6 CFLAGS = -MMD -O2 -Wall -g
10 CFLAGS += -I../src/crypto
11 CFLAGS += -I../src/utils
13 # Uncomment following line and set the path to your kernel tree include
14 # directory if your C library does not include all header files.
15 # CFLAGS += -DUSE_KERNEL_HEADERS -I/usr/src/linux/include
20 ifdef CONFIG_NATIVE_WINDOWS
27 ifeq ($(CONFIG_OS), internal)
28 CFLAGS += -DOS_NO_C_LIB_DEFINES
31 ifdef CONFIG_NATIVE_WINDOWS
32 CFLAGS += -DCONFIG_NATIVE_WINDOWS
36 OBJS = hostapd.o main.o ieee802_1x.o \
37 config.o ieee802_11_auth.o \
39 preauth.o pmksa_cache.o \
41 tkip_countermeasures.o \
48 OBJS += ../src/drivers/drivers.o
49 OBJS += ../src/drivers/scan_helpers.o
52 OBJS += ../src/utils/eloop.o
53 OBJS += ../src/utils/common.o
54 OBJS += ../src/utils/wpa_debug.o
55 OBJS += ../src/utils/wpabuf.o
56 OBJS += ../src/utils/os_$(CONFIG_OS).o
57 OBJS += ../src/utils/ip_addr.o
59 OBJS += ../src/common/ieee802_11_common.o
60 OBJS += ../src/common/wpa_common.o
62 OBJS += ../src/eapol_auth/eapol_auth_sm.o
65 ifndef CONFIG_NO_DUMP_STATE
66 # define HOSTAPD_DUMP_STATE to include SIGUSR1 handler for dumping state to
67 # a file (undefine it, if you want to save in binary size)
68 CFLAGS += -DHOSTAPD_DUMP_STATE
70 OBJS += ../src/eapol_auth/eapol_auth_dump.o
73 ifdef CONFIG_NO_RADIUS
74 CFLAGS += -DCONFIG_NO_RADIUS
75 CONFIG_NO_ACCOUNTING=y
77 OBJS += ../src/radius/radius.o
78 OBJS += ../src/radius/radius_client.o
81 ifdef CONFIG_NO_ACCOUNTING
82 CFLAGS += -DCONFIG_NO_ACCOUNTING
88 CFLAGS += -DCONFIG_NO_VLAN
93 ifdef CONFIG_NO_CTRL_IFACE
94 CFLAGS += -DCONFIG_NO_CTRL_IFACE
97 OBJS += ctrl_iface_ap.o
100 OBJS += ../src/crypto/md5.o
102 CFLAGS += -DCONFIG_CTRL_IFACE -DCONFIG_CTRL_IFACE_UNIX
105 CFLAGS += -DCONFIG_IAPP
109 ifdef CONFIG_RSN_PREAUTH
110 CFLAGS += -DCONFIG_RSN_PREAUTH
115 CFLAGS += -DCONFIG_PEERKEY
119 ifdef CONFIG_IEEE80211W
120 CFLAGS += -DCONFIG_IEEE80211W
125 ifdef CONFIG_IEEE80211R
126 CFLAGS += -DCONFIG_IEEE80211R
133 ifdef CONFIG_IEEE80211N
134 CFLAGS += -DCONFIG_IEEE80211N
137 include ../src/drivers/drivers.mak
138 OBJS += $(DRV_AP_OBJS)
139 CFLAGS += $(DRV_AP_CFLAGS)
140 LDFLAGS += $(DRV_AP_LDFLAGS)
141 LIBS += $(DRV_AP_LIBS)
143 ifdef CONFIG_L2_PACKET
144 ifdef CONFIG_DNET_PCAP
145 ifdef CONFIG_L2_FREEBSD
147 OBJS += ../src/l2_packet/l2_packet_freebsd.o
149 LIBS += -ldnet -lpcap
150 OBJS += ../src/l2_packet/l2_packet_pcap.o
153 OBJS += ../src/l2_packet/l2_packet_linux.o
156 OBJS += ../src/l2_packet/l2_packet_none.o
161 CFLAGS += -DEAP_SERVER_MD5
162 OBJS += ../src/eap_server/eap_md5.o
167 CFLAGS += -DEAP_SERVER_TLS
168 OBJS += ../src/eap_server/eap_tls.o
172 ifdef CONFIG_EAP_PEAP
173 CFLAGS += -DEAP_SERVER_PEAP
174 OBJS += ../src/eap_server/eap_peap.o
175 OBJS += ../src/eap_common/eap_peap_common.o
177 CONFIG_EAP_MSCHAPV2=y
180 ifdef CONFIG_EAP_TTLS
181 CFLAGS += -DEAP_SERVER_TTLS
182 OBJS += ../src/eap_server/eap_ttls.o
187 ifdef CONFIG_EAP_MSCHAPV2
188 CFLAGS += -DEAP_SERVER_MSCHAPV2
189 OBJS += ../src/eap_server/eap_mschapv2.o
194 CFLAGS += -DEAP_SERVER_GTC
195 OBJS += ../src/eap_server/eap_gtc.o
199 CFLAGS += -DEAP_SERVER_SIM
200 OBJS += ../src/eap_server/eap_sim.o
201 CONFIG_EAP_SIM_COMMON=y
206 CFLAGS += -DEAP_SERVER_AKA
207 OBJS += ../src/eap_server/eap_aka.o
208 CONFIG_EAP_SIM_COMMON=y
213 ifdef CONFIG_EAP_AKA_PRIME
214 CFLAGS += -DEAP_SERVER_AKA_PRIME
217 ifdef CONFIG_EAP_SIM_COMMON
218 OBJS += ../src/eap_common/eap_sim_common.o
219 # Example EAP-SIM/AKA interface for GSM/UMTS authentication. This can be
220 # replaced with another file implementating the interface specified in
222 OBJS += ../src/eap_server/eap_sim_db.o
227 CFLAGS += -DEAP_SERVER_PAX
228 OBJS += ../src/eap_server/eap_pax.o ../src/eap_common/eap_pax_common.o
232 CFLAGS += -DEAP_SERVER_PSK
233 OBJS += ../src/eap_server/eap_psk.o ../src/eap_common/eap_psk_common.o
239 ifdef CONFIG_EAP_SAKE
240 CFLAGS += -DEAP_SERVER_SAKE
241 OBJS += ../src/eap_server/eap_sake.o ../src/eap_common/eap_sake_common.o
244 ifdef CONFIG_EAP_GPSK
245 CFLAGS += -DEAP_SERVER_GPSK
246 OBJS += ../src/eap_server/eap_gpsk.o ../src/eap_common/eap_gpsk_common.o
247 ifdef CONFIG_EAP_GPSK_SHA256
248 CFLAGS += -DEAP_SERVER_GPSK_SHA256
254 ifdef CONFIG_EAP_VENDOR_TEST
255 CFLAGS += -DEAP_SERVER_VENDOR_TEST
256 OBJS += ../src/eap_server/eap_vendor_test.o
259 ifdef CONFIG_EAP_FAST
260 CFLAGS += -DEAP_SERVER_FAST
261 OBJS += ../src/eap_server/eap_fast.o
262 OBJS += ../src/eap_common/eap_fast_common.o
269 CFLAGS += -DCONFIG_WPS -DEAP_SERVER_WSC
270 OBJS += ../src/utils/uuid.o
271 OBJS += wps_hostapd.o
272 OBJS += ../src/eap_server/eap_wsc.o ../src/eap_common/eap_wsc_common.o
273 OBJS += ../src/wps/wps.o
274 OBJS += ../src/wps/wps_common.o
275 OBJS += ../src/wps/wps_attr_parse.o
276 OBJS += ../src/wps/wps_attr_build.o
277 OBJS += ../src/wps/wps_attr_process.o
278 OBJS += ../src/wps/wps_dev_attr.o
279 OBJS += ../src/wps/wps_enrollee.o
280 OBJS += ../src/wps/wps_registrar.o
288 CFLAGS += -DCONFIG_WPS_UFD
289 OBJS += ../src/wps/wps_ufd.o
294 CFLAGS += -DCONFIG_WPS_NFC
295 OBJS += ../src/wps/ndef.o
296 OBJS += ../src/wps/wps_nfc.o
298 ifdef CONFIG_WPS_NFC_PN531
299 PN531_PATH ?= /usr/local/src/nfc
300 CFLAGS += -DCONFIG_WPS_NFC_PN531
301 CFLAGS += -I${PN531_PATH}/inc
302 OBJS += ../src/wps/wps_nfc_pn531.o
303 LIBS += ${PN531_PATH}/lib/wpsnfc.dll
304 LIBS += ${PN531_PATH}/lib/libnfc_mapping_pn53x.dll
309 CFLAGS += -DCONFIG_WPS_OOB
312 ifdef CONFIG_WPS_UPNP
313 CFLAGS += -DCONFIG_WPS_UPNP
314 OBJS += ../src/wps/wps_upnp.o
315 OBJS += ../src/wps/wps_upnp_ssdp.o
316 OBJS += ../src/wps/wps_upnp_web.o
317 OBJS += ../src/wps/wps_upnp_event.o
318 OBJS += ../src/wps/upnp_xml.o
319 OBJS += ../src/wps/httpread.o
320 OBJS += ../src/wps/http_client.o
321 OBJS += ../src/wps/http_server.o
326 ifdef CONFIG_EAP_IKEV2
327 CFLAGS += -DEAP_SERVER_IKEV2
328 OBJS += ../src/eap_server/eap_ikev2.o ../src/eap_server/ikev2.o
329 OBJS += ../src/eap_common/eap_ikev2_common.o ../src/eap_common/ikev2_common.o
336 CFLAGS += -DEAP_SERVER_TNC
337 OBJS += ../src/eap_server/eap_tnc.o
338 OBJS += ../src/eap_server/tncs.o
340 ifndef CONFIG_DRIVER_BSD
345 # Basic EAP functionality is needed for EAPOL
346 OBJS += ../src/eap_server/eap.o
347 OBJS += ../src/eap_common/eap_common.o
348 OBJS += ../src/eap_server/eap_methods.o
349 OBJS += ../src/eap_server/eap_identity.o
352 CFLAGS += -DEAP_SERVER
356 CFLAGS += -DPKCS12_FUNCS
360 OBJS += ../src/crypto/ms_funcs.o
366 OBJS += ../src/eap_common/chap.o
371 # Shared TLS functions (needed for EAP_TLS, EAP_PEAP, and EAP_TTLS)
372 CFLAGS += -DEAP_TLS_FUNCS
373 OBJS += ../src/eap_server/eap_tls_common.o
381 ifeq ($(CONFIG_TLS), openssl)
383 OBJS += ../src/crypto/tls_openssl.o
386 OBJS += ../src/crypto/crypto_openssl.o
387 HOBJS += ../src/crypto/crypto_openssl.o
388 ifdef NEED_FIPS186_2_PRF
389 OBJS += ../src/crypto/fips_prf_openssl.o
395 ifeq ($(CONFIG_TLS), gnutls)
397 OBJS += ../src/crypto/tls_gnutls.o
398 LIBS += -lgnutls -lgpg-error
399 ifdef CONFIG_GNUTLS_EXTRA
400 CFLAGS += -DCONFIG_GNUTLS_EXTRA
401 LIBS += -lgnutls-extra
404 OBJS += ../src/crypto/crypto_gnutls.o
405 HOBJS += ../src/crypto/crypto_gnutls.o
406 ifdef NEED_FIPS186_2_PRF
407 OBJS += ../src/crypto/fips_prf_gnutls.o
411 CONFIG_INTERNAL_SHA256=y
412 CONFIG_INTERNAL_RC4=y
413 CONFIG_INTERNAL_DH_GROUP5=y
416 ifeq ($(CONFIG_TLS), schannel)
418 OBJS += ../src/crypto/tls_schannel.o
420 OBJS += ../src/crypto/crypto_cryptoapi.o
421 OBJS_p += ../src/crypto/crypto_cryptoapi.o
422 CONFIG_INTERNAL_SHA256=y
423 CONFIG_INTERNAL_RC4=y
424 CONFIG_INTERNAL_DH_GROUP5=y
427 ifeq ($(CONFIG_TLS), nss)
429 OBJS += ../src/crypto/tls_nss.o
432 OBJS += ../src/crypto/crypto_nss.o
433 ifdef NEED_FIPS186_2_PRF
434 OBJS += ../src/crypto/fips_prf_nss.o
438 CONFIG_INTERNAL_MD4=y
439 CONFIG_INTERNAL_DH_GROUP5=y
442 ifeq ($(CONFIG_TLS), internal)
444 CONFIG_CRYPTO=internal
447 OBJS += ../src/crypto/tls_internal.o
448 OBJS += ../src/tls/tlsv1_common.o
449 OBJS += ../src/tls/tlsv1_record.o
450 OBJS += ../src/tls/tlsv1_cred.o
451 OBJS += ../src/tls/tlsv1_server.o
452 OBJS += ../src/tls/tlsv1_server_write.o
453 OBJS += ../src/tls/tlsv1_server_read.o
454 OBJS += ../src/tls/asn1.o
455 OBJS += ../src/tls/rsa.o
456 OBJS += ../src/tls/x509v3.o
457 OBJS += ../src/tls/pkcs1.o
458 OBJS += ../src/tls/pkcs5.o
459 OBJS += ../src/tls/pkcs8.o
463 CFLAGS += -DCONFIG_TLS_INTERNAL
464 CFLAGS += -DCONFIG_TLS_INTERNAL_SERVER
467 OBJS += ../src/tls/bignum.o
469 ifeq ($(CONFIG_CRYPTO), libtomcrypt)
470 CFLAGS += -DCONFIG_INTERNAL_X509
471 OBJS += ../src/crypto/crypto_libtomcrypt.o
472 LIBS += -ltomcrypt -ltfm
473 LIBS_h += -ltomcrypt -ltfm
474 CONFIG_INTERNAL_SHA256=y
475 CONFIG_INTERNAL_RC4=y
476 CONFIG_INTERNAL_DH_GROUP5=y
478 ifeq ($(CONFIG_CRYPTO), internal)
479 CFLAGS += -DCONFIG_INTERNAL_X509
480 OBJS += ../src/crypto/crypto_internal.o
482 CFLAGS += -DCONFIG_CRYPTO_INTERNAL
483 ifdef CONFIG_INTERNAL_LIBTOMMATH
484 CFLAGS += -DCONFIG_INTERNAL_LIBTOMMATH
485 ifdef CONFIG_INTERNAL_LIBTOMMATH_FAST
492 CONFIG_INTERNAL_AES=y
493 CONFIG_INTERNAL_DES=y
494 CONFIG_INTERNAL_SHA1=y
495 CONFIG_INTERNAL_MD4=y
496 CONFIG_INTERNAL_MD5=y
497 CONFIG_INTERNAL_SHA256=y
498 CONFIG_INTERNAL_RC4=y
499 CONFIG_INTERNAL_DH_GROUP5=y
501 ifeq ($(CONFIG_CRYPTO), cryptoapi)
502 OBJS += ../src/crypto/crypto_cryptoapi.o
503 OBJS_p += ../src/crypto/crypto_cryptoapi.o
504 CFLAGS += -DCONFIG_CRYPTO_CRYPTOAPI
505 CONFIG_INTERNAL_SHA256=y
506 CONFIG_INTERNAL_RC4=y
510 ifeq ($(CONFIG_TLS), none)
512 OBJS += ../src/crypto/tls_none.o
513 CFLAGS += -DEAP_TLS_NONE
514 CONFIG_INTERNAL_AES=y
515 CONFIG_INTERNAL_SHA1=y
516 CONFIG_INTERNAL_MD5=y
518 OBJS += ../src/crypto/crypto_none.o
519 OBJS_p += ../src/crypto/crypto_none.o
520 CONFIG_INTERNAL_SHA256=y
521 CONFIG_INTERNAL_RC4=y
525 OBJS += ../src/crypto/tls_none.o
526 ifeq ($(CONFIG_TLS), internal)
527 CONFIG_INTERNAL_AES=y
528 CONFIG_INTERNAL_SHA1=y
529 CONFIG_INTERNAL_MD5=y
530 CONFIG_INTERNAL_RC4=y
535 CFLAGS += -DCONFIG_MODEXP
538 AESOBJS = # none so far
539 ifdef CONFIG_INTERNAL_AES
540 AESOBJS += ../src/crypto/aes-internal.o ../src/crypto/aes-internal-enc.o
543 AESOBJS += ../src/crypto/aes-wrap.o
545 AESOBJS += ../src/crypto/aes-eax.o
549 AESOBJS += ../src/crypto/aes-ctr.o
551 ifdef NEED_AES_ENCBLOCK
552 AESOBJS += ../src/crypto/aes-encblock.o
555 AESOBJS += ../src/crypto/aes-omac1.o
557 ifdef NEED_AES_UNWRAP
559 AESOBJS += ../src/crypto/aes-unwrap.o
563 AESOBJS += ../src/crypto/aes-cbc.o
566 ifdef CONFIG_INTERNAL_AES
567 AESOBJS += ../src/crypto/aes-internal-dec.o
575 SHA1OBJS += ../src/crypto/sha1.o
576 ifdef CONFIG_INTERNAL_SHA1
577 SHA1OBJS += ../src/crypto/sha1-internal.o
578 ifdef NEED_FIPS186_2_PRF
579 SHA1OBJS += ../src/crypto/fips_prf_internal.o
582 SHA1OBJS += ../src/crypto/sha1-pbkdf2.o
584 SHA1OBJS += ../src/crypto/sha1-tprf.o
587 SHA1OBJS += ../src/crypto/sha1-tlsprf.o
596 ifdef CONFIG_INTERNAL_MD5
597 OBJS += ../src/crypto/md5-internal.o
602 ifdef CONFIG_INTERNAL_MD4
603 OBJS += ../src/crypto/md4-internal.o
608 ifdef CONFIG_INTERNAL_DES
609 OBJS += ../src/crypto/des-internal.o
614 ifdef CONFIG_INTERNAL_RC4
615 OBJS += ../src/crypto/rc4.o
620 OBJS += ../src/crypto/sha256.o
621 ifdef CONFIG_INTERNAL_SHA256
622 OBJS += ../src/crypto/sha256-internal.o
626 ifdef CONFIG_INTERNAL_DH_GROUP5
628 OBJS += ../src/crypto/dh_groups.o
629 OBJS += ../src/crypto/dh_group5.o
630 ifdef NEED_DH_GROUPS_ALL
631 CFLAGS += -DALL_DH_GROUPS
635 ifdef NEED_DH_GROUPS_ALL
636 OBJS += ../src/crypto/dh_groups.o
637 CFLAGS += -DALL_DH_GROUPS
641 ifdef CONFIG_RADIUS_SERVER
642 CFLAGS += -DRADIUS_SERVER
643 OBJS += ../src/radius/radius_server.o
647 CFLAGS += -DCONFIG_IPV6
650 ifdef CONFIG_DRIVER_RADIUS_ACL
651 CFLAGS += -DCONFIG_DRIVER_RADIUS_ACL
654 ifdef CONFIG_FULL_DYNAMIC_VLAN
655 # define CONFIG_FULL_DYNAMIC_VLAN to have hostapd manipulate bridges
656 # and vlan interfaces for the vlan feature.
657 CFLAGS += -DCONFIG_FULL_DYNAMIC_VLAN
661 OBJS += ../src/utils/base64.o
665 OBJS += beacon.o wme.o ap_list.o ieee802_11.o
666 OBJS += hw_features.o
667 CFLAGS += -DNEED_AP_MLME
670 ifdef CONFIG_NO_STDOUT_DEBUG
671 CFLAGS += -DCONFIG_NO_STDOUT_DEBUG
674 ALL=hostapd hostapd_cli
676 all: verify_config $(ALL)
686 $(Q)$(CC) -c -o $@ $(CFLAGS) $<
690 @if [ ! -r .config ]; then \
691 echo 'Building hostapd requires a configuration file'; \
692 echo '(.config). See README for more instructions. You can'; \
693 echo 'run "cp defconfig .config" to create an example'; \
694 echo 'configuration.'; \
699 for i in $(ALL); do cp $$i /usr/local/bin/$$i; done
701 ../src/drivers/build.hostapd:
702 @if [ -e ../src/drivers/build.wpa_supplicant ]; then \
703 $(MAKE) -C ../src/drivers clean; \
705 @touch ../src/drivers/build.hostapd
707 BCHECK=../src/drivers/build.hostapd
709 hostapd: $(BCHECK) $(OBJS)
710 $(CC) $(LDFLAGS) -o hostapd $(OBJS) $(LIBS)
712 OBJS_c = hostapd_cli.o ../src/common/wpa_ctrl.o ../src/utils/os_$(CONFIG_OS).o
713 hostapd_cli: $(OBJS_c)
714 $(CC) $(LDFLAGS) -o hostapd_cli $(OBJS_c)
716 NOBJS = nt_password_hash.o ../src/crypto/ms_funcs.o $(SHA1OBJS) ../src/crypto/rc4.o ../src/crypto/md5.o
717 ifdef CONFIG_INTERNAL_MD5
718 NOBJS += ../src/crypto/md5-internal.o
720 NOBJS += ../src/crypto/crypto_openssl.o ../src/utils/os_$(CONFIG_OS).o
725 HOBJS += ../src/hlr_auc_gw/hlr_auc_gw.o ../src/utils/common.o ../src/utils/wpa_debug.o ../src/utils/os_$(CONFIG_OS).o ../src/utils/wpabuf.o ../src/hlr_auc_gw/milenage.o
726 HOBJS += ../src/crypto/aes-encblock.o
727 ifdef CONFIG_INTERNAL_AES
728 HOBJS += ../src/crypto/aes-internal.o
729 HOBJS += ../src/crypto/aes-internal-enc.o
732 nt_password_hash: $(NOBJS)
733 $(CC) $(LDFLAGS) -o nt_password_hash $(NOBJS) $(LIBS_n)
736 $(CC) $(LDFLAGS) -o hlr_auc_gw $(HOBJS) $(LIBS_h)
739 $(MAKE) -C ../src clean
740 rm -f core *~ *.o hostapd hostapd_cli nt_password_hash hlr_auc_gw
743 TEST_SRC_MILENAGE = ../src/hlr_auc_gw/milenage.c ../src/crypto/aes-internal.c ../src/crypto/aes-internal-dec.c \
744 ../src/crypto/aes-cbc.c \
745 ../src/crypto/aes-ctr.c \
746 ../src/crypto/aes-eax.c \
747 ../src/crypto/aes-encblock.c \
748 ../src/crypto/aes-internal-enc.c \
749 ../src/crypto/aes-omac1.c \
750 ../src/crypto/aes-unwrap.c \
751 ../src/crypto/aes-wrap.c \
752 ../src/utils/common.c ../src/utils/wpa_debug.o ../src/utils/os_$(CONFIG_OS).c
753 test-milenage: $(TEST_SRC_MILENAGE)
754 $(CC) $(LDFLAGS) -o test-milenage -Wall -Werror $(TEST_SRC_MILENAGE) \
755 -DTEST_MAIN_MILENAGE -I. \
756 -I../src/crypto -I../src/utils
760 -include $(OBJS:%.o=%.d)