_hash hlr_auc_gw
796 -include $(OBJS:%.o=%.d)